$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft File: xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft (raw, json) Hash identifier: 0ezS5EpIsESH+CYtaVMxPZpO3jymin1EeuVq9ZYe3ig= Subject key identifier: 6F:71:22:D3:61:E2:99:74:DE:8E:65:B4:84:B3:33:FD:A9:ED:11:4C Authority key identifier: C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 Certificate issuer: /CN=A9161857/serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft Manifest number: 93 Signing time: Sun 01 Mar 2026 08:49:57 +0000 Manifest this update: Sun 01 Mar 2026 08:49:56 +0000 Manifest next update: Sun 08 Mar 2026 08:49:56 +0000 Files and hashes: 1: xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl (hash: g5Hzs+BANu88rSKR5vkToE/MbPZI7l65M9Q/oP3T1MM=) 2: 4660810C41DE11F083E3205EC4F9AE02.roa (hash: lmR9ugrjbQmDnUx1UBy+nG9XOBElNu6bjT8wakrFaOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Validity Not Before: Mar 1 08:49:56 2026 GMT Not After : Mar 8 08:49:56 2026 GMT Subject: CN=69a3fdb5-b8b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:36:78:51:63:9c:ee:22:89:09:31:4e:28:24: e8:45:9a:18:1d:a6:e8:cb:d7:ab:d2:80:02:99:bc: 4f:ed:24:ca:1a:46:d1:fa:9a:ae:1f:24:b4:f4:07: 00:a0:91:a2:e2:60:f7:c7:a6:b5:b4:03:db:e9:3a: ce:32:ca:e9:95:af:78:d6:41:ba:e9:0c:83:2e:e3: e8:02:4a:4d:88:9d:db:a3:bc:a9:a5:79:c4:ff:b4: e3:f6:14:45:2e:75:21:eb:6d:e7:93:4e:fe:d3:fc: 4c:c6:b3:42:7d:a4:80:9f:45:91:50:15:43:3b:c6: 2a:48:ba:32:03:97:84:47:30:81:10:4a:04:92:20: fe:9a:58:59:60:d7:f7:aa:f4:ba:fd:17:2f:a0:73: 62:d5:30:c1:b7:16:be:d6:ba:4d:c6:a4:ef:62:34: 0b:2b:7f:a8:3b:4e:58:46:2b:22:01:b8:bf:7f:60: 1d:04:d6:23:30:c6:93:3b:58:db:5f:53:14:e8:3d: 00:0a:80:ff:8c:c0:e8:b3:cb:7b:e3:25:3f:23:76: 66:e3:fb:67:a3:11:35:37:d2:68:6a:da:fb:09:65: fd:d5:83:5e:9f:9e:63:4d:44:45:94:33:e7:31:1b: d0:12:11:25:c1:19:d5:6f:40:63:54:fe:4d:16:c0: 9a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:71:22:D3:61:E2:99:74:DE:8E:65:B4:84:B3:33:FD:A9:ED:11:4C X509v3 Authority Key Identifier: keyid:C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:cb:8c:95:39:ff:fd:79:48:9b:15:b1:2e:92:13:b9:ed:01: 8c:8f:74:25:e5:2b:3f:44:7a:1c:55:2d:8f:7a:59:ed:6f:e7: 88:75:90:28:e4:75:a2:21:c2:7b:27:ee:03:43:05:12:e6:c6: 7e:b9:d1:0c:19:e6:f2:99:59:53:52:64:43:b8:fd:b3:14:c0: c9:9a:c7:21:bf:b3:dd:a2:dc:7b:73:96:14:59:52:5b:69:ae: b1:5a:51:5e:92:3b:27:50:b0:12:03:6f:78:ce:00:f2:67:e3: 94:6b:c9:d6:0f:88:cf:26:c5:3d:ad:f2:9c:f4:39:6b:60:41: 44:dd:d4:39:93:86:40:e8:3e:f1:46:00:e7:b6:f7:e8:d1:ac: 01:79:f0:f3:e5:8b:83:9a:12:d2:f6:49:13:c9:db:fd:69:ad: ad:3d:fa:34:c8:16:f1:23:ba:6d:df:fb:a3:47:40:fa:6e:f0: 8e:5e:94:b0:4a:5e:6b:64:38:f2:93:ea:9a:a5:66:10:84:b7: 93:56:e0:9d:87:f4:f4:0c:f6:7b:27:a7:c4:85:34:84:0f:be: a4:c5:49:66:89:3a:3d:a5:8c:8f:00:ac:34:79:0a:73:78:bc: a5:1e:4e:29:e5:ad:d5:4d:33:16:15:b9:d7:49:32:19:c1:f0: 52:b3:9a:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4NTcxMTAvBgNVBAUTKEM0MjZENDI2NDAwNjc2NTU1OTczREZFREU0RUIyNjQ0 QkVFRDI4NzMwHhcNMjYwMzAxMDg0OTU2WhcNMjYwMzA4MDg0OTU2WjAYMRYwFAYD VQQDEw02OWEzZmRiNS1iOGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDZ4UWOc7iKJCTFOKCToRZoYHaboy9er0oACmbxP7STKGkbR+pquHyS09AcA oJGi4mD3x6a1tAPb6TrOMsrpla941kG66QyDLuPoAkpNiJ3bo7yppXnE/7Tj9hRF LnUh623nk07+0/xMxrNCfaSAn0WRUBVDO8YqSLoyA5eERzCBEEoEkiD+mlhZYNf3 qvS6/RcvoHNi1TDBtxa+1rpNxqTvYjQLK3+oO05YRisiAbi/f2AdBNYjMMaTO1jb X1MU6D0ACoD/jMDos8t74yU/I3Zm4/tnoxE1N9Joatr7CWX91YNen55jTURFlDPn MRvQEhElwRnVb0BjVP5NFsCaAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG9xItNh 4pl03o5ltISzM/2p7RFMMB8GA1UdIwQYMBaAFMQm1CZABnZVWXPf7eTrJkS+7Shz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTg1Ny9DMUY3MzA3MjND OTgxMUYwQUYxMjRCMzhDNEY5QUUwMi94Q2JVSmtBR2RsVlpjOV90NU9zbVJMN3RL SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hDYlVKa0FHZGxWWmM5X3Q1T3NtUkw3dEtITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTg1Ny9DMUY3MzA3MjNDOTgxMUYwQUYxMjRCMzhDNEY5QUUwMi94Q2JVSmtBR2Rs VlpjOV90NU9zbVJMN3RLSE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0suMlTn//XlImxWxLpITue0BjI90JeUrP0R6HFUtj3pZ7W/niHWQKOR1oiHC eyfuA0MFEubGfrnRDBnm8plZU1JkQ7j9sxTAyZrHIb+z3aLce3OWFFlSW2musVpR XpI7J1CwEgNveM4A8mfjlGvJ1g+IzybFPa3ynPQ5a2BBRN3UOZOGQOg+8UYA57b3 6NGsAXnw8+WLg5oS0vZJE8nb/WmtrT36NMgW8SO6bd/7o0dA+m7wjl6UsEpea2Q4 8pPqmqVmEIS3k1bgnYf09Az2eyenxIU0hA++pMVJZok6PaWMjwCsNHkKc3i8pR5O KeWt1U0zFhW510kyGcHwUrOawA== -----END CERTIFICATE-----Generated at Sun Mar 1 23:15:41 2026 by rpki-client