$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft File: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft (raw, json) Hash identifier: Ffw/gpIDHY+t1St9WcGY3v1AGdRzLH5p/Kx5tzQmM5U= Subject key identifier: E8:B0:67:A7:BB:0E:72:E8:DD:BB:1A:50:D2:40:01:89:F5:80:D2:31 Authority key identifier: 5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D Certificate issuer: /CN=A9150EF7/serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Certificate serial: 0CDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft Manifest number: 0CD2 Signing time: Mon 02 Mar 2026 01:36:54 +0000 Manifest this update: Mon 02 Mar 2026 01:36:53 +0000 Manifest next update: Mon 09 Mar 2026 01:36:53 +0000 Files and hashes: 1: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl (hash: SGnJxMss1mqv6M+cJd8dtLptXdVZ/4mIwa2UbC6gdmY=) 2: 999F4BE8259611EE944D733CC4F9AE02.roa (hash: DyvlHpc+Y3k78Xna4wfmukjiR2XTaIl+kDH030UpDGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3291 (0xcdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EF7, serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Validity Not Before: Mar 2 01:36:53 2026 GMT Not After : Mar 9 01:36:53 2026 GMT Subject: CN=69a4e9b6-91d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5b:4c:a4:c1:27:b1:7a:c0:fb:b0:ac:88:cd: 52:33:ee:02:b2:c5:f5:17:17:8c:4a:e6:20:e9:03: 25:75:a4:29:68:eb:8a:5a:7a:83:30:b7:49:e3:f2: 32:82:74:2e:be:16:fc:89:cd:98:a2:c4:3b:2e:95: db:cc:10:30:dc:6f:89:9c:96:c7:d9:63:04:83:06: f3:7c:de:9e:00:39:cd:a2:62:ba:e4:ed:48:69:16: 29:fa:7c:54:24:65:43:4b:e4:94:75:ce:c6:6d:d6: 01:d6:b3:bd:17:22:59:59:99:89:08:0c:31:a7:5a: 9f:26:ef:20:c4:7a:cd:d8:ec:64:26:1a:f8:37:84: aa:f7:5d:06:cb:02:7d:bf:50:40:23:b1:bd:7f:5a: ac:7d:f3:39:75:d1:c9:71:d2:51:77:0d:0f:84:af: 2f:a4:13:e7:01:f5:da:a9:66:aa:9c:70:22:d1:7c: 69:99:8b:c6:b4:68:83:95:32:d2:6d:ae:f7:b7:ab: 3e:10:c2:68:da:80:a9:30:e2:9c:45:5c:2d:03:e2: bd:5a:8a:25:70:6b:3e:e8:cc:d0:26:74:aa:7a:85: 5d:9f:44:16:f2:ae:d4:f7:71:b6:95:e0:8b:b2:34: 99:5a:04:d8:13:3b:ce:65:59:f3:11:c2:06:07:34: 03:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B0:67:A7:BB:0E:72:E8:DD:BB:1A:50:D2:40:01:89:F5:80:D2:31 X509v3 Authority Key Identifier: keyid:5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e1:e0:a7:97:6e:31:b5:6e:30:7f:89:3c:a6:a3:57:28:fd: 4a:ad:e9:0b:63:51:8f:9e:b0:61:04:7c:81:d3:9c:08:ae:06: 01:69:0a:f3:67:0f:7d:45:c8:b0:50:f3:26:f1:11:2c:9e:60: be:50:05:a1:60:a0:75:f9:81:13:f7:d9:b9:30:5e:c9:f7:2a: 60:53:2f:57:c7:c8:70:f2:d2:4f:d8:12:b6:00:2e:d2:d8:cf: a2:9d:f2:3d:ea:49:9e:f6:9a:86:9e:c9:d1:38:5d:21:c9:d2: 62:54:48:bb:b2:55:37:68:ee:ad:8b:ab:c2:b1:65:1e:d6:c4: 12:3f:27:29:7c:ec:8d:4a:88:c7:00:bf:ee:78:89:e9:b0:8f: 81:52:13:57:b3:48:5b:69:8f:32:18:dd:0c:ad:0c:b0:84:ad: 09:44:3e:16:ff:00:08:b1:76:8a:b7:cb:60:fa:fb:c0:01:5a: ea:1d:53:fb:fe:2d:3b:ca:5e:15:4c:3d:cc:fa:c5:11:46:96: 57:a3:4b:d1:9d:14:7d:e2:1f:d1:f0:63:61:40:36:bd:46:8c: 8a:05:cb:52:9b:65:03:8c:d2:a2:93:56:48:e5:66:da:e5:9c: 17:db:f6:f8:81:c9:03:5b:e3:c9:78:e2:11:fe:95:58:8e:a9: f4:f6:6a:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFRjcxMTAvBgNVBAUTKDVDOUY2QzFEQkM0RUNGMDkxOTYyRjYwRUJFNUFCRkNC NkIwMzFBMkQwHhcNMjYwMzAyMDEzNjUzWhcNMjYwMzA5MDEzNjUzWjAYMRYwFAYD VQQDEw02OWE0ZTliNi05MWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjVtMpMEnsXrA+7CsiM1SM+4CssX1FxeMSuYg6QMldaQpaOuKWnqDMLdJ4/Iy gnQuvhb8ic2YosQ7LpXbzBAw3G+JnJbH2WMEgwbzfN6eADnNomK65O1IaRYp+nxU JGVDS+SUdc7GbdYB1rO9FyJZWZmJCAwxp1qfJu8gxHrN2OxkJhr4N4Sq910GywJ9 v1BAI7G9f1qsffM5ddHJcdJRdw0PhK8vpBPnAfXaqWaqnHAi0XxpmYvGtGiDlTLS ba73t6s+EMJo2oCpMOKcRVwtA+K9WoolcGs+6MzQJnSqeoVdn0QW8q7U93G2leCL sjSZWgTYEzvOZVnzEcIGBzQDmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOiwZ6e7 DnLo3bsaUNJAAYn1gNIxMB8GA1UdIwQYMBaAFFyfbB28Ts8JGWL2Dr5av8trAxot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVGNy9CMDcxMzk3QzA1 RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3a1pZdllPdmxxX3kyc0RH aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKOXNIYnhPendrWll2WU92bHFfeTJzREdpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVGNy9CMDcxMzk3QzA1RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3 a1pZdllPdmxxX3kyc0RHaTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHOHgp5duMbVuMH+JPKajVyj9Sq3pC2NRj56wYQR8gdOcCK4GAWkK82cPfUXI sFDzJvERLJ5gvlAFoWCgdfmBE/fZuTBeyfcqYFMvV8fIcPLST9gStgAu0tjPop3y PepJnvaahp7J0ThdIcnSYlRIu7JVN2jurYurwrFlHtbEEj8nKXzsjUqIxwC/7niJ 6bCPgVITV7NIW2mPMhjdDK0MsIStCUQ+Fv8ACLF2irfLYPr7wAFa6h1T+/4tO8pe FUw9zPrFEUaWV6NL0Z0UfeIf0fBjYUA2vUaMigXLUptlA4zSopNWSOVm2uWcF9v2 +IHJA1vjyXjiEf6VWI6p9PZq3w== -----END CERTIFICATE-----Generated at Mon Mar 2 15:41:45 2026 by rpki-client