$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft File: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft (raw, json) Hash identifier: cCnL/czhcXIPmizCmPhGrXzxXd89rTS2hEpoNCJrnxI= Subject key identifier: 0D:90:A7:0F:FC:BF:E3:F7:6B:23:AC:01:14:E5:6E:33:F4:65:20:9A Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Certificate serial: 09C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft Manifest number: 0920 Signing time: Sat 28 Feb 2026 21:02:57 +0000 Manifest this update: Sat 28 Feb 2026 21:02:56 +0000 Manifest next update: Sat 07 Mar 2026 21:02:56 +0000 Files and hashes: 1: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl (hash: x+AbYcfzrKI3WVEFrhJhFignXBcwkFZlx+kzJjGy5C0=) 2: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (hash: I3D7DEeHdvNv2myIShwVUEjU7kH8j/IxEsxXCcOojFU=) 3: A98F7960A41F11F0A133244EC4F9AE02.roa (hash: wVCG2VGDbiE9LIJ+RohCK2UlytoDpY6tMaj0r14LtRs=) 4: B84CC7D2A41A11F08EC1655BC4F9AE02.roa (hash: BDzw5D5CcIPm56khil5lg8M53qDwHx2+4ZYsOb/1Mtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 21:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2497 (0x9c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Validity Not Before: Feb 28 21:02:56 2026 GMT Not After : Mar 7 21:02:56 2026 GMT Subject: CN=69a35800-3bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:63:11:e7:09:e0:62:45:b1:fe:19:53:93:bc: ee:10:cb:f8:be:44:50:fa:8b:28:a7:7e:8e:e1:3b: 3d:99:1d:c3:ae:ab:e1:68:79:bf:29:b3:ce:e3:17: 2b:4d:f7:5f:13:97:72:c9:50:d6:c0:2e:4f:a6:8e: 6d:4f:75:bc:ee:c7:33:cc:71:0a:18:5f:7d:59:28: 12:eb:15:c5:59:06:a8:21:b2:6d:cd:c3:d1:92:3e: 52:81:bc:29:0f:05:6f:de:5f:af:85:f5:72:25:1d: 10:22:ec:ef:d7:b8:72:5b:a1:38:8c:35:bf:71:c3: 86:6f:d0:49:54:b0:29:79:83:5d:d7:07:aa:7d:3e: b5:20:fe:9f:7e:30:4d:e5:e9:6a:89:29:88:c8:c2: fe:ad:a1:66:5e:aa:30:42:e7:f0:84:98:25:95:f0: bd:7f:c6:ac:8b:af:3b:54:14:a1:40:ff:b3:94:8f: f5:ed:87:db:e5:e1:c5:52:18:e1:9f:0f:97:41:d5: 5d:02:b2:5a:fd:da:b5:a9:33:f4:1c:24:1a:6d:37: 4b:2b:84:39:15:92:18:c9:fd:57:25:55:84:9d:cd: cc:31:a7:fa:bf:99:db:81:ee:dd:61:f4:e9:29:5e: 24:53:32:bd:52:4d:92:c4:3a:ce:7b:fc:db:e4:7c: cf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:90:A7:0F:FC:BF:E3:F7:6B:23:AC:01:14:E5:6E:33:F4:65:20:9A X509v3 Authority Key Identifier: keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:b8:39:d3:cd:b1:2d:d5:8b:77:75:c4:d0:c2:7a:62:a7:6b: 5a:c4:6c:ca:ba:23:7e:9b:cf:a1:60:bf:22:35:33:b2:dd:47: 47:ba:38:01:3c:44:46:d1:b8:f5:35:45:f7:5f:7f:25:8f:fa: 42:35:dd:e4:23:6e:7e:31:97:1f:98:a7:13:8e:e3:c4:b7:9e: 15:35:98:ce:ec:25:fb:0d:09:90:ce:69:4f:46:42:ed:9b:5b: 23:14:5c:e5:8f:57:ca:84:9e:18:61:27:87:ab:94:73:22:fa: ee:76:45:a0:41:af:ef:13:52:96:a4:2d:da:d9:8b:cd:3c:3d: ca:63:44:97:e6:ca:27:7d:8f:b5:57:c0:f0:4d:67:2e:f2:1a: c5:f9:c2:b1:72:72:3a:c4:b1:dc:ab:f1:f9:a4:3e:4e:8e:a5: 46:96:7e:3d:a2:5e:cf:f6:40:d2:37:00:b8:c4:5c:86:e9:0d: 38:96:f8:0a:76:03:76:1c:d6:79:fe:74:a2:7f:19:e2:d1:d1: 8f:04:5c:ac:60:c9:38:8d:74:24:1d:70:d9:7c:e5:dc:cb:57: ce:71:12:1d:79:63:e4:63:f2:e0:65:d1:ea:de:df:b2:fb:58: 10:fd:18:ab:c1:02:e8:86:b8:c8:a9:70:8d:b5:87:a1:11:7d: 80:d1:91:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0 OTQ5OTcxNjIwHhcNMjYwMjI4MjEwMjU2WhcNMjYwMzA3MjEwMjU2WjAYMRYwFAYD VQQDDA02OWEzNTgwMC0zYmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mMR5wngYkWx/hlTk7zuEMv4vkRQ+osop36O4Ts9mR3DrqvhaHm/KbPO4xcr TfdfE5dyyVDWwC5Ppo5tT3W87sczzHEKGF99WSgS6xXFWQaoIbJtzcPRkj5Sgbwp DwVv3l+vhfVyJR0QIuzv17hyW6E4jDW/ccOGb9BJVLApeYNd1weqfT61IP6ffjBN 5elqiSmIyML+raFmXqowQufwhJgllfC9f8asi687VBShQP+zlI/17Yfb5eHFUhjh nw+XQdVdArJa/dq1qTP0HCQabTdLK4Q5FZIYyf1XJVWEnc3MMaf6v5nbge7dYfTp KV4kUzK9Uk2SxDrOe/zb5HzP7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA2Qpw/8 v+P3ayOsARTlbjP0ZSCaMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDA0RS9CQzAzMEM3NkYxREExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFE S0Q4TXEwUGkzR0ZKU1pjV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl7g5082xLdWLd3XE0MJ6YqdrWsRsyrojfpvPoWC/IjUzst1HR7o4ATxERtG4 9TVF919/JY/6QjXd5CNufjGXH5inE47jxLeeFTWYzuwl+w0JkM5pT0ZC7ZtbIxRc 5Y9XyoSeGGEnh6uUcyL67nZFoEGv7xNSlqQt2tmLzTw9ymNEl+bKJ32PtVfA8E1n LvIaxfnCsXJyOsSx3Kvx+aQ+To6lRpZ+PaJez/ZA0jcAuMRchukNOJb4CnYDdhzW ef50on8Z4tHRjwRcrGDJOI10JB1w2Xzl3MtXznESHXlj5GPy4GXR6t7fsvtYEP0Y q8EC6Ia4yKlwjbWHoRF9gNGRBg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:10:31 2026 by rpki-client