$ rpki-client -vvf rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft File: AWZvx92HXf-g4ZvHPLrajs-aWCc.mft (raw, json) Hash identifier: 3tsU3lHonQCRtUKNBIqQ+bZIKyqH+bh4gl1n4+XLlTk= Subject key identifier: 54:0B:EA:0F:5F:B8:01:79:73:2F:A1:7F:A6:B5:10:CD:E3:53:07:77 Authority key identifier: 01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27 Certificate issuer: /CN=A9129969/serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827 Certificate serial: 0226 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft Manifest number: 020B Signing time: Sun 01 Mar 2026 04:00:25 +0000 Manifest this update: Sun 01 Mar 2026 04:00:25 +0000 Manifest next update: Sun 08 Mar 2026 04:00:25 +0000 Files and hashes: 1: AWZvx92HXf-g4ZvHPLrajs-aWCc.crl (hash: y4lSN22h2RKe891hIdDhdLzgyipKLdE+LMbZhg1M5os=) 2: A5D7263C1ECB11EE8FEFEE18C4F9AE02.roa (hash: N6DEGgupg3HxOMrE9jAl+/+pfZtLHZTdCN2crK2ZI2k=) 3: 36E93942D6C511EEB512CC7FC4F9AE02.roa (hash: 2qFaeWpUz6T3aw3E/hrRfJrnoIIIW1d8zDzi9aKBfb4=) 4: 37649AB0D6C511EEB512CC7FC4F9AE02.roa (hash: odyKufEpHbvJvLC7+fOqjab+UYNeQ4MtEmtMUizJP1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129969, serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827 Validity Not Before: Mar 1 04:00:25 2026 GMT Not After : Mar 8 04:00:25 2026 GMT Subject: CN=69a3b9d9-5b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:86:7f:6b:18:40:e6:e4:04:99:5c:85:1b:24: c9:5e:a5:3e:c5:d6:6e:44:c6:b3:57:57:6f:3d:14: cc:2e:d5:77:bd:a8:df:2a:7c:71:96:7d:b5:38:d1: c2:75:ae:4a:1d:c1:b8:36:bf:01:6a:5e:16:bc:39: 21:7a:0b:7a:ac:4f:83:b7:ba:28:ad:fd:a8:55:ab: b0:e2:98:50:8e:d7:f9:7e:d2:cf:93:3e:0d:40:d1: fe:5d:b3:89:64:5f:95:1b:92:02:e1:66:83:89:5c: e9:76:bf:b0:50:6f:02:ec:56:c5:4b:bc:7e:ec:8c: 82:1a:54:f6:92:18:2a:02:1f:a8:b4:96:03:8c:15: af:da:7d:10:9a:74:02:fd:ff:dd:81:e2:39:53:9e: 98:b3:97:98:cb:9a:ca:13:43:8a:b2:4d:c3:8d:c7: 11:fd:bb:b8:a4:d4:5c:b0:23:00:d6:c3:a8:0b:08: 60:45:37:ae:95:20:91:af:fa:8e:ca:20:0f:ef:22: 7a:88:7b:04:dc:64:18:47:89:cd:c6:eb:98:14:0c: c7:e4:a0:4c:03:31:c0:1a:8d:bd:4d:a5:9b:bb:24: fe:ba:f1:5f:10:83:03:18:2e:40:f2:e7:a1:d0:8d: 8f:b8:ac:71:e5:92:1c:4b:b3:28:e7:88:67:40:de: 75:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0B:EA:0F:5F:B8:01:79:73:2F:A1:7F:A6:B5:10:CD:E3:53:07:77 X509v3 Authority Key Identifier: keyid:01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:c1:11:bf:0b:d5:88:9d:f6:0c:71:87:5b:bd:51:84:77:02: 