$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft File: fd08hfmnH2JfzMEMqDHld3CbTz8.mft (raw, json) Hash identifier: PefWO1LRsXq24AyfDf7YxEr2y89B838qjDM2JujQql0= Subject key identifier: EF:2D:5B:B2:57:4C:83:8E:1C:E5:89:B0:2D:C0:24:54:E3:58:86:42 Authority key identifier: 7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F Certificate issuer: /CN=A9167B41/serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F Certificate serial: 037E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft Manifest number: 037A Signing time: Sun 01 Mar 2026 01:41:03 +0000 Manifest this update: Sun 01 Mar 2026 01:41:03 +0000 Manifest next update: Sun 08 Mar 2026 01:41:03 +0000 Files and hashes: 1: fd08hfmnH2JfzMEMqDHld3CbTz8.crl (hash: KhEjaTgLicfJvoI7Kqw/JZG68bi1qlQ/ZPVdm/+7ALw=) 2: D24B4D42DF3E11EC83CCFE1EC4F9AE02.roa (hash: Cq6mdfvGMSMUVVy722vXaVlEzZ5zjpH7LRI1e0MUF1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.crl rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 894 (0x37e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B41, serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F Validity Not Before: Mar 1 01:41:03 2026 GMT Not After : Mar 8 01:41:03 2026 GMT Subject: CN=69a3992f-ef59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:91:ec:06:d8:ec:1e:d2:fa:8b:9a:5d:59:85: 12:ea:d9:f1:2f:d2:7f:b5:17:ad:8c:42:69:04:b6: ce:e2:e7:99:d4:49:44:a7:29:9c:c4:57:82:dc:df: fd:e7:22:be:3a:57:b5:c5:dd:5e:87:75:8a:93:e2: fe:4a:bc:4f:29:41:41:2b:8f:b2:09:06:8b:11:54: af:9a:6d:57:14:43:50:81:cf:bd:b6:ac:51:96:7c: 7c:8a:6c:b4:b1:a4:44:b2:37:80:cc:15:c3:96:83: c7:9f:ba:1d:94:48:ea:d7:51:00:9f:ea:e7:82:b7: 5f:23:36:21:b1:a4:6a:a3:ce:67:b3:c0:42:08:0a: e5:f2:1c:7e:75:6d:a4:6f:4e:6a:6e:4a:f9:9c:25: 4b:ed:31:d3:d4:3d:3f:48:57:7a:1a:13:22:b1:be: ea:0a:1f:b2:c8:fb:05:2e:bc:63:e9:3a:0d:2d:5c: ce:fd:68:9b:c4:fe:5a:63:45:40:dd:5e:54:bb:37: ef:9b:6c:ba:e6:1b:aa:f9:38:86:9c:db:89:53:01: b0:41:28:9c:e9:ea:c1:f7:a7:2f:13:0b:ff:2e:d2: 93:94:5b:ad:21:4d:82:f7:7e:52:a7:25:cd:da:a4: 8a:5a:23:11:7f:03:e7:92:94:0a:54:8b:f8:a2:56: 4a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:2D:5B:B2:57:4C:83:8E:1C:E5:89:B0:2D:C0:24:54:E3:58:86:42 X509v3 Authority Key Identifier: keyid:7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:c3:b4:47:16:78:fa:fd:f4:eb:a1:72:c9:03:5b:85:0f:50: 