$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft File: 2z39hs6_6u06rxXeruaWUjR0aik.mft (raw, json) Hash identifier: X/1ALnSjcSK+HumQLuuWAgokAsO+0yGGTC+SsjBGofg= Subject key identifier: 17:55:2F:B8:7C:82:52:53:B8:09:64:B7:66:F1:B5:F5:B2:55:D5:F4 Authority key identifier: DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 Certificate issuer: /CN=A9171BF0/serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft Manifest number: F4 Signing time: Mon 02 Mar 2026 03:05:07 +0000 Manifest this update: Mon 02 Mar 2026 03:05:06 +0000 Manifest next update: Mon 09 Mar 2026 03:05:06 +0000 Files and hashes: 1: 2z39hs6_6u06rxXeruaWUjR0aik.crl (hash: APa03EWj/7tuCfk7w9gWpDjNv8SBRhHjHoKbTitHpuM=) 2: 12004368A41611EFA0D7CD42C4F9AE02.roa (hash: Mbaq1JxQwVcFP87z4eBI+1tbhFSk65AD4tx8mWL3NcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0, serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Validity Not Before: Mar 2 03:05:06 2026 GMT Not After : Mar 9 03:05:06 2026 GMT Subject: CN=69a4fe63-146f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:23:2e:6f:9c:84:2a:9b:aa:1f:e6:c4:c3:bb: 86:92:5a:ce:29:f8:71:f7:fe:45:76:02:f7:f2:07: 37:89:04:f3:33:2c:b5:2f:27:a2:9e:db:8e:5d:cd: ff:2d:c1:4f:c5:a8:9d:8a:fd:9b:47:8d:ba:c9:3e: 0d:f9:84:1c:71:f8:ef:1b:74:54:d1:7e:80:56:3f: 3e:a4:03:a5:ed:5f:5e:be:c4:fa:67:04:b7:08:d2: da:37:29:47:ea:2f:ca:54:06:f5:95:64:a5:09:7e: 22:22:57:b0:a7:78:0f:a3:63:22:94:a2:26:e1:5b: 75:69:dd:9e:18:15:c4:0d:48:dc:92:9d:8d:26:93: 99:3b:d5:6b:bf:04:bd:58:99:a4:ea:84:c1:7f:d5: 16:e9:fe:5c:7a:2d:20:03:14:b7:b5:bf:9c:3e:1c: 4f:67:6f:1f:85:bb:f0:20:dc:11:62:27:c0:7b:df: 3f:c3:90:73:46:7e:ee:de:f5:6c:89:30:34:d5:02: 0b:3c:82:b8:f8:3a:56:9e:7e:83:71:87:c9:32:69: 5a:d3:be:42:09:68:da:22:c6:cc:5e:b9:7d:e1:1e: f8:06:52:5e:9a:b0:c0:f4:04:d7:08:87:c0:32:27: 60:4e:e4:31:f1:ee:97:e9:ce:6f:36:14:39:92:96: 9c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:55:2F:B8:7C:82:52:53:B8:09:64:B7:66:F1:B5:F5:B2:55:D5:F4 X509v3 Authority Key Identifier: keyid:DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:39:7e:b3:70:bf:77:95:1c:41:89:77:cf:7d:a6:da:51:0c: d9:62:94:4f:27:70:6e:26:f0:f0:2c:68:2c:3a:54:ad:f9:9b: 73:6f:d7:0b:d6:0b:0d:ad:a1:ee:39:4e:2f:b4:31:5b:a8:37: f8:8a:2e:7f:40:07:60:35:b0:74:0f:61:24:43:fd:d9:d5:14: 01:13:05:80:f6:f0:3e:73:e1:c5:21:1e:d8:db:38:57:17:bc: 6f:d7:f9:0a:e0:88:22:8a:14:f7:15:a8:42:2b:2d:86:f9:72: 1a:ff:03:40:a2:1e:04:fe:d9:6a:48:11:8a:47:81:0e:7b:0e: 88:79:49:86:96:21:90:19:13:8b:ee:3e:09:e2:2a:28:96:0a: 79:4f:8c:27:02:08:19:3a:4d:b1:14:7b:06:09:b9:c7:76:db: a5:3b:b7:54:26:ca:77:bc:a2:6c:8d:89:78:93:47:5e:8d:ee: e0:24:e5:22:fd:a7:8d:38:d3:c7:d2:6a:88:cd:b4:b3:2e:3d: ef:fc:40:43:ff:59:04:02:3f:3b:49:11:cb:0a:48:bb:73:e1: c4:bb:dd:fa:75:27:81:4a:af:f8:94:e9:9e:b7:76:6d:bb:76: 85:cf:d1:14:e7:6f:39:89:06:31:a0:d1:10:05:64:89:0d:40: 83:85:65:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFCRjAxMTAvBgNVBAUTKERCM0RGRDg2Q0VCRkVBRUQzQUFGMTVERUFFRTY5NjUy MzQ3NDZBMjkwHhcNMjYwMzAyMDMwNTA2WhcNMjYwMzA5MDMwNTA2WjAYMRYwFAYD VQQDEw02OWE0ZmU2My0xNDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCMub5yEKpuqH+bEw7uGklrOKfhx9/5FdgL38gc3iQTzMyy1LyeintuOXc3/ LcFPxaidiv2bR426yT4N+YQccfjvG3RU0X6AVj8+pAOl7V9evsT6ZwS3CNLaNylH 6i/KVAb1lWSlCX4iIlewp3gPo2MilKIm4Vt1ad2eGBXEDUjckp2NJpOZO9VrvwS9 WJmk6oTBf9UW6f5cei0gAxS3tb+cPhxPZ28fhbvwINwRYifAe98/w5BzRn7u3vVs iTA01QILPIK4+DpWnn6DcYfJMmla075CCWjaIsbMXrl94R74BlJemrDA9ATXCIfA MidgTuQx8e6X6c5vNhQ5kpacHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBdVL7h8 glJTuAlkt2bxtfWyVdX0MB8GA1UdIwQYMBaAFNs9/YbOv+rtOq8V3q7mllI0dGop MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUJGMC9BNzhGMUIxMkE0 MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi8yejM5aHM2XzZ1MDZyeFhlcnVhV1VqUjBh aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6MzloczZfNnUwNnJ4WGVydWFXVWpSMGFpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUJGMC9BNzhGMUIxMkE0MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi8yejM5aHM2XzZ1 MDZyeFhlcnVhV1VqUjBhaWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGjl+s3C/d5UcQYl3z32m2lEM2WKUTydwbibw8CxoLDpUrfmbc2/XC9YLDa2h 7jlOL7QxW6g3+Iouf0AHYDWwdA9hJEP92dUUARMFgPbwPnPhxSEe2Ns4Vxe8b9f5 CuCIIooU9xWoQisthvlyGv8DQKIeBP7ZakgRikeBDnsOiHlJhpYhkBkTi+4+CeIq KJYKeU+MJwIIGTpNsRR7Bgm5x3bbpTu3VCbKd7yibI2JeJNHXo3u4CTlIv2njTjT x9JqiM20sy497/xAQ/9ZBAI/O0kRywpIu3PhxLvd+nUngUqv+JTpnrd2bbt2hc/R FOdvOYkGMaDREAVkiQ1Ag4VlEQ== -----END CERTIFICATE-----Generated at Mon Mar 2 22:35:20 2026 by rpki-client