$ rpki-client -vvf rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft File: 0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft (raw, json) Hash identifier: vfxwsBq4cy9F2BEXN+kYCiI6/8pHOfvF3JnDGqu2/GQ= Subject key identifier: 5A:AF:CF:7E:76:92:7B:D4:CC:F8:A1:C7:3C:6C:70:0D:79:13:54:EB Authority key identifier: D0:F6:38:C5:B9:8A:E8:AF:CD:6C:EE:05:03:82:41:97:40:9C:3E:93 Certificate issuer: /CN=A9132667/serialNumber=D0F638C5B98AE8AFCD6CEE0503824197409C3E93 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft Manifest number: 3E Signing time: Sun 01 Mar 2026 09:52:19 +0000 Manifest this update: Sun 01 Mar 2026 09:52:19 +0000 Manifest next update: Sun 08 Mar 2026 09:52:19 +0000 Files and hashes: 1: 0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl (hash: e4ZvN7otId/0q30oGEZrSXtFI3FJStEXsRFB/oGjJ4Q=) 2: 4FFB27E2BDBE11F0999C417DC4F9AE02.roa (hash: BAu12vyqXmR0qHLygAuhUs2RE7FdNd2Ix/Ksj7XLnkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132667, serialNumber=D0F638C5B98AE8AFCD6CEE0503824197409C3E93 Validity Not Before: Mar 1 09:52:19 2026 GMT Not After : Mar 8 09:52:19 2026 GMT Subject: CN=69a40c53-801a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:45:ab:64:b5:60:45:1d:2b:ae:a7:8d:db:02: 0f:63:f5:28:8d:35:56:f6:da:1a:b9:75:03:4c:80: 46:18:e6:21:bd:66:be:ee:82:fb:99:d0:88:d3:77: 2a:56:d4:f2:94:76:71:b3:e8:86:d3:b5:7d:57:64: 11:80:fe:0f:db:1e:49:01:9e:35:b8:99:58:4a:95: 34:ad:70:25:88:e3:d4:a1:17:f7:d4:d9:78:a4:14: 01:cd:1c:b1:57:76:71:d2:17:f6:51:12:44:95:87: cd:77:00:19:c5:f8:ea:fb:3b:2a:48:f9:cd:c9:a3: 8c:a4:03:80:67:c0:45:5e:13:e5:80:a6:20:28:ed: 6d:23:5b:e6:54:3c:21:7d:0a:0a:cd:85:0a:bc:9c: 7c:6a:d7:3a:21:48:7e:83:ee:08:79:34:ed:bf:49: e5:0c:ca:3b:31:56:12:c4:16:7c:03:ce:00:f6:f8: cd:98:f4:51:0a:f0:e2:c5:36:66:fd:8d:0e:e8:3d: fc:dd:d1:43:3b:de:10:64:fe:0f:7d:e1:f9:02:4c: ab:0b:cc:f2:77:18:ab:da:8b:ef:ec:e8:c5:9d:ff: 22:fd:c5:d6:b4:5a:33:7c:21:76:fc:d6:3d:3b:74: 09:20:03:98:a6:de:06:b0:96:d5:6f:cd:df:55:fb: b5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AF:CF:7E:76:92:7B:D4:CC:F8:A1:C7:3C:6C:70:0D:79:13:54:EB X509v3 Authority Key Identifier: keyid:D0:F6:38:C5:B9:8A:E8:AF:CD:6C:EE:05:03:82:41:97:40:9C:3E:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:50:77:1a:48:2d:1d:0f:06:cc:7a:f3:a4:f0:75:9a:83:d9: 