$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft File: 9ES43awaKuycmNiYFhxzSCwu1Ig.mft (raw, json) Hash identifier: gH+7XJUtfvsGnZatYO+UmFbFSzB7IvoF4LjyPdokrRo= Subject key identifier: 9E:3E:29:35:4B:68:47:23:60:31:1D:27:52:36:76:A1:6D:1C:6E:1C Authority key identifier: F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 Certificate issuer: /CN=A91427E2/serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft Manifest number: FE Signing time: Sun 01 Mar 2026 07:15:58 +0000 Manifest this update: Sun 01 Mar 2026 07:15:58 +0000 Manifest next update: Sun 08 Mar 2026 07:15:58 +0000 Files and hashes: 1: 9ES43awaKuycmNiYFhxzSCwu1Ig.crl (hash: C1eqMzhEquOWZZ62ErAWnwFhdYZSFGU1QSBHoQi+DU4=) 2: 52EADE54935111EF98AA8C86C4F9AE02.roa (hash: EP8IMn/Dpz37JzTGpl131u/EdByNY9mypWBz1crTuiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427E2, serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Validity Not Before: Mar 1 07:15:58 2026 GMT Not After : Mar 8 07:15:58 2026 GMT Subject: CN=69a3e7ae-8e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4d:18:91:ab:92:2b:84:c5:f6:82:95:cb:5a: c9:8e:73:09:d9:ba:c4:43:04:12:b1:ca:b1:4d:78: 21:55:59:c1:76:bc:80:17:f8:3d:5c:e9:b5:44:1e: 0b:10:91:65:a2:72:69:d6:bd:ad:5e:8f:88:4f:42: 15:56:9f:ed:ca:f1:6d:88:aa:8c:a7:29:ea:a3:82: db:e0:7e:b0:6f:f9:50:e0:70:52:c9:12:c0:6e:6e: 8d:13:4e:28:bf:22:27:67:c5:88:fd:88:5d:45:ea: 33:47:da:ea:12:c4:59:5a:7f:c5:de:1e:6e:2a:7c: d9:2b:1c:7a:4f:65:8d:b1:48:35:c0:47:9f:94:24: da:c4:33:be:6d:cd:d4:15:6f:ed:79:50:d7:7a:ab: 5d:d1:20:30:00:5d:e4:95:24:31:d4:27:90:b8:4e: 0e:20:a2:d4:fa:65:67:b3:1d:45:8b:31:ad:a3:30: 6b:8d:97:0c:84:1d:b1:ad:ac:34:e9:c1:52:da:a8: b6:15:1f:7d:86:4e:d2:22:44:a0:05:40:5b:39:4b: f8:a2:fb:1e:3a:7f:33:49:dd:46:4d:8b:3e:b4:9b: 04:55:da:0d:bf:99:96:f7:3a:bd:42:be:47:57:15: d9:4c:ff:18:63:76:73:15:3d:08:ed:6f:c0:38:f6: b5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3E:29:35:4B:68:47:23:60:31:1D:27:52:36:76:A1:6D:1C:6E:1C X509v3 Authority Key Identifier: keyid:F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:8d:7a:52:1d:dd:f4:9c:b5:1a:9e:8e:cd:ee:ae:0f:84:2f: a9:20:e7:d8:f0:75:1c:25:00:2d:a2:c0:ac:25:70:ed:3a:00: f2:2d:cc:27:fe:95:66:1d:8b:84:bb:28:3a:bb:0f:ac:33:1e: 13:b1:0b:1f:99:5c:a6:79:10:8d:05:45:98:9f:7c:db:63:5f: ef:51:a4:8e:db:a5:0a:ef:70:42:b0:36:80:88:00:71:d6:bf: 56:69:ae:15:e8:fa:7b:bc:33:64:fa:90:66:28:11:b1:f7:01: 20:e7:cf:a3:8b:d0:48:bf:c2:4a:59:d7:43:04:53:10:69:00: 37:99:b2:1a:c9:b2:82:2b:65:67:7b:93:08:44:cb:f9:02:14: c8:3f:ba:00:a5:90:89:f9:e9:9f:09:4d:0c:e4:36:d9:ee:2b: 73:ce:12:4b:0c:02:90:5f:4d:62:f7:94:94:88:95:22:a8:a8: 19:a7:c9:9a:47:12:f4:2b:59:51:50:cd:b7:84:57:09:13:a9: 0f:c8:09:91:be:e3:0e:1d:f7:9f:37:e8:6f:9d:28:32:b8:7a: 96:62:eb:88:67:4b:55:15:00:e5:b7:01:33:a9:e7:a3:3e:1f: 01:c3:4e:52:52:40:90:57:da:bf:e9:8f:d2:74:e8:5d:5b:cf: ab:71:f5:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3RTIxMTAvBgNVBAUTKEY0NDRCOEREQUMxQTJBRUM5Qzk4RDg5ODE2MUM3MzQ4 MkMyRUQ0ODgwHhcNMjYwMzAxMDcxNTU4WhcNMjYwMzA4MDcxNTU4WjAYMRYwFAYD VQQDEw02OWEzZTdhZS04ZTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3k0YkauSK4TF9oKVy1rJjnMJ2brEQwQSscqxTXghVVnBdryAF/g9XOm1RB4L EJFlonJp1r2tXo+IT0IVVp/tyvFtiKqMpynqo4Lb4H6wb/lQ4HBSyRLAbm6NE04o vyInZ8WI/YhdReozR9rqEsRZWn/F3h5uKnzZKxx6T2WNsUg1wEeflCTaxDO+bc3U FW/teVDXeqtd0SAwAF3klSQx1CeQuE4OIKLU+mVnsx1FizGtozBrjZcMhB2xraw0 6cFS2qi2FR99hk7SIkSgBUBbOUv4ovseOn8zSd1GTYs+tJsEVdoNv5mW9zq9Qr5H VxXZTP8YY3ZzFT0I7W/AOPa1fwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ4+KTVL aEcjYDEdJ1I2dqFtHG4cMB8GA1UdIwQYMBaAFPREuN2sGirsnJjYmBYcc0gsLtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjdFMi83MDMxQTFFQzkz NTAxMUVGQkFDRTAwNENDNEY5QUUwMi85RVM0M2F3YUt1eWNtTmlZRmh4elNDd3Ux SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzlFUzQzYXdhS3V5Y21OaVlGaHh6U0N3dTFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjdFMi83MDMxQTFFQzkzNTAxMUVGQkFDRTAwNENDNEY5QUUwMi85RVM0M2F3YUt1 eWNtTmlZRmh4elNDd3UxSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW416Uh3d9Jy1Gp6Oze6uD4QvqSDn2PB1HCUALaLArCVw7ToA8i3MJ/6VZh2L hLsoOrsPrDMeE7ELH5lcpnkQjQVFmJ9822Nf71GkjtulCu9wQrA2gIgAcda/Vmmu Fej6e7wzZPqQZigRsfcBIOfPo4vQSL/CSlnXQwRTEGkAN5myGsmygitlZ3uTCETL +QIUyD+6AKWQifnpnwlNDOQ22e4rc84SSwwCkF9NYveUlIiVIqioGafJmkcS9CtZ UVDNt4RXCROpD8gJkb7jDh33nzfob50oMrh6lmLriGdLVRUA5bcBM6nnoz4fAcNO UlJAkFfav+mP0nToXVvPq3H1TQ== -----END CERTIFICATE-----Generated at Mon Mar 2 12:49:23 2026 by rpki-client