7a:a8:1e:0d:44:ac:4c:c2:43:b1:6b:e4:7e:da:78:92:f8:12: 18:4b:bc:86:e6:c7:55:91:b5:c0:cc:42:0f:c9:f8:e9:c2:d7: f8:a4:7b:c5:51:b0:e4:74:40:5c:23:2e:b4:e4:93:76:d7:78: a6:d6:71:85:a3:ee:46:da:a4:c0:aa:f3:32:14:bf:43:47:fc: db:17:01:39:79:04:45:5c:00:9d:32:bb:a8:3e:55:a1:a1:16: 21:f4:89:13:65:72:6f:e9:d4:57:e0:ff:2f:ed:6c:bc:d1:00: 05:31:af:79:57:ad:3a:ae:b2:bb:8c:a7:b7:2d:df:f8:ef:10: c1:81:3b:02:71:c9:80:72:0c:5a:6c:bc:ca:86:a9:f0:17:20: 2e:75:66:fe:4d:bc:3c:82:a4:be:3b:57:17:a3:52:c8:3f:e6: 49:5c:05:d5:f9:5f:51:01:ea:12:bd:c1:6e:e3:64:a5:f4:a7: 27:c8:d3:0d:31:5d:f1:66:de:9e:94:8a:44:ec:99:91:96:7f: a5:65:f3:69:9d:fb:c8:e5:39:b6:91:14:3f:f5:7a:3c:b1:0c: 44:d1:51:45:5a:9e:12:91:4a:1b:e0:e2:12:f9:5d:8f:10:f3: 1c:27:d4:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCNDExMTAvBgNVBAUTKDdEREQzQzg1RjlBNzFGNjI1RkNDQzEwQ0E4MzFFNTc3 NzA5QjRGM0YwHhcNMjYwMzAxMDE0MTAzWhcNMjYwMzA4MDE0MTAzWjAYMRYwFAYD VQQDDA02OWEzOTkyZi1lZjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5HsBtjsHtL6i5pdWYUS6tnxL9J/tRetjEJpBLbO4ueZ1ElEpymcxFeC3N/9 5yK+Ole1xd1eh3WKk+L+SrxPKUFBK4+yCQaLEVSvmm1XFENQgc+9tqxRlnx8imy0 saREsjeAzBXDloPHn7odlEjq11EAn+rngrdfIzYhsaRqo85ns8BCCArl8hx+dW2k b05qbkr5nCVL7THT1D0/SFd6GhMisb7qCh+yyPsFLrxj6ToNLVzO/WibxP5aY0VA 3V5Uuzfvm2y65huq+TiGnNuJUwGwQSic6erB96cvEwv/LtKTlFutIU2C935SpyXN 2qSKWiMRfwPnkpQKVIv4olZKBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO8tW7JX TIOOHOWJsC3AJFTjWIZCMB8GA1UdIwQYMBaAFH3dPIX5px9iX8zBDKgx5Xdwm08/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I0MS9FNzkwRjlBQURG MzgxMUVDQkM4QzlBN0ZDNEY5QUUwMi9mZDA4aGZtbkgySmZ6TUVNcURIbGQzQ2JU ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkMDhoZm1uSDJKZnpNRU1xREhsZDNDYlR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I0MS9FNzkwRjlBQURGMzgxMUVDQkM4QzlBN0ZDNEY5QUUwMi9mZDA4aGZtbkgy SmZ6TUVNcURIbGQzQ2JUejgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt8O0RxZ4+v3066FyyQNbhQ9QeqgeDUSsTMJDsWvkftp4kvgSGEu8hubHVZG1 wMxCD8n46cLX+KR7xVGw5HRAXCMutOSTdtd4ptZxhaPuRtqkwKrzMhS/Q0f82xcB OXkERVwAnTK7qD5VoaEWIfSJE2Vyb+nUV+D/L+1svNEABTGveVetOq6yu4ynty3f +O8QwYE7AnHJgHIMWmy8yoap8BcgLnVm/k28PIKkvjtXF6NSyD/mSVwF1flfUQHq Er3BbuNkpfSnJ8jTDTFd8WbenpSKROyZkZZ/pWXzaZ37yOU5tpEUP/V6PLEMRNFR RVqeEpFKG+DiEvldjxDzHCfU2g== -----END CERTIFICATE-----Generated at Mon Mar 2 00:10:42 2026 by rpki-client