$ rpki-client -vvf rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft File: p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft (raw, json) Hash identifier: 6wce5RY+Nu9UrWY8omJJUdyEsSourG5U/DRHJe8fFss= Subject key identifier: B9:73:99:56:C2:DC:58:C5:3E:9E:C3:F4:03:03:70:C0:53:29:AC:69 Authority key identifier: A7:F8:82:C0:AC:C8:F0:D8:F1:DB:36:1C:D4:0B:12:60:6B:0C:68:C6 Certificate issuer: /CN=A9165297/serialNumber=A7F882C0ACC8F0D8F1DB361CD40B12606B0C68C6 Certificate serial: 0E93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft Manifest number: 0E86 Signing time: Mon 02 Mar 2026 00:38:36 +0000 Manifest this update: Mon 02 Mar 2026 00:38:35 +0000 Manifest next update: Mon 09 Mar 2026 00:38:35 +0000 Files and hashes: 1: p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl (hash: vPVgatS4Auk7QncFhsHvePlzlzsr1CWJpbRDwdrJM4I=) 2: 457A00A8AF7A11E9AFF10782C4F9AE02.roa (hash: Arkrsyo5+ae+fzAV/8rJkRmaTl2oT1Ort1Y2T29kOdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3731 (0xe93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165297, serialNumber=A7F882C0ACC8F0D8F1DB361CD40B12606B0C68C6 Validity Not Before: Mar 2 00:38:35 2026 GMT Not After : Mar 9 00:38:35 2026 GMT Subject: CN=69a4dc0b-2dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3a:c7:10:47:67:b0:2d:e5:8b:99:3e:b2:e7: d9:58:c5:b1:67:d7:1c:8a:b9:b8:f9:a2:40:20:49: 06:ff:d4:87:f4:58:39:8c:8a:e9:83:96:d1:6b:34: 87:a0:54:31:71:b7:03:53:d8:93:ab:cf:18:a1:19: 38:50:83:1d:38:db:59:7a:6a:92:58:79:d3:7e:cf: a1:24:e8:47:aa:fd:3b:17:95:57:06:2c:50:95:5d: 8a:68:34:fa:1d:63:73:6d:80:7c:9c:7f:53:59:85: 6e:2c:88:29:26:97:00:4b:72:a6:01:f1:7c:ee:34: 58:5d:f2:7e:00:10:8c:3d:b2:4f:31:a7:e7:6c:b6: c6:3f:76:a1:2c:fd:ba:e0:d2:5c:69:62:57:f5:60: a6:ce:3e:bd:fc:71:94:44:c4:5f:ee:75:07:e7:f2: e9:b8:01:d8:e1:2a:7c:88:84:c0:ef:06:1b:99:eb: ed:6a:47:44:05:09:b6:c9:9a:01:a3:27:af:41:1d: 4a:fa:c9:cf:38:57:90:dc:ee:7b:e7:b0:81:90:bd: 70:5d:c6:3a:95:c6:6b:04:57:39:c4:26:e5:15:f4: f1:8f:4e:98:9b:da:d9:b5:5c:8a:49:34:b8:ca:dc: b0:54:ce:91:fb:d9:e8:63:21:8b:c6:e6:f8:b3:48: 42:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:73:99:56:C2:DC:58:C5:3E:9E:C3:F4:03:03:70:C0:53:29:AC:69 X509v3 Authority Key Identifier: keyid:A7:F8:82:C0:AC:C8:F0:D8:F1:DB:36:1C:D4:0B:12:60:6B:0C:68:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:df:1d:bc:07:e1:89:e8:9e:a5:2d:20:42:cb:d1:a3:b8:6d: