$ rpki-client -vvf rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft File: rGOF7VY-H9amaz5LUQ3MaTDNSww.mft (raw, json) Hash identifier: nh6tIb+/YPKP7FZHRt6puyxiBDIrTaYG6RHrn0DSOMQ= Subject key identifier: 3C:DC:13:A3:60:10:23:39:A3:BA:D8:87:8F:19:39:0F:EF:9A:79:A6 Authority key identifier: AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C Certificate issuer: /CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Certificate serial: 0256 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft Manifest number: 0234 Signing time: Mon 02 Mar 2026 02:12:57 +0000 Manifest this update: Mon 02 Mar 2026 02:12:55 +0000 Manifest next update: Mon 09 Mar 2026 02:12:55 +0000 Files and hashes: 1: rGOF7VY-H9amaz5LUQ3MaTDNSww.crl (hash: rx2NfkG1v9BhfdeflVnF5not2SehTEj8sqM5WhbgCCY=) 2: 42EC5F02D2B711EDAF6DC017C4F9AE02.roa (hash: pkC+D8p7TNYzPBnocLkHTaXfdgtNXvj2i4jRd1Gl3NY=) 3: 096A1DB6D2BA11ED8E06CC13C4F9AE02.roa (hash: xjJh+3SCJ/mrp3JYArjRvZVJMzUf7HfzNFOkj330dzY=) 4: D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa (hash: s27t8mzFE7pAO+YQ8b7HEZWkopZAKcG8DRX9E1bRajo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 598 (0x256) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160D0A, serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Validity Not Before: Mar 2 02:12:55 2026 GMT Not After : Mar 9 02:12:55 2026 GMT Subject: CN=69a4f228-bd8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a1:9d:05:e4:63:0d:7d:2f:15:92:b7:3d:19: 91:95:93:f9:0b:af:c7:64:5b:9a:93:af:0e:f2:16: 29:ec:34:5d:5b:d6:8a:03:fe:81:41:96:8f:30:6f: 05:18:8d:fc:95:ae:9b:bf:d8:8d:87:52:90:50:27: b1:4c:1f:12:db:4f:e3:d5:ad:e5:51:23:4f:c4:12: 84:4e:49:2e:e3:76:76:5a:be:9f:f4:13:32:f9:fa: 0f:cc:4d:7f:35:40:e5:d9:14:81:dc:1b:0a:03:ad: 0d:c5:1e:e6:13:3c:e7:73:b7:80:c5:19:29:3e:65: a3:d7:63:fb:72:a5:3d:af:54:b5:35:0c:2f:7b:f4: b1:48:30:da:6a:34:a7:73:d6:cb:8e:f4:24:a5:b3: 73:65:20:e4:91:28:8d:fc:c7:0b:9f:a8:74:b0:df: 87:85:ec:3f:c5:0b:eb:f0:94:81:a9:6d:78:d6:76: 2d:28:0f:24:02:a2:77:94:78:e2:63:73:e5:df:79: 54:d2:98:38:18:0c:24:9b:f1:f5:98:d7:a4:ea:db: c3:6e:7f:63:20:cf:2a:fe:e0:e9:9e:56:e2:af:b8: b8:bb:fb:4e:0c:47:3a:e1:08:96:0f:6d:f6:29:71: 19:e6:f7:92:42:1a:69:6d:1c:9b:67:f2:b5:1c:2c: 96:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:DC:13:A3:60:10:23:39:A3:BA:D8:87:8F:19:39:0F:EF:9A:79:A6 X509v3 Authority Key Identifier: