$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft File: pYrazvnSRVOlVka1puvM6rGfL7w.mft (raw, json) Hash identifier: OlXn9Xa4R+4LYJ7c87LWl/XMkYOPkLeyZA1GM4I35pE= Subject key identifier: 2F:79:4C:86:6A:46:80:21:58:31:8D:02:B3:19:45:FA:7D:DC:2C:A2 Authority key identifier: A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC Certificate issuer: /CN=A9174C7A/serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft Manifest number: 8D Signing time: Sun 01 Mar 2026 08:51:08 +0000 Manifest this update: Sun 01 Mar 2026 08:51:08 +0000 Manifest next update: Sun 08 Mar 2026 08:51:08 +0000 Files and hashes: 1: pYrazvnSRVOlVka1puvM6rGfL7w.crl (hash: /j2HrtZrX37wGI7HYgSycN/oF37ZtnhEEKIr+gYHa5A=) 2: 8D052914404911F0A4BD357BC4F9AE02.roa (hash: HDAJrdViuU7kZQtbBcD9tgS1zcOCf1eCW5LDFit/g6Y=) 3: 5B118C12986011F0A5423187C4F9AE02.roa (hash: Nv3VGs0s4nLweSbJ3JGcdt+LncTqoSFHEUO8LJ8JE2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C7A, serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC Validity Not Before: Mar 1 08:51:08 2026 GMT Not After : Mar 8 08:51:08 2026 GMT Subject: CN=69a3fdfc-aa78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bc:93:76:e8:44:30:85:bf:37:03:13:bd:5d: a6:c3:b6:f5:96:07:83:93:64:c8:a2:7e:e4:61:a8: e6:67:56:ac:ac:03:3b:36:78:85:53:86:39:62:d0: ee:70:2d:5e:41:c3:f8:97:f9:4e:49:98:82:e3:8b: 1f:be:f5:d9:27:d0:02:ec:7f:fc:e3:26:25:d2:b0: 6f:64:6c:0d:8e:c3:0d:b8:88:55:e4:9a:18:61:16: 43:e4:e9:53:0b:9e:5f:2f:55:71:39:15:a6:39:8f: 39:65:02:ac:4b:88:44:1e:8f:aa:1b:30:fa:a1:1c: 4d:ad:c3:d1:0b:b9:49:d7:51:db:ff:1f:43:db:a8: fb:6c:96:b2:67:37:53:0d:f4:dc:d0:16:4e:be:45: 97:5c:fa:30:c5:9d:95:5b:b8:79:e3:c8:bc:8f:4c: 8b:06:78:5f:b7:6c:62:04:b4:11:7e:98:8e:41:fd: f2:22:71:c0:1f:73:26:1d:db:99:41:55:7b:09:88: 33:de:d8:f0:3d:3c:42:a3:eb:25:64:6c:46:5a:35: 66:5a:48:c3:d7:ac:99:ef:ac:4d:d2:c7:67:07:3a: e8:48:f3:e7:8a:8b:34:6a:3f:9a:e4:fb:2c:7e:df: 6c:ac:3c:58:18:b0:b1:c4:09:f2:1d:7a:92:bc:b1: 65:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:79:4C:86:6A:46:80:21:58:31:8D:02:B3:19:45:FA:7D:DC:2C:A2 X509v3 Authority Key Identifier: keyid:A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:12:3b:0c:a7:ca:f7:78:04:e8:48:8f:fc:18:8b:06:34:63: f1:36:e5:d0:3e:29:d8:31:42:7e:5c:9f:ee:33:67:d2:b1:a1: 