$ rpki-client -vvf rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft File: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft (raw, json) Hash identifier: n97EdYWh30yK4m3t5yGU6Z8fAh7QxrmmhJ4SEq9JO7k= Subject key identifier: 48:D7:D8:2A:7B:57:0F:3F:32:C6:5A:33:EE:C2:3F:A3:D8:B6:7E:95 Authority key identifier: D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89 Certificate issuer: /CN=A917039B/serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89 Certificate serial: 03CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft Manifest number: 03C3 Signing time: Mon 02 Mar 2026 00:23:56 +0000 Manifest this update: Mon 02 Mar 2026 00:23:53 +0000 Manifest next update: Mon 09 Mar 2026 00:23:53 +0000 Files and hashes: 1: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl (hash: ANtWPRygsVCJ4SMlzIerd1H9dPViH+05qHl0XJoo91s=) 2: A1CB8D62C13411ECA5838429C4F9AE02.roa (hash: fD9tz1Cxj0LH2YQosk7eVSKaAn/WfIdEtafahpCOyrI=) 3: A26E4F16C13411ECA5838429C4F9AE02.roa (hash: iCw79y4BWdxeg4SkApinNCBIqylm75Jz7mdMCrDh0eI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 971 (0x3cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917039B, serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89 Validity Not Before: Mar 2 00:23:53 2026 GMT Not After : Mar 9 00:23:53 2026 GMT Subject: CN=69a4d89b-c2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:28:f2:c4:88:87:b9:0e:de:46:fb:f7:20:3c: 98:d3:6a:2a:3a:22:6f:74:bd:33:25:b5:6d:69:68: b9:0a:3e:4a:b6:50:a2:18:34:8d:bb:19:c5:0c:75: fd:d4:cf:bf:f6:1f:ac:dc:dd:bf:c9:71:f4:dd:c1: a1:01:fe:93:b4:d7:b1:6d:4c:bb:69:88:c5:6d:f1: 82:19:b9:66:1e:8a:81:b1:b1:31:cc:f9:4c:15:35: 40:1c:f9:f0:a8:79:57:e0:c8:b6:9d:46:ee:d8:4d: 0a:74:e9:f7:f1:e9:78:cd:a3:98:3a:04:92:72:da: d8:ce:1c:7a:ca:ed:b3:b1:8b:31:40:23:ec:d5:c1: 41:ea:f1:e5:f9:42:ae:1f:1e:1a:9c:90:89:57:a5: 7a:76:26:ec:52:f7:a0:90:18:49:24:52:2a:3a:0b: af:90:0f:79:8f:f1:61:ad:4e:bb:51:df:9b:8a:73: 4a:e9:ae:fe:3e:62:02:33:70:dd:e1:71:55:c3:e8: d3:72:e5:c6:fa:65:22:9d:21:84:cc:5d:2e:96:97: 31:93:4c:ad:31:a2:79:03:e4:aa:09:61:04:d4:88: ca:5a:98:8f:68:b9:fd:8b:58:a9:26:b5:cf:b8:10: 2e:f9:4e:71:72:a6:26:ab:cd:34:5a:9d:f4:f7:d5: a4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D7:D8:2A:7B:57:0F:3F:32:C6:5A:33:EE:C2:3F:A3:D8:B6:7E:95 X509v3 Authority Key Identifier: