$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft File: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft (raw, json) Hash identifier: 1T/BcGa7j2K+Y/vqLOjTv5qZL4EuFyu4IsXgSnaIPQM= Subject key identifier: 82:BF:FF:F9:C5:E9:AA:80:A4:81:A9:25:FB:57:5E:72:FE:07:37:D6 Authority key identifier: F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65 Certificate issuer: /CN=A915D0AC/serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865 Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft Manifest number: 01FC Signing time: Mon 02 Mar 2026 01:00:16 +0000 Manifest this update: Mon 02 Mar 2026 01:00:15 +0000 Manifest next update: Mon 09 Mar 2026 01:00:15 +0000 Files and hashes: 1: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl (hash: duBXw0dEjRmD/Jyo2FqRedhc8DgIQ6DNwPQEYqG/8MQ=) 2: DD2A5994182F11EE82A0FC48C4F9AE02.roa (hash: iaWvvLO9RtIU/5hc6ooIendXVuz1sJiFT2wgQFUmPyg=) 3: B9CCF2D4BD2711EE9958E946C4F9AE02.roa (hash: Gf9FvRP87k5tJxq7afHhKtaiWDluE6doG6ZwlKn8lJM=) 4: 5F52F24EBD2811EE9459FF47C4F9AE02.roa (hash: KmkycUxGBGDhfp+ky4OMh6F/NxfCyL4MQRwNwWZI4Lo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865 Validity Not Before: Mar 2 01:00:15 2026 GMT Not After : Mar 9 01:00:15 2026 GMT Subject: CN=69a4e120-8dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5d:16:c2:12:b9:5e:71:3d:84:0d:1b:5e:a5: df:b5:d2:c0:1b:fa:e6:d5:5d:0a:01:ab:53:88:27: a4:64:d9:3d:8d:fe:1d:60:03:23:91:90:75:57:8c: 2d:99:a9:05:eb:bb:87:29:e5:b8:de:9e:5a:90:29: 3d:c9:7c:ca:70:39:a1:7a:41:98:7e:71:5b:cb:c5: ff:75:c8:28:8e:ec:7a:32:9c:35:b3:ce:de:2c:31: 67:61:31:e1:56:82:5f:23:f9:17:eb:86:56:67:c6: 44:57:6a:fa:47:37:d9:6d:35:70:a9:91:dc:ce:d5: 73:fa:d2:aa:b9:7a:fa:8d:84:a6:54:b8:de:75:ac: d5:ce:f2:b4:c9:0f:c5:12:bd:ab:d4:21:b4:4c:3a: 69:0d:64:d5:5a:1c:e1:0b:ab:5f:be:89:fb:ed:3a: 27:f0:6a:fb:81:f6:1a:3d:35:1f:ad:e6:a9:08:7a: 7b:47:62:33:da:14:57:f8:2b:8d:fb:90:58:02:5f: aa:79:ac:3f:18:17:b1:ce:83:76:3b:04:0d:70:6c: 9c:23:4d:b1:89:f9:b8:76:8b:b6:d4:1a:a3:24:1b: c5:6f:f7:c2:7f:91:47:61:9c:8a:8f:a8:70:dd:f8: cc:35:32:1b:d5:fa:59:f3:dc:ff:fd:cd:e2:d5:bd: 68:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BF:FF:F9:C5:E9:AA:80:A4:81:A9:25:FB:57:5E:72:FE:07:37:D6 X509v3 Authority Key Identifier: keyid:F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:fa:71:b1:22:19:32:38:46:18:7b:fb:18:eb:47:cc:70:10: 41:70:4a:9d:29:4d:70:de:e5:d0:80:39:83:d3:09:ab:96:0b: 3c:a0:ba:79:90:7b:c7:2d:a1:c0:fa:d2:e8:1d:fe:f5:a4:7e: aa:37:d1:85:bb:78:01:1b:82:ae:1a:6e:64:73:6a:64:47:9f: 3a:c1:44:0b:8d:de:71:64:67:a7:7d:7e:e1:be:d7:e5:d3:5e: 36:5a:0f:36:4c:c1:42:82:6e:ab:ae:d8:80:de:ce:32:cf:39: be:cf:53:de:0a:03:2b:fa:2d:c3:7b:b8:14:82:f7:9c:0b:08: f8:bc:0c:c4:54:7b:b7:f4:32:a5:bd:35:0c:ae:d2:e3:50:fb: fc:c9:b7:3e:be:3a:10:af:ad:ec:9d:5f:bc:3c:e0:b8:57:de: be:ae:15:e9:ca:da:93:89:3f:f0:e8:0d:39:97:7e:88:48:f4: 6e:74:82:34:17:9a:b1:07:80:95:6c:d1:5b:21:fe:84:29:95: af:8d:c2:b2:ee:5c:0b:da:ac:7c:5b:4d:60:7c:cf:b0:be:3a: 20:58:e5:b2:4d:b8:eb:c5:7d:03:bf:de:02:af:04:b5:b5:67: 82:52:e4:e4:85:79:6a:3b:5e:33:c6:44:79:a4:77:48:1a:2c: ed:ed:18:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKEY3QUVENTg3NTExMkNDRkIyMDhFNzE4MjQ3QjFFNDlC QUFGRkI4NjUwHhcNMjYwMzAyMDEwMDE1WhcNMjYwMzA5MDEwMDE1WjAYMRYwFAYD VQQDEw02OWE0ZTEyMC04ZGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiV0WwhK5XnE9hA0bXqXftdLAG/rm1V0KAatTiCekZNk9jf4dYAMjkZB1V4wt makF67uHKeW43p5akCk9yXzKcDmhekGYfnFby8X/dcgojux6Mpw1s87eLDFnYTHh VoJfI/kX64ZWZ8ZEV2r6RzfZbTVwqZHcztVz+tKquXr6jYSmVLjedazVzvK0yQ/F Er2r1CG0TDppDWTVWhzhC6tfvon77Ton8Gr7gfYaPTUfreapCHp7R2Iz2hRX+CuN +5BYAl+qeaw/GBexzoN2OwQNcGycI02xifm4dou21BqjJBvFb/fCf5FHYZyKj6hw 3fjMNTIb1fpZ89z//c3i1b1o4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIK///nF 6aqApIGpJftXXnL+BzfWMB8GA1UdIwQYMBaAFPeu1YdREsz7II5xgkex5Juq/7hl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy9BMjlBQTJEODE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi85NjdWaDFFU3pQc2dqbkdDUjdIa202cl91 R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk2N1ZoMUVTelBzZ2puR0NSN0hrbTZyX3VHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy9BMjlBQTJEODE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi85NjdWaDFFU3pQ c2dqbkdDUjdIa202cl91R1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwvpxsSIZMjhGGHv7GOtHzHAQQXBKnSlNcN7l0IA5g9MJq5YLPKC6eZB7xy2h wPrS6B3+9aR+qjfRhbt4ARuCrhpuZHNqZEefOsFEC43ecWRnp31+4b7X5dNeNloP NkzBQoJuq67YgN7OMs85vs9T3goDK/otw3u4FIL3nAsI+LwMxFR7t/Qypb01DK7S 41D7/Mm3Pr46EK+t7J1fvDzguFfevq4V6crak4k/8OgNOZd+iEj0bnSCNBeasQeA lWzRWyH+hCmVr43Csu5cC9qsfFtNYHzPsL46IFjlsk2468V9A7/eAq8EtbVnglLk 5IV5ajteM8ZEeaR3SBos7e0Y/g== -----END CERTIFICATE-----Generated at Mon Mar 2 13:41:53 2026 by rpki-client