$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft File: l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft (raw, json) Hash identifier: mIiT4AK3vzWc3FMDyh6EbEVNetLqWzXoeE/m7AscZoA= Subject key identifier: 7D:DD:5F:87:73:80:BB:B5:AD:8C:8D:44:CA:A1:CF:6E:8F:BF:20:31 Authority key identifier: 97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91 Certificate issuer: /CN=A913F2BD/serialNumber=97D04159FBB37EA67462B896976C1140C959E691 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft Manifest number: 0137 Signing time: Sun 01 Mar 2026 06:24:26 +0000 Manifest this update: Sun 01 Mar 2026 06:24:25 +0000 Manifest next update: Sun 08 Mar 2026 06:24:25 +0000 Files and hashes: 1: l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl (hash: D/7w0HdP+SQBETU+lBcxPM1ZLU7I93kkVuMcdD3qunU=) 2: 470E849A389E11EF83D66176C4F9AE02.roa (hash: N6wnq+SiTT7KZAm9ihuMhFBquoYx3YiKfww2FuMhesA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:24:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD, serialNumber=97D04159FBB37EA67462B896976C1140C959E691 Validity Not Before: Mar 1 06:24:25 2026 GMT Not After : Mar 8 06:24:25 2026 GMT Subject: CN=69a3db9a-9fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:2d:0e:2b:16:46:20:00:4a:ef:9e:95:82:a5: d5:12:20:86:e1:a1:51:3c:b0:fc:ff:c4:6e:5c:b3: e7:c1:ad:62:29:5d:ff:53:19:af:36:5e:53:44:5a: 34:2d:1a:95:2b:cd:d2:66:cc:a9:48:25:35:48:a2: 05:a5:bc:58:a5:22:8a:2c:70:0d:a8:ba:f8:b4:c2: e1:13:8a:5d:5d:b0:97:de:c6:e0:47:ea:9f:7f:f2: c0:10:e6:77:d6:21:65:36:5f:3f:a6:21:99:f7:35: 3a:5b:cd:c2:6c:87:ab:9c:f8:e7:5b:6d:72:95:9e: 58:c5:c5:6f:55:ae:2a:c8:11:2b:f7:88:88:bf:34: 0b:f2:56:03:27:e7:1e:8e:87:ee:cc:b5:f4:bf:62: 9d:ca:8c:f2:fd:b2:ec:ac:2b:00:7d:9a:2d:5e:18: c2:e9:a9:e9:ef:84:03:cb:b0:60:db:87:49:4b:a8: ff:91:c6:6a:51:8d:19:12:da:af:76:7c:e3:9f:b9: cd:ff:2e:f0:8f:2c:7f:0f:06:7a:64:2c:cb:9d:73: 96:9d:3f:fa:4b:0e:61:e7:9d:0d:75:93:69:3f:4b: a0:80:2e:25:83:ae:08:09:67:1a:46:f0:0b:50:5e: 19:38:b2:71:97:ef:5f:38:8c:df:4e:51:e3:71:cc: c3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DD:5F:87:73:80:BB:B5:AD:8C:8D:44:CA:A1:CF:6E:8F:BF:20:31 X509v3 Authority Key Identifier: keyid:97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:1c:dc:a1:cb:e8:04:0e:eb:3a:b7:bd:bb:6a:72:e6:7b:3a: 03:0e:a6:1a:4b:02:61:d3:48:a5:b1:f4:fb:1f:82:69:d3:bc: a1:7d:4e:6f:cd:4b:cd:b1:89:c8:52:46:f8:1b:f2:ba:10:06: f5:13:57:02:84:d4:26:60:cf:93:b0:8a:6b:83:b3:ba:32:f2: cd:ee:b5:70:30:8a:09:6d:fa:c7:31:9d:d9:03:68:ba:7d:18: 7b:4b:a0:69:b4:f1:8f:7f:a3:ee:6c:70:80:6b:1c:4d:2d:7d: cc:28:25:25:eb:67:5c:1b:71:ff:6d:34:7a:d2:81:5c:df:aa: 3b:3c:77:d5:74:cd:ca:24:10:2b:4b:8b:4c:8b:33:6b:5f:dd: f7:f7:61:f6:c0:c8:98:fc:14:a9:b6:05:c6:03:28:e1:d8:58: 2b:fa:27:45:12:34:7b:b1:3a:d4:73:57:b0:91:66:27:37:3c: 25:7f:4b:48:29:a2:7a:7b:1e:17:e3:0f:4a:07:26:71:13:25: 18:c5:3a:6e:0c:ea:e2:2b:7c:14:4a:66:9b:ac:fa:c5:18:32: 90:bd:7c:03:ec:aa:b7:d1:8b:6d:52:49:c2:d4:6d:ab:2d:1c: 13:56:fe:b4:ca:9c:19:39:48:82:1b:cd:cc:df:77:80:5a:ff: bd:b8:0f:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyQkQxMTAvBgNVBAUTKDk3RDA0MTU5RkJCMzdFQTY3NDYyQjg5Njk3NkMxMTQw Qzk1OUU2OTEwHhcNMjYwMzAxMDYyNDI1WhcNMjYwMzA4MDYyNDI1WjAYMRYwFAYD VQQDEw02OWEzZGI5YS05ZmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/i0OKxZGIABK756VgqXVEiCG4aFRPLD8/8RuXLPnwa1iKV3/UxmvNl5TRFo0 LRqVK83SZsypSCU1SKIFpbxYpSKKLHANqLr4tMLhE4pdXbCX3sbgR+qff/LAEOZ3 1iFlNl8/piGZ9zU6W83CbIernPjnW21ylZ5YxcVvVa4qyBEr94iIvzQL8lYDJ+ce jofuzLX0v2Kdyozy/bLsrCsAfZotXhjC6anp74QDy7Bg24dJS6j/kcZqUY0ZEtqv dnzjn7nN/y7wjyx/DwZ6ZCzLnXOWnT/6Sw5h550NdZNpP0uggC4lg64ICWcaRvAL UF4ZOLJxl+9fOIzfTlHjcczDBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH3dX4dz gLu1rYyNRMqhz26PvyAxMB8GA1UdIwQYMBaAFJfQQVn7s36mdGK4lpdsEUDJWeaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC80Nzg0NDIwMDM4 OTYxMUVGOUVERTgxMzZDNEY5QUUwMi9sOUJCV2Z1emZxWjBZcmlXbDJ3UlFNbFo1 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5QkJXZnV6ZnFaMFlyaVdsMndSUU1sWjVwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC80Nzg0NDIwMDM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi9sOUJCV2Z1emZx WjBZcmlXbDJ3UlFNbFo1cEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdRzcocvoBA7rOre9u2py5ns6Aw6mGksCYdNIpbH0+x+CadO8oX1Ob81LzbGJ yFJG+BvyuhAG9RNXAoTUJmDPk7CKa4OzujLyze61cDCKCW36xzGd2QNoun0Ye0ug abTxj3+j7mxwgGscTS19zCglJetnXBtx/200etKBXN+qOzx31XTNyiQQK0uLTIsz a1/d9/dh9sDImPwUqbYFxgMo4dhYK/onRRI0e7E61HNXsJFmJzc8JX9LSCmiense F+MPSgcmcRMlGMU6bgzq4it8FEpmm6z6xRgykL18A+yqt9GLbVJJwtRtqy0cE1b+ tMqcGTlIghvNzN93gFr/vbgPqQ== -----END CERTIFICATE-----Generated at Mon Mar 2 15:18:14 2026 by rpki-client