$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft File: nQdEbvmfPFfCnFgta3rKRzX05HA.mft (raw, json) Hash identifier: VYVWAYZM7f9cY7UXLBxZPNhnivdFMBQRl0+RbK3OXGQ= Subject key identifier: A8:DF:1E:6E:C1:2D:C0:7E:39:C3:58:10:DD:7D:36:E8:8C:73:FE:52 Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Certificate serial: 08C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft Manifest number: 088E Signing time: Sat 28 Feb 2026 21:08:46 +0000 Manifest this update: Sat 28 Feb 2026 21:08:45 +0000 Manifest next update: Sat 07 Mar 2026 21:08:45 +0000 Files and hashes: 1: nQdEbvmfPFfCnFgta3rKRzX05HA.crl (hash: jQhTxAobds93iC/5S6tH2jOa7Q2kHcOqZ9DqLB/Lc8M=) 2: F9EA1194F66911F08646E7846F6F56BC.roa (hash: XKT5i9+UeN10hSiU8sqVpmRCE1gCFePQyxpmqVtH5Zk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 21:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2249 (0x8c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917190F, serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Validity Not Before: Feb 28 21:08:45 2026 GMT Not After : Mar 7 21:08:45 2026 GMT Subject: CN=69a3595e-1958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:df:49:bf:0b:b8:06:9d:db:09:a7:b1:7e:7d: 67:ca:e6:a0:89:a6:6b:3b:13:fc:2f:71:1b:71:33: ed:27:62:c3:15:ea:8c:88:0a:13:a4:bf:e5:f3:27: 3e:5e:8f:d4:a0:ce:63:62:b0:77:39:92:d7:51:ae: c9:55:c4:77:30:3b:3e:95:34:cf:04:ce:57:a0:42: 2e:39:9e:3f:38:ed:e0:71:e8:96:63:4d:c9:23:65: 1b:79:35:03:2e:9d:75:3f:0e:cc:85:34:9f:39:c7: 3e:04:d6:63:ab:25:d1:9f:88:2f:15:c9:f8:8d:62: 19:46:96:1a:07:88:54:f8:d4:42:8c:ea:85:78:f6: 70:bd:67:c1:cf:b2:51:5b:ed:7f:ee:de:a5:a6:18: d7:43:29:0a:9a:be:6a:9d:37:cf:36:64:99:0c:87: 01:6c:01:8d:e8:7c:46:d3:1b:3c:11:08:44:6a:fb: d0:8f:d5:04:c2:89:9c:8a:06:e7:39:fc:30:ea:0e: 39:32:c8:44:aa:48:54:aa:7a:da:1d:a3:1e:6e:2d: a1:92:a6:5a:77:8c:9f:df:e4:12:c9:2e:33:f6:5f: ea:1d:e4:6e:ca:dd:12:71:bd:a8:51:da:64:5b:b2: ba:cf:f3:77:c0:bf:a8:86:6d:b3:2b:62:7e:ea:9d: 75:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DF:1E:6E:C1:2D:C0:7E:39:C3:58:10:DD:7D:36:E8:8C:73:FE:52 X509v3 Authority Key Identifier: keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:cd:a7:8d:76:1f:fe:2f:8d:3e:34:d2:be:d6:09:72:c0:75: c5:75:65:50:e6:55:cb:1c:71:57:3b:c3:10:bb:c9:8e:2c:eb: 1e:92:bc:be:38:45:8b:fc:1f:0b:8a:6e:d2:65:91:e1:50:57: c9:da:74:b1:f9:5b:64:5d:b3:70:0a:30:49:e9:cd:0b:94:50: d5:71:bf:85:a5:34:fe:c9:7d:c9:fc:8a:75:a3:3b:3b:98:b3: 4b:d7:24:26:78:14:31:26:44:19:62:75:26:12:e9:26:0f:c3: 84:19:c9:a9:55:50:84:c7:5b:c8:8f:b2:ac:d2:1a:5f:f0:0a: 16:f3:74:bc:bf:cb:dd:33:14:bc:30:b2:03:83:e4:d4:0e:3a: ee:4b:8a:c4:53:ab:26:74:6d:5d:9a:91:6c:ae:32:3f:bf:05: 51:13:ec:d9:3a:de:10:26:34:91:ca:30:03:3e:d2:4a:11:68: 7e:ac:3b:2d:5d:d8:65:8e:7f:b5:67:83:c6:48:97:73:54:7b: 11:72:48:c5:4e:66:65:7a:89:29:c5:71:57:39:ed:14:1f:5d: 5c:c2:e3:02:f4:56:e2:55:97:2c:d0:39:0c:6c:a5:32:d0:4a: a2:bd:e5:46:1d:ab:cc:fa:11:4a:f4:46:eb:78:65:00:b5:b7: 81:60:ae:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3 MzVGNEU0NzAwHhcNMjYwMjI4MjEwODQ1WhcNMjYwMzA3MjEwODQ1WjAYMRYwFAYD VQQDDA02OWEzNTk1ZS0xOTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs99Jvwu4Bp3bCaexfn1nyuagiaZrOxP8L3EbcTPtJ2LDFeqMiAoTpL/l8yc+ Xo/UoM5jYrB3OZLXUa7JVcR3MDs+lTTPBM5XoEIuOZ4/OO3gceiWY03JI2UbeTUD Lp11Pw7MhTSfOcc+BNZjqyXRn4gvFcn4jWIZRpYaB4hU+NRCjOqFePZwvWfBz7JR W+1/7t6lphjXQykKmr5qnTfPNmSZDIcBbAGN6HxG0xs8EQhEavvQj9UEwomcigbn Ofww6g45MshEqkhUqnraHaMebi2hkqZad4yf3+QSyS4z9l/qHeRuyt0Scb2oUdpk W7K6z/N3wL+ohm2zK2J+6p116wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKjfHm7B LcB+OcNYEN19NuiMc/5SMB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1 SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTkwRi9CM0NBNzZDMEZBMzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBG ZkNuRmd0YTNyS1J6WDA1SEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMs2njXYf/i+NPjTSvtYJcsB1xXVlUOZVyxxxVzvDELvJjizrHpK8vjhFi/wf C4pu0mWR4VBXydp0sflbZF2zcAowSenNC5RQ1XG/haU0/sl9yfyKdaM7O5izS9ck JngUMSZEGWJ1JhLpJg/DhBnJqVVQhMdbyI+yrNIaX/AKFvN0vL/L3TMUvDCyA4Pk 1A467kuKxFOrJnRtXZqRbK4yP78FURPs2TreECY0kcowAz7SShFofqw7LV3YZY5/ tWeDxkiXc1R7EXJIxU5mZXqJKcVxVzntFB9dXMLjAvRW4lWXLNA5DGylMtBKor3l Rh2rzPoRSvRG63hlALW3gWCuZA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:35:30 2026 by rpki-client