$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft File: Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft (raw, json) Hash identifier: PHWMYzAnCForAVbN70cnQ18UfkNNZqm2zCB3gzBEBl0= Subject key identifier: DB:AA:A6:02:8A:31:C4:6A:D0:11:3C:4D:D0:D5:FA:68:D3:FA:E5:67 Authority key identifier: 32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D Certificate issuer: /CN=A9173C08/serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft Manifest number: AE Signing time: Sun 01 Mar 2026 08:29:29 +0000 Manifest this update: Sun 01 Mar 2026 08:29:28 +0000 Manifest next update: Sun 08 Mar 2026 08:29:28 +0000 Files and hashes: 1: Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl (hash: Dpozk1IvWEOzyx/EAIycRa5jHeszm/ItUHStyPDoh90=) 2: ED917A58117D11F08E2E217CC4F9AE02.roa (hash: Aw3wWZIQQg1zakwGDu44MXnJ4chAk+JjnYLGpnEp8ao=) 3: 7D6BCA6429D111F09DF2F66EC4F9AE02.roa (hash: AY2s5T5nFgYlJrJemH+atWCYX2gv1ohpQJNZYKJbmMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C08, serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D Validity Not Before: Mar 1 08:29:28 2026 GMT Not After : Mar 8 08:29:28 2026 GMT Subject: CN=69a3f8e8-12a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ac:24:72:e0:91:9e:50:e2:c4:be:80:3b:ed: dc:0b:0e:a6:c9:2d:89:a8:e1:e7:b7:b7:54:49:04: 97:91:48:d5:59:23:f7:24:29:20:ff:be:e8:8d:25: 18:10:ca:92:0c:8c:ac:6c:86:93:e0:0f:9e:66:d5: 27:cf:d0:13:bf:6f:5e:2d:fa:d2:f6:37:66:b4:36: b5:f8:2d:6d:9f:d9:b2:c1:bd:28:59:f6:3c:2b:fb: ae:27:3b:e3:ef:b2:6a:fc:29:8e:5c:5b:78:e5:36: cf:17:99:d6:9f:38:81:94:21:a4:e7:18:a2:d9:85: fc:8f:e9:dd:5f:0e:f1:28:a5:64:70:9b:e2:fb:d3: f2:88:39:b1:8a:f3:8c:d0:0e:ab:34:b8:81:41:8b: e0:8d:ca:5e:ea:26:e1:bb:10:1f:5a:87:6f:c0:2e: b5:0b:3e:58:16:65:66:b8:8b:47:9c:7d:25:24:3d: e7:6c:07:23:bf:61:c6:bb:1d:1d:d1:a1:f1:81:1d: f2:cc:d9:30:e2:e5:a2:81:35:f1:93:7b:2e:d7:9f: f2:6f:dc:67:9d:49:36:48:04:38:36:29:2d:ce:e8: 81:b2:c7:ed:78:cc:bb:24:e6:b5:4c:8c:7a:e8:94: 1f:ef:19:5e:aa:e2:28:d6:31:63:d1:2d:ce:c0:42: 78:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AA:A6:02:8A:31:C4:6A:D0:11:3C:4D:D0:D5:FA:68:D3:FA:E5:67 X509v3 Authority Key Identifier: keyid:32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e3:43:ca:f5:15:8f:3c:11:98:32:b8:ee:34:b6:d6:3f:4a: e2:24:5b:96:57:77:5f:57:6d:ec:6f:f1:44:f6:d2:5a:58:f8: 69:da:72:e7:26:17:a5:54:7a:af:d9:91:9e:b5:da:b2:28:62: ab:0b:bc:bd:56:41:8a:f3:1d:29:64:cf:b7:69:38:95:03:0c: 67:5b:be:51:1e:28:c2:0d:45:b7:12:33:9e:eb:7b:a2:41:65: e2:8b:cd:46:20:05:d9:f8:64:8d:92:6f:64:b0:0e:f7:70:90: 55:0f:35:b0:85:52:75:a0:c3:71:0c:dd:23:7a:ac:9a:a2:35: cb:62:64:72:98:1e:ed:1f:06:4d:7d:e6:71:66:a4:25:a1:23: ee:ee:bc:f2:ea:b5:50:23:88:27:3d:8e:1c:ab:76:6c:80:d9: b9:a7:10:57:16:eb:07:42:fe:50:a2:54:dd:02:f5:82:4e:1f: a5:c6:9a:8c:9f:e3:b8:0d:81:fc:0f:47:66:fc:d3:58:cc:53: ef:10:b4:8b:96:b2:ed:a1:33:18:60:53:0e:39:ed:8b:a7:c3: 95:1a:16:6d:d3:9e:2c:df:cf:8e:79:df:01:fa:46:14:cc:e0: 3d:23:82:3a:5f:00:49:71:4d:34:b4:ab:f7:e4:2a:56:ef:2e: e5:8a:07:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDMDgxMTAvBgNVBAUTKDMyMUVFRkI4MDg1MUZGODJGRUI3Q0I2QzA4QTk0RjVE RDJEOTI3MEQwHhcNMjYwMzAxMDgyOTI4WhcNMjYwMzA4MDgyOTI4WjAYMRYwFAYD VQQDEw02OWEzZjhlOC0xMmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6wkcuCRnlDixL6AO+3cCw6myS2JqOHnt7dUSQSXkUjVWSP3JCkg/77ojSUY EMqSDIysbIaT4A+eZtUnz9ATv29eLfrS9jdmtDa1+C1tn9mywb0oWfY8K/uuJzvj 77Jq/CmOXFt45TbPF5nWnziBlCGk5xii2YX8j+ndXw7xKKVkcJvi+9PyiDmxivOM 0A6rNLiBQYvgjcpe6ibhuxAfWodvwC61Cz5YFmVmuItHnH0lJD3nbAcjv2HGux0d 0aHxgR3yzNkw4uWigTXxk3su15/yb9xnnUk2SAQ4NiktzuiBssfteMy7JOa1TIx6 6JQf7xlequIo1jFj0S3OwEJ4hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNuqpgKK McRq0BE8TdDV+mjT+uVnMB8GA1UdIwQYMBaAFDIe77gIUf+C/rfLbAipT13S2ScN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0MwOC9BRkZDMERFNDEx N0MxMUYwQjIzNENENzhDNEY5QUUwMi9NaDd2dUFoUl80TC10OHRzQ0tsUFhkTFpK dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01oN3Z1QWhSXzRMLXQ4dHNDS2xQWGRMWkp3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0MwOC9BRkZDMERFNDExN0MxMUYwQjIzNENENzhDNEY5QUUwMi9NaDd2dUFoUl80 TC10OHRzQ0tsUFhkTFpKdzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOuNDyvUVjzwRmDK47jS21j9K4iRblld3X1dt7G/xRPbSWlj4adpy5yYXpVR6 r9mRnrXasihiqwu8vVZBivMdKWTPt2k4lQMMZ1u+UR4owg1FtxIznut7okFl4ovN RiAF2fhkjZJvZLAO93CQVQ81sIVSdaDDcQzdI3qsmqI1y2Jkcpge7R8GTX3mcWak JaEj7u688uq1UCOIJz2OHKt2bIDZuacQVxbrB0L+UKJU3QL1gk4fpcaajJ/juA2B /A9HZvzTWMxT7xC0i5ay7aEzGGBTDjnti6fDlRoWbdOeLN/PjnnfAfpGFMzgPSOC Ol8ASXFNNLSr9+QqVu8u5YoH9w== -----END CERTIFICATE-----Generated at Mon Mar 2 04:37:59 2026 by rpki-client