$ rpki-client -vvf rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft File: D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft (raw, json) Hash identifier: +aRTY76rGU8/wejxgESlz/a3LzDePrkHKPsZZtI8C5w= Subject key identifier: 1C:70:66:72:5C:7E:12:64:A5:A5:E6:05:CE:83:2D:B6:54:DA:CF:8D Authority key identifier: 0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34 Certificate issuer: /CN=A9139661/serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft Manifest number: 88 Signing time: Sun 01 Mar 2026 09:02:54 +0000 Manifest this update: Sun 01 Mar 2026 09:02:54 +0000 Manifest next update: Sun 08 Mar 2026 09:02:54 +0000 Files and hashes: 1: D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl (hash: bmFw9In6TM6eSgDGq1KDL0LfuhptT4+fkCvmfTj2OcQ=) 2: C4C4028A5B4C11F0807A3A60C4F9AE02.roa (hash: ki7xh64GIKfwbhwFIwfLQ7ubTp/Y8e6eL9BMSGhKC7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139661, serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334 Validity Not Before: Mar 1 09:02:54 2026 GMT Not After : Mar 8 09:02:54 2026 GMT Subject: CN=69a400be-7b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:53:4e:e1:58:c2:29:33:55:54:88:7a:9e:ad: 5b:0e:80:cb:e3:db:cb:89:2b:6c:f7:de:35:2a:30: 68:76:1d:24:81:31:49:9a:6b:00:52:26:ee:99:c9: ac:6e:ec:cf:e1:b5:bc:0e:28:4e:c8:b0:c6:31:7f: b1:b4:d8:00:3e:bc:48:c2:f0:4c:13:3a:bc:19:87: d3:96:e9:ae:d4:ef:22:ab:5d:81:f4:98:b5:11:2e: 7f:68:c4:e1:34:a9:32:04:f0:00:0d:d2:47:f9:1a: 78:ad:12:2c:88:9d:68:fc:2a:b7:75:11:72:25:bb: 9b:18:33:53:1e:8a:89:c5:57:4c:6b:b5:53:9c:ae: 4e:c7:a8:c1:02:b7:49:ee:3c:50:08:64:e7:24:d6: ad:e7:e0:5a:32:e4:11:9c:f0:22:5f:6f:25:7e:fc: 53:7a:b9:be:f1:ff:56:60:6c:e9:f6:27:04:ea:02: 93:45:e0:6e:6c:0d:7e:5e:89:36:6a:31:50:27:9f: 12:c2:47:56:34:fb:7c:86:00:8c:3d:32:30:90:4a: df:d9:d0:c4:6e:38:d4:b1:cc:fb:fc:15:06:23:e5: 44:6e:87:ed:50:0a:b2:ab:1c:b5:dc:17:14:46:b7: f8:73:7b:c6:e2:f6:a1:29:2b:5e:60:55:65:a0:45: ac:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:70:66:72:5C:7E:12:64:A5:A5:E6:05:CE:83:2D:B6:54:DA:CF:8D X509v3 Authority Key Identifier: keyid:0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:1f:8d:e7:98:d8:e7:25:8d:fc:ce:a0:dd:a9:45:99:43:69: 3e:b3:6f:3b:f1:2e:d7:c1:b5:de:a9:07:90:96:3a:18:71:cb: 32:f9:74:d0:8a:a9:73:9e:e6:6d:82:47:37:7b:55:f4:1e:72: 8d:6a:8a:4f:28:5c:c7:85:91:81:a1:4b:16:4a:fd:d5:9c:da: 5a:1d:ed:7e:c4:75:35:10:53:25:44:35:fc:c6:f6:87:40:e2: 9d:e0:5d:45:75:2e:dd:e0:0c:c8:8c:ac:49:88:5d:d7:c3:4d: 42:46:8c:bf:05:ad:5d:5b:02:a8:c2:48:be:3e:a8:fd:53:7a: 7a:4a:37:f8:84:1b:e2:43:e0:fe:d4:85:23:64:0e:5d:b7:bb: 85:95:b3:4f:c0:f3:2f:f2:ff:7f:d2:25:0e:6d:87:33:b4:01: 01:43:15:be:cc:59:f9:db:92:17:c0:aa:a9:a8:60:c6:00:9c: 55:0e:5d:73:99:02:f9:b6:ac:00:cc:f6:d1:fc:8f:2b:a1:0c: 90:cc:31:15:73:02:52:3c:d9:1c:4b:64:7d:04:37:cc:d5:c7: 05:37:ca:e3:07:d6:7a:5b:38:1b:c3:18:3d:a8:38:79:67:ac: 75:0b:18:4e:f6:7b:7b:6f:21:1e:55:11:a3:84:41:85:5f:c0: ea:3d:68:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk2NjExMTAvBgNVBAUTKDBGOTE0QTFEQzk0RjVCRTQyRTg4M0MyQURENTQzMEJD REY2REYzMzQwHhcNMjYwMzAxMDkwMjU0WhcNMjYwMzA4MDkwMjU0WjAYMRYwFAYD VQQDEw02OWE0MDBiZS03YjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVNO4VjCKTNVVIh6nq1bDoDL49vLiSts9941KjBodh0kgTFJmmsAUibumcms buzP4bW8DihOyLDGMX+xtNgAPrxIwvBMEzq8GYfTlumu1O8iq12B9Ji1ES5/aMTh NKkyBPAADdJH+Rp4rRIsiJ1o/Cq3dRFyJbubGDNTHoqJxVdMa7VTnK5Ox6jBArdJ 7jxQCGTnJNat5+BaMuQRnPAiX28lfvxTerm+8f9WYGzp9icE6gKTReBubA1+Xok2 ajFQJ58SwkdWNPt8hgCMPTIwkErf2dDEbjjUscz7/BUGI+VEboftUAqyqxy13BcU Rrf4c3vG4vahKSteYFVloEWsWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBxwZnJc fhJkpaXmBc6DLbZU2s+NMB8GA1UdIwQYMBaAFA+RSh3JT1vkLog8Kt1UMLzfbfM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTY2MS8wRjQzRUMzQzU4 RTQxMUYwODcyNkE1N0FDNEY5QUUwMi9ENUZLSGNsUFctUXVpRHdxM1ZRd3ZOOXQ4 elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Q1RktIY2xQVy1RdWlEd3EzVlF3dk45dDh6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTY2MS8wRjQzRUMzQzU4RTQxMUYwODcyNkE1N0FDNEY5QUUwMi9ENUZLSGNsUFct UXVpRHdxM1ZRd3ZOOXQ4elEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVB+N55jY5yWN/M6g3alFmUNpPrNvO/Eu18G13qkHkJY6GHHLMvl00Iqpc57m bYJHN3tV9B5yjWqKTyhcx4WRgaFLFkr91ZzaWh3tfsR1NRBTJUQ1/Mb2h0DineBd RXUu3eAMyIysSYhd18NNQkaMvwWtXVsCqMJIvj6o/VN6eko3+IQb4kPg/tSFI2QO Xbe7hZWzT8DzL/L/f9IlDm2HM7QBAUMVvsxZ+duSF8CqqahgxgCcVQ5dc5kC+bas AMz20fyPK6EMkMwxFXMCUjzZHEtkfQQ3zNXHBTfK4wfWels4G8MYPag4eWesdQsY TvZ7e28hHlURo4RBhV/A6j1oug== -----END CERTIFICATE-----Generated at Mon Mar 2 17:09:32 2026 by rpki-client