keyid:D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:96:49:61:af:94:d4:4c:f0:a1:b3:8c:1d:5a:e9:bf:9d:6c: 3c:5a:a1:b5:00:5a:22:e8:d6:5f:62:28:13:ef:ed:f4:a6:e1: df:42:d7:38:e5:67:e4:9d:12:13:80:e3:9d:7a:7c:b1:57:ea: fa:c2:52:ec:46:da:5f:8e:bf:d8:6c:e0:f2:d6:7b:4a:dc:3a: 29:f0:38:df:3d:a7:e9:09:aa:cd:6b:20:e8:2f:a1:ab:f7:3b: b7:c8:8f:ba:94:c3:17:78:17:9c:10:0c:d5:d2:97:95:17:66: 98:3d:ea:2d:12:f0:93:e8:98:05:29:03:c3:17:2a:52:5e:1e: b7:11:62:37:84:21:c9:42:66:d7:f8:63:09:af:2d:d8:70:f1: 79:3c:06:af:8f:1f:40:77:33:dd:15:18:d1:f8:e1:f2:22:2d: 4b:56:4b:3e:bc:fa:47:17:5b:94:25:cf:3e:17:35:26:96:d0: 43:73:63:9c:36:a9:18:c9:65:61:15:ff:08:fb:1d:45:02:4a: 55:d0:11:68:02:a0:7a:4b:2a:9f:55:42:23:10:51:4c:a1:59: ad:08:c3:c0:eb:6d:52:17:c3:c0:a6:76:46:10:07:89:6c:ff: 03:59:09:88:79:42:b6:eb:e1:54:48:00:24:7e:f7:db:dd:58: 42:32:b8:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzOUIxMTAvBgNVBAUTKEQyMTAyMkMwMEYwREJCRTU4QTk5QTFFNjczRDNBRTFD NURGRENCODkwHhcNMjYwMzAyMDAyMzUzWhcNMjYwMzA5MDAyMzUzWjAYMRYwFAYD VQQDEw02OWE0ZDg5Yi1jMmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApijyxIiHuQ7eRvv3IDyY02oqOiJvdL0zJbVtaWi5Cj5KtlCiGDSNuxnFDHX9 1M+/9h+s3N2/yXH03cGhAf6TtNexbUy7aYjFbfGCGblmHoqBsbExzPlMFTVAHPnw qHlX4Mi2nUbu2E0KdOn38el4zaOYOgSSctrYzhx6yu2zsYsxQCPs1cFB6vHl+UKu Hx4anJCJV6V6dibsUvegkBhJJFIqOguvkA95j/FhrU67Ud+binNK6a7+PmICM3Dd 4XFVw+jTcuXG+mUinSGEzF0ulpcxk0ytMaJ5A+SqCWEE1IjKWpiPaLn9i1ipJrXP uBAu+U5xcqYmq800Wp3099WkUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEjX2Cp7 Vw8/MsZaM+7CP6PYtn6VMB8GA1UdIwQYMBaAFNIQIsAPDbvlipmh5nPTrhxd/cuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDM5Qi85OUY1NDQ3OEMx MzExMUVDOTZCNUUwMjVDNEY5QUUwMi8waEFpd0E4TnUtV0ttYUhtYzlPdUhGMzl5 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBoQWl3QThOdS1XS21hSG1jOU91SEYzOXk0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDM5Qi85OUY1NDQ3OEMxMzExMUVDOTZCNUUwMjVDNEY5QUUwMi8waEFpd0E4TnUt V0ttYUhtYzlPdUhGMzl5NGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1pZJYa+U1EzwobOMHVrpv51sPFqhtQBaIujWX2IoE+/t9Kbh30LXOOVn5J0S E4DjnXp8sVfq+sJS7EbaX46/2Gzg8tZ7Stw6KfA43z2n6QmqzWsg6C+hq/c7t8iP upTDF3gXnBAM1dKXlRdmmD3qLRLwk+iYBSkDwxcqUl4etxFiN4QhyUJm1/hjCa8t 2HDxeTwGr48fQHcz3RUY0fjh8iItS1ZLPrz6RxdblCXPPhc1JpbQQ3NjnDapGMll YRX/CPsdRQJKVdARaAKgeksqn1VCIxBRTKFZrQjDwOttUhfDwKZ2RhAHiWz/A1kJ iHlCtuvhVEgAJH73291YQjK4+g== -----END CERTIFICATE-----Generated at Mon Mar 2 14:38:44 2026 by rpki-client