$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft File: PWRH1yl0gylOzsuFOl5QCTXRuNc.mft (raw, json) Hash identifier: gGTVVr9VnBWbBt5vEGehG3HxYOW4ymgDt7hal0I0FCg= Subject key identifier: 0E:DA:36:6E:5C:CE:6E:04:95:AD:0A:3B:9E:4F:9C:5A:AF:50:52:AC Authority key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 Certificate issuer: /CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Certificate serial: 050A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft Manifest number: 04DF Signing time: Sun 01 Mar 2026 00:29:14 +0000 Manifest this update: Sun 01 Mar 2026 00:29:13 +0000 Manifest next update: Sun 08 Mar 2026 00:29:13 +0000 Files and hashes: 1: PWRH1yl0gylOzsuFOl5QCTXRuNc.crl (hash: 9bdz+dzeCRw7qAlgTTRIpnqiL1pjI7M1X4dJOphwEO0=) 2: 5997A6A624E011EDAEC0E529C4F9AE02.roa (hash: DglOnctZsnFzJCXMRSndRgYSIkLarJ77C0ejQIgQLBM=) 3: 793803867DEA11EC9FC67D66C4F9AE02.roa (hash: fxlGpo9xAUOf3UYgTG1xtt1SpRtI0ljxp7G5F8gz8xA=) 4: 27992F96832811EFA1BAAC4FC4F9AE02.roa (hash: pSLWcghaVRlLU7v/YYl5tTl7agEgUXiBGkvKTn/KR5U=) 5: 18611004B42A11EC9BD3DE42C4F9AE02.roa (hash: 84+QJzh114v5O25L38OLpUWSajipc73bsGxtt5zlunc=) 6: 2CE5BE065BDA11ECAA855355C4F9AE02.roa (hash: hsOJ+o40SKeUqBC3hONPzrlCvaiPlCX0QFr5TMEZluA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 00:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1290 (0x50a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170E11, serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Validity Not Before: Mar 1 00:29:13 2026 GMT Not After : Mar 8 00:29:13 2026 GMT Subject: CN=69a38859-91a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:00:9e:ec:c7:2b:ca:9a:77:17:80:29:c1:5c: fb:5f:d6:e1:0f:71:da:3a:a7:32:e6:ae:0a:27:a5: 9e:33:a7:db:22:36:f6:d7:34:1b:6d:df:68:78:3f: 7a:03:ff:c6:30:a1:c0:f9:2e:b5:26:4b:83:4e:5c: bd:cd:c1:1c:e2:d6:4f:6e:c8:c4:76:8b:84:a3:0a: 77:66:14:22:ca:8c:fa:2a:91:ed:ed:a1:25:84:35: 69:c9:47:4a:d8:3b:7c:56:69:b7:1b:b4:d9:3e:ad: c3:b7:14:80:c1:b2:b2:1f:f0:86:f4:b3:6f:12:b6: a8:96:54:ed:e2:35:78:0e:9a:fd:78:b8:71:c7:95: 4a:be:ee:58:ce:4f:dc:a4:e4:3f:d0:67:70:e9:7a: fb:b1:2d:07:bc:d1:31:42:41:f9:c3:60:17:5b:a9: 48:08:e8:77:73:63:e9:9f:01:6b:4c:97:59:6b:76: 2d:34:b3:74:8b:0c:a2:9c:cc:6c:ad:24:3b:36:25: e2:46:10:41:54:fd:11:04:d7:44:30:0f:e9:d1:d7: d3:50:d0:fc:56:43:a9:5d:7f:fb:13:c7:67:c9:54: 76:67:fa:9a:d4:5c:e7:9f:e1:aa:11:e9:72:5d:b7: 67:e6:2b:a9:89:a3:57:7b:a1:eb:39:d6:9c:9c:ad: 00:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DA:36:6E:5C:CE:6E:04:95:AD:0A:3B:9E:4F:9C:5A:AF:50:52:AC