$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft File: dCWq4W3bRko-K0ecekDJkCODa6A.mft (raw, json) Hash identifier: bmd8jMBPdJ8vOuPrPsue2xkF/ukXzmT2bzkZ+pg8o2I= Subject key identifier: 72:B2:C3:A6:F8:68:44:B7:8A:61:C6:99:41:58:32:F2:22:B3:B8:A2 Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0 Certificate issuer: /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0 Certificate serial: 0351 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft Manifest number: 0333 Signing time: Mon 02 Mar 2026 01:41:33 +0000 Manifest this update: Mon 02 Mar 2026 01:41:31 +0000 Manifest next update: Mon 09 Mar 2026 01:41:31 +0000 Files and hashes: 1: dCWq4W3bRko-K0ecekDJkCODa6A.crl (hash: 5hZfwBZsVpwBfCoW+GQZXeLwU9zi4cTjh1/1Q86yX6Q=) 2: 9BA94A4A0D8911ED999D4F3BC4F9AE02.roa (hash: SW2MBqcXl5xSEpQph30V999FQxKYuuhpPrLOGWRxvbE=) 3: A3C1A64E020811EF900CC60CC4F9AE02.roa (hash: cowXSRNOgJ9ObQh9KilsrcwC5u2xTRXMhEv+iz/pLWU=) 4: 1EA5984A0BE111ED9E3AA135C4F9AE02.roa (hash: UNxrnTL2FmFMqfTx/jpbHTzVSiNAq7+cipG/Kkdxbl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 849 (0x351) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163998, serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0 Validity Not Before: Mar 2 01:41:31 2026 GMT Not After : Mar 9 01:41:31 2026 GMT Subject: CN=69a4eacc-f118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:30:1a:53:e8:21:d3:be:e0:77:65:97:37:49: ad:d0:bc:c9:c8:f5:cd:fb:a6:17:24:34:1e:22:92: 95:76:59:96:93:6d:02:3f:46:1e:52:0a:2d:ff:7f: ad:25:68:ba:8a:17:d8:c5:10:66:30:93:db:ff:d8: 41:1b:89:dc:92:66:70:42:b7:12:55:c9:75:c1:5b: 5c:f0:40:60:7f:61:5c:60:c1:3e:cd:7d:e4:6e:2a: f2:78:53:61:b4:79:dc:4b:12:60:6d:06:24:d6:a4: b2:7c:1f:15:d3:3a:cb:5b:b3:df:8e:2f:17:2b:65: ae:b4:fd:ef:b9:92:54:77:2d:b6:82:69:94:55:b2: f5:3e:24:85:73:41:be:71:22:5c:ea:89:94:05:f2: 8e:7e:54:ed:4f:44:01:64:82:2b:0d:f9:3f:41:f4: c4:df:f1:4b:72:ff:e6:80:e1:b6:81:9e:12:db:d7: 49:f6:fa:7c:08:76:a3:29:6f:23:71:36:c9:ce:19: cc:7f:7e:dd:a8:31:4a:36:05:c5:58:10:54:1a:74: 4b:45:e0:51:24:2a:5a:c0:dd:7e:b7:9a:65:79:4b: 0b:35:27:09:10:ec:5f:37:05:cc:4d:58:e4:be:96: 54:5a:1a:42:f2:ee:a3:4b:79:af:74:58:76:01:e8: e9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B2:C3:A6:F8:68:44:B7:8A:61:C6:99:41:58:32:F2:22:B3:B8:A2 X509v3 Authority Key Identifier: keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:19:f1:ba:d3:cd:32:95:8e:4d:f6:ce:4f:22:f3:cb:73:53: 1a:22:e0:95:5e:cc:65:0e:4a:88:d2:9c:7d:88:17:7c:60:f7: 34:b9:9d:16:b9:ed:ca:8f:0b:30:d9:0e:ac:b0:4a:ed:a4:72: 67:95:0b:96:f4:03:aa:29:2c:57:39:fe:01:a5:1c:06:2a:bc: e6:ec:33:1c:51:b7:e9:cc:ae:c6:e4:81:01:b0:a6:a6:31:0c: a1:79:66:15:3e:43:b4:7a:11:e0:5f:6c:49:28:0b:50:42:8e: 11:ac:9e:8d:c8:09:40:9e:d5:29:0b:10:b4:c1:9f:d7:98:33: 68:75:9d:5b:ea:3a:cc:64:79:c4:99:ea:18:f4:45:4a:3e:f1: ad:6f:f4:f6:8d:98:bf:96:27:54:2f:da:53:b5:44:8d:04:4d: 5d:97:9e:fb:bd:f3:be:81:d0:af:7c:45:17:df:b7:53:7c:cc: bf:bb:53:dc:35:84:8e:17:cd:86:89:f6:8b:fd:a2:4d:61:97: d2:75:49:c2:e2:92:7b:80:40:36:fb:47:51:f8:68:f9:5b:d9: f1:09:cb:bd:f2:ab:7a:3b:1b:67:5c:9b:74:ad:33:0b:46:22: 3e:da:47:7e:a5:fa:e9:2a:d8:e8:38:5d:96:86:62:84:86:1c: 1d:fe:dd:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM5OTgxMTAvBgNVBAUTKDc0MjVBQUUxNkREQjQ2NEEzRTJCNDc5QzdBNDBDOTkw MjM4MzZCQTAwHhcNMjYwMzAyMDE0MTMxWhcNMjYwMzA5MDE0MTMxWjAYMRYwFAYD VQQDEw02OWE0ZWFjYy1mMTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiDAaU+gh077gd2WXN0mt0LzJyPXN+6YXJDQeIpKVdlmWk20CP0YeUgot/3+t JWi6ihfYxRBmMJPb/9hBG4nckmZwQrcSVcl1wVtc8EBgf2FcYME+zX3kbiryeFNh tHncSxJgbQYk1qSyfB8V0zrLW7Pfji8XK2WutP3vuZJUdy22gmmUVbL1PiSFc0G+ cSJc6omUBfKOflTtT0QBZIIrDfk/QfTE3/FLcv/mgOG2gZ4S29dJ9vp8CHajKW8j cTbJzhnMf37dqDFKNgXFWBBUGnRLReBRJCpawN1+t5pleUsLNScJEOxfNwXMTVjk vpZUWhpC8u6jS3mvdFh2AejpowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHKyw6b4 aES3imHGmUFYMvIis7iiMB8GA1UdIwQYMBaAFHQlquFt20ZKPitHnHpAyZAjg2ug MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zMENDMDg0QTA4 REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJrby1LMGVjZWtESmtDT0Rh NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RDV3E0VzNiUmtvLUswZWNla0RKa0NPRGE2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mzk5OC8zMENDMDg0QTA4REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJr by1LMGVjZWtESmtDT0RhNkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMhnxutPNMpWOTfbOTyLzy3NTGiLglV7MZQ5KiNKcfYgXfGD3NLmdFrntyo8L MNkOrLBK7aRyZ5ULlvQDqiksVzn+AaUcBiq85uwzHFG36cyuxuSBAbCmpjEMoXlm FT5DtHoR4F9sSSgLUEKOEayejcgJQJ7VKQsQtMGf15gzaHWdW+o6zGR5xJnqGPRF Sj7xrW/09o2Yv5YnVC/aU7VEjQRNXZee+73zvoHQr3xFF9+3U3zMv7tT3DWEjhfN hon2i/2iTWGX0nVJwuKSe4BANvtHUfho+VvZ8QnLvfKrejsbZ1ybdK0zC0YiPtpH fqX66SrY6DhdloZihIYcHf7dtQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:05:11 2026 by rpki-client