$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft File: 5xSoFJfIF3hoy7TNszjD72zp6VM.mft (raw, json) Hash identifier: jmwJaPz2+rtlKJxU7LdxEluVBnpHYO9+dHApdlcNdZ8= Subject key identifier: 1C:0B:54:27:5C:D2:EE:37:46:FD:44:8E:F6:D8:C2:B0:CA:A4:3C:9C Authority key identifier: E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 Certificate issuer: /CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Certificate serial: 0AE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft Manifest number: 0AD2 Signing time: Mon 02 Mar 2026 00:39:21 +0000 Manifest this update: Mon 02 Mar 2026 00:39:17 +0000 Manifest next update: Mon 09 Mar 2026 00:39:17 +0000 Files and hashes: 1: 5xSoFJfIF3hoy7TNszjD72zp6VM.crl (hash: rQOXAIrpE+Dvdn91ctR91cMP28vi/vXRxk75/HOf00w=) 2: 9085F6C0B78911EFB9994180C4F9AE02.roa (hash: u8WkqF58twBf7V4x+gVZYpgUq+L7j/Jz1XNkEqJ+tfM=) 3: CDD96B60B78911EF9BD3EF80C4F9AE02.roa (hash: +vuV01yjXB1+RoW7WbOmTfoAon5Ua6XhR4wfKoKtImw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2785 (0xae1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172C8D, serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Validity Not Before: Mar 2 00:39:17 2026 GMT Not After : Mar 9 00:39:17 2026 GMT Subject: CN=69a4dc38-aed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a3:3c:31:13:20:38:8a:b5:d4:04:70:40:39: fc:73:96:c6:5d:19:c7:1b:7b:89:c8:85:01:f5:d6: af:55:80:82:75:c8:d9:b3:31:5f:6f:ad:36:e3:db: 5c:71:0f:f3:00:a0:22:a5:4b:56:b0:f3:2f:3b:a9: 23:f7:5f:e6:2d:34:78:c5:75:a1:20:ad:54:c7:30: b8:28:ff:bc:22:5a:25:23:c8:9b:08:ae:62:b9:39: fb:1d:16:e7:b0:c3:e2:8c:e5:51:28:19:07:46:bb: 32:b5:88:51:83:49:34:84:a2:0c:39:ad:13:32:7a: 2a:bb:6a:3a:24:52:3a:12:29:ed:22:a3:fe:8f:d8: 43:14:05:46:ee:10:eb:77:4b:4a:48:31:b3:96:50: 5c:6c:09:8d:71:ca:4f:25:d7:96:cc:2d:61:34:66: b2:f9:80:ee:09:e7:78:fd:3c:a6:97:50:7b:79:0f: b8:ba:f7:3b:2d:fb:7d:17:b9:04:1f:b2:b7:4a:40: 9f:3d:43:d6:ff:71:55:f0:1c:1b:f6:57:7e:11:e7: 5e:3d:21:b7:17:30:bb:98:2e:b1:e9:d5:ff:0f:43: 9f:6d:6c:ba:cf:f3:96:86:58:cd:95:16:78:90:9b: 04:04:67:cd:4b:9c:3b:8b:59:f3:78:6d:a7:e1:71: a8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0B:54:27:5C:D2:EE:37:46:FD:44:8E:F6:D8:C2:B0:CA:A4:3C:9C X509v3 Authority Key Identifier: keyid:E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:5d:5c:ec:0e:3c:d6:d4:37:d5:40:3e:23:dd:58:85:35:f1: b5:ad:a3:23:f6:2a:98:61:45:ad:fb:20:0d:ec:04:f8:7a:7d: 84:e5:85:f2:24:ab:83:cf:91:dd:fe:63:f3:39:8b:31:1b:24: fd:38:2d:5c:c6:9b:aa:ca:2d:71:2f:58:51:1f:cd:47:3d:99: aa:31:c9:be:8a:4e:28:ee:1a:43:bb:77:bd:03:71:29:a8:96: 45:45:ab:7a:d3:24:75:4f:5d:88:fc:4b:b5:9f:6d:1f:21:c3: ff:6b:46:7a:47:09:b5:ef:e3:6d:0d:f4:d2:0e:94:0d:77:be: 54:01:6b:e2:6f:63:28:f2:df:42:a1:02:6d:c0:7c:31:06:3d: f8:35:da:d4:3c:85:e2:04:bf:ee:6b:87:7f:4f:8e:c4:84:e4: 20:84:41:07:48:dc:a1:ff:d4:da:ae:3f:ed:e6:a5:8c:6e:c2: a0:88:89:38:07:1a:21:d7:15:f5:08:f4:b2:ed:af:d4:58:4e: cc:d1:69:38:8f:2c:0a:36:ff:19:b7:4d:15:6e:91:f7:4e:88: 58:15:2b:45:56:f5:ba:11:e0:4c:ce:ff:69:c0:62:be:04:6c: e5:47:8d:0f:38:98:7a:b6:e5:9e:18:59:12:af:52:9c:ad:77: 18:a7:ed:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDOEQxMTAvBgNVBAUTKEU3MTRBODE0OTdDODE3Nzg2OENCQjRDREIzMzhDM0VG NkNFOUU5NTMwHhcNMjYwMzAyMDAzOTE3WhcNMjYwMzA5MDAzOTE3WjAYMRYwFAYD VQQDEw02OWE0ZGMzOC1hZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKM8MRMgOIq11ARwQDn8c5bGXRnHG3uJyIUB9davVYCCdcjZszFfb60249tc cQ/zAKAipUtWsPMvO6kj91/mLTR4xXWhIK1UxzC4KP+8IlolI8ibCK5iuTn7HRbn sMPijOVRKBkHRrsytYhRg0k0hKIMOa0TMnoqu2o6JFI6EintIqP+j9hDFAVG7hDr d0tKSDGzllBcbAmNccpPJdeWzC1hNGay+YDuCed4/Tyml1B7eQ+4uvc7Lft9F7kE H7K3SkCfPUPW/3FV8Bwb9ld+EedePSG3FzC7mC6x6dX/D0OfbWy6z/OWhljNlRZ4 kJsEBGfNS5w7i1nzeG2n4XGopQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBwLVCdc 0u43Rv1EjvbYwrDKpDycMB8GA1UdIwQYMBaAFOcUqBSXyBd4aMu0zbM4w+9s6elT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkM4RC85QTExMDg2NDY5 QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYzaG95N1ROc3pqRDcyenA2 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4U29GSmZJRjNob3k3VE5zempENzJ6cDZWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkM4RC85QTExMDg2NDY5QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYz aG95N1ROc3pqRDcyenA2Vk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdF1c7A481tQ31UA+I91YhTXxta2jI/YqmGFFrfsgDewE+Hp9hOWF8iSrg8+R 3f5j8zmLMRsk/TgtXMabqsotcS9YUR/NRz2ZqjHJvopOKO4aQ7t3vQNxKaiWRUWr etMkdU9diPxLtZ9tHyHD/2tGekcJte/jbQ300g6UDXe+VAFr4m9jKPLfQqECbcB8 MQY9+DXa1DyF4gS/7muHf0+OxITkIIRBB0jcof/U2q4/7ealjG7CoIiJOAcaIdcV 9Qj0su2v1FhOzNFpOI8sCjb/GbdNFW6R906IWBUrRVb1uhHgTM7/acBivgRs5UeN DziYerblnhhZEq9SnK13GKftJw== -----END CERTIFICATE-----Generated at Mon Mar 2 13:55:20 2026 by rpki-client