$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft File: gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json) Hash identifier: YXbakLui5BMzsic0+BRAj/G8PF+k3NS+I09jXSVBSig= Subject key identifier: C6:B2:72:08:4A:49:61:F5:71:3C:3D:F5:0F:66:EA:7C:D1:97:98:CB Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0C74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft Manifest number: 0C61 Signing time: Sat 28 Feb 2026 18:50:29 +0000 Manifest this update: Sat 28 Feb 2026 18:50:29 +0000 Manifest next update: Sat 07 Mar 2026 18:50:29 +0000 Files and hashes: 1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: XBfT2JOTTUGSjf6vdI0f04kVEz6WNfjTtfS8OmyiTD4=) 2: B3148DDA1BD711EAB801703AC4F9AE02.roa (hash: qXQzrLjHLMEGSmHbPLY3DTrLOE6y6AG6P8s1JsWZiBo=) 3: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: vbaep3wET3+ifW71kGbMN+H4/YmdHdtnb1FCSwufM8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 18:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3188 (0xc74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Validity Not Before: Feb 28 18:50:29 2026 GMT Not After : Mar 7 18:50:29 2026 GMT Subject: CN=69a338f5-0706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b8:2c:72:32:fb:50:90:ca:2b:78:21:5d:59: 4c:4c:8f:60:d5:e5:da:0b:dd:d7:f7:4b:4c:38:fb: e7:b5:05:d3:28:85:cd:77:d1:69:b6:2e:ae:c8:72: 25:13:c1:ee:be:2a:9d:56:9b:d1:62:c0:1b:4a:86: 9f:89:f8:ea:fe:9e:a5:2c:e6:a5:b4:47:97:5d:17: 10:61:c0:36:4c:05:ae:1f:e3:6f:af:2f:9f:2f:e8: f9:04:ff:5f:a6:1e:ef:64:bc:9b:c9:5a:93:1e:a0: 4f:b4:2e:eb:6e:9a:45:67:aa:5e:c9:ee:ed:9b:aa: eb:c5:68:be:2b:64:aa:f6:dd:4c:35:e1:b2:26:f4: c1:82:25:40:30:9c:a9:fb:12:cc:aa:bb:2a:c5:9a: c3:a3:81:d5:68:1b:ba:6b:bd:41:13:8a:e5:07:eb: c6:42:ba:de:1c:ed:6a:fc:57:74:35:fb:83:c3:a2: 2d:3b:0a:ea:b5:f4:86:35:aa:20:89:4b:40:c5:59: ea:18:a3:42:33:1a:49:32:77:47:61:a6:20:82:b4: 38:5d:a2:aa:3a:30:48:7a:4d:b0:cb:c3:65:38:51: 8c:b3:cd:f9:0d:9b:92:f4:64:d3:9a:ff:7e:59:8f: 72:75:0f:35:17:e8:27:7e:6a:2c:1d:ed:9d:86:1e: 9c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B2:72:08:4A:49:61:F5:71:3C:3D:F5:0F:66:EA:7C:D1:97:98:CB X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:82:61:7c:d0:3e:9c:ab:8a:ee:fa:6d:a5:26:6f:a8:3a:64: 3d:bf:8c:9d:b5:d7:f2:41:e6:a6:a7:da:e5:03:02:9a:78:16: 27:ff:9a:9c:a0:72:ba:d9:a1:4f:71:58:ce:2c:8f:db:2f:b7: ab:d1:1c:c6:3b:97:41:0b:7c:dd:7f:90:70:30:c7:8e:6d:b3: aa:c1:fa:a5:86:dd:45:a7:d0:42:96:ae:60:a5:47:dd:1d:22: a6:87:73:93:2c:30:1f:98:66:e2:b1:42:83:7f:46:08:b6:f6: 68:7e:23:27:77:49:0d:34:e8:c7:01:79:b7:04:a1:d6:47:96: 9a:f6:6e:54:f8:21:73:05:47:ec:bc:df:95:a3:7f:30:0f:3a: 9b:44:4d:90:ed:02:69:96:84:97:3a:f9:9f:37:ec:92:fc:6a: 48:d8:94:f5:1c:95:84:57:9e:1d:ca:11:71:b9:4f:9e:0f:87: 6c:60:f1:60:99:8c:e8:71:31:51:69:5f:75:cf:48:a7:50:3d: f4:cc:87:18:1b:40:ca:40:e1:36:db:27:43:52:67:7a:6c:d8: e4:a0:8a:77:ce:18:f8:8f:2a:34:7a:cf:48:57:ce:b7:9e:24: bb:50:a3:dc:35:01:f8:29:32:f8:5b:1f:bc:e3:42:07:08:17: 25:a3:4e:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjYwMjI4MTg1MDI5WhcNMjYwMzA3MTg1MDI5WjAYMRYwFAYD VQQDDA02OWEzMzhmNS0wNzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrgscjL7UJDKK3ghXVlMTI9g1eXaC93X90tMOPvntQXTKIXNd9Fpti6uyHIl E8HuviqdVpvRYsAbSoafifjq/p6lLOaltEeXXRcQYcA2TAWuH+Nvry+fL+j5BP9f ph7vZLybyVqTHqBPtC7rbppFZ6peye7tm6rrxWi+K2Sq9t1MNeGyJvTBgiVAMJyp +xLMqrsqxZrDo4HVaBu6a71BE4rlB+vGQrreHO1q/Fd0NfuDw6ItOwrqtfSGNaog iUtAxVnqGKNCMxpJMndHYaYggrQ4XaKqOjBIek2wy8NlOFGMs835DZuS9GTTmv9+ WY9ydQ81F+gnfmosHe2dhh6cqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMaycghK SWH1cTw99Q9m6nzRl5jLMB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OERFOS9ENjlCNDVFODFCRDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhL QjBnSEhOdXg0bkQydGNZUk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHIJhfNA+nKuK7vptpSZvqDpkPb+MnbXX8kHmpqfa5QMCmngWJ/+anKByutmh T3FYziyP2y+3q9EcxjuXQQt83X+QcDDHjm2zqsH6pYbdRafQQpauYKVH3R0ipodz kywwH5hm4rFCg39GCLb2aH4jJ3dJDTToxwF5twSh1keWmvZuVPghcwVH7LzflaN/ MA86m0RNkO0CaZaElzr5nzfskvxqSNiU9RyVhFeeHcoRcblPng+HbGDxYJmM6HEx UWlfdc9Ip1A99MyHGBtAykDhNtsnQ1JnemzY5KCKd84Y+I8qNHrPSFfOt54ku1Cj 3DUB+Cky+FsfvONCBwgXJaNOmg== -----END CERTIFICATE-----Generated at Mon Mar 2 00:35:40 2026 by rpki-client