94:1d:4f:df:e4:a2:a3:07:5f:64:b8:76:e5:2c:a8:57:ba:cc: 68:36:24:37:4e:b7:2c:1b:09:8d:38:18:d2:88:1f:ea:84:b6: 8e:1c:7b:cc:b3:e0:49:f2:81:b6:58:00:4b:0f:08:12:a9:42: 5b:d1:ef:b3:fb:db:32:64:8a:25:7e:a6:9c:d4:a8:4d:14:6d: b0:da:11:9a:57:d8:b5:ef:b2:ff:fc:bc:02:a1:c7:02:dc:69: 80:b4:93:0e:c0:03:91:a3:fc:22:a6:5a:b7:72:60:88:a4:26: 70:96:fd:8e:bb:42:b1:9c:54:1e:9d:e4:56:21:b3:ad:c8:64: 8d:79:07:d7:0c:51:6b:07:6d:0a:b8:bf:24:0d:42:d6:13:9b: 0a:e2:b9:5a:1c:7f:27:aa:6e:bc:8d:39:9d:1e:b7:1c:82:40: a9:2d:37:c0:94:90:ba:b3:75:43:d6:db:6f:1b:d4:69:8d:a7: a7:30:9f:62:e2:0e:79:89:cb:5c:ea:91:b0:30:10:cc:e9:46: 09:2c:48:a5:cb:d6:bb:62:34:df:2d:a8:08:2a:52:e0:d5:9d: 9c:1b:13:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDN0ExMTAvBgNVBAUTKEE1OEFEQUNFRjlEMjQ1NTNBNTU2NDZCNUE2RUJDQ0VB QjE5RjJGQkMwHhcNMjYwMzAxMDg1MTA4WhcNMjYwMzA4MDg1MTA4WjAYMRYwFAYD VQQDEw02OWEzZmRmYy1hYTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsryTduhEMIW/NwMTvV2mw7b1lgeDk2TIon7kYajmZ1asrAM7NniFU4Y5YtDu cC1eQcP4l/lOSZiC44sfvvXZJ9AC7H/84yYl0rBvZGwNjsMNuIhV5JoYYRZD5OlT C55fL1VxORWmOY85ZQKsS4hEHo+qGzD6oRxNrcPRC7lJ11Hb/x9D26j7bJayZzdT DfTc0BZOvkWXXPowxZ2VW7h548i8j0yLBnhft2xiBLQRfpiOQf3yInHAH3MmHduZ QVV7CYgz3tjwPTxCo+slZGxGWjVmWkjD16yZ76xN0sdnBzroSPPnios0aj+a5Pss ft9srDxYGLCxxAnyHXqSvLFl9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC95TIZq RoAhWDGNArMZRfp93CyiMB8GA1UdIwQYMBaAFKWK2s750kVTpVZGtabrzOqxny+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEM3QS80NEYxNEFGQzQw NDYxMUYwOUJGMEQ4NEZDNEY5QUUwMi9wWXJhenZuU1JWT2xWa2ExcHV2TTZyR2ZM N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BZcmF6dm5TUlZPbFZrYTFwdXZNNnJHZkw3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEM3QS80NEYxNEFGQzQwNDYxMUYwOUJGMEQ4NEZDNEY5QUUwMi9wWXJhenZuU1JW T2xWa2ExcHV2TTZyR2ZMN3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPBI7DKfK93gE6EiP/BiLBjRj8Tbl0D4p2DFCflyf7jNn0rGhlB1P3+Siowdf ZLh25SyoV7rMaDYkN063LBsJjTgY0ogf6oS2jhx7zLPgSfKBtlgASw8IEqlCW9Hv s/vbMmSKJX6mnNSoTRRtsNoRmlfYte+y//y8AqHHAtxpgLSTDsADkaP8IqZat3Jg iKQmcJb9jrtCsZxUHp3kViGzrchkjXkH1wxRawdtCri/JA1C1hObCuK5Whx/J6pu vI05nR63HIJAqS03wJSQurN1Q9bbbxvUaY2npzCfYuIOeYnLXOqRsDAQzOlGCSxI pcvWu2I03y2oCCpS4NWdnBsTJg== -----END CERTIFICATE-----Generated at Mon Mar 2 04:19:19 2026 by rpki-client