$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft File: cnDzQpmiHqWwx27T1-suB7tnI_c.mft (raw, json) Hash identifier: XdTvZTK1CikzUM3NPxUQFZdrD3+ba2XncySLOtXdxQA= Subject key identifier: FE:DE:6B:0A:FA:BC:13:1D:2F:70:46:C5:52:75:00:07:1E:A4:EF:B5 Authority key identifier: 72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 Certificate issuer: /CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft Manifest number: 0108 Signing time: Mon 02 Mar 2026 13:49:06 +0000 Manifest this update: Mon 02 Mar 2026 13:49:06 +0000 Manifest next update: Mon 09 Mar 2026 13:49:06 +0000 Files and hashes: 1: cnDzQpmiHqWwx27T1-suB7tnI_c.crl (hash: 3btQWKYQnDci3rdE9KIX86Zq4mA7eWqf5uvnhqyAMEc=) 2: C4C01E3800D111F19FE1BBA3726F56BC.roa (hash: 7TdxN5pwG9InxHjLBF8NeXCwHbUoryPl86+yQHm4dE0=) 3: 24DBC31AB1BA11F080D32309C4F9AE02.roa (hash: p4a4dVFXyGYegzF068ON2uCyZmulHS7AQpUNoGSbKfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EAE, serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Validity Not Before: Mar 2 13:49:06 2026 GMT Not After : Mar 9 13:49:06 2026 GMT Subject: CN=69a59552-c860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fb:46:f0:f5:ed:93:9b:31:8c:da:32:8b:45: 6b:51:5b:7e:62:08:59:03:63:87:65:a9:83:7e:43: 2d:a5:d3:82:d5:aa:68:c3:99:0b:6f:02:4a:0d:b0: 76:40:c9:4e:7b:5e:84:32:a2:6f:1c:e5:76:3e:1d: 1a:76:a5:b4:05:ad:55:9d:23:70:97:e1:c7:bc:7c: ac:9a:d3:33:f4:ed:67:89:fb:2e:cf:31:a1:14:b3: a1:32:6a:e4:1f:84:f0:d6:40:d6:29:2a:cb:eb:c0: 95:20:36:aa:b6:53:dd:41:59:c8:62:5f:93:de:04: 0c:d4:20:c3:21:3c:16:8c:2e:2e:12:fd:e0:27:fe: 08:58:5f:cf:da:f1:c8:ae:33:30:7c:30:e0:9d:0a: 74:2b:c7:86:6e:c3:9a:f6:9e:81:b1:71:8f:55:2c: ba:55:1a:b6:a2:9a:c5:b2:5c:48:2e:d3:de:d8:75: 9b:51:97:f3:7e:7d:de:ba:ca:2e:af:b4:21:98:d1: 4a:2b:b0:13:9b:67:3f:dd:8c:ba:94:21:a4:66:a1: 8b:d9:3c:ea:d1:6f:6f:26:c5:dd:d5:ad:12:3c:2c: e6:9c:94:a8:f5:af:d0:ec:cb:51:e4:70:58:32:e0: 99:5d:0c:c2:9c:2d:9f:ea:8a:1a:f0:7e:68:a4:ca: 36:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DE:6B:0A:FA:BC:13:1D:2F:70:46:C5:52:75:00:07:1E:A4:EF:B5 X509v3 Authority Key Identifier: keyid:72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:a4:4c:d1:dc:43:e0:f3:e5:65:1a:49:95:72:eb:2c:06:13: 67:20:f5:ce:d1:da:a9:75:27:45:80:c5:39:68:1e:a8:6c:a5: 