$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft File: hEvW0alyz9K2C4TeDLY-XVSvqM8.mft (raw, json) Hash identifier: XN0+EnOnPt+w0jO20yr1aoWHAEATaeUhD0uBB+fn0X0= Subject key identifier: 17:E4:BC:2B:BC:DE:EE:26:26:9A:E7:F4:3D:17:FB:30:F7:FB:18:16 Authority key identifier: 84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF Certificate issuer: /CN=A9161CEF/serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft Manifest number: 0C0C Signing time: Sun 01 Mar 2026 23:24:55 +0000 Manifest this update: Sun 01 Mar 2026 23:24:54 +0000 Manifest next update: Sun 08 Mar 2026 23:24:54 +0000 Files and hashes: 1: hEvW0alyz9K2C4TeDLY-XVSvqM8.crl (hash: YiUKBqRX+7N2WwFUxLqMVSlQxu9nt2PFOOTpERY8DG8=) 2: 42B2A584790C11F0BFDABE73C4F9AE02.roa (hash: d07BUh1ehjR2H6atZT4gZxx1nTwyrrMun9HGnJk0rnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161CEF, serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF Validity Not Before: Mar 1 23:24:54 2026 GMT Not After : Mar 8 23:24:54 2026 GMT Subject: CN=69a4cac7-f814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d3:d0:0d:e7:04:55:5d:cb:ba:e1:59:65:8e: bd:7a:01:fd:59:1c:6a:47:88:b8:3c:63:48:8d:b7: 29:5a:12:02:50:4a:c0:73:6d:8e:a4:7e:0c:64:63: 4b:8d:22:58:c5:0c:24:cb:b3:c5:48:fc:2b:6f:9a: a1:b2:49:15:f4:a5:b9:63:40:be:71:7e:2c:a8:83: 92:f7:a0:c3:1c:38:41:fd:00:3c:ec:cc:7b:f7:2a: d7:51:91:e2:5a:fd:fa:7c:26:e9:db:5b:8f:1e:17: ef:89:58:3f:91:5c:aa:4c:64:49:97:ac:3a:f9:a9: 36:af:0a:95:fe:67:65:fa:5b:87:3e:ec:b8:0c:56: 21:f3:be:e9:22:40:02:85:ea:29:f2:ab:ec:5e:3e: 86:e1:d6:27:c6:ac:ea:5c:7b:96:6b:f2:5c:92:7c: 7e:17:d7:00:29:7a:e6:bb:13:8c:e2:39:9d:f6:f8: 6b:95:00:89:61:c7:0a:aa:87:94:c9:53:31:af:0a: f4:65:07:4b:a3:20:28:e6:c6:e3:dd:91:d4:a1:37: 91:24:56:56:6e:2f:68:4c:0f:60:bf:48:82:d3:ba: 77:b6:6f:7f:ff:3e:1a:17:60:90:7f:87:a8:15:2e: fe:a0:ff:29:d3:b7:72:60:05:47:af:2e:b4:54:09: 09:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E4:BC:2B:BC:DE:EE:26:26:9A:E7:F4:3D:17:FB:30:F7:FB:18:16 X509v3 Authority Key Identifier: keyid:84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:fc:92:1e:94:6c:19:40:d3:74:43:18:16:ad:9a:ef:82:59: 4d:57:6c:43:69:eb:69:a2:2b:05:ad:fc:e6:ec:af:34:41:00: d3:3b:70:e8:e6:af:eb:49:5e:f4:f1:9b:be:41:cd:58:4a:ca: e0:46:e4:7b:1b:88:6b:0d:64:aa:ed:6d:3b:c4:30:35:f9:f1: 80:36:a8:49:eb:86:2b:67:53:e9:d0:94:52:d7:08:ac:fb:ed: d6:64:ff:23:aa:4d:3d:81:06:3c:3d:29:ff:1d:33:0d:ff:82: a7:ec:bb:51:61:4b:be:58:a1:4d:7f:a7:36:1e:a1:2c:da:b5: 01:19:dd:b1:dd:55:4d:37:65:75:45:ad:0c:c4:cd:86:55:3b: 6d:6d:c8:63:37:89:23:a8:3b:0c:84:7b:2f:1b:47:4f:cf:27: 9d:1d:fc:17:a6:e6:77:ee:46:33:b9:57:bf:3a:16:e5:91:5b: 34:be:16:6b:54:dc:7a:31:09:99:dd:c8:f5:31:2e:a2:fc:b6: 9e:99:da:12:4b:ab:78:15:19:a5:3b:43:7f:66:09:76:37:e8: df:07:e5:5b:a4:a2:22:b5:b0:93:ad:75:d5:a9:b7:f5:ce:91: ae:5f:73:73:93:4a:63:65:95:ab:76:d1:59:2c:da:ba:c9:90: 9b:e3:35:29 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUNFRjExMC8GA1UEBRMoODQ0QkQ2RDFBOTcyQ0ZEMkI2MEI4NERFMENCNjNFNUQ1 NEFGQThDRjAeFw0yNjAzMDEyMzI0NTRaFw0yNjAzMDgyMzI0NTRaMBgxFjAUBgNV BAMTDTY5YTRjYWM3LWY4MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZ09AN5wRVXcu64Vlljr16Af1ZHGpHiLg8Y0iNtylaEgJQSsBzbY6kfgxkY0uN IljFDCTLs8VI/CtvmqGySRX0pbljQL5xfiyog5L3oMMcOEH9ADzszHv3KtdRkeJa /fp8JunbW48eF++JWD+RXKpMZEmXrDr5qTavCpX+Z2X6W4c+7LgMViHzvukiQAKF 6inyq+xePobh1ifGrOpce5Zr8lySfH4X1wApeua7E4ziOZ32+GuVAIlhxwqqh5TJ UzGvCvRlB0ujICjmxuPdkdShN5EkVlZuL2hMD2C/SILTune2b3//PhoXYJB/h6gV Lv6g/ynTt3JgBUevLrRUCQlVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUF+S8K7ze 7iYmmuf0PRf7MPf7GBYwHwYDVR0jBBgwFoAUhEvW0alyz9K2C4TeDLY+XVSvqM8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQ0VGLzlDRTUxMjU4NDU5 MTExRUFCRTZCOTMxQkM0RjlBRTAyL2hFdlcwYWx5ejlLMkM0VGVETFktWFZTdnFN OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaEV2VzBhbHl6OUsyQzRUZURMWS1YVlN2cU04LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx Q0VGLzlDRTUxMjU4NDU5MTExRUFCRTZCOTMxQkM0RjlBRTAyL2hFdlcwYWx5ejlL MkM0VGVETFktWFZTdnFNOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA1/JIelGwZQNN0QxgWrZrvgllNV2xDaetpoisFrfzm7K80QQDTO3Do5q/rSV70 8Zu+Qc1YSsrgRuR7G4hrDWSq7W07xDA1+fGANqhJ64YrZ1Pp0JRS1wis++3WZP8j qk09gQY8PSn/HTMN/4Kn7LtRYUu+WKFNf6c2HqEs2rUBGd2x3VVNN2V1Ra0MxM2G VTttbchjN4kjqDsMhHsvG0dPzyedHfwXpuZ37kYzuVe/OhblkVs0vhZrVNx6MQmZ 3cj1MS6i/LaemdoSS6t4FRmlO0N/Zgl2N+jfB+VbpKIitbCTrXXVqbf1zpGuX3Nz k0pjZZWrdtFZLNq6yZCb4zUp -----END CERTIFICATE-----Generated at Mon Mar 2 12:02:10 2026 by rpki-client