$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft File: cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft (raw, json) Hash identifier: nH5mSlPi59AWEqW56YZLZd8RIqvmnqL+UkZtbfD3O1g= Subject key identifier: A8:69:E1:B9:9B:29:A8:D6:A1:6B:B5:BB:BA:E0:8E:1E:2D:1E:49:C7 Authority key identifier: 70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06 Certificate issuer: /CN=A9130F21/serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft Manifest number: A9 Signing time: Sun 01 Mar 2026 08:30:28 +0000 Manifest this update: Sun 01 Mar 2026 08:30:27 +0000 Manifest next update: Sun 08 Mar 2026 08:30:27 +0000 Files and hashes: 1: cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl (hash: kVbNUGzZI7l8UI22gGCOvmECR0+9jGLCIkCIWullU+Y=) 2: 42CFB44C141411F0BAD16274C4F9AE02.roa (hash: VS76jVfnUICZ9bJBzzkEK0ZrDmbbMRlLDj2ohqAMUKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F21, serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06 Validity Not Before: Mar 1 08:30:27 2026 GMT Not After : Mar 8 08:30:27 2026 GMT Subject: CN=69a3f924-4f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:19:53:6d:aa:5f:2e:17:e0:89:f0:b9:ac:87: 1c:12:17:0e:4e:33:fd:83:94:94:13:19:ef:92:b7: fe:17:e1:ad:01:0f:c1:39:11:ff:5e:3e:98:3d:54: 5f:34:b5:19:0b:c7:b0:85:66:89:e4:d9:d1:d5:03: 07:b6:fb:e7:e1:b2:48:ca:17:9d:f6:41:6e:80:d7: 7c:f4:0c:7c:51:88:c3:51:f6:06:c3:0f:99:e4:44: cb:9e:20:fa:ff:0b:85:4e:b9:aa:79:68:78:ef:f6: 4e:f8:38:aa:06:46:12:e8:9c:fd:b7:13:cc:75:5e: 1d:c5:85:ed:09:1e:18:cf:e5:b5:4c:fa:f0:8f:e8: 27:8b:cf:0d:02:f5:44:73:1a:b2:75:08:d0:ec:9e: 1d:a9:00:dd:fc:e0:4c:53:cc:5e:2b:c6:f2:86:99: 9d:b9:72:1b:1a:46:45:0d:ac:a5:3f:35:9f:21:f6: d2:50:5d:97:8e:f7:a4:aa:8b:d1:33:c7:fe:48:70: f2:f8:30:02:b8:05:67:88:05:f0:3c:03:06:78:ae: 21:71:a9:b0:d3:44:43:c3:cf:a5:ec:53:22:69:34: 20:ee:34:51:dd:ac:79:51:01:68:ea:bd:e9:19:61: 0b:5d:cd:33:aa:ed:68:72:5c:3d:74:5e:75:5f:95: 0a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:69:E1:B9:9B:29:A8:D6:A1:6B:B5:BB:BA:E0:8E:1E:2D:1E:49:C7 X509v3 Authority Key Identifier: keyid:70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:06:98:f5:8f:8e:a9:fc:fa:eb:dd:eb:76:2b:86:a4:2e:f3: ea:6e:04:08:f7:ce:e7:58:17:cf:c7:0e:65:16:60:58:7a:09: 04:d9:20:7b:06:36:8a:2e:97:34:9f:db:2d:0a:f1:07:ca:f9: 96:9e:2b:52:0e:1a:cc:2f:79:e0:bb:83:8f:0c:3a:6e:48:87: 69:2c:07:96:5b:5c:61:17:f3:bc:fd:c8:5b:67:65:ca:21:b9: 48:3f:16:f4:cc:4f:5e:b9:a8:e2:d4:ef:a8:6b:ca:43:90:86: 7a:57:b1:7d:5e:d1:59:da:54:2c:b7:f9:45:b8:6c:0f:72:55: b5:52:23:2a:3e:5d:df:12:9c:7f:3f:26:8c:2b:d4:27:ac:ab: bf:25:63:96:4f:61:6b:05:5d:1c:0b:00:81:38:0c:92:e4:2d: d2:eb:b5:54:1c:2e:89:b3:8e:ea:e0:60:d0:b8:55:c1:0f:b1: ca:37:21:8c:22:00:a7:ef:9a:ee:48:c6:ea:cc:49:dd:23:a7: 59:7f:c7:72:bd:f7:cb:ce:06:3e:76:ef:98:54:e3:f4:d6:c8: c8:e1:d7:8e:b7:36:a3:06:4b:01:96:de:b4:5b:8e:08:a3:39: 8f:ff:aa:dd:10:52:ff:43:94:8b:28:f8:fa:9b:75:6b:ef:6e: d5:e0:17:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGMjExMTAvBgNVBAUTKDcwRDI2MDFDQjBEMEZBNEY5QzVGMEUwMjg2RDhCNkFG RDkyMzVBMDYwHhcNMjYwMzAxMDgzMDI3WhcNMjYwMzA4MDgzMDI3WjAYMRYwFAYD VQQDEw02OWEzZjkyNC00ZjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xlTbapfLhfgifC5rIccEhcOTjP9g5SUExnvkrf+F+GtAQ/BORH/Xj6YPVRf NLUZC8ewhWaJ5NnR1QMHtvvn4bJIyhed9kFugNd89Ax8UYjDUfYGww+Z5ETLniD6 /wuFTrmqeWh47/ZO+DiqBkYS6Jz9txPMdV4dxYXtCR4Yz+W1TPrwj+gni88NAvVE cxqydQjQ7J4dqQDd/OBMU8xeK8byhpmduXIbGkZFDaylPzWfIfbSUF2XjvekqovR M8f+SHDy+DACuAVniAXwPAMGeK4hcamw00RDw8+l7FMiaTQg7jRR3ax5UQFo6r3p GWELXc0zqu1oclw9dF51X5UKcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKhp4bmb KajWoWu1u7rgjh4tHknHMB8GA1UdIwQYMBaAFHDSYByw0PpPnF8OAobYtq/ZI1oG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEYyMS84NTE3RkIwODE0 MTMxMUYwOEYxQTFENzNDNEY5QUUwMi9jTkpnSExEUS1rLWNYdzRDaHRpMnI5a2pX Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOSmdITERRLWstY1h3NENodGkycjlraldnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEYyMS84NTE3RkIwODE0MTMxMUYwOEYxQTFENzNDNEY5QUUwMi9jTkpnSExEUS1r LWNYdzRDaHRpMnI5a2pXZ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASwaY9Y+Oqfz6693rdiuGpC7z6m4ECPfO51gXz8cOZRZgWHoJBNkgewY2ii6X NJ/bLQrxB8r5lp4rUg4azC954LuDjww6bkiHaSwHlltcYRfzvP3IW2dlyiG5SD8W 9MxPXrmo4tTvqGvKQ5CGelexfV7RWdpULLf5RbhsD3JVtVIjKj5d3xKcfz8mjCvU J6yrvyVjlk9hawVdHAsAgTgMkuQt0uu1VBwuibOO6uBg0LhVwQ+xyjchjCIAp++a 7kjG6sxJ3SOnWX/Hcr33y84GPnbvmFTj9NbIyOHXjrc2owZLAZbetFuOCKM5j/+q 3RBS/0OUiyj4+pt1a+9u1eAXgA== -----END CERTIFICATE-----Generated at Mon Mar 2 04:13:44 2026 by rpki-client