$ rpki-client -vvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft File: O0irhhZS-u7X4dElg_Frt_uyiRM.mft (raw, json) Hash identifier: Yp0yJEnbaHsnPx+CgGzioHlay4Jr9+i7kXYLJe28qIo= Subject key identifier: 5A:0A:A9:92:86:F5:BE:8D:FB:94:86:2F:49:1D:77:5C:F1:4A:6F:D7 Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13 Certificate issuer: /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913 Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft Manifest number: 028A Signing time: Sun 01 Mar 2026 02:29:28 +0000 Manifest this update: Sun 01 Mar 2026 02:29:28 +0000 Manifest next update: Sun 08 Mar 2026 02:29:28 +0000 Files and hashes: 1: O0irhhZS-u7X4dElg_Frt_uyiRM.crl (hash: REPjR6mO7xUdTduw5maD92txWLnUmkrYHrq+NRFF6K0=) 2: EDE89884DB1711EF8929832EC4F9AE02.roa (hash: bVJLQavVrYOipcbUXf1ayhdXIKI6W1duH5Bj01W/zWg=) 3: 8FFF9C5AAF1A11EFAF122A6AC4F9AE02.roa (hash: DFfr6A3Q6Z0rtiDpIfnn7HaR1OPP5j2ZlUMfeqmSe80=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 02:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176909, serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913 Validity Not Before: Mar 1 02:29:28 2026 GMT Not After : Mar 8 02:29:28 2026 GMT Subject: CN=69a3a488-951f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5a:65:5e:2a:53:24:d9:9c:ac:be:3e:86:36: 6c:0b:79:ff:f8:80:83:e1:ce:b3:a3:97:cb:23:11: e7:3c:08:53:72:ec:48:30:97:b2:cf:82:c9:36:4e: af:a1:6b:f1:f7:d2:40:1b:43:8e:e6:3a:99:5c:a2: 05:f3:fb:a9:ac:2c:12:14:db:2a:8a:83:f4:b6:a2: 7f:93:6c:3d:f7:bc:8b:af:ec:3e:86:03:20:0d:1b: 18:94:f5:73:03:d7:3f:4d:cb:94:06:4e:9d:b7:f7: 68:2b:98:43:c4:64:96:66:9d:b2:6a:a5:c2:2b:58: 6f:c2:e6:f5:46:b5:d5:54:15:85:08:4c:17:3f:f1: 92:f6:09:10:f5:21:bf:3b:d4:7b:cc:f7:98:cb:1d: 53:45:92:b2:cf:eb:60:15:e0:3b:9a:60:02:eb:fd: d1:66:2e:5d:83:f6:99:aa:17:db:f3:bf:e8:da:c9: a0:d7:6a:81:23:02:f9:f2:74:1d:04:98:79:4a:fc: b2:17:83:c1:49:b2:e6:ec:11:a5:ec:2f:d5:af:dd: 67:a8:07:38:c4:c3:e8:ee:05:29:85:83:72:55:f4: 3d:cd:ca:cc:d6:ef:e6:0a:ec:4d:a1:78:62:3c:6b: f0:f4:b1:3c:88:af:e9:e9:1a:e0:e6:93:17:b7:31: fc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0A:A9:92:86:F5:BE:8D:FB:94:86:2F:49:1D:77:5C:F1:4A:6F:D7 X509v3 Authority Key Identifier: keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d7:fd:f7:0f:e7:1c:37:b7:18:e4:f1:3e:63:4c:4a:b9:a5: aa:07:ed:48:09:e2:3e:a1:99:9e:d8:45:58:2c:02:ee:f3:83: 5a:af:34:75:c4:82:ac:53:01:1e:e4:09:5a:24:ca:bf:53:0f: 00:af:2f:a7:cd:01:26:19:ea:50:f2:e6:be:40:67:fb:e2:e7: b9:0a:40:62:5f:6e:ba:00:3c:4f:df:fe:87:cc:72:8c:72:82: c2:04:f6:42:78:63:90:1b:71:05:f9:42:e7:2e:4a:c0:01:0a: 9f:32:0e:a3:45:27:09:2a:a3:60:1e:42:d2:5c:cf:8d:0f:e7: b4:f9:b8:57:f0:1f:4d:2e:2f:32:f8:2d:d6:bd:2f:3e:1f:35: 05:5d:de:6a:ca:ff:9a:d2:0f:c1:a0:84:2f:c9:30:29:fc:5d: e0:67:52:89:28:36:f7:f8:7a:6c:30:12:85:42:8e:e8:a5:a7: 8d:e6:2a:08:85:8b:a3:bb:40:7f:45:5f:03:8e:f1:49:9a:85: 9f:17:a2:3e:15:6b:20:e8:f1:52:11:11:d6:40:86:2c:f4:49: cb:0e:17:86:8e:cc:5e:5e:13:ef:c1:c9:b6:84:c4:ae:24:a2: 8f:cd:9b:6b:99:c0:ff:36:2b:f9:65:a3:26:25:2e:80:07:78: 8a:a7:de:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY5MDkxMTAvBgNVBAUTKDNCNDhBQjg2MTY1MkZBRUVEN0UxRDEyNTgzRjE2QkI3 RkJCMjg5MTMwHhcNMjYwMzAxMDIyOTI4WhcNMjYwMzA4MDIyOTI4WjAYMRYwFAYD VQQDDA02OWEzYTQ4OC05NTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylplXipTJNmcrL4+hjZsC3n/+ICD4c6zo5fLIxHnPAhTcuxIMJeyz4LJNk6v oWvx99JAG0OO5jqZXKIF8/uprCwSFNsqioP0tqJ/k2w997yLr+w+hgMgDRsYlPVz A9c/TcuUBk6dt/doK5hDxGSWZp2yaqXCK1hvwub1RrXVVBWFCEwXP/GS9gkQ9SG/ O9R7zPeYyx1TRZKyz+tgFeA7mmAC6/3RZi5dg/aZqhfb87/o2smg12qBIwL58nQd BJh5SvyyF4PBSbLm7BGl7C/Vr91nqAc4xMPo7gUphYNyVfQ9zcrM1u/mCuxNoXhi PGvw9LE8iK/p6Rrg5pMXtzH8IQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFoKqZKG 9b6N+5SGL0kdd1zxSm/XMB8GA1UdIwQYMBaAFDtIq4YWUvru1+HRJYPxa7f7sokT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjkwOS85QUJBQ0FDODRE Q0IxMUVEODI5NjFCMzZDNEY5QUUwMi9PMGlyaGhaUy11N1g0ZEVsZ19GcnRfdXlp Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08waXJoaFpTLXU3WDRkRWxnX0ZydF91eWlSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjkwOS85QUJBQ0FDODREQ0IxMUVEODI5NjFCMzZDNEY5QUUwMi9PMGlyaGhaUy11 N1g0ZEVsZ19GcnRfdXlpUk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGtf99w/nHDe3GOTxPmNMSrmlqgftSAniPqGZnthFWCwC7vODWq80dcSCrFMB HuQJWiTKv1MPAK8vp80BJhnqUPLmvkBn++LnuQpAYl9uugA8T9/+h8xyjHKCwgT2 QnhjkBtxBflC5y5KwAEKnzIOo0UnCSqjYB5C0lzPjQ/ntPm4V/AfTS4vMvgt1r0v Ph81BV3easr/mtIPwaCEL8kwKfxd4GdSiSg29/h6bDAShUKO6KWnjeYqCIWLo7tA f0VfA47xSZqFnxeiPhVrIOjxUhER1kCGLPRJyw4Xho7MXl4T78HJtoTEriSij82b a5nA/zYr+WWjJiUugAd4iqfe2A== -----END CERTIFICATE-----Generated at Sun Mar 1 22:34:10 2026 by rpki-client