$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft File: cXp42D7DjxcRAnMoE5hEns3RBQA.mft (raw, json) Hash identifier: IpA8Z/yfHdgvLnQpobrWk6vrpRM7HEyhTKD2zDNA0Gg= Subject key identifier: 3A:D2:BA:FC:30:F8:0E:82:16:7E:EA:7A:D8:EC:54:F2:3E:5C:24:2C Authority key identifier: 71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 Certificate issuer: /CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500 Certificate serial: 06DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft Manifest number: 06CF Signing time: Sun 01 Mar 2026 23:58:05 +0000 Manifest this update: Sun 01 Mar 2026 23:58:04 +0000 Manifest next update: Sun 08 Mar 2026 23:58:04 +0000 Files and hashes: 1: cXp42D7DjxcRAnMoE5hEns3RBQA.crl (hash: hv9WN9Sv/bkhrNUY06EL1F/YeT5WA8SBB/nzz95wupo=) 2: B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa (hash: HmEJSmIlnqMRSQIFroiM2sK+BrSWqRLqcDK06fh9sgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1759 (0x6df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D20, serialNumber=717A78D83EC38F17110273281398449ECDD10500 Validity Not Before: Mar 1 23:58:04 2026 GMT Not After : Mar 8 23:58:04 2026 GMT Subject: CN=69a4d28d-563f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4b:67:c2:6a:67:f5:90:40:0e:4f:a4:fd:9b: 71:4b:fc:3b:b1:18:be:f3:71:86:46:80:a7:50:e5: be:25:bb:d7:2a:dc:f1:97:9c:24:81:8f:57:7a:8d: db:cb:13:a4:f9:1e:f4:49:62:62:8c:74:90:6d:39: cb:0f:c9:be:1a:03:73:5a:18:2a:75:22:1c:02:6b: 92:f3:68:d9:55:20:76:67:bb:29:5c:23:6e:09:05: 3e:50:12:f1:2d:5f:f6:63:7c:14:63:37:33:7f:8f: 8f:9d:7b:3c:e3:00:6c:45:c4:e1:e9:bc:34:5c:24: 02:07:b3:bd:b4:88:ee:0e:10:da:26:06:c4:8a:ba: fa:33:1b:1c:07:e8:13:76:70:01:f6:6e:df:19:0e: f2:7a:fa:d8:86:6b:83:e6:1d:53:ed:fb:df:12:60: 23:a4:45:d2:c9:33:0d:11:72:5a:80:03:91:c7:0d: 7e:24:1f:a3:0c:8b:17:74:98:7f:2a:be:15:56:a3: 01:ca:9c:d6:21:19:2e:d0:08:a0:67:c3:c6:3a:fa: c0:60:80:fd:6f:4a:90:7d:3a:b6:28:b3:ab:79:55: 51:18:43:ae:2e:95:09:c5:3f:11:0f:63:e2:6a:99: fc:09:21:af:2e:8b:da:bd:d3:50:c9:77:81:cb:41: 63:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D2:BA:FC:30:F8:0E:82:16:7E:EA:7A:D8:EC:54:F2:3E:5C:24:2C X509v3 Authority Key Identifier: keyid:71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:0d:17:87:24:a7:ac:27:32:90:62:69:bf:b0:13:f0:6e:32: 54:18:d8:a5:8c:0a:b4:8f:04:23:11:ce:8d:10:17:af:04:6e: 67:85:1c:fe:24:48:69:ad:1b:68:dd:f8:4b:26:d4:f9:7c:fa: 93:fa:d6:48:5f:34:4f:e3:0b:10:67:d3:b8:71:47:23:ad:49: 8b:e8:e2:5b:a2:49:94:f4:f1:4f:5b:36:68:a2:e6:20:7b:c5: 68:0f:37:32:92:4f:9d:11:ea:6d:cb:35:b2:16:57:f3:7c:ea: 3c:0b:ea:97:da:1b:80:8f:a7:dd:dd:ef:0b:3b:b2:7c:98:1e: 8b:eb:c7:50:07:5e:83:0f:94:10:07:b8:74:94:0f:b2:d1:a5: 2d:ae:38:0e:55:11:26:cf:3b:b2:b9:d1:4f:90:5e:6d:58:50: 93:44:30:fd:a7:6d:6d:f2:63:c1:91:34:e7:c4:53:84:40:ea: ac:b1:11:13:46:e6:65:c4:74:fc:08:2f:13:62:8e:24:de:ae: 60:74:da:39:7c:1c:96:e5:0a:d2:5e:5c:3c:a1:53:b0:c6:89: f8:dc:dd:df:57:44:be:65:0b:c9:37:03:7c:59:bf:ea:76:30: cd:61:20:1e:66:03:ae:1d:ca:e7:36:6d:31:99:8c:5f:ec:7e: a2:c6:74:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMjAxMTAvBgNVBAUTKDcxN0E3OEQ4M0VDMzhGMTcxMTAyNzMyODEzOTg0NDlF Q0REMTA1MDAwHhcNMjYwMzAxMjM1ODA0WhcNMjYwMzA4MjM1ODA0WjAYMRYwFAYD VQQDEw02OWE0ZDI4ZC01NjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0tnwmpn9ZBADk+k/ZtxS/w7sRi+83GGRoCnUOW+JbvXKtzxl5wkgY9Xeo3b yxOk+R70SWJijHSQbTnLD8m+GgNzWhgqdSIcAmuS82jZVSB2Z7spXCNuCQU+UBLx LV/2Y3wUYzczf4+PnXs84wBsRcTh6bw0XCQCB7O9tIjuDhDaJgbEirr6MxscB+gT dnAB9m7fGQ7yevrYhmuD5h1T7fvfEmAjpEXSyTMNEXJagAORxw1+JB+jDIsXdJh/ Kr4VVqMBypzWIRku0AigZ8PGOvrAYID9b0qQfTq2KLOreVVRGEOuLpUJxT8RD2Pi apn8CSGvLovavdNQyXeBy0FjqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDrSuvww +A6CFn7qetjsVPI+XCQsMB8GA1UdIwQYMBaAFHF6eNg+w48XEQJzKBOYRJ7N0QUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQyMC9DMEM2QUU1Qzkz NUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4Y1JBbk1vRTVoRW5zM1JC UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYcDQyRDdEanhjUkFuTW9FNWhFbnMzUkJRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQyMC9DMEM2QUU1QzkzNUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4 Y1JBbk1vRTVoRW5zM1JCUUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjw0XhySnrCcykGJpv7AT8G4yVBjYpYwKtI8EIxHOjRAXrwRuZ4Uc/iRIaa0b aN34SybU+Xz6k/rWSF80T+MLEGfTuHFHI61Ji+jiW6JJlPTxT1s2aKLmIHvFaA83 MpJPnRHqbcs1shZX83zqPAvql9obgI+n3d3vCzuyfJgei+vHUAdegw+UEAe4dJQP stGlLa44DlURJs87srnRT5BebVhQk0Qw/adtbfJjwZE058RThEDqrLERE0bmZcR0 /AgvE2KOJN6uYHTaOXwcluUK0l5cPKFTsMaJ+Nzd31dEvmULyTcDfFm/6nYwzWEg HmYDrh3K5zZtMZmMX+x+osZ0fg== -----END CERTIFICATE-----Generated at Mon Mar 2 04:02:01 2026 by rpki-client