$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft File: Ol4QKeZcY2gSMttn2AU90vaU5h8.mft (raw, json) Hash identifier: Tgxnd7eVsK2lVS3/vAPDHP6OUtcSd9is7CyzwKBPTKg= Subject key identifier: 2D:55:F2:B5:60:F6:0A:DE:1B:68:58:D7:83:9A:A7:20:D9:E5:8E:7F Authority key identifier: 3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F Certificate issuer: /CN=A9174EC5/serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft Manifest number: D4 Signing time: Mon 02 Mar 2026 00:52:05 +0000 Manifest this update: Mon 02 Mar 2026 00:52:03 +0000 Manifest next update: Mon 09 Mar 2026 00:52:03 +0000 Files and hashes: 1: Ol4QKeZcY2gSMttn2AU90vaU5h8.crl (hash: V+tP3ImozT+Q/02x/6+kH+2gBhAsRvf11jtXNaIAERc=) 2: 3154E9E8993A11F0837A6E45C4F9AE02.roa (hash: v41aBlF3leOW8tter1KV8agjab7xR5AdoEi5mvmK3SE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EC5, serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F Validity Not Before: Mar 2 00:52:03 2026 GMT Not After : Mar 9 00:52:03 2026 GMT Subject: CN=69a4df35-08a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:45:f1:88:3e:b1:8a:c5:97:6c:6a:41:63:29: ce:00:4b:c5:13:2c:7a:93:9d:13:31:52:35:93:4a: a7:23:69:85:c6:d3:c0:1f:cd:a6:b2:39:96:8a:68: 83:5e:69:a7:a1:63:4b:4a:4c:06:2f:90:e2:40:b7: b9:1e:bc:d9:ee:6a:f0:4d:12:c9:34:f3:36:0d:b1: 59:21:57:8b:6e:b3:85:2e:4a:1e:f7:af:d5:49:f6: 8d:ab:7e:e9:52:34:18:9d:f6:3a:c9:c6:c8:37:04: e9:1e:93:47:34:4b:5e:22:00:26:c9:8d:b6:4c:e9: 61:7a:db:47:44:25:95:1e:08:7b:39:56:46:6a:7f: 36:89:99:48:e6:57:65:ec:19:23:79:a3:78:7d:05: 16:72:41:14:cf:92:87:a1:64:7f:6c:a8:07:a9:35: 94:ae:35:65:16:47:b7:d1:fd:ca:55:fb:11:fe:ce: 4a:e3:1a:58:aa:56:d3:1a:77:99:34:64:11:50:6d: e1:83:13:44:00:ce:66:e3:1b:d3:51:1a:7e:76:43: 55:58:b3:0c:aa:75:3a:0a:ca:66:44:ee:ec:62:23: 5c:e0:d1:e8:3c:60:b9:b4:f3:93:48:40:a8:ac:46: e6:bb:91:6f:8d:c9:49:ec:94:16:df:76:83:d1:4f: 89:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:55:F2:B5:60:F6:0A:DE:1B:68:58:D7:83:9A:A7:20:D9:E5:8E:7F X509v3 Authority Key Identifier: keyid:3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a7:51:0d:30:7b:40:35:ab:a9:0a:66:71:a4:a9:09:36:2f: fc:40:00:c8:3d:5b:ee:ac:30:7f:5f:38:3c:81:13:4f:7d:ed: 4e:a1:d9:eb:8a:bc:69:d7:3b:bb:c2:67:20:71:09:5d:09:39: f2:8a:1f:66:8f:ab:fa:d9:99:0d:9f:9b:e6:56:95:dc:b2:12: 06:8b:e7:3d:77:75:f6:08:fb:5b:63:0b:04:2d:97:b7:a0:54: 0d:7b:8c:fd:c1:4a:02:62:f4:e8:c5:4e:92:56:1f:d0:a0:2a: d5:41:78:cb:72:b2:42:aa:61:d3:61:1f:d7:c0:2b:91:5b:2b: b0:83:f0:c1:91:07:3e:8c:4c:11:dd:d2:9c:d8:70:07:56:c9: 5d:95:ce:93:3d:9e:a5:a3:ce:ae:e7:bc:db:ac:f9:48:66:4e: cb:32:3b:46:a4:b4:86:b2:b2:cd:f8:d0:8c:3a:2d:96:47:e3: 47:1f:1f:9d:ef:0f:e2:11:ca:ed:3c:14:df:54:be:8a:9e:b9: 71:50:93:a9:56:f9:8f:fe:24:e2:4d:ac:4b:b9:3b:7d:03:75: 5e:92:56:91:d3:34:8a:55:50:bd:d9:da:c4:4c:00:93:80:b9: 65:4a:cc:ef:94:72:11:bb:0c:0e:d6:6a:38:d9:79:95:0d:32: 48:a5:b3:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQzUxMTAvBgNVBAUTKDNBNUUxMDI5RTY1QzYzNjgxMjMyREI2N0Q4MDUzREQy RjY5NEU2MUYwHhcNMjYwMzAyMDA1MjAzWhcNMjYwMzA5MDA1MjAzWjAYMRYwFAYD VQQDEw02OWE0ZGYzNS0wOGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEXxiD6xisWXbGpBYynOAEvFEyx6k50TMVI1k0qnI2mFxtPAH82msjmWimiD XmmnoWNLSkwGL5DiQLe5HrzZ7mrwTRLJNPM2DbFZIVeLbrOFLkoe96/VSfaNq37p UjQYnfY6ycbINwTpHpNHNEteIgAmyY22TOlhettHRCWVHgh7OVZGan82iZlI5ldl 7BkjeaN4fQUWckEUz5KHoWR/bKgHqTWUrjVlFke30f3KVfsR/s5K4xpYqlbTGneZ NGQRUG3hgxNEAM5m4xvTURp+dkNVWLMMqnU6CspmRO7sYiNc4NHoPGC5tPOTSECo rEbmu5FvjclJ7JQW33aD0U+JPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC1V8rVg 9greG2hY14OapyDZ5Y5/MB8GA1UdIwQYMBaAFDpeECnmXGNoEjLbZ9gFPdL2lOYf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVDNS84MjMzNUEyMEQ5 NUExMUVGQTAyRkI0NkZDNEY5QUUwMi9PbDRRS2VaY1kyZ1NNdHRuMkFVOTB2YVU1 aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sNFFLZVpjWTJnU010dG4yQVU5MHZhVTVoOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEVDNS84MjMzNUEyMEQ5NUExMUVGQTAyRkI0NkZDNEY5QUUwMi9PbDRRS2VaY1ky Z1NNdHRuMkFVOTB2YVU1aDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD6dRDTB7QDWrqQpmcaSpCTYv/EAAyD1b7qwwf184PIETT33tTqHZ64q8adc7 u8JnIHEJXQk58oofZo+r+tmZDZ+b5laV3LISBovnPXd19gj7W2MLBC2Xt6BUDXuM /cFKAmL06MVOklYf0KAq1UF4y3KyQqph02Ef18ArkVsrsIPwwZEHPoxMEd3SnNhw B1bJXZXOkz2epaPOrue826z5SGZOyzI7RqS0hrKyzfjQjDotlkfjRx8fne8P4hHK 7TwU31S+ip65cVCTqVb5j/4k4k2sS7k7fQN1XpJWkdM0ilVQvdnaxEwAk4C5ZUrM 75RyEbsMDtZqONl5lQ0ySKWzPw== -----END CERTIFICATE-----Generated at Mon Mar 2 12:18:42 2026 by rpki-client