$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft File: -bj5HSkovqo1HMNFxHNpMv2GOfE.mft (raw, json) Hash identifier: pdLggriq31U/qJYwK58CkwBiFyuej16RhE5RzHSMCW4= Subject key identifier: AF:E4:3B:10:C5:9C:5C:BB:BB:A0:7C:67:42:16:75:CF:74:99:97:49 Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 Certificate issuer: /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Certificate serial: 0FAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft Manifest number: 0F9D Signing time: Sat 28 Feb 2026 17:38:42 +0000 Manifest this update: Sat 28 Feb 2026 17:38:42 +0000 Manifest next update: Sat 07 Mar 2026 17:38:42 +0000 Files and hashes: 1: -bj5HSkovqo1HMNFxHNpMv2GOfE.crl (hash: W37SI+jdAHKigQXhU1NWX6ZiqU3xXq75WbZy6A9iJA8=) 2: AA75695ACD2011F0B214A868C4F9AE02.roa (hash: J1q9B+GvWu0EHxlM4wrZ2tzbKSLE34bYP07mlS0yo3g=) 3: F6B0145ACD2011F0B3EB5B69C4F9AE02.roa (hash: ujwlh3xKcro8Gn6vri+ysk2OetBXOQN4CKfvRdsI/Ts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 17:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4010 (0xfaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Validity Not Before: Feb 28 17:38:42 2026 GMT Not After : Mar 7 17:38:42 2026 GMT Subject: CN=69a32822-aa43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d0:f2:91:16:13:10:4c:db:a4:ed:66:ae:fc: 35:56:77:71:26:c3:09:c2:80:7b:7d:b7:18:e4:1f: 76:e9:1c:6d:24:18:50:22:bf:96:3e:89:be:96:76: 49:55:b3:c4:aa:c2:7b:8c:2d:8e:70:7f:05:90:ba: f7:6f:c1:62:5b:84:70:34:ee:47:01:b1:b6:cc:fc: da:bc:c6:92:0a:e1:0c:12:37:6b:a4:cf:91:ee:13: a7:18:eb:14:4a:f4:60:76:f5:97:ef:46:55:f9:2f: 9b:3c:fc:f9:8a:72:e4:9a:f8:89:b8:5b:1c:1f:fa: 5c:90:5b:46:52:f4:46:a1:21:01:65:15:b0:cb:95: bf:43:31:a1:53:d7:aa:f8:0b:e5:d2:bf:93:5d:5f: 2b:e8:b3:06:39:f9:2d:fa:c4:e8:ba:0a:21:5d:f9: 25:fa:60:4f:c0:85:29:dd:73:5a:01:d6:89:9a:9e: 9b:9a:42:ca:70:8e:2e:5b:a7:08:ea:cb:2e:09:15: 54:68:1b:3c:83:b7:77:b9:61:f8:61:1f:17:43:4e: 9f:5e:5e:f0:c2:c8:39:d3:30:55:fa:ff:9a:c5:f8: fd:96:9b:b5:ad:63:62:93:b9:f4:65:57:d1:23:8a: c0:90:d4:bd:e0:1e:15:26:1e:23:a0:51:67:12:b1: 5e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E4:3B:10:C5:9C:5C:BB:BB:A0:7C:67:42:16:75:CF:74:99:97:49 X509v3 Authority Key Identifier: keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:42:ed:5f:bc:c0:4e:3b:14:0d:72:9b:87:69:58:7c:d1:ba: 76:fe:f2:cf:fd:70:ae:ce:d2:31:fd:29:34:3b:12:c0:be:8a: 30:ee:23:06:30:d7:2f:91:da:ed:c4:31:b2:8e:ff:29:d5:f4: a6:b4:d3:dc:05:e0:fc:2b:5d:ac:6c:66:39:1c:85:c9:f2:fa: 68:df:44:13:25:d1:e7:a0:1a:25:69:31:5d:9b:f7:7e:e1:f1: 9c:8f:ac:ef:4a:ad:1f:f8:cb:60:9c:36:a6:84:77:ec:6c:9a: 77:6e:4d:65:4b:be:46:97:c3:e9:b5:02:4a:78:d1:e1:d5:d6: 78:bf:a6:f0:4a:44:de:6b:2c:d0:b0:85:a5:7f:81:83:4f:ee: cc:f4:91:2a:17:d7:4d:a2:06:cc:7f:3c:da:1a:a8:ef:89:57: 45:e3:ca:15:74:73:dd:f3:8b:f9:3d:64:70:ba:0c:03:7c:17: 1a:18:8e:76:30:14:0a:38:0f:b0:4a:84:3e:d9:df:78:81:fd: 93:1f:6a:ee:ba:44:94:c9:be:44:e3:7e:58:8c:a6:6e:cc:0d: ac:ba:56:a9:a5:6c:7e:19:d0:71:c7:02:b1:52:2a:8d:87:98: 9c:19:ef:84:88:8a:f5:cb:95:4b:99:52:80:30:7e:57:f6:a1: 7a:65:63:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyQ0MxMTAvBgNVBAUTKEY5QjhGOTFEMjkyOEJFQUEzNTFDQzM0NUM0NzM2OTMy RkQ4NjM5RjEwHhcNMjYwMjI4MTczODQyWhcNMjYwMzA3MTczODQyWjAYMRYwFAYD VQQDDA02OWEzMjgyMi1hYTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtDykRYTEEzbpO1mrvw1VndxJsMJwoB7fbcY5B926RxtJBhQIr+WPom+lnZJ VbPEqsJ7jC2OcH8FkLr3b8FiW4RwNO5HAbG2zPzavMaSCuEMEjdrpM+R7hOnGOsU SvRgdvWX70ZV+S+bPPz5inLkmviJuFscH/pckFtGUvRGoSEBZRWwy5W/QzGhU9eq +Avl0r+TXV8r6LMGOfkt+sTougohXfkl+mBPwIUp3XNaAdaJmp6bmkLKcI4uW6cI 6ssuCRVUaBs8g7d3uWH4YR8XQ06fXl7wwsg50zBV+v+axfj9lpu1rWNik7n0ZVfR I4rAkNS94B4VJh4joFFnErFeHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK/kOxDF nFy7u6B8Z0IWdc90mZdJMB8GA1UdIwQYMBaAFPm4+R0pKL6qNRzDRcRzaTL9hjnx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzJDQy9DQzE5Mzg3Njc4 REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3ZxbzFITU5GeEhOcE12MkdP ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1iajVIU2tvdnFvMUhNTkZ4SE5wTXYyR09mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzJDQy9DQzE5Mzg3Njc4REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3Zx bzFITU5GeEhOcE12MkdPZkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP0LtX7zATjsUDXKbh2lYfNG6dv7yz/1wrs7SMf0pNDsSwL6KMO4jBjDXL5Ha 7cQxso7/KdX0prTT3AXg/CtdrGxmORyFyfL6aN9EEyXR56AaJWkxXZv3fuHxnI+s 70qtH/jLYJw2poR37Gyad25NZUu+RpfD6bUCSnjR4dXWeL+m8EpE3mss0LCFpX+B g0/uzPSRKhfXTaIGzH882hqo74lXRePKFXRz3fOL+T1kcLoMA3wXGhiOdjAUCjgP sEqEPtnfeIH9kx9q7rpElMm+RON+WIymbswNrLpWqaVsfhnQcccCsVIqjYeYnBnv hIiK9cuVS5lSgDB+V/ahemVjLw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:24:33 2026 by rpki-client