$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json) Hash identifier: 9J/47RggjPp2LZadBnqEuk505dk1xJ8WzVgON8kVfks= Subject key identifier: 80:D5:45:AF:A4:20:29:D2:DE:45:E8:E2:9A:7A:C4:DB:A7:D9:AB:EB Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 0AA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft Manifest number: 1A4F Signing time: Mon 02 Mar 2026 00:54:49 +0000 Manifest this update: Mon 02 Mar 2026 00:54:47 +0000 Manifest next update: Mon 09 Mar 2026 00:54:47 +0000 Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: zG1gBfjvmRv4Sgw9TWzD2fFOpam4yFnaq4d8j5meqDY=) 2: 339E038C223B11EF8750653DC4F9AE02.roa (hash: WglSFimwBIxRaonVvtON24BGZwGg55rZ2VzaZUYH4UA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2720 (0xaa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Validity Not Before: Mar 2 00:54:47 2026 GMT Not After : Mar 9 00:54:47 2026 GMT Subject: CN=69a4dfd8-3d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:0f:11:4b:fd:82:ae:62:8e:67:06:10:4f: 47:c3:64:15:9f:6c:58:db:fc:28:5a:27:33:49:77: 4d:8a:fc:88:ac:c7:9d:c7:f6:e3:07:28:96:49:e7: 47:a7:3f:99:ea:e9:93:df:2c:05:47:5c:ee:b4:59: 77:d1:c9:58:4b:01:05:69:bf:4b:11:ca:d8:1e:2e: 18:b3:ce:b1:b4:5b:b7:14:e0:28:bc:50:09:f3:f4: 60:5c:73:b3:6a:c6:e7:51:08:5b:16:10:31:e0:92: b5:48:22:51:33:c0:44:71:c0:f8:92:c2:dd:b0:51: 5c:e8:b7:3e:a1:6c:cc:5c:ca:c7:a5:98:51:68:51: 7a:0b:76:d9:7f:34:9f:b9:49:db:05:99:27:72:18: ac:f2:b5:4f:a3:3a:48:5b:08:17:04:86:e7:3f:34: 4e:bc:94:9b:15:b7:55:b7:a4:29:0e:d1:88:5f:33: d4:0b:0f:e4:ef:71:9b:7d:be:26:42:c7:8f:0f:d9: ea:20:6c:f4:8f:86:3d:cc:15:ed:4c:5d:dc:01:ca: 9d:ed:db:09:65:d4:ae:52:56:23:2b:f3:6b:e6:ef: c5:09:3f:93:55:68:f0:ed:8a:bb:33:9e:7a:c2:d1: 45:1f:41:c5:e1:70:13:5e:1b:18:e7:01:53:59:b3: 82:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D5:45:AF:A4:20:29:D2:DE:45:E8:E2:9A:7A:C4:DB:A7:D9:AB:EB X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:c7:47:0c:ce:8c:9a:49:95:31:13:b1:6c:14:25:f2:2a:17: ff:82:64:ec:56:fc:01:b8:9c:eb:0d:0e:35:2a:82:9b:0e:92: 8e:6e:a4:87:d6:1c:cc:3b:14:49:49:a6:fb:89:cd:f1:ea:8a: eb:d3:27:06:45:87:5f:29:d6:c1:e7:75:5c:5d:3b:48:44:0c: 9a:43:a1:ca:99:44:ed:65:43:0e:45:e5:50:46:c4:38:2e:f7: d1:bb:07:4b:53:48:a6:6a:f7:3d:92:c9:93:64:83:57:0b:10: b9:2e:5a:d6:f9:b5:33:2d:3b:03:70:53:05:7b:11:0a:2e:34: a9:3c:30:13:f6:91:d3:9b:a2:0e:86:eb:e6:34:52:78:88:fa: 84:d1:dd:60:df:18:6f:d7:84:59:c2:93:8a:c0:54:2a:a8:99: 36:e3:ea:9a:2e:e1:8f:31:88:e1:5b:d1:2f:12:de:2b:9f:ef: 11:70:46:dc:5a:52:0f:5d:6a:64:2e:0f:4e:0b:f8:c3:5c:ce: af:cc:76:f6:aa:c8:c7:4d:81:a4:12:88:03:0e:56:72:1b:71: d6:9a:22:ff:b0:2c:18:fd:70:81:ce:4a:c1:cf:c9:91:93:2c: a9:d7:1f:eb:a1:83:de:4c:6e:0b:66:40:96:bb:d9:7b:db:3a: 55:a6:e4:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjYwMzAyMDA1NDQ3WhcNMjYwMzA5MDA1NDQ3WjAYMRYwFAYD VQQDEw02OWE0ZGZkOC0zZDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgoPEUv9gq5ijmcGEE9Hw2QVn2xY2/woWiczSXdNivyIrMedx/bjByiWSedH pz+Z6umT3ywFR1zutFl30clYSwEFab9LEcrYHi4Ys86xtFu3FOAovFAJ8/RgXHOz asbnUQhbFhAx4JK1SCJRM8BEccD4ksLdsFFc6Lc+oWzMXMrHpZhRaFF6C3bZfzSf uUnbBZknchis8rVPozpIWwgXBIbnPzROvJSbFbdVt6QpDtGIXzPUCw/k73Gbfb4m QsePD9nqIGz0j4Y9zBXtTF3cAcqd7dsJZdSuUlYjK/Nr5u/FCT+TVWjw7Yq7M556 wtFFH0HF4XATXhsY5wFTWbOCJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIDVRa+k ICnS3kXo4pp6xNun2avrMB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYx aVh6Z0hvMUZjUjJsRGM5V1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAcdHDM6MmkmVMROxbBQl8ioX/4Jk7Fb8Abic6w0ONSqCmw6Sjm6kh9YczDsU SUmm+4nN8eqK69MnBkWHXynWwed1XF07SEQMmkOhyplE7WVDDkXlUEbEOC730bsH S1NIpmr3PZLJk2SDVwsQuS5a1vm1My07A3BTBXsRCi40qTwwE/aR05uiDobr5jRS eIj6hNHdYN8Yb9eEWcKTisBUKqiZNuPqmi7hjzGI4VvRLxLeK5/vEXBG3FpSD11q ZC4PTgv4w1zOr8x29qrIx02BpBKIAw5Wchtx1poi/7AsGP1wgc5Kwc/JkZMsqdcf 66GD3kxuC2ZAlrvZe9s6Vabk3w== -----END CERTIFICATE-----Generated at Mon Mar 2 09:22:12 2026 by rpki-client