$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft File: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft (raw, json) Hash identifier: Jk00bieyQbqPFX7QGR95GAhQgHOYZUTwsNprHNPGKQQ= Subject key identifier: B7:89:1C:7D:BD:2B:E6:95:41:BE:98:E2:03:4A:27:8B:4D:FD:64:80 Authority key identifier: 4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A Certificate issuer: /CN=A9130138/serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Certificate serial: 03FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft Manifest number: 03D8 Signing time: Mon 02 Mar 2026 12:37:25 +0000 Manifest this update: Mon 02 Mar 2026 12:37:24 +0000 Manifest next update: Mon 09 Mar 2026 12:37:24 +0000 Files and hashes: 1: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl (hash: IOZEHzt/d6HLIE8hWuyaYw76WE3duDpIk9fhwHHprO4=) 2: 2A616414808A11EF813A8343C4F9AE02.roa (hash: H4XlQT8YJyI/+h2ZQgxbC5lWcfJk5rnOXu02XWl3y7o=) 3: 5E0B2804158811EEA0660D12C4F9AE02.roa (hash: X3lbzZGPgotkq76L6mKpw9+PljAruzWQzmyb0blRPVs=) 4: 6D3CF65A134311EEA2AF3B1EC4F9AE02.roa (hash: Ta8P8ZlJNRZOOFxGWrA6sGVXlUCQZKAEPu0o6UyWhpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 12:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1018 (0x3fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130138, serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Validity Not Before: Mar 2 12:37:24 2026 GMT Not After : Mar 9 12:37:24 2026 GMT Subject: CN=69a58485-3553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2b:1e:47:c5:62:2f:91:62:8a:39:40:b4:17: e4:ed:5d:c5:24:ad:e4:26:c3:d2:14:41:3d:5e:89: a4:1a:6b:cb:8f:b8:51:d4:d3:17:8f:5a:53:31:45: fa:a4:78:80:1c:11:39:2f:52:65:90:06:fb:53:fb: a7:86:02:38:5d:1b:3d:d4:ad:61:e5:3f:5f:00:e1: d3:8b:ac:20:e4:be:e1:d5:64:72:4d:55:ad:0d:a0: ef:2c:07:7e:c1:0f:64:0b:78:9d:48:91:d1:a4:79: c0:ce:ef:35:0f:d8:d9:2b:e7:52:af:d4:57:1a:7e: ca:0a:1e:e1:f1:cd:d1:bf:a7:a7:21:6f:87:25:6e: cf:57:70:d7:ee:e5:e9:83:0d:1f:02:0c:2b:2f:a0: 1f:e4:83:d1:ba:8b:4c:dd:c8:a2:e8:42:8f:42:6b: db:a3:82:2c:48:1e:1f:a1:1c:1e:a7:29:8c:75:50: e5:86:e2:24:60:ed:7e:75:16:4d:56:04:e0:ef:bd: 5b:6f:d9:d0:2b:8c:26:6d:bb:f9:f7:b2:7a:8d:e8: fd:d2:28:a1:06:96:b3:3f:8a:ae:d5:94:ea:69:b7: 22:d0:76:80:db:2b:a8:8b:88:14:22:22:f8:45:7b: ea:cb:7c:20:e8:86:c8:1e:f4:bd:8e:7a:f4:77:41: 3b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:89:1C:7D:BD:2B:E6:95:41:BE:98:E2:03:4A:27:8B:4D:FD:64:80 X509v3 Authority Key Identifier: