$ rpki-client -vvf rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.mft File: 1OMXbLn0iT50xOgF-n-12QpKewo.mft (raw, json) Hash identifier: LgJNLtRkLVFErmkQYJV1sxo7QEfNPBgAhTIRxV/e6oI= Subject key identifier: EF:AB:F7:B8:FF:76:77:95:48:F6:5D:5C:00:14:21:E2:DD:5D:46:DA Authority key identifier: D4:E3:17:6C:B9:F4:89:3E:74:C4:E8:05:FA:7F:B5:D9:0A:4A:7B:0A Certificate issuer: /CN=A9154AFB/serialNumber=D4E3176CB9F4893E74C4E805FA7FB5D90A4A7B0A Certificate serial: 17CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OMXbLn0iT50xOgF-n-12QpKewo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.mft Manifest number: 17BA Signing time: Sat 28 Feb 2026 16:37:47 +0000 Manifest this update: Sat 28 Feb 2026 16:37:46 +0000 Manifest next update: Sat 07 Mar 2026 16:37:46 +0000 Files and hashes: 1: 1OMXbLn0iT50xOgF-n-12QpKewo.crl (hash: L68/I7yfblULB5EV5vu+Cnu0GMETvSvnGwVUXz4JeKU=) 2: 81368CD6594B11EE924DCC64C4F9AE02.roa (hash: XhkwHyloR+2rDxWbay2n/StJn5+0QtLglAfKwVMv/5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.crl rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OMXbLn0iT50xOgF-n-12QpKewo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 16:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6095 (0x17cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154AFB, serialNumber=D4E3176CB9F4893E74C4E805FA7FB5D90A4A7B0A Validity Not Before: Feb 28 16:37:46 2026 GMT Not After : Mar 7 16:37:46 2026 GMT Subject: CN=69a319db-2a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6e:e8:ae:76:89:2c:07:29:04:41:58:0e:65: 3f:98:1e:62:ba:24:e0:53:27:b1:08:a7:8b:cf:74: 17:0b:a7:97:b8:fc:8a:d4:94:9d:42:66:95:8e:54: 9d:1d:a7:f5:79:53:50:c1:a7:90:3a:65:94:7b:ce: 9d:c8:15:77:22:22:c8:c4:6d:7b:fb:ee:3d:9a:28: 65:d7:c6:e4:59:29:b0:c4:cc:35:d8:97:55:41:62: a6:1c:cc:00:cc:90:33:c3:a2:97:ba:c6:06:6c:49: 5f:97:1e:f7:dc:23:7f:31:dc:3e:09:4a:06:61:42: ef:b8:13:e2:7b:75:97:e1:80:c1:4c:cc:2a:af:be: b0:d1:a0:4e:ac:3d:a5:95:69:64:8c:04:d3:4f:5f: 3a:16:65:b5:16:f0:6e:61:49:e6:c9:95:f7:8a:4b: 7f:0b:e0:ca:c0:5b:2a:1c:7f:cc:b5:a4:38:b2:10: 0c:cc:94:c5:43:fe:a6:cf:4a:cd:07:b0:bf:49:31: 12:b2:85:a4:b1:52:4a:c4:13:69:67:2f:1f:39:82: 1c:6c:b9:a1:f4:08:df:83:6d:15:0c:de:3c:f6:f8: da:54:59:9a:14:62:db:82:6d:ed:f4:02:38:39:12: 07:e2:30:9e:00:9a:84:11:79:27:97:e9:84:95:77: 5d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AB:F7:B8:FF:76:77:95:48:F6:5D:5C:00:14:21:E2:DD:5D:46:DA X509v3 Authority Key Identifier: keyid:D4:E3:17:6C:B9:F4:89:3E:74:C4:E8:05:FA:7F:B5:D9:0A:4A:7B:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OMXbLn0iT50xOgF-n-12QpKewo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:0a:58:d0:17:e6:6f:b3:15:aa:0b:98:55:72:c3:77:f8:45: 76:0d:bd:5c:b8:60:14:39:ec:13:89:37:58:11:b5:fa:c9:d8: 6e:29:3b:68:a5:6f:e7:be:a0:29:6a:8f:64:4b:ac:40:10:97: 7f:ae:c5:fd:fe:21:46:1d:3a:0c:69:e4:33:19:05:97:7b:f8: dd:bc:8c:5d:42:5d:57:aa:f4:0f:0e:da:31:95:fb:69:f9:86: fc:1b:cb:43:d2:89:f1:97:0d:c1:67:4d:84:90:cc:9d:ab:b1: cf:3d:f2:62:1f:5f:3b:b2:32:d8:b6:80:5f:1b:b0:5c:53:e0: 4b:3a:0c:70:d5:71:38:19:11:13:54:71:01:06:38:28:3f:ac: 8e:d1:81:1d:cc:28:42:4c:c4:ed:0c:61:ad:e7:e6:66:51:a7: 22:37:98:ef:64:2c:6e:ec:60:cc:7a:87:05:b9:3d:ac:81:a3: ad:a4:2e:36:d5:40:72:2a:16:0f:92:1d:cb:f9:a6:4e:14:59: d3:4c:ff:f9:de:cb:a4:ea:e2:4d:39:04:c2:70:65:8a:55:da: 41:ee:88:4c:2f:77:2b:e4:7f:2b:92:ed:bb:c1:3f:58:ba:f7: 6f:fc:70:58:4b:6c:4f:4d:66:93:c2:7b:8f:7a:43:2a:6c:b9: ac:5b:b8:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRBRkIxMTAvBgNVBAUTKEQ0RTMxNzZDQjlGNDg5M0U3NEM0RTgwNUZBN0ZCNUQ5 MEE0QTdCMEEwHhcNMjYwMjI4MTYzNzQ2WhcNMjYwMzA3MTYzNzQ2WjAYMRYwFAYD VQQDDA02OWEzMTlkYi0yYTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqm7ornaJLAcpBEFYDmU/mB5iuiTgUyexCKeLz3QXC6eXuPyK1JSdQmaVjlSd Haf1eVNQwaeQOmWUe86dyBV3IiLIxG17++49mihl18bkWSmwxMw12JdVQWKmHMwA zJAzw6KXusYGbElflx733CN/Mdw+CUoGYULvuBPie3WX4YDBTMwqr76w0aBOrD2l lWlkjATTT186FmW1FvBuYUnmyZX3ikt/C+DKwFsqHH/MtaQ4shAMzJTFQ/6mz0rN B7C/STESsoWksVJKxBNpZy8fOYIcbLmh9Ajfg20VDN489vjaVFmaFGLbgm3t9AI4 ORIH4jCeAJqEEXknl+mElXddnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO+r97j/ dneVSPZdXAAUIeLdXUbaMB8GA1UdIwQYMBaAFNTjF2y59Ik+dMToBfp/tdkKSnsK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEFGQi83OEEwNEU0Q0Uz MkYxMUU3QjZDRUQ0MkZDNEY5QUUwMi8xT01YYkxuMGlUNTB4T2dGLW4tMTJRcEtl d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFPTVhiTG4waVQ1MHhPZ0Ytbi0xMlFwS2V3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEFGQi83OEEwNEU0Q0UzMkYxMUU3QjZDRUQ0MkZDNEY5QUUwMi8xT01YYkxuMGlU NTB4T2dGLW4tMTJRcEtld28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjgpY0Bfmb7MVqguYVXLDd/hFdg29XLhgFDnsE4k3WBG1+snYbik7aKVv576g KWqPZEusQBCXf67F/f4hRh06DGnkMxkFl3v43byMXUJdV6r0Dw7aMZX7afmG/BvL Q9KJ8ZcNwWdNhJDMnauxzz3yYh9fO7Iy2LaAXxuwXFPgSzoMcNVxOBkRE1RxAQY4 KD+sjtGBHcwoQkzE7QxhrefmZlGnIjeY72QsbuxgzHqHBbk9rIGjraQuNtVAcioW D5Idy/mmThRZ00z/+d7LpOriTTkEwnBlilXaQe6ITC93K+R/K5Ltu8E/WLr3b/xw WEtsT01mk8J7j3pDKmy5rFu4Qw== -----END CERTIFICATE-----Generated at Mon Mar 2 02:53:58 2026 by rpki-client