keyid:AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9e:85:40:91:50:e1:5e:01:7c:62:f0:5a:9c:04:19:71:61: 01:1f:00:97:19:30:5b:a0:24:25:97:5a:1f:03:c6:e7:12:2e: 7a:02:a4:be:49:7c:d9:f8:6b:86:97:f6:e6:09:bc:0f:6a:e3: cf:43:35:06:58:ad:49:2b:0d:34:31:c7:48:fc:c7:c7:82:4b: 00:46:d0:93:8d:5c:4c:51:9e:11:d5:6a:3f:d9:fc:6b:86:6c: 5f:83:57:7f:d1:59:d4:7c:38:cf:e8:db:46:1f:cc:5d:c6:61: a0:25:2c:43:3a:f7:c3:66:1b:f1:74:ba:1e:cb:e6:5b:93:ba: 94:a6:d6:19:ff:1f:6f:20:7e:c1:9a:3c:bf:29:33:82:91:66: 2f:6b:c9:f1:d3:7b:97:03:66:07:8d:93:72:a3:a9:c0:8c:24: 2e:fc:8f:5e:6c:9d:0d:57:78:1b:8b:16:31:83:72:67:cd:65: 57:6d:4e:a1:76:e6:dc:97:ca:9a:b8:d2:14:cc:c9:03:f0:fd: 47:06:b6:9f:9d:1f:23:d0:c7:ca:87:47:c9:70:ea:ac:2a:74: 5b:6e:f0:96:c5:44:76:61:f2:6f:39:16:80:7b:c5:f2:40:ab: 5c:7e:8f:d7:fe:69:45:6b:04:7f:0f:83:c9:fa:1f:1e:cc:e6: 7b:fa:1b:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEMEExMTAvBgNVBAUTKEFDNjM4NUVENTYzRTFGRDZBNjZCM0U0QjUxMERDQzY5 MzBDRDRCMEMwHhcNMjYwMzAyMDIxMjU1WhcNMjYwMzA5MDIxMjU1WjAYMRYwFAYD VQQDEw02OWE0ZjIyOC1iZDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqGdBeRjDX0vFZK3PRmRlZP5C6/HZFuak68O8hYp7DRdW9aKA/6BQZaPMG8F GI38la6bv9iNh1KQUCexTB8S20/j1a3lUSNPxBKETkku43Z2Wr6f9BMy+foPzE1/ NUDl2RSB3BsKA60NxR7mEzznc7eAxRkpPmWj12P7cqU9r1S1NQwve/SxSDDaajSn c9bLjvQkpbNzZSDkkSiN/McLn6h0sN+Hhew/xQvr8JSBqW141nYtKA8kAqJ3lHji Y3Pl33lU0pg4GAwkm/H1mNek6tvDbn9jIM8q/uDpnlbir7i4u/tODEc64QiWD232 KXEZ5veSQhppbRybZ/K1HCyWJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDzcE6Ng ECM5o7rYh48ZOQ/vmnmmMB8GA1UdIwQYMBaAFKxjhe1WPh/Wpms+S1ENzGkwzUsM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEQwQS81NjRBMTM1RUQy MjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5YW1hejVMVVEzTWFURE5T d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHT0Y3VlktSDlhbWF6NUxVUTNNYVRETlN3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEQwQS81NjRBMTM1RUQyMjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5 YW1hejVMVVEzTWFURE5Td3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf56FQJFQ4V4BfGLwWpwEGXFhAR8AlxkwW6AkJZdaHwPG5xIuegKkvkl82fhr hpf25gm8D2rjz0M1BlitSSsNNDHHSPzHx4JLAEbQk41cTFGeEdVqP9n8a4ZsX4NX f9FZ1Hw4z+jbRh/MXcZhoCUsQzr3w2Yb8XS6HsvmW5O6lKbWGf8fbyB+wZo8vykz gpFmL2vJ8dN7lwNmB42TcqOpwIwkLvyPXmydDVd4G4sWMYNyZ81lV21OoXbm3JfK mrjSFMzJA/D9Rwa2n50fI9DHyodHyXDqrCp0W27wlsVEdmHybzkWgHvF8kCrXH6P 1/5pRWsEfw+DyfofHszme/ob8w== -----END CERTIFICATE-----Generated at Mon Mar 2 16:47:58 2026 by rpki-client