$ rpki-client -vvf rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft File: R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft (raw, json) Hash identifier: 0BYiWBRiIrnuDRSt/iOKdhO78r3GH7V/pPjJkMFCcOk= Subject key identifier: A1:2A:CD:3A:CE:46:7D:AC:13:A3:71:34:D5:D6:F0:7E:20:D8:8A:A4 Authority key identifier: 47:D7:DF:F6:B4:1B:D4:68:C1:F0:C9:D0:4C:5E:85:E0:C3:3F:9F:AB Certificate issuer: /CN=A915D062/serialNumber=47D7DFF6B41BD468C1F0C9D04C5E85E0C33F9FAB Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft Manifest number: 29 Signing time: Sun 01 Mar 2026 10:14:03 +0000 Manifest this update: Sun 01 Mar 2026 10:14:02 +0000 Manifest next update: Sun 08 Mar 2026 10:14:02 +0000 Files and hashes: 1: R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl (hash: 0l7e6voW/un4b6Is3LR+Yy7mlxt6QK90nrxU+EA/6/4=) 2: 709A2E7CDB9A11F0BFEA763F67D3641D.roa (hash: /7uGSz2004/QvinO+aiI/2uroEEvFBnQnqFbErCydxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D062, serialNumber=47D7DFF6B41BD468C1F0C9D04C5E85E0C33F9FAB Validity Not Before: Mar 1 10:14:02 2026 GMT Not After : Mar 8 10:14:02 2026 GMT Subject: CN=69a4116b-b0a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:28:79:3d:e3:b0:92:1e:23:97:1e:ec:5d: 3f:91:81:0f:44:72:a3:15:b3:7b:4e:9e:15:db:7a: 43:31:d3:a4:43:82:5b:07:ff:a2:cf:fe:44:9d:8b: e3:2f:df:24:f5:30:eb:ec:68:ea:28:64:59:45:21: 38:e6:51:cc:65:5d:0a:4c:29:5e:21:7f:34:d8:52: 23:6e:48:c4:8f:27:2e:b8:f3:3c:a5:fa:ca:c0:14: 96:0f:23:74:a2:fe:17:f9:ca:ef:84:01:9b:19:46: c7:89:a1:d7:5e:e2:ef:d2:00:81:81:28:70:f1:ee: 6a:ac:9c:6b:78:a9:9f:8c:a1:bd:5e:71:d9:2f:e5: 67:00:3f:60:71:f6:83:39:35:17:0c:ed:52:a3:6e: a9:a5:10:14:71:8e:c6:ce:3f:01:cc:44:50:dc:6b: 74:d3:b4:67:b6:4e:70:82:3f:b1:ad:ce:d6:e9:2e: 95:5b:1d:31:4f:97:79:3e:a2:fa:81:f2:d5:d4:5e: 0c:83:c9:5f:6b:ca:61:6e:88:65:85:aa:fd:d6:9b: 0d:83:b3:da:5c:02:9b:09:ff:34:29:0e:12:13:f3: dd:d5:f6:bd:2b:df:6e:0d:3a:7e:04:fb:4b:26:64: 61:04:45:a0:18:e4:86:e5:f0:85:84:cd:89:c0:57: fc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2A:CD:3A:CE:46:7D:AC:13:A3:71:34:D5:D6:F0:7E:20:D8:8A:A4 X509v3 Authority Key Identifier: keyid:47:D7:DF:F6:B4:1B:D4:68:C1:F0:C9:D0:4C:5E:85:E0:C3:3F:9F:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:1c:68:9b:b5:0f:4e:6a:e5:7b:d3:7e:6a:49:d5:39:52:8c: 