40:fd:74:7e:cb:97:43:c5:8f:05:49:3d:2f:0c:7a:f8:63:e9: 40:7a:c6:e5:48:29:85:11:48:a8:b9:b7:c2:62:76:38:58:38: 92:c2:14:70:b3:e4:75:b5:91:c2:9d:12:23:0e:7d:7d:73:9c: 43:bc:8d:f5:8f:f6:25:47:ed:d9:13:5f:51:16:bb:73:71:2c: 28:46:22:64:eb:8e:2e:76:11:73:b4:c0:6e:3d:43:55:de:ff: 20:bd:8c:3a:69:40:95:01:43:35:45:aa:f9:f1:d2:c4:be:0c: 24:ec:0d:fa:62:8d:c8:83:0f:7b:a0:79:32:7e:37:84:07:8c: b3:23:5e:9c:eb:5b:81:87:97:79:a3:33:e4:3d:b0:00:dc:4a: bf:a9:86:d6:e0:03:7e:5d:5f:59:44:81:15:d4:62:91:1e:77: 25:0f:6f:fc:78:0b:d7:11:73:7b:ee:c3:d2:e1:cf:a9:ee:f2: 44:33:31:11:fe:34:8f:f4:e2:b5:48:5b:21:30:be:e0:32:ae: b5:4c:97:0c:48:71:40:3c:02:43:07:7f:a6:4c:da:db:46:f8: 70:1d:56:f4:7c:f6:86:56:30:90:8c:9b:53:7d:9d:b1:d8:aa: f8:49:86:67 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MjY2NzExMC8GA1UEBRMoRDBGNjM4QzVCOThBRThBRkNENkNFRTA1MDM4MjQxOTc0 MDlDM0U5MzAeFw0yNjAzMDEwOTUyMTlaFw0yNjAzMDgwOTUyMTlaMBgxFjAUBgNV BAMTDTY5YTQwYzUzLTgwMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgRatktWBFHSuup43bAg9j9SiNNVb22hq5dQNMgEYY5iG9Zr7ugvuZ0IjTdypW 1PKUdnGz6IbTtX1XZBGA/g/bHkkBnjW4mVhKlTStcCWI49ShF/fU2XikFAHNHLFX dnHSF/ZREkSVh813ABnF+Or7OypI+c3Jo4ykA4BnwEVeE+WApiAo7W0jW+ZUPCF9 CgrNhQq8nHxq1zohSH6D7gh5NO2/SeUMyjsxVhLEFnwDzgD2+M2Y9FEK8OLFNmb9 jQ7oPfzd0UM73hBk/g994fkCTKsLzPJ3GKvai+/s6MWd/yL9xda0WjN8IXb81j07 dAkgA5im3gawltVvzd9V+7X1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWq/PfnaS e9TM+KHHPGxwDXkTVOswHwYDVR0jBBgwFoAU0PY4xbmK6K/NbO4FA4JBl0CcPpMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyNjY3LzkxNTkyQjRBQkI5 QzExRjBBNUEzRDgxNUM0RjlBRTAyLzBQWTR4Ym1LNktfTmJPNEZBNEpCbDBDY1Bw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMFBZNHhibUs2S19OYk80RkE0SkJsMENjUHBNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy NjY3LzkxNTkyQjRBQkI5QzExRjBBNUEzRDgxNUM0RjlBRTAyLzBQWTR4Ym1LNktf TmJPNEZBNEpCbDBDY1BwTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCEUHcaSC0dDwbMevOk8HWag9lA/XR+y5dDxY8FST0vDHr4Y+lAesblSCmFEUio ubfCYnY4WDiSwhRws+R1tZHCnRIjDn19c5xDvI31j/YlR+3ZE19RFrtzcSwoRiJk 644udhFztMBuPUNV3v8gvYw6aUCVAUM1Rar58dLEvgwk7A36Yo3Igw97oHkyfjeE B4yzI16c61uBh5d5ozPkPbAA3Eq/qYbW4AN+XV9ZRIEV1GKRHnclD2/8eAvXEXN7 7sPS4c+p7vJEMzER/jSP9OK1SFshML7gMq61TJcMSHFAPAJDB3+mTNrbRvhwHVb0 fPaGVjCQjJtTfZ2x2Kr4SYZn -----END CERTIFICATE-----Generated at Sun Mar 1 20:53:35 2026 by rpki-client