$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft File: -Xh9LKFDLKbpMzLg7e9rB7JF17A.mft (raw, json) Hash identifier: UkoBRaNeA3AnCe1SgHC9ORGkaAh3xgArLmxfgujmBvE= Subject key identifier: 48:F0:5E:1B:C3:8E:A3:55:6B:1E:EB:8A:48:BB:DD:6C:D0:69:39:30 Authority key identifier: F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 Certificate issuer: /CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Certificate serial: 08A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft Manifest number: 089C Signing time: Mon 02 Mar 2026 01:46:51 +0000 Manifest this update: Mon 02 Mar 2026 01:46:49 +0000 Manifest next update: Mon 09 Mar 2026 01:46:49 +0000 Files and hashes: 1: -Xh9LKFDLKbpMzLg7e9rB7JF17A.crl (hash: xRlyN/4sJmehG7EKFmOsfmBTYmjv7/PaMLjy6D/vTkY=) 2: D6883996DABE11EAB12A5209C4F9AE02.roa (hash: uybnkX1k8gPyTR5CU7p1ceux1tCfl8jTIgkNDS2MSjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2213 (0x8a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1F, serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Validity Not Before: Mar 2 01:46:49 2026 GMT Not After : Mar 9 01:46:49 2026 GMT Subject: CN=69a4ec0b-683d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:df:5f:e6:3c:65:3b:30:c9:b4:12:6f:b4:2c: 27:50:19:92:81:8a:11:28:5f:fe:67:3a:c1:b3:33: b7:85:66:b7:6a:bb:66:03:02:15:db:f3:d5:27:5c: db:1f:32:b6:c2:25:b3:fa:63:4e:e1:f1:2e:9b:5b: d2:35:d5:8a:28:bd:5a:b3:19:f7:3c:9b:cd:4a:74: 51:58:6a:5b:d8:b3:37:50:a2:09:60:a9:a9:4e:8f: ff:d2:5c:f3:99:d0:4b:91:22:5e:ed:51:6a:03:d9: 23:3e:af:3e:89:cf:d0:49:8a:ae:de:13:2b:37:aa: 85:de:85:ba:aa:68:74:b0:cc:ad:45:6d:4f:b5:12: b6:f1:09:66:ba:78:e9:00:e1:4c:a1:49:fd:51:af: ea:11:88:8e:b5:e2:79:b8:9b:ed:36:6b:08:0f:7e: 76:43:aa:22:30:f3:45:6a:28:8d:d4:e3:72:5c:90: 89:94:86:02:5a:84:83:1c:00:48:da:fb:3c:5a:80: 5f:b2:19:13:66:5d:28:a8:25:3b:73:74:72:a5:ed: 8e:f4:f7:73:45:54:fb:15:e6:10:53:6b:b6:09:21: 45:41:e4:3a:13:9b:4c:28:61:f8:cf:53:df:0b:d7: b7:ea:1e:14:d9:83:24:6a:08:3b:c6:f0:c3:0a:b1: 5d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F0:5E:1B:C3:8E:A3:55:6B:1E:EB:8A:48:BB:DD:6C:D0:69:39:30 X509v3 Authority Key Identifier: keyid:F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:bb:e6:1f:fd:e5:b8:db:05:19:47:4b:ae:41:21:ae:8f:b4: 1d:37:4b:63:ca:96:48:66:a7:e6:cb:e4:b6:c9:85:27:1d:10: e9:83:0e:45:7a:e3:0c:2f:0b:c0:02:f2:ae:6a:f6:a6:b7:e9: c5:0b:a7:e5:b4:15:82:df:52:92:a5:3d:c4:2c:00:c9:bf:ab: 73:20:e2:36:da:8c:6f:f7:c5:7a:6f:15:7b:e3:44:79:3a:02: 14:52:64:a6:ee:68:1c:fa:b8:ff:d8:9c:ec:7d:e7:b8:d3:a6: 0a:90:73:97:dc:ce:9f:af:b1:16:10:14:0d:50:92:40:3d:15: 90:85:e6:a5:a0:b6:73:44:6c:1d:38:4e:cd:1a:82:c8:15:33: c3:91:ef:fa:b8:3f:c0:5c:a2:a6:fe:5e:af:d7:88:ca:37:51: 8b:d5:87:f7:60:7b:e3:1c:ce:19:48:6e:7d:ac:bc:27:dc:66: d4:f3:b4:ac:f3:f2:e3:fd:f6:5e:49:3c:e4:df:4c:ba:96:e3: 92:75:4b:15:25:4b:8d:42:13:6e:78:c5:55:52:dd:4a:19:77: 01:f5:c6:83:88:4c:40:c7:61:e8:98:17:c5:7e:8c:6d:80:44: fe:01:31:61:95:00:12:19:b7:0f:68:67:43:8c:5e:0d:31:d4: 36:b1:1a:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUYxMTAvBgNVBAUTKEY5Nzg3RDJDQTE0MzJDQTZFOTMzMzJFMEVERUY2QjA3 QjI0NUQ3QjAwHhcNMjYwMzAyMDE0NjQ5WhcNMjYwMzA5MDE0NjQ5WjAYMRYwFAYD VQQDEw02OWE0ZWMwYi02ODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm99f5jxlOzDJtBJvtCwnUBmSgYoRKF/+ZzrBszO3hWa3artmAwIV2/PVJ1zb HzK2wiWz+mNO4fEum1vSNdWKKL1asxn3PJvNSnRRWGpb2LM3UKIJYKmpTo//0lzz mdBLkSJe7VFqA9kjPq8+ic/QSYqu3hMrN6qF3oW6qmh0sMytRW1PtRK28Qlmunjp AOFMoUn9Ua/qEYiOteJ5uJvtNmsID352Q6oiMPNFaiiN1ONyXJCJlIYCWoSDHABI 2vs8WoBfshkTZl0oqCU7c3Rype2O9PdzRVT7FeYQU2u2CSFFQeQ6E5tMKGH4z1Pf C9e36h4U2YMkagg7xvDDCrFdeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEjwXhvD jqNVax7riki73WzQaTkwMB8GA1UdIwQYMBaAFPl4fSyhQyym6TMy4O3vaweyRdew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRi9GQjE0QTg4MkRB QkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExLYnBNekxnN2U5ckI3SkYx N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YaDlMS0ZETEticE16TGc3ZTlyQjdKRjE3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRi9GQjE0QTg4MkRBQkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExL YnBNekxnN2U5ckI3SkYxN0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH7vmH/3luNsFGUdLrkEhro+0HTdLY8qWSGan5svktsmFJx0Q6YMORXrjDC8L wALyrmr2prfpxQun5bQVgt9SkqU9xCwAyb+rcyDiNtqMb/fFem8Ve+NEeToCFFJk pu5oHPq4/9ic7H3nuNOmCpBzl9zOn6+xFhAUDVCSQD0VkIXmpaC2c0RsHThOzRqC yBUzw5Hv+rg/wFyipv5er9eIyjdRi9WH92B74xzOGUhufay8J9xm1PO0rPPy4/32 Xkk85N9MupbjknVLFSVLjUITbnjFVVLdShl3AfXGg4hMQMdh6JgXxX6MbYBE/gEx YZUAEhm3D2hnQ4xeDTHUNrEaXQ== -----END CERTIFICATE-----Generated at Mon Mar 2 07:43:33 2026 by rpki-client