$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft File: 9mSsAmv09HwIdXzefyHsPPKk5k4.mft (raw, json) Hash identifier: xcJs9InQjxE11I8RO/+54DeSJx5FrURRJLR6DTDYhnM= Subject key identifier: 02:22:FF:67:55:CA:3F:FE:F7:C0:C3:8D:A6:B3:9C:7F:F6:A8:7D:37 Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E Certificate issuer: /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E Certificate serial: 19B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft Manifest number: 1979 Signing time: Mon 02 Mar 2026 13:52:46 +0000 Manifest this update: Mon 02 Mar 2026 13:52:45 +0000 Manifest next update: Mon 09 Mar 2026 13:52:45 +0000 Files and hashes: 1: 9mSsAmv09HwIdXzefyHsPPKk5k4.crl (hash: p1X44pk1g7ojqayv6i5mN1Gb9MyrnZQG2E06XaZBrGw=) 2: 6314B0DEEAE411F0958BAC9D686F56BC.roa (hash: 0NwXv54cO0MCE+TFwOb412Zt9RzqcUO0YSDPb8weCDE=) 3: 0333AD1461FE11ECBD833921C4F9AE02.roa (hash: afMkh+nThhAtZWr5uZa/M537SW67iX+SaWwO2XmeAUU=) 4: 118F422C816F11EF9ACB654AC4F9AE02.roa (hash: M+kVidWeNxQJxyYqpjX+UThdH/HC0I70LM24xp9pvfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:52:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6577 (0x19b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AE1, serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E Validity Not Before: Mar 2 13:52:45 2026 GMT Not After : Mar 9 13:52:45 2026 GMT Subject: CN=69a5962e-4765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b2:7a:70:3e:bf:8f:13:b8:76:de:71:bc:60: d9:59:11:3d:7f:d0:5b:ad:91:b9:3b:a8:b6:f1:19: 97:30:ef:39:4c:c9:23:67:ad:61:ea:34:75:72:b8: f1:7e:f6:60:fc:6c:8b:b5:7b:43:2c:b0:4a:3a:a2: 00:c1:48:b3:a7:51:75:51:8d:7e:3d:fe:85:82:ff: c2:a7:bf:fd:b6:96:d8:82:da:92:54:15:72:d2:c7: 4b:70:d7:d8:aa:83:7b:64:3f:5d:29:93:8f:2f:b8: 06:65:3f:bb:2a:5d:35:0a:95:23:1d:c0:e7:5d:c8: 36:d7:ef:14:79:67:cb:1b:b7:a3:b7:ae:46:ee:11: 83:e3:e1:6a:0f:1a:5e:d8:4b:12:9a:bc:95:af:9d: f3:be:1a:24:3c:2d:52:f7:81:b2:e5:7c:18:5b:62: 3c:ad:c4:c2:63:97:92:02:b6:cd:d2:77:5a:69:d3: ba:cc:81:2f:b3:95:87:6f:96:8f:04:6b:58:cf:a1: 88:62:6d:ba:d4:56:c7:93:3e:ea:fd:e5:3d:a2:f6: 32:75:9a:df:47:5f:29:aa:2d:84:79:64:14:8c:b1: 36:f4:10:03:7f:5f:ed:23:ec:9b:04:bf:f8:e9:65: 7b:ee:03:ea:30:e3:9b:fd:08:a2:4b:a2:ce:7c:65: 46:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:22:FF:67:55:CA:3F:FE:F7:C0:C3:8D:A6:B3:9C:7F:F6:A8:7D:37 X509v3 Authority Key Identifier: keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:ca:bb:9b:91:86:05:26:6a:98:2f:85:ed:a3:7f:76:1d:2c: 23:f8:6d:b9:6b:cf:87:9e:d7:59:ec:5a:d3:78:75:3e:48:3a: 13:1e:bf:e4:a2:07:e7:8e:2f:5a:31:f9:9a:27:46:34:26:b6: 52:2e:ac:24:4d:5f:9b:13:8a:1c:53:5d:af:f1:04:e3:93:1d: 0c:7c:f2:a3:3f:b8:4d:05:82:7c:32:2b:de:d1:52:f8:b1:88: a7:21:63:90:10:c8:a0:78:87:20:4d:fe:1e:00:fd:0e:5c:08: 75:b3:1a:b7:df:d9:34:4c:4e:19:57:1f:bc:fa:6c:4c:1c:d3: d4:25:02:de:97:dc:d0:6b:4e:cb:08:1e:1f:7d:55:56:cb:1b: 9c:e8:27:ae:17:0b:7c:b9:7c:f0:38:a0:e5:6c:e5:89:0e:c8: 8c:1b:4e:b5:a4:ee:38:1d:13:5e:78:11:75:cb:d4:90:75:7d: bc:75:a9:a4:15:b8:ad:65:31:c6:7c:b3:bc:fe:fe:d2:cb:9b: 39:2c:f4:f2:9d:e6:97:2b:6e:ec:0a:d0:fa:3b:2d:24:b1:c2: ec:32:9a:c3:2b:0f:e6:a5:f7:0a:42:4e:7f:13:b2:7f:18:98: 51:8a:ef:cd:19:56:26:17:6c:49:0b:cb:95:02:c8:e3:e1:fa: 62:cb:70:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBRTExMTAvBgNVBAUTKEY2NjRBQzAyNkJGNEY0N0MwODc1N0NERTdGMjFFQzND RjJBNEU2NEUwHhcNMjYwMzAyMTM1MjQ1WhcNMjYwMzA5MTM1MjQ1WjAYMRYwFAYD VQQDEw02OWE1OTYyZS00NzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7J6cD6/jxO4dt5xvGDZWRE9f9BbrZG5O6i28RmXMO85TMkjZ61h6jR1crjx fvZg/GyLtXtDLLBKOqIAwUizp1F1UY1+Pf6Fgv/Cp7/9tpbYgtqSVBVy0sdLcNfY qoN7ZD9dKZOPL7gGZT+7Kl01CpUjHcDnXcg21+8UeWfLG7ejt65G7hGD4+FqDxpe 2EsSmryVr53zvhokPC1S94Gy5XwYW2I8rcTCY5eSArbN0ndaadO6zIEvs5WHb5aP BGtYz6GIYm261FbHkz7q/eU9ovYydZrfR18pqi2EeWQUjLE29BADf1/tI+ybBL/4 6WV77gPqMOOb/QiiS6LOfGVGeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAIi/2dV yj/+98DDjaaznH/2qH03MB8GA1UdIwQYMBaAFPZkrAJr9PR8CHV83n8h7DzypOZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FFMS82Mzg0M0VEMDk0 NDAxMUU3QkM5OUMxMUFDNEY5QUUwMi85bVNzQW12MDlId0lkWHplZnlIc1BQS2s1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltU3NBbXYwOUh3SWRYemVmeUhzUFBLazVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0FFMS82Mzg0M0VEMDk0NDAxMUU3QkM5OUMxMUFDNEY5QUUwMi85bVNzQW12MDlI d0lkWHplZnlIc1BQS2s1azQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUcq7m5GGBSZqmC+F7aN/dh0sI/htuWvPh57XWexa03h1Pkg6Ex6/5KIH544v WjH5midGNCa2Ui6sJE1fmxOKHFNdr/EE45MdDHzyoz+4TQWCfDIr3tFS+LGIpyFj kBDIoHiHIE3+HgD9DlwIdbMat9/ZNExOGVcfvPpsTBzT1CUC3pfc0GtOywgeH31V VssbnOgnrhcLfLl88Dig5WzliQ7IjBtOtaTuOB0TXngRdcvUkHV9vHWppBW4rWUx xnyzvP7+0subOSz08p3mlytu7ArQ+jstJLHC7DKawysP5qX3CkJOfxOyfxiYUYrv zRlWJhdsSQvLlQLI4+H6YstwBQ== -----END CERTIFICATE-----Generated at Mon Mar 2 15:55:11 2026 by rpki-client