9c:72:8f:d9:22:db:d4:0c:98:06:67:31:55:8a:e7:c4:6a:44: b4:a1:5b:22:69:80:b1:ad:19:7b:61:6b:a4:30:51:1e:bc:05: 74:5c:56:38:42:b0:89:1e:df:e4:72:1c:6a:ad:f7:d0:f8:2d: 9c:f8:14:4d:dd:82:75:8c:73:66:d5:7e:cd:25:12:96:56:68: 70:81:24:17:2e:2e:30:25:a2:46:fa:f9:7f:3f:02:14:d4:c6: cb:87:64:a2:a3:10:e0:35:f4:5f:bf:64:30:4c:5d:40:ee:f2: ae:6c:7c:b6:e0:77:ab:d0:32:84:49:2f:f8:fa:c0:92:e9:09: a6:8e:8e:ea:a3:9f:af:d2:7d:44:5d:bb:d0:00:23:06:5c:26: 89:2f:8b:d7:48:84:0a:a4:79:5e:5c:73:6d:63:31:9b:5b:5d: 17:ba:9f:4c:16:6d:b5:72:b4:17:11:f8:17:24:26:d3:50:4a: 7b:ae:b5:e9:d0:2d:51:d3:8f:02:a6:a0:c6:cb:ac:96:9d:35: a0:2d:c5:10:f4:e9:8d:b5:75:7f:96:de:9e:7b:70:e0:08:2f: 94:21:bd:41:e2:6b:c1:f9:32:90:4c:31:8d:f1:3d:47:0e:2a: 07:86:4b:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk5NjkxMTAvBgNVBAUTKDAxNjY2RkM3REQ4NzVERkZBMEUxOUJDNzNDQkFEQThF Q0Y5QTU4MjcwHhcNMjYwMzAxMDQwMDI1WhcNMjYwMzA4MDQwMDI1WjAYMRYwFAYD VQQDDA02OWEzYjlkOS01YjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4Z/axhA5uQEmVyFGyTJXqU+xdZuRMazV1dvPRTMLtV3vajfKnxxln21ONHC da5KHcG4Nr8Bal4WvDkhegt6rE+Dt7oorf2oVauw4phQjtf5ftLPkz4NQNH+XbOJ ZF+VG5IC4WaDiVzpdr+wUG8C7FbFS7x+7IyCGlT2khgqAh+otJYDjBWv2n0QmnQC /f/dgeI5U56Ys5eYy5rKE0OKsk3DjccR/bu4pNRcsCMA1sOoCwhgRTeulSCRr/qO yiAP7yJ6iHsE3GQYR4nNxuuYFAzH5KBMAzHAGo29TaWbuyT+uvFfEIMDGC5A8ueh 0I2PuKxx5ZIcS7Mo54hnQN51vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFQL6g9f uAF5cy+hf6a1EM3jUwd3MB8GA1UdIwQYMBaAFAFmb8fdh13/oOGbxzy62o7Pmlgn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTk2OS9DRjM5NUMzODFD NkExMUVFQkY2MkFDMERDNEY5QUUwMi9BV1p2eDkySFhmLWc0WnZIUExyYWpzLWFX Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FXWnZ4OTJIWGYtZzRadkhQTHJhanMtYVdDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTk2OS9DRjM5NUMzODFDNkExMUVFQkY2MkFDMERDNEY5QUUwMi9BV1p2eDkySFhm LWc0WnZIUExyYWpzLWFXQ2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWcERvwvViJ32DHGHW71RhHcCnHKP2SLb1AyYBmcxVYrnxGpEtKFbImmAsa0Z e2FrpDBRHrwFdFxWOEKwiR7f5HIcaq330PgtnPgUTd2CdYxzZtV+zSUSllZocIEk Fy4uMCWiRvr5fz8CFNTGy4dkoqMQ4DX0X79kMExdQO7yrmx8tuB3q9AyhEkv+PrA kukJpo6O6qOfr9J9RF270AAjBlwmiS+L10iECqR5XlxzbWMxm1tdF7qfTBZttXK0 FxH4FyQm01BKe6616dAtUdOPAqagxsuslp01oC3FEPTpjbV1f5benntw4AgvlCG9 QeJrwfkykEwxjfE9Rw4qB4ZLKA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:12:58 2026 by rpki-client