$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft File: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft (raw, json) Hash identifier: 71rrhw4cquWKSqvXpMG3WJp0GYUb4DU2HMX2ypjZw28= Subject key identifier: 7B:EE:92:6A:B3:B3:0E:B7:F8:24:08:E1:A3:67:F4:A4:DC:8D:33:30 Authority key identifier: D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57 Certificate issuer: /CN=A9170F11/serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft Manifest number: FC Signing time: Mon 02 Mar 2026 13:50:57 +0000 Manifest this update: Mon 02 Mar 2026 13:50:56 +0000 Manifest next update: Mon 09 Mar 2026 13:50:56 +0000 Files and hashes: 1: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl (hash: vknFIEWOchLXCcra3+vfj6RYrNwilYPLkPei6U37Jp8=) 2: EB2858349B4B11EF86A11C85C4F9AE02.roa (hash: V6hcLW3DIWJr5GsqXhQQoqs6tXkMxQGHQdAMhmhtdMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170F11, serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557 Validity Not Before: Mar 2 13:50:56 2026 GMT Not After : Mar 9 13:50:56 2026 GMT Subject: CN=69a595c1-8d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bf:d7:50:89:cf:c5:8f:ee:1f:0c:16:b3:a5: 13:25:37:4d:e3:c7:cf:b6:42:06:6c:e5:4d:cf:73: bf:00:70:4f:3b:69:d2:86:36:bd:76:e5:fe:77:22: 0f:f8:b7:a4:57:a3:7a:be:22:6d:b1:97:45:fb:80: 9c:40:45:f1:28:e5:db:99:4d:16:76:93:af:82:b7: d2:8c:91:d7:a4:5c:47:96:29:10:3c:96:b3:9b:93: a3:48:64:e9:7b:6c:37:c6:62:06:e3:37:b2:38:b9: b7:ee:4e:a4:38:33:16:eb:55:03:04:2d:f5:b1:e2: 4d:63:98:71:6f:2f:4b:27:bb:83:8a:4a:c9:d9:32: e0:82:66:bb:3d:2a:50:a0:be:12:b0:1c:b7:cc:28: fc:b3:e1:4a:e9:d9:e4:df:89:3c:9e:76:db:3f:0d: ab:ab:ad:6d:f9:eb:4c:62:c0:63:a2:21:86:88:6b: 44:1a:43:ff:cb:69:36:8b:3e:e3:82:c8:08:2d:50: 7b:f7:be:aa:59:30:52:75:0f:a6:23:81:28:09:f9: c2:37:98:9b:98:db:56:e4:61:25:2b:bd:8f:65:6a: 5e:5c:4e:9d:ce:2f:66:59:b6:f9:97:6b:38:f3:8a: 15:b6:f8:09:40:ca:f6:9c:e0:86:26:5d:89:ee:0b: 1d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:EE:92:6A:B3:B3:0E:B7:F8:24:08:E1:A3:67:F4:A4:DC:8D:33:30 X509v3 Authority Key Identifier: keyid:D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:0b:07:79:92:39:da:df:c2:4e:25:e1:3b:b4:ac:78:83:eb: 48:2e:21:8d:ab:95:9d:5a:80:7a:9d:68:a1:cc:83:ca:f5:0c: 87:fe:13:af:64:b8:f9:43:e3:ef:7d:90:ce:ba:b0:6f:f6:d8: d9:67:4b:5d:85:a7:37:71:f0:45:f0:33:57:90:00:fb:89:19: 37:cf:88:cc:b7:e0:95:e7:df:22:9e:dd:1e:02:0b:e3:94:f7: 22:9c:e7:1e:18:fb:9b:d3:13:14:97:c7:c4:88:15:53:5c:d7: 44:1f:82:aa:bc:27:7d:e9:de:48:39:f1:a1:75:8c:22:67:26: 63:e6:b1:85:9c:87:19:e2:70:27:ce:ae:f0:ff:c9:d3:0b:c8: 81:b3:76:c3:62:e5:fd:52:44:ad:5d:ec:0b:df:8c:80:a1:95: 9a:69:31:84:04:01:78:b3:6c:48:0f:f8:79:34:02:01:d9:ef: a1:81:fd:bc:28:b9:67:18:30:0d:2d:cf:3f:79:cc:70:c2:aa: 40:b9:9e:03:c2:c3:67:cf:09:99:14:89:9c:32:5c:5b:0f:8f: 5d:20:ac:88:6a:26:60:54:82:dd:ae:30:bf:9b:00:fa:fc:da: 35:8e:12:82:b1:24:8a:4f:6f:37:56:47:ab:a7:76:69:32:5f: 41:70:1e:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBGMTExMTAvBgNVBAUTKEQ0Njk2NEY5RjM3MzFGMkY2M0U2NzAwOEM5MUU1OUM3 RENDNzg1NTcwHhcNMjYwMzAyMTM1MDU2WhcNMjYwMzA5MTM1MDU2WjAYMRYwFAYD VQQDEw02OWE1OTVjMS04ZDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApr/XUInPxY/uHwwWs6UTJTdN48fPtkIGbOVNz3O/AHBPO2nShja9duX+dyIP +LekV6N6viJtsZdF+4CcQEXxKOXbmU0WdpOvgrfSjJHXpFxHlikQPJazm5OjSGTp e2w3xmIG4zeyOLm37k6kODMW61UDBC31seJNY5hxby9LJ7uDikrJ2TLggma7PSpQ oL4SsBy3zCj8s+FK6dnk34k8nnbbPw2rq61t+etMYsBjoiGGiGtEGkP/y2k2iz7j gsgILVB7976qWTBSdQ+mI4EoCfnCN5ibmNtW5GElK72PZWpeXE6dzi9mWbb5l2s4 84oVtvgJQMr2nOCGJl2J7gsdRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHvukmqz sw63+CQI4aNn9KTcjTMwMB8GA1UdIwQYMBaAFNRpZPnzcx8vY+ZwCMkeWcfcx4VX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEYxMS9FOTI2RTkxMjlB N0MxMUVGODQ5NTBEMzNDNEY5QUUwMi8xR2xrLWZOekh5OWo1bkFJeVI1Wng5ekho VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFHbGstZk56SHk5ajVuQUl5UjVaeDl6SGhWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEYxMS9FOTI2RTkxMjlBN0MxMUVGODQ5NTBEMzNDNEY5QUUwMi8xR2xrLWZOekh5 OWo1bkFJeVI1Wng5ekhoVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAewsHeZI52t/CTiXhO7SseIPrSC4hjauVnVqAep1oocyDyvUMh/4Tr2S4+UPj 732Qzrqwb/bY2WdLXYWnN3HwRfAzV5AA+4kZN8+IzLfgleffIp7dHgIL45T3Ipzn Hhj7m9MTFJfHxIgVU1zXRB+CqrwnfeneSDnxoXWMImcmY+axhZyHGeJwJ86u8P/J 0wvIgbN2w2Ll/VJErV3sC9+MgKGVmmkxhAQBeLNsSA/4eTQCAdnvoYH9vCi5Zxgw DS3PP3nMcMKqQLmeA8LDZ88JmRSJnDJcWw+PXSCsiGomYFSC3a4wv5sA+vzaNY4S grEkik9vN1ZHq6d2aTJfQXAe0Q== -----END CERTIFICATE-----Generated at Mon Mar 2 15:57:38 2026 by rpki-client