b9:bf:be:72:2b:54:d4:27:82:d2:31:fd:bf:b8:2f:69:a3:2c: 93:e3:49:99:39:0b:24:f7:d9:0d:47:dd:0b:34:d1:e0:08:bf: d2:9a:c2:fb:bf:fe:c5:5a:dd:d8:f1:e7:be:d8:8b:1f:74:7c: 40:cf:9f:6b:cb:5e:b4:0f:38:2c:0a:23:ba:61:8f:35:19:c0: a8:ae:fc:5e:d0:4a:81:0f:60:89:80:0f:f0:6a:85:7c:2f:6b: d5:70:26:67:c3:b4:47:83:82:c3:30:61:04:6a:9c:ec:16:f8: 58:57:24:a0:65:f0:89:8a:3b:98:7c:f8:7e:10:ec:31:57:fd: 73:dc:20:ff:95:2b:44:e8:50:22:d3:19:0c:6b:92:3b:cc:6e: 1c:9d:b6:7f:e6:29:a4:0f:16:fd:d0:47:30:e7:80:41:9e:fa: c3:a6:f9:53:70:fc:f7:ed:4c:e8:3a:3f:e5:81:c4:68:ad:e4: 36:f3:9c:03:65:43:54:e1:5d:34:d4:f4:9c:34:fb:da:17:5d: 7e:22:47:4e:53:4e:5e:02:0b:4b:2f:e0:81:b4:dc:c3:f4:a6: aa:6f:4d:17:b5:a7:a9:9d:40:ce:c3:ce:34:49:89:3a:9b:f9: ba:e3:0e:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyOTcxMTAvBgNVBAUTKEE3Rjg4MkMwQUNDOEYwRDhGMURCMzYxQ0Q0MEIxMjYw NkIwQzY4QzYwHhcNMjYwMzAyMDAzODM1WhcNMjYwMzA5MDAzODM1WjAYMRYwFAYD VQQDEw02OWE0ZGMwYi0yZGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzrHEEdnsC3li5k+sufZWMWxZ9ccirm4+aJAIEkG/9SH9Fg5jIrpg5bRazSH oFQxcbcDU9iTq88YoRk4UIMdONtZemqSWHnTfs+hJOhHqv07F5VXBixQlV2KaDT6 HWNzbYB8nH9TWYVuLIgpJpcAS3KmAfF87jRYXfJ+ABCMPbJPMafnbLbGP3ahLP26 4NJcaWJX9WCmzj69/HGURMRf7nUH5/LpuAHY4Sp8iITA7wYbmevtakdEBQm2yZoB oyevQR1K+snPOFeQ3O5757CBkL1wXcY6lcZrBFc5xCblFfTxj06Ym9rZtVyKSTS4 ytywVM6R+9noYyGLxub4s0hCXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLlzmVbC 3FjFPp7D9AMDcMBTKaxpMB8GA1UdIwQYMBaAFKf4gsCsyPDY8ds2HNQLEmBrDGjG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTI5Ny80MzAxRkRCRUFG NkUxMUU5QTkyNTgwNjdDNEY5QUUwMi9wX2lDd0t6SThOangyelljMUFzU1lHc01h TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfaUN3S3pJOE5qeDJ6WWMxQXNTWUdzTWFNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTI5Ny80MzAxRkRCRUFGNkUxMUU5QTkyNTgwNjdDNEY5QUUwMi9wX2lDd0t6SThO angyelljMUFzU1lHc01hTVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOt8dvAfhieiepS0gQsvRo7htub++citU1CeC0jH9v7gvaaMsk+NJmTkLJPfZ DUfdCzTR4Ai/0prC+7/+xVrd2PHnvtiLH3R8QM+fa8tetA84LAojumGPNRnAqK78 XtBKgQ9giYAP8GqFfC9r1XAmZ8O0R4OCwzBhBGqc7Bb4WFckoGXwiYo7mHz4fhDs MVf9c9wg/5UrROhQItMZDGuSO8xuHJ22f+YppA8W/dBHMOeAQZ76w6b5U3D89+1M 6Do/5YHEaK3kNvOcA2VDVOFdNNT0nDT72hddfiJHTlNOXgILSy/ggbTcw/Smqm9N F7WnqZ1AzsPONEmJOpv5uuMOnQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:44:55 2026 by rpki-client