$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft File: Ns9cwKYOC31UYSoS61uYkoRobbA.mft (raw, json) Hash identifier: wK6otUx0E8WX2bf597teTij3BqohZqX3NMYr74o52LA= Subject key identifier: 68:EC:F6:85:BB:98:8D:34:BC:F5:C1:CA:47:69:94:A4:5E:07:5E:2E Authority key identifier: 36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0 Certificate issuer: /CN=A917ECA2/serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0 Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft Manifest number: 0219 Signing time: Sun 01 Mar 2026 03:38:10 +0000 Manifest this update: Sun 01 Mar 2026 03:38:10 +0000 Manifest next update: Sun 08 Mar 2026 03:38:10 +0000 Files and hashes: 1: Ns9cwKYOC31UYSoS61uYkoRobbA.crl (hash: rwIWJYn2BFi/k79/gpWwzq9MRwcsMNwUo56DbaByHVw=) 2: B188CE748E7011F08CF3B91AC4F9AE02.roa (hash: z9aB/eMQsAs4dx5UPgq7iMP6FyNI1Namac/Cs27VAaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ECA2, serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0 Validity Not Before: Mar 1 03:38:10 2026 GMT Not After : Mar 8 03:38:10 2026 GMT Subject: CN=69a3b4a2-dd10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b9:f7:93:72:f3:57:5b:c5:3e:97:7f:ce:9a: df:81:be:76:6f:a3:05:3d:20:a8:22:b3:68:3b:43: b4:2c:d6:fb:04:bb:90:ee:ce:98:53:af:00:f3:95: 55:9c:7e:93:16:a3:98:c4:7f:40:d9:69:1c:e3:8e: a5:dd:f3:94:d2:29:63:cd:da:cb:dd:f7:e9:ef:23: 26:59:07:f5:f4:85:5f:fb:7f:9f:de:55:c9:85:11: a4:e2:58:f8:9e:08:3c:f7:6f:9f:bc:fc:f1:3a:a9: ec:88:03:16:c2:6f:a7:2c:a8:ac:d8:39:dd:af:18: 06:f7:74:30:6e:3f:78:e8:be:76:72:73:49:83:44: 18:97:5e:d2:d8:ee:b4:ee:bc:5c:88:ec:9e:13:5b: 58:18:b4:21:af:1e:14:af:dd:af:2f:20:fb:7d:ce: e3:4d:85:91:5d:8d:bb:44:32:c4:ae:82:74:9b:d7: 02:12:f0:cb:81:c5:b4:f8:5e:96:93:db:1b:7a:d3: 04:ca:07:ec:12:58:07:5a:d5:7c:73:4e:2a:82:d1: 0a:6b:12:4f:09:6a:a2:ca:15:37:f2:97:40:94:18: 44:32:1d:17:fa:5a:0a:5f:7c:78:aa:ee:a9:4f:07: 78:26:c6:5e:da:b3:84:bf:5a:3b:a1:fc:27:3c:2f: 46:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:EC:F6:85:BB:98:8D:34:BC:F5:C1:CA:47:69:94:A4:5E:07:5E:2E X509v3 Authority Key Identifier: keyid:36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:41:57:87:9b:b5:ea:a5:f0:05:05:6b:3b:75:7e:5c:c1:33: 46:b5:02:e7:ff:a1:40:ce:3b:39:63:5c:df:ca:04:65:31:dd: 69:4c:8a:f9:e2:10:a2:71:2b:07:ac:90:b0:58:99:04:bc:68: 7c:d5:c7:ed:73:78:f1:4b:93:29:fb:a1:9e:7b:41:29:83:b3: 6c:43:32:c8:1e:52:d6:f1:a9:9c:af:79:11:5d:c3:70:e2:58: 1b:bc:35:55:58:8a:86:cf:2e:0e:7c:b9:50:12:b0:e5:61:55: aa:48:e8:04:e9:b7:61:d6:c1:c2:68:da:34:bb:75:1a:20:87: e6:70:7f:75:79:63:e3:06:e1:97:8a:4d:5e:38:ba:ad:67:84: 18:ad:7b:bb:47:c8:0a:44:d0:06:ca:ec:97:b6:87:0b:09:e1: 6c:5a:a5:df:00:02:98:fe:1a:93:c7:dd:36:00:91:ae:64:2a: 4a:40:e8:80:43:fc:6c:d7:08:d6:3b:f0:fe:0e:8e:c6:25:c8: 1a:1a:0b:a6:33:3f:d8:1e:ed:00:32:46:9e:bd:19:99:39:a2: 1a:93:f9:01:2a:dc:8f:76:9a:90:ac:89:26:b7:08:e1:ff:27: 50:3f:27:de:d0:33:ec:b8:2d:ff:5c:79:aa:f2:5d:2a:de:e3: d6:7a:e1:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDQTIxMTAvBgNVBAUTKDM2Q0Y1Q0MwQTYwRTBCN0Q1NDYxMkExMkVCNUI5ODky ODQ2ODZEQjAwHhcNMjYwMzAxMDMzODEwWhcNMjYwMzA4MDMzODEwWjAYMRYwFAYD VQQDDA02OWEzYjRhMi1kZDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurn3k3LzV1vFPpd/zprfgb52b6MFPSCoIrNoO0O0LNb7BLuQ7s6YU68A85VV nH6TFqOYxH9A2Wkc446l3fOU0iljzdrL3ffp7yMmWQf19IVf+3+f3lXJhRGk4lj4 ngg892+fvPzxOqnsiAMWwm+nLKis2DndrxgG93Qwbj946L52cnNJg0QYl17S2O60 7rxciOyeE1tYGLQhrx4Ur92vLyD7fc7jTYWRXY27RDLEroJ0m9cCEvDLgcW0+F6W k9sbetMEygfsElgHWtV8c04qgtEKaxJPCWqiyhU38pdAlBhEMh0X+loKX3x4qu6p Twd4JsZe2rOEv1o7ofwnPC9GVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGjs9oW7 mI00vPXBykdplKReB14uMB8GA1UdIwQYMBaAFDbPXMCmDgt9VGEqEutbmJKEaG2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUNBMi8wMjgyN0NGOEU0 MzcxMUVEQTg2NTYzMUFDNEY5QUUwMi9Oczljd0tZT0MzMVVZU29TNjF1WWtvUm9i YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05zOWN3S1lPQzMxVVlTb1M2MXVZa29Sb2JiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUNBMi8wMjgyN0NGOEU0MzcxMUVEQTg2NTYzMUFDNEY5QUUwMi9Oczljd0tZT0Mz MVVZU29TNjF1WWtvUm9iYkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOUFXh5u16qXwBQVrO3V+XMEzRrUC5/+hQM47OWNc38oEZTHdaUyK+eIQonEr B6yQsFiZBLxofNXH7XN48UuTKfuhnntBKYOzbEMyyB5S1vGpnK95EV3DcOJYG7w1 VViKhs8uDny5UBKw5WFVqkjoBOm3YdbBwmjaNLt1GiCH5nB/dXlj4wbhl4pNXji6 rWeEGK17u0fICkTQBsrsl7aHCwnhbFql3wACmP4ak8fdNgCRrmQqSkDogEP8bNcI 1jvw/g6OxiXIGhoLpjM/2B7tADJGnr0ZmTmiGpP5ASrcj3aakKyJJrcI4f8nUD8n 3tAz7Lgt/1x5qvJdKt7j1nrhlg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:27:23 2026 by rpki-client