X509v3 Authority Key Identifier: keyid:3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:84:d9:26:e0:61:39:fa:55:be:c4:ea:ab:18:83:9a:30:ae: 49:5c:69:77:f2:d7:49:66:e1:ff:ae:34:d3:1c:80:6b:c4:f9: 7a:d3:09:e2:42:18:b8:6e:c8:db:ef:8a:af:d8:7d:ad:71:df: 3c:ed:e0:21:97:1b:9e:8e:a2:57:48:0f:09:e1:06:fb:02:cb: 56:1a:3a:18:d5:9e:55:1b:3d:b8:ec:ee:19:4e:3b:a8:68:af: 81:6e:7c:05:69:21:8c:14:5e:eb:b8:7d:58:57:4b:64:47:7d: 39:3e:b7:3f:37:0a:a1:2d:88:21:be:47:8b:56:b1:0f:bd:f5: aa:6d:ed:54:9f:39:d5:1a:65:a0:60:0c:96:f9:82:e4:d7:72: 3c:e6:34:d1:08:12:73:3a:7d:69:89:75:75:60:bc:05:66:f5: d3:b4:85:f5:80:51:cf:45:ed:29:f2:7b:81:f2:7e:7c:56:91: 57:ed:2e:09:86:9d:b1:0a:cc:1a:22:bd:ef:50:db:a2:46:4a: 61:52:09:b5:c9:a6:ad:aa:c8:b7:69:df:41:c1:8f:1c:0f:8c: 20:9b:85:f1:d3:12:43:fb:45:3d:a0:e7:1d:10:e1:a9:82:de: 12:b6:c6:ac:44:5b:84:a4:4d:dc:be:88:7e:90:60:e9:c0:62: 71:cd:92:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFMTExMTAvBgNVBAUTKDNENjQ0N0Q3Mjk3NDgzMjk0RUNFQ0I4NTNBNUU1MDA5 MzVEMUI4RDcwHhcNMjYwMzAxMDAyOTEzWhcNMjYwMzA4MDAyOTEzWjAYMRYwFAYD VQQDDA02OWEzODg1OS05MWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wCe7Mcrypp3F4ApwVz7X9bhD3HaOqcy5q4KJ6WeM6fbIjb21zQbbd9oeD96 A//GMKHA+S61JkuDTly9zcEc4tZPbsjEdouEowp3ZhQiyoz6KpHt7aElhDVpyUdK 2Dt8Vmm3G7TZPq3DtxSAwbKyH/CG9LNvEraollTt4jV4Dpr9eLhxx5VKvu5Yzk/c pOQ/0Gdw6Xr7sS0HvNExQkH5w2AXW6lICOh3c2PpnwFrTJdZa3YtNLN0iwyinMxs rSQ7NiXiRhBBVP0RBNdEMA/p0dfTUND8VkOpXX/7E8dnyVR2Z/qa1Fznn+GqEely Xbdn5iupiaNXe6HrOdacnK0AzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA7aNm5c zm4Ela0KO55PnFqvUFKsMB8GA1UdIwQYMBaAFD1kR9cpdIMpTs7LhTpeUAk10bjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEUxMS9EMDYwQzlCMjVC RDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5bE96c3VGT2w1UUNUWFJ1 TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BXUkgxeWwwZ3lsT3pzdUZPbDVRQ1RYUnVOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEUxMS9EMDYwQzlCMjVCRDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5 bE96c3VGT2w1UUNUWFJ1TmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJoTZJuBhOfpVvsTqqxiDmjCuSVxpd/LXSWbh/6400xyAa8T5etMJ4kIYuG7I 2++Kr9h9rXHfPO3gIZcbno6iV0gPCeEG+wLLVho6GNWeVRs9uOzuGU47qGivgW58 BWkhjBRe67h9WFdLZEd9OT63PzcKoS2IIb5Hi1axD731qm3tVJ851RploGAMlvmC 5NdyPOY00QgSczp9aYl1dWC8BWb107SF9YBRz0XtKfJ7gfJ+fFaRV+0uCYadsQrM GiK971DbokZKYVIJtcmmrarIt2nfQcGPHA+MIJuF8dMSQ/tFPaDnHRDhqYLeErbG rERbhKRN3L6IfpBg6cBicc2Scg== -----END CERTIFICATE-----Generated at Sun Mar 1 21:07:38 2026 by rpki-client