$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft File: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft (raw, json) Hash identifier: 5y4c4ZNbb8iqsivVscJlUAZhQ5/6FJF7Q/bG3/4Z34k= Subject key identifier: F8:49:2D:39:E5:71:56:29:5A:8A:27:EF:D8:3B:50:16:CA:42:82:B2 Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA Certificate issuer: /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Certificate serial: 0EE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft Manifest number: 0EC0 Signing time: Mon 02 Mar 2026 02:37:30 +0000 Manifest this update: Mon 02 Mar 2026 02:37:29 +0000 Manifest next update: Mon 09 Mar 2026 02:37:29 +0000 Files and hashes: 1: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl (hash: GUvlrCt+tenR5N0IZ3X5QNA8PaTQjMm0/lm6SJqMIgg=) 2: AF573166309511EABE9B5934C4F9AE02.roa (hash: NS7wTc9RWVEjhe14UUGO+2LOxEkOLR1MToMGLE7e6ZM=) 3: C16E8E16256511EA98F3D465C4F9AE02.roa (hash: b6uLayPebg8p6MLu9qAwrsBNU9d+4r4KLNPM8snizt4=) 4: BBE075C6906911EF97FA0D58C4F9AE02.roa (hash: fxW0qCMKHp/bOTohRMniz3GJ3Xchjt8XUqA1xNmri5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3815 (0xee7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169ADA, serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Validity Not Before: Mar 2 02:37:29 2026 GMT Not After : Mar 9 02:37:29 2026 GMT Subject: CN=69a4f7ea-b95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:39:e5:61:57:ec:08:12:46:cb:46:e4:e7:a3: 00:c9:9d:26:c6:b6:df:ec:57:14:30:5c:03:53:43: 61:1a:99:bd:ec:a8:2f:7f:4c:eb:22:d8:41:0f:32: b1:ef:28:c8:d8:8d:d6:32:af:ce:da:c3:79:a4:91: cb:ca:ee:ab:a4:04:75:95:07:eb:e7:12:73:c8:b4: 1d:1f:86:fe:44:87:69:bd:11:92:e9:7a:8b:de:3a: e9:5c:dc:dc:29:6f:cd:e1:1c:2e:1b:3c:2f:4d:fa: e7:e0:a1:d8:ed:58:1b:11:ce:bc:25:29:47:a8:11: cd:fa:c3:db:d1:b4:93:6f:b8:42:76:ec:a5:4e:24: 94:db:47:0a:63:cf:15:d1:e4:d7:58:30:48:6e:41: a5:70:20:09:73:2e:b4:7a:7c:09:f4:86:e6:b7:59: 06:11:da:32:64:32:b8:2f:eb:ad:82:45:82:73:06: 17:cf:6f:c6:1b:1f:06:80:50:2f:4b:ee:ba:65:3f: 94:31:6c:73:77:29:3a:b0:50:96:70:a7:b6:48:a6: 0b:59:85:5d:11:e1:26:ae:0d:de:52:49:33:96:9f: 2a:f5:2a:e3:06:92:80:c3:d6:00:56:73:0b:a4:52: 97:0b:b3:64:6d:a1:d8:64:f0:32:8b:c6:01:bf:bc: 70:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:49:2D:39:E5:71:56:29:5A:8A:27:EF:D8:3B:50:16:CA:42:82:B2 X509v3 Authority Key Identifier: keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:6b:e8:f4:d4:58:4a:6c:b7:4f:ce:e3:ca:d2:16:7f:ef:42: 77:80:0f:de:16:30:12:46:9f:be:17:fd:f6:bb:cc:da:65:93: ee:75:e5:a8:e7:44:bc:a2:6e:04:e8:60:36:0e:09:2d:b8:f2: 2a:5e:f4:52:10:a6:a1:13:d2:3a:4c:ab:7d:33:81:99:fc:91: a2:7c:c2:38:30:32:11:56:37:ad:c9:d1:0d:77:7d:10:4d:7e: e1:21:19:48:4f:07:07:19:1f:7d:1e:b0:1f:e8:6a:09:44:b6: f0:6a:ef:ec:ff:6d:09:13:2c:92:14:c5:90:ed:9f:26:5c:fa: 72:8b:fb:30:0e:d0:af:03:d6:c9:3a:3a:20:20:7d:35:46:56: b7:f1:b2:af:5c:91:f8:83:62:fe:34:ee:dc:f6:16:d9:63:f1: 4c:16:12:54:fb:97:6b:98:c9:34:0c:6f:43:01:f5:92:a9:fa: 55:35:3c:54:93:46:45:86:07:1f:e0:e3:47:5a:36:3b:eb:6e: 00:19:59:6e:ae:57:c5:71:20:ea:4f:65:7c:ae:71:5f:80:cd: 5a:af:1e:81:25:77:27:03:c6:7f:57:f0:98:17:23:aa:b7:ca: 19:fc:15:ee:47:b9:76:b5:c4:02:35:1c:94:94:6c:59:33:e9: 8e:dc:f9:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBREExMTAvBgNVBAUTKEM0MTcxNUZFRjIwMDEzM0Q5MTIzMjUwRkJCNjUzMUU4 OEE0QTk5REEwHhcNMjYwMzAyMDIzNzI5WhcNMjYwMzA5MDIzNzI5WjAYMRYwFAYD VQQDEw02OWE0ZjdlYS1iOTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDnlYVfsCBJGy0bk56MAyZ0mxrbf7FcUMFwDU0NhGpm97Kgvf0zrIthBDzKx 7yjI2I3WMq/O2sN5pJHLyu6rpAR1lQfr5xJzyLQdH4b+RIdpvRGS6XqL3jrpXNzc KW/N4RwuGzwvTfrn4KHY7VgbEc68JSlHqBHN+sPb0bSTb7hCduylTiSU20cKY88V 0eTXWDBIbkGlcCAJcy60enwJ9Ibmt1kGEdoyZDK4L+utgkWCcwYXz2/GGx8GgFAv S+66ZT+UMWxzdyk6sFCWcKe2SKYLWYVdEeEmrg3eUkkzlp8q9SrjBpKAw9YAVnML pFKXC7NkbaHYZPAyi8YBv7xwrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPhJLTnl cVYpWoon79g7UBbKQoKyMB8GA1UdIwQYMBaAFMQXFf7yABM9kSMlD7tlMeiKSpna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUFEQS9GRjMyMDFDRUE2 QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6MlJJeVVQdTJVeDZJcEtt ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCY1ZfdklBRXoyUkl5VVB1MlV4NklwS21kby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUFEQS9GRjMyMDFDRUE2QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6 MlJJeVVQdTJVeDZJcEttZG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh2vo9NRYSmy3T87jytIWf+9Cd4AP3hYwEkafvhf99rvM2mWT7nXlqOdEvKJu BOhgNg4JLbjyKl70UhCmoRPSOkyrfTOBmfyRonzCODAyEVY3rcnRDXd9EE1+4SEZ SE8HBxkffR6wH+hqCUS28Grv7P9tCRMskhTFkO2fJlz6cov7MA7QrwPWyTo6ICB9 NUZWt/Gyr1yR+INi/jTu3PYW2WPxTBYSVPuXa5jJNAxvQwH1kqn6VTU8VJNGRYYH H+DjR1o2O+tuABlZbq5XxXEg6k9lfK5xX4DNWq8egSV3JwPGf1fwmBcjqrfKGfwV 7ke5drXEAjUclJRsWTPpjtz5+Q== -----END CERTIFICATE-----Generated at Mon Mar 2 07:42:07 2026 by rpki-client