keyid:4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:3d:09:83:3b:b8:fb:d2:56:48:9d:e3:61:8c:19:02:57:47: c1:bb:39:8f:ec:e3:e0:59:75:be:f9:b8:65:9b:0d:98:16:fd: 4f:1a:31:44:ee:cb:a0:5f:48:52:11:0f:02:be:92:c9:70:23: fe:77:31:a6:70:88:d4:d0:f1:5c:37:44:52:e6:80:8c:25:63: 09:7f:83:64:96:22:40:14:7b:6d:11:09:70:e3:ee:56:ab:a5: d9:02:74:61:c9:70:52:2d:4a:c7:a8:0a:63:6b:00:8f:ae:18: 98:60:93:e0:48:5d:39:84:dd:0d:88:46:b8:4f:9e:dc:74:e2: 5c:85:05:99:57:fa:30:a6:f5:e3:0d:6f:98:b0:92:00:e5:3e: fb:9c:fb:47:f6:e5:65:6f:be:ae:12:b4:6d:d1:7a:8f:01:51: 77:8f:c7:4b:63:d9:2b:2b:54:39:ee:18:02:e5:0f:ef:50:6e: 8f:1e:e0:b9:ec:46:6c:f9:17:1a:a9:9c:97:77:e9:9e:45:ba: 7d:91:9c:c5:59:76:ad:3d:22:ca:08:63:49:05:18:cb:83:81: 0c:50:d0:76:39:a5:6e:de:dc:5e:7b:16:d9:72:6b:09:ee:f6: d3:28:19:64:f3:04:69:30:89:6a:71:9f:00:3f:86:ba:22:8b: 98:3c:f0:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxMzgxMTAvBgNVBAUTKDRFODFFMEY2QTgzQURDMkFENTIzMjY2NEE5NTREMjY3 Q0I0M0Q5MEEwHhcNMjYwMzAyMTIzNzI0WhcNMjYwMzA5MTIzNzI0WjAYMRYwFAYD VQQDEw02OWE1ODQ4NS0zNTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8SseR8ViL5FiijlAtBfk7V3FJK3kJsPSFEE9XomkGmvLj7hR1NMXj1pTMUX6 pHiAHBE5L1JlkAb7U/unhgI4XRs91K1h5T9fAOHTi6wg5L7h1WRyTVWtDaDvLAd+ wQ9kC3idSJHRpHnAzu81D9jZK+dSr9RXGn7KCh7h8c3Rv6enIW+HJW7PV3DX7uXp gw0fAgwrL6Af5IPRuotM3cii6EKPQmvbo4IsSB4foRwepymMdVDlhuIkYO1+dRZN VgTg771bb9nQK4wmbbv597J6jej90iihBpazP4qu1ZTqabci0HaA2yuoi4gUIiL4 RXvqy3wg6IbIHvS9jnr0d0E7YwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLeJHH29 K+aVQb6Y4gNKJ4tN/WSAMB8GA1UdIwQYMBaAFE6B4PaoOtwq1SMmZKlU0mfLQ9kK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEzOC82M0E0RDFCQ0M0 N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjNDclZJeVprcVZUU1o4dEQy UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvSGc5cWc2M0NyVkl5WmtxVlRTWjh0RDJRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDEzOC82M0E0RDFCQ0M0N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjND clZJeVprcVZUU1o4dEQyUW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlj0Jgzu4+9JWSJ3jYYwZAldHwbs5j+zj4Fl1vvm4ZZsNmBb9TxoxRO7LoF9I UhEPAr6SyXAj/ncxpnCI1NDxXDdEUuaAjCVjCX+DZJYiQBR7bREJcOPuVqul2QJ0 YclwUi1Kx6gKY2sAj64YmGCT4EhdOYTdDYhGuE+e3HTiXIUFmVf6MKb14w1vmLCS AOU++5z7R/blZW++rhK0bdF6jwFRd4/HS2PZKytUOe4YAuUP71Bujx7guexGbPkX Gqmcl3fpnkW6fZGcxVl2rT0iyghjSQUYy4OBDFDQdjmlbt7cXnsW2XJrCe720ygZ ZPMEaTCJanGfAD+GuiKLmDzwvg== -----END CERTIFICATE-----Generated at Mon Mar 2 20:18:16 2026 by rpki-client