$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft File: 0aHv0iQTWusJg56ovbjNxZnOZX8.mft (raw, json) Hash identifier: siZqyALHm8oMI+Yp6NB3V20nb3Zd7+CTdUS1qtsshtQ= Subject key identifier: E9:0B:87:6A:AE:12:5C:BA:D3:3C:4D:91:1E:6A:65:E2:8E:4C:72:58 Authority key identifier: D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F Certificate issuer: /CN=A917D9FC/serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F Certificate serial: 0524 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft Manifest number: 051C Signing time: Mon 02 Mar 2026 03:06:24 +0000 Manifest this update: Mon 02 Mar 2026 03:06:20 +0000 Manifest next update: Mon 09 Mar 2026 03:06:20 +0000 Files and hashes: 1: 0aHv0iQTWusJg56ovbjNxZnOZX8.crl (hash: UhvNObUkpPxyp0iLzrGhm0aFfB/R6zJVqjydvl9P/Bk=) 2: AD94C92242BA11ECB1E8FF11C4F9AE02.roa (hash: pPVg90RNjRjphrQIpFi1Dtq7Yfiqt2CKG2uE/Sw0pBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.crl rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1316 (0x524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9FC, serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F Validity Not Before: Mar 2 03:06:20 2026 GMT Not After : Mar 9 03:06:20 2026 GMT Subject: CN=69a4feaf-caf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ce:42:5e:5c:90:36:8e:4e:fe:3b:95:44:75: ca:05:8e:53:cc:8e:50:1d:d0:1b:4f:73:dd:5d:c8: fe:d3:e2:e9:1a:58:5b:33:3b:7c:09:2e:16:dc:2d: 9a:02:1d:77:bf:84:ae:e1:85:09:97:c8:65:d2:c1: 75:80:53:c0:fb:5a:88:73:d7:dc:5b:ec:6b:d5:81: 7b:42:4c:00:ba:ad:e3:98:a9:23:da:87:45:bf:cf: 8f:fb:dd:bb:07:07:03:73:5b:41:6a:89:f1:ca:dd: 22:d3:8c:05:ef:c9:0d:61:2f:94:7a:b9:ee:e7:97: 65:52:52:69:06:04:c8:43:1c:fc:78:e9:34:f7:53: 56:64:c4:19:37:c8:67:f6:a5:37:25:7b:5c:af:5e: 59:66:1d:f1:87:e9:7f:47:3c:9f:4a:74:6e:1e:4c: 87:0f:20:b9:98:09:b7:a4:e8:9f:c6:1c:94:15:15: f8:e1:b1:9d:3f:37:38:8e:fd:88:18:48:eb:2d:bc: 53:7a:e3:24:68:99:3d:6a:af:e3:e8:14:c4:b7:3b: a8:ed:eb:37:0e:36:69:f2:90:1b:96:1a:0a:af:0e: c2:ef:8b:c3:5c:f9:a2:91:ae:5e:d2:86:8c:66:3a: c2:26:c6:7c:f7:70:dc:4f:e2:cb:0b:28:8f:2d:2f: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0B:87:6A:AE:12:5C:BA:D3:3C:4D:91:1E:6A:65:E2:8E:4C:72:58 X509v3 Authority Key Identifier: keyid:D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:b3:4f:72:32:82:69:53:6c:e6:4a:e1:03:05:23:1a:5c:50: 8c:73:0f:c7:d8:77:4f:58:b5:98:cb:5b:21:24:0e:02:32:91: 53:cd:95:25:2b:e9:96:5b:42:1f:3a:e3:36:7e:1f:e1:e3:af: 74:da:cd:cf:e0:04:f0:92:2f:df:8b:a5:52:19:fe:81:3e:7d: fe:9e:da:6f:bd:6f:bc:15:bd:ac:32:b3:3e:10:b7:3c:e7:aa: 15:04:e1:13:91:9f:f3:4d:cc:df:6f:7d:9f:44:5c:af:a9:15: e7:1f:47:c6:a0:c6:4e:f2:a3:06:36:db:09:58:b7:b7:80:b4: 59:a3:34:01:f1:06:6d:15:26:bd:e2:77:c4:10:00:71:0a:3e: 38:da:05:04:d8:77:1c:52:01:ff:d8:84:c7:93:19:9e:5e:e6: b2:b3:4c:f7:ea:61:87:2b:94:49:99:14:89:29:9e:19:62:26: f1:be:71:21:dc:b0:d4:6c:ee:b4:9a:fc:8a:d9:27:57:2c:a9: 7c:03:28:44:b9:f8:61:36:75:03:e1:b9:1d:d8:91:23:6a:eb: 49:ac:4f:55:a3:4f:12:ea:27:52:e0:07:b6:df:dc:e4:c7:b2: 4a:72:3a:33:c8:a1:32:08:82:f8:87:f3:70:be:f7:ad:8e:d2: b2:76:04:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5RkMxMTAvBgNVBAUTKEQxQTFFRkQyMjQxMzVBRUIwOTgzOUVBOEJEQjhDREM1 OTlDRTY1N0YwHhcNMjYwMzAyMDMwNjIwWhcNMjYwMzA5MDMwNjIwWjAYMRYwFAYD VQQDEw02OWE0ZmVhZi1jYWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv85CXlyQNo5O/juVRHXKBY5TzI5QHdAbT3PdXcj+0+LpGlhbMzt8CS4W3C2a Ah13v4Su4YUJl8hl0sF1gFPA+1qIc9fcW+xr1YF7QkwAuq3jmKkj2odFv8+P+927 BwcDc1tBaonxyt0i04wF78kNYS+Uernu55dlUlJpBgTIQxz8eOk091NWZMQZN8hn 9qU3JXtcr15ZZh3xh+l/RzyfSnRuHkyHDyC5mAm3pOifxhyUFRX44bGdPzc4jv2I GEjrLbxTeuMkaJk9aq/j6BTEtzuo7es3DjZp8pAblhoKrw7C74vDXPmika5e0oaM ZjrCJsZ893DcT+LLCyiPLS9DcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOkLh2qu Ely60zxNkR5qZeKOTHJYMB8GA1UdIwQYMBaAFNGh79IkE1rrCYOeqL24zcWZzmV/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy83QTMwMkQwMDQy QjExMUVDOUYyNEEwNkVDNEY5QUUwMi8wYUh2MGlRVFd1c0pnNTZvdmJqTnhabk9a WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBhSHYwaVFUV3VzSmc1Nm92YmpOeFpuT1pYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDlGQy83QTMwMkQwMDQyQjExMUVDOUYyNEEwNkVDNEY5QUUwMi8wYUh2MGlRVFd1 c0pnNTZvdmJqTnhabk9aWDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg7NPcjKCaVNs5krhAwUjGlxQjHMPx9h3T1i1mMtbISQOAjKRU82VJSvplltC HzrjNn4f4eOvdNrNz+AE8JIv34ulUhn+gT59/p7ab71vvBW9rDKzPhC3POeqFQTh E5Gf803M3299n0Rcr6kV5x9HxqDGTvKjBjbbCVi3t4C0WaM0AfEGbRUmveJ3xBAA cQo+ONoFBNh3HFIB/9iEx5MZnl7msrNM9+phhyuUSZkUiSmeGWIm8b5xIdyw1Gzu tJr8itknVyypfAMoRLn4YTZ1A+G5HdiRI2rrSaxPVaNPEuonUuAHtt/c5MeySnI6 M8ihMgiC+IfzcL73rY7SsnYE6w== -----END CERTIFICATE-----Generated at Mon Mar 2 12:00:49 2026 by rpki-client