37:be:d3:96:54:78:9f:b0:ad:94:0d:cc:2c:8d:02:99:7b:ad: a2:04:e1:c6:15:d3:0b:eb:36:3e:a8:c6:94:f5:ee:25:6b:18: c8:89:25:d0:40:0e:62:f3:6b:12:c5:d3:0f:1b:5e:94:30:df: d3:70:01:66:2f:23:5a:66:09:dc:d9:e7:db:9b:3d:7e:80:5e: 59:be:52:93:c5:00:26:66:38:83:5b:6f:31:d3:51:31:7c:4f: 3e:b2:2c:00:49:10:de:9f:1c:a2:f4:37:31:4c:82:c1:24:3a: d3:18:3a:06:e3:a5:e2:b1:9b:59:72:16:f0:65:9a:b5:6e:c2: 41:4c:0e:5d:8a:ca:d3:82:53:5e:fe:1a:bd:30:97:96:08:26: 5f:bf:dc:f1:92:b9:12:19:be:45:de:bf:c4:f9:d6:6a:cb:6e: 8e:f6:ef:8c:38:2e:48:f9:15:23:0f:8b:36:5f:cb:00:e9:cd: b0:a6:31:c6:36:d2:b5:0a:2f:14:ad:20:43:22:ca:7c:b6:19: 28:8d:f5:b7:7d:f2:a1:cc:97:4b:71:d8:34:86:f0:56:94:a6: 4f:7a:1b:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlFQUUxMTAvBgNVBAUTKDcyNzBGMzQyOTlBMjFFQTVCMEM3NkVEM0Q3RUIyRTA3 QkI2NzIzRjcwHhcNMjYwMzAyMTM0OTA2WhcNMjYwMzA5MTM0OTA2WjAYMRYwFAYD VQQDEw02OWE1OTU1Mi1jODYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ftG8PXtk5sxjNoyi0VrUVt+YghZA2OHZamDfkMtpdOC1apow5kLbwJKDbB2 QMlOe16EMqJvHOV2Ph0adqW0Ba1VnSNwl+HHvHysmtMz9O1nifsuzzGhFLOhMmrk H4Tw1kDWKSrL68CVIDaqtlPdQVnIYl+T3gQM1CDDITwWjC4uEv3gJ/4IWF/P2vHI rjMwfDDgnQp0K8eGbsOa9p6BsXGPVSy6VRq2oprFslxILtPe2HWbUZfzfn3eusou r7QhmNFKK7ATm2c/3Yy6lCGkZqGL2Tzq0W9vJsXd1a0SPCzmnJSo9a/Q7MtR5HBY MuCZXQzCnC2f6ooa8H5opMo2fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP7eawr6 vBMdL3BGxVJ1AAcepO+1MB8GA1UdIwQYMBaAFHJw80KZoh6lsMdu09frLge7ZyP3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVBRS9BRTAyODA1NjhE MEUxMUVGQThGRTkzNzFDNEY5QUUwMi9jbkR6UXBtaUhxV3d4MjdUMS1zdUI3dG5J X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuRHpRcG1pSHFXd3gyN1QxLXN1Qjd0bklfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUVBRS9BRTAyODA1NjhEMEUxMUVGQThGRTkzNzFDNEY5QUUwMi9jbkR6UXBtaUhx V3d4MjdUMS1zdUI3dG5JX2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2qRM0dxD4PPlZRpJlXLrLAYTZyD1ztHaqXUnRYDFOWgeqGylN77TllR4n7Ct lA3MLI0CmXutogThxhXTC+s2PqjGlPXuJWsYyIkl0EAOYvNrEsXTDxtelDDf03AB Zi8jWmYJ3Nnn25s9foBeWb5Sk8UAJmY4g1tvMdNRMXxPPrIsAEkQ3p8covQ3MUyC wSQ60xg6BuOl4rGbWXIW8GWatW7CQUwOXYrK04JTXv4avTCXlggmX7/c8ZK5Ehm+ Rd6/xPnWastujvbvjDguSPkVIw+LNl/LAOnNsKYxxjbStQovFK0gQyLKfLYZKI31 t33yocyXS3HYNIbwVpSmT3obHA== -----END CERTIFICATE-----Generated at Mon Mar 2 23:09:56 2026 by rpki-client