$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft File: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft (raw, json) Hash identifier: x6W31jHGtDnu0c+TOmh0InT6cwULHFj43cujA/9cppw= Subject key identifier: 36:CD:98:24:CB:AE:90:04:E7:FD:32:64:D9:89:E2:CE:01:DE:80:9D Authority key identifier: E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 Certificate issuer: /CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft Manifest number: 0121 Signing time: Mon 02 Mar 2026 02:25:51 +0000 Manifest this update: Mon 02 Mar 2026 02:25:49 +0000 Manifest next update: Mon 09 Mar 2026 02:25:49 +0000 Files and hashes: 1: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl (hash: 7kKCprvBYjFDGLlZaFPzy7Fn04MCyz/Rmgz3ir9BgxE=) 2: 4D06CD2C667411EF8E723587C4F9AE02.roa (hash: zXaiTn1OPuqTOi1DnfJ2nxhGdbrJsBTMVyTGh2dj7aY=) 3: 4CA4BE8E667411EF8E723587C4F9AE02.roa (hash: Je69DOenUud2l/CtIOyINuqm56Y7r+pSuPgQPd3u0+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170DD8, serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Validity Not Before: Mar 2 02:25:49 2026 GMT Not After : Mar 9 02:25:49 2026 GMT Subject: CN=69a4f52e-3961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8a:fb:eb:11:50:7f:3f:fb:0b:a0:7a:7f:a0: 48:13:3d:25:33:75:e9:90:c6:ec:12:74:7a:dd:23: f5:bd:29:a3:8f:ac:7f:9d:44:e2:09:9c:68:b2:79: 96:a9:a6:51:57:c2:4d:6e:f8:c4:48:be:3a:45:72: ad:e1:98:90:b9:4e:d9:40:ac:60:3f:6d:dd:af:34: 34:dc:16:81:da:d8:db:5b:f5:4d:2c:50:8d:8e:d7: 72:cd:7e:ff:39:5c:65:02:45:63:06:37:b6:84:0b: 13:10:25:f3:bf:69:f0:71:a2:34:f7:9e:6e:ab:47: fb:f8:bd:ad:3b:a0:06:84:42:33:dc:3c:b5:be:9e: 90:cf:b1:5e:c6:4f:1b:91:2d:d6:07:29:08:0c:25: 84:17:44:67:ea:68:bf:7f:7d:21:1f:39:76:ea:c7: b4:72:e9:dc:68:c4:89:2f:dd:c9:f8:56:06:b3:7b: f9:2b:29:11:55:a3:33:50:3e:a6:9f:2d:6f:95:7b: 84:5b:df:37:cf:c4:f6:c1:08:1d:ea:da:fe:d9:20: 26:3c:89:1a:9d:8b:40:21:1b:fb:44:07:92:a9:1f: b8:bd:13:69:09:99:28:a7:c9:6f:81:7e:98:ea:f9: 1f:3b:0e:85:e5:af:86:14:e0:b4:01:23:88:17:4a: 93:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CD:98:24:CB:AE:90:04:E7:FD:32:64:D9:89:E2:CE:01:DE:80:9D X509v3 Authority Key Identifier: keyid:E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:72:ab:ec:4e:62:e5:3f:ce:05:f5:fc:83:09:b1:d5:2a:91: 71:ec:f7:18:fa:bc:26:40:66:b7:4b:3e:e1:b8:5c:3e:23:18: 6c:cc:39:be:7f:a1:c5:de:c3:70:9f:16:c8:b7:b5:37:9c:da: c3:61:5b:a0:21:2c:71:ea:7b:12:0c:97:81:07:fe:41:a1:a3: 9c:e0:fc:8f:a3:43:de:ba:87:e7:a3:78:a8:bc:ec:c3:c4:84: 04:be:db:8a:7d:d3:b8:c0:57:41:0c:91:98:db:5d:03:96:b1: 4f:72:2b:e0:f1:05:40:a6:f4:78:4f:4f:42:55:ac:bf:60:fa: 3c:69:3d:b1:d9:a6:1f:99:e6:82:96:72:bf:82:d0:bd:e5:e4: 15:65:3f:10:a2:3c:96:dc:c0:d7:7f:34:62:7e:28:e0:87:06: 35:fe:23:f4:14:16:f3:5d:87:90:fc:47:7e:7c:07:d7:71:60: 26:d0:52:cf:b9:f9:52:1a:78:f7:44:40:68:31:15:0f:be:c1: 89:74:f3:9f:6d:04:66:e9:e1:35:e1:8f:46:bd:72:1e:ab:d4: ed:09:0e:8f:41:6a:d7:3c:b0:b6:b1:27:37:f7:a7:5d:02:fe: 53:a6:87:d4:0f:61:ca:9f:c7:1e:10:ca:13:13:78:21:63:5c: 9f:2d:f4:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBERDgxMTAvBgNVBAUTKEU2QjU0RDAyN0NFMzQ5OEJGMzVFNEQwNjVCQzQ3OEE5 MzZDMTYxNjkwHhcNMjYwMzAyMDIyNTQ5WhcNMjYwMzA5MDIyNTQ5WjAYMRYwFAYD VQQDEw02OWE0ZjUyZS0zOTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyor76xFQfz/7C6B6f6BIEz0lM3XpkMbsEnR63SP1vSmjj6x/nUTiCZxosnmW qaZRV8JNbvjESL46RXKt4ZiQuU7ZQKxgP23drzQ03BaB2tjbW/VNLFCNjtdyzX7/ OVxlAkVjBje2hAsTECXzv2nwcaI0955uq0f7+L2tO6AGhEIz3Dy1vp6Qz7Fexk8b kS3WBykIDCWEF0Rn6mi/f30hHzl26se0cuncaMSJL93J+FYGs3v5KykRVaMzUD6m ny1vlXuEW983z8T2wQgd6tr+2SAmPIkanYtAIRv7RAeSqR+4vRNpCZkop8lvgX6Y 6vkfOw6F5a+GFOC0ASOIF0qTeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDbNmCTL rpAE5/0yZNmJ4s4B3oCdMB8GA1UdIwQYMBaAFOa1TQJ840mL815NBlvEeKk2wWFp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEREOC9BNjZBNzVFRTY1 QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZdnpYazBHVzhSNHFUYkJZ V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyVk5BbnpqU1l2elhrMEdXOFI0cVRiQllXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEREOC9BNjZBNzVFRTY1QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZ dnpYazBHVzhSNHFUYkJZV2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM3Kr7E5i5T/OBfX8gwmx1SqRcez3GPq8JkBmt0s+4bhcPiMYbMw5vn+hxd7D cJ8WyLe1N5zaw2FboCEscep7EgyXgQf+QaGjnOD8j6ND3rqH56N4qLzsw8SEBL7b in3TuMBXQQyRmNtdA5axT3Ir4PEFQKb0eE9PQlWsv2D6PGk9sdmmH5nmgpZyv4LQ veXkFWU/EKI8ltzA1380Yn4o4IcGNf4j9BQW812HkPxHfnwH13FgJtBSz7n5Uhp4 90RAaDEVD77BiXTzn20EZunhNeGPRr1yHqvU7QkOj0Fq1zywtrEnN/enXQL+U6aH 1A9hyp/HHhDKExN4IWNcny300w== -----END CERTIFICATE-----Generated at Mon Mar 2 15:30:27 2026 by rpki-client