$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft File: cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json) Hash identifier: Qkj3PJS1d83zVrdB3xyJvVgam/GR36Cxh99RShMAswc= Subject key identifier: 3F:32:1E:6E:94:44:71:EC:71:9E:18:40:07:AB:0B:B4:49:E3:69:4A Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Certificate serial: 0236 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft Manifest number: 0231 Signing time: Sun 01 Mar 2026 03:31:27 +0000 Manifest this update: Sun 01 Mar 2026 03:31:26 +0000 Manifest next update: Sun 08 Mar 2026 03:31:26 +0000 Files and hashes: 1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: C3ED7hfZW9zzwDhe+OYm4r2kdziXrsKVLd6HzV07dWc=) 2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: DR6m9dTiQf0MQdfmKjC6TTSnRd3qda76E3er8flKLDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:31:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D10D, serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Validity Not Before: Mar 1 03:31:26 2026 GMT Not After : Mar 8 03:31:26 2026 GMT Subject: CN=69a3b30f-b576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:73:41:7a:b2:6d:52:55:1c:6d:f2:fe:b5:5e: 6d:c7:4e:7d:ad:af:f0:dd:6d:83:1d:40:1e:be:18: fc:cc:60:1e:4a:98:1e:51:81:81:79:bb:d7:75:ea: 25:49:41:0c:b3:44:5d:83:fd:05:6c:06:22:cc:3b: 39:2c:01:4b:de:89:c4:71:63:7c:bf:cc:34:9e:3a: 26:20:0a:49:11:59:bb:65:5a:9f:4e:33:90:f7:b6: c9:d7:a8:53:70:0a:9f:88:e3:db:eb:4a:10:92:21: f1:0b:d7:7b:d9:23:6c:5d:4e:df:24:29:e8:ad:44: 2c:55:4b:95:77:a6:61:19:c5:c5:e6:c0:30:54:06: d6:1a:27:cc:4b:88:4a:8c:57:70:e3:03:1c:7c:7b: bb:47:65:6d:ad:2b:44:12:c1:d6:86:78:30:33:27: eb:b2:7c:e7:6a:c4:0e:74:79:fd:71:7e:77:bd:9f: e1:fd:b2:e4:3a:55:11:f1:ae:81:4b:64:1b:5e:1d: 73:a1:a8:f9:82:91:c7:0c:c8:e9:d1:10:66:06:67: eb:71:cd:28:2d:a3:2d:c0:4a:26:38:ad:25:06:de: 00:74:c5:71:6e:06:ec:9a:7a:be:8f:1b:1b:08:da: de:87:b0:ec:1c:4f:77:44:e7:17:cf:b3:ca:2d:8e: c7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:32:1E:6E:94:44:71:EC:71:9E:18:40:07:AB:0B:B4:49:E3:69:4A X509v3 Authority Key Identifier: keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:89:2c:9d:1a:fb:d9:ff:0d:64:21:38:59:69:70:d7:46:11: 2e:77:b0:61:32:1c:67:af:59:e5:1e:15:02:61:c2:c4:c0:cf: 48:86:c2:78:4c:bf:0f:00:66:4e:5a:a2:89:8f:0a:b5:c6:26: 86:97:c3:9b:be:d5:b4:90:78:e2:38:15:02:e8:85:85:f2:a2: 07:e6:d2:82:1f:51:48:d2:57:b2:4b:81:55:5a:4f:2d:b2:11: cc:49:88:47:ff:5e:2a:49:95:7e:0b:61:ea:6d:51:c2:b8:ed: 25:06:55:8d:91:de:3e:77:20:4b:b7:bc:a0:bb:ba:80:32:2d: e5:57:50:0b:6f:7c:17:b3:0a:09:f6:58:90:a3:76:22:08:04: 63:61:21:83:96:6d:4c:54:38:6b:ac:46:f1:44:34:a5:7b:49: a3:30:88:c6:7f:ce:fd:5a:2b:c8:8b:71:36:b0:9e:41:d5:c6: 2c:54:66:44:54:59:da:c7:b8:59:8d:01:65:9e:24:fb:c8:a7: 09:8b:ae:50:6d:a1:af:e8:d3:4e:2d:d8:cb:8e:e5:70:f9:3c: e0:6a:89:00:1d:2e:44:41:82:26:d6:51:b2:df:f6:3c:f6:74: 6d:d4:6a:2f:02:3f:89:2e:c4:b3:9d:7e:5d:22:e1:64:c6:40: 6a:90:fc:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxMEQxMTAvBgNVBAUTKDcwQzhCREEyREU3ODk1OTUwNTM2NTk0QkFFQkYyNjI5 MEQ5QkEwNjUwHhcNMjYwMzAxMDMzMTI2WhcNMjYwMzA4MDMzMTI2WjAYMRYwFAYD VQQDDA02OWEzYjMwZi1iNTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XNBerJtUlUcbfL+tV5tx059ra/w3W2DHUAevhj8zGAeSpgeUYGBebvXdeol SUEMs0Rdg/0FbAYizDs5LAFL3onEcWN8v8w0njomIApJEVm7ZVqfTjOQ97bJ16hT cAqfiOPb60oQkiHxC9d72SNsXU7fJCnorUQsVUuVd6ZhGcXF5sAwVAbWGifMS4hK jFdw4wMcfHu7R2VtrStEEsHWhngwMyfrsnznasQOdHn9cX53vZ/h/bLkOlUR8a6B S2QbXh1zoaj5gpHHDMjp0RBmBmfrcc0oLaMtwEomOK0lBt4AdMVxbgbsmnq+jxsb CNreh7DsHE93ROcXz7PKLY7HSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD8yHm6U RHHscZ4YQAerC7RJ42lKMB8GA1UdIwQYMBaAFHDIvaLeeJWVBTZZS66/JikNm6Bl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDEwRC85RjcxMjYxNENE QjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxaVUZObGxMcnI4bUtRMmJv R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNaTlvdDU0bFpVRk5sbExycjhtS1EyYm9HVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDEwRC85RjcxMjYxNENEQjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxa VUZObGxMcnI4bUtRMmJvR1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAu4ksnRr72f8NZCE4WWlw10YRLnewYTIcZ69Z5R4VAmHCxMDPSIbCeEy/DwBm TlqiiY8KtcYmhpfDm77VtJB44jgVAuiFhfKiB+bSgh9RSNJXskuBVVpPLbIRzEmI R/9eKkmVfgth6m1RwrjtJQZVjZHePncgS7e8oLu6gDIt5VdQC298F7MKCfZYkKN2 IggEY2Ehg5ZtTFQ4a6xG8UQ0pXtJozCIxn/O/VoryItxNrCeQdXGLFRmRFRZ2se4 WY0BZZ4k+8inCYuuUG2hr+jTTi3Yy47lcPk84GqJAB0uREGCJtZRst/2PPZ0bdRq LwI/iS7Es51+XSLhZMZAapD8nA== -----END CERTIFICATE-----Generated at Sun Mar 1 23:06:39 2026 by rpki-client