23:22:2c:c2:67:b8:28:3a:02:40:90:89:73:da:41:be:d2:e5: d5:c4:c4:99:5b:23:5a:4e:9f:40:6d:ee:95:d8:79:75:39:d5: 35:9f:f9:b0:09:da:e0:65:8c:e3:53:0a:1b:cc:ea:84:02:74: 99:77:0a:06:95:01:6c:0c:28:8b:04:b7:f7:f8:04:12:6e:80: 90:2b:34:9f:d7:0a:33:56:e9:a3:22:69:3b:a6:a1:b7:6a:7e: a9:03:e4:0b:40:c0:9e:a3:01:73:97:f9:7b:ce:d4:d5:8a:c1: 67:30:74:ad:60:fd:b0:d4:e7:87:11:40:6c:ca:89:99:21:d7: 0f:a2:20:7c:92:8d:eb:a7:fc:7e:3d:89:0d:f5:bb:d4:8b:17: 60:f5:44:5e:77:bb:d1:55:0c:12:2b:c4:03:bd:8d:e1:08:28: c4:e8:73:cd:cc:5c:47:34:3a:f2:3a:73:dc:0c:df:ed:3d:93: 14:72:2b:7b:92:c9:df:15:62:a4:c6:87:9f:ea:18:cb:e5:a9: ba:42:92:0d:ba:78:9d:93:bf:cf:2e:b8:48:1d:be:20:77:a7: bf:d0:52:ee:ed:27:18:5b:52:53:06:02:82:ea:e0:c6:8f:e6: 3f:62:f6:27 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RDA2MjExMC8GA1UEBRMoNDdEN0RGRjZCNDFCRDQ2OEMxRjBDOUQwNEM1RTg1RTBD MzNGOUZBQjAeFw0yNjAzMDExMDE0MDJaFw0yNjAzMDgxMDE0MDJaMBgxFjAUBgNV BAMTDTY5YTQxMTZiLWIwYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBeSh5PeOwkh4jlx7sXT+RgQ9EcqMVs3tOnhXbekMx06RDglsH/6LP/kSdi+Mv 3yT1MOvsaOooZFlFITjmUcxlXQpMKV4hfzTYUiNuSMSPJy648zyl+srAFJYPI3Si /hf5yu+EAZsZRseJodde4u/SAIGBKHDx7mqsnGt4qZ+Mob1ecdkv5WcAP2Bx9oM5 NRcM7VKjbqmlEBRxjsbOPwHMRFDca3TTtGe2TnCCP7GtztbpLpVbHTFPl3k+ovqB 8tXUXgyDyV9rymFuiGWFqv3Wmw2Ds9pcApsJ/zQpDhIT893V9r0r324NOn4E+0sm ZGEERaAY5Ibl8IWEzYnAV/wjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoSrNOs5G fawTo3E01dbwfiDYiqQwHwYDVR0jBBgwFoAUR9ff9rQb1GjB8MnQTF6F4MM/n6sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVEMDYyL0IxQjhCRUE2REI5 OTExRjA5MEE0QkNEMTY2RDM2NDFEL1I5ZmY5clFiMUdqQjhNblFURjZGNE1NX242 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUjlmZjlyUWIxR2pCOE1uUVRGNkY0TU1fbjZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVE MDYyL0IxQjhCRUE2REI5OTExRjA5MEE0QkNEMTY2RDM2NDFEL1I5ZmY5clFiMUdq QjhNblFURjZGNE1NX242cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCEHGibtQ9OauV7035qSdU5UowjIizCZ7goOgJAkIlz2kG+0uXVxMSZWyNaTp9A be6V2Hl1OdU1n/mwCdrgZYzjUwobzOqEAnSZdwoGlQFsDCiLBLf3+AQSboCQKzSf 1wozVumjImk7pqG3an6pA+QLQMCeowFzl/l7ztTVisFnMHStYP2w1OeHEUBsyomZ IdcPoiB8ko3rp/x+PYkN9bvUixdg9URed7vRVQwSK8QDvY3hCCjE6HPNzFxHNDry OnPcDN/tPZMUcit7ksnfFWKkxoef6hjL5am6QpINunidk7/PLrhIHb4gd6e/0FLu 7ScYW1JTBgKC6uDGj+Y/YvYn -----END CERTIFICATE-----Generated at Mon Mar 2 06:05:45 2026 by rpki-client