$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft File: dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft (raw, json) Hash identifier: 3dccSWmON3RJBlFFO2lfTDY5rS45x7TDSzWqPvqrJhE= Subject key identifier: 2D:D6:7F:F9:F5:88:2F:C3:49:19:EE:2D:B5:E9:F0:1E:D5:A2:3E:B8 Authority key identifier: 74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13 Certificate issuer: /CN=A9185259/serialNumber=745036097429CC1AC76C4C99898D06F83E075C13 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft Manifest number: 52 Signing time: Sun 01 Mar 2026 09:38:07 +0000 Manifest this update: Sun 01 Mar 2026 09:38:07 +0000 Manifest next update: Sun 08 Mar 2026 09:38:07 +0000 Files and hashes: 1: dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl (hash: 3sE3kEFQXra+i5mLH0SVpjCS5U+/ARZHIPGB0UNsco0=) 2: 991FC9309CFA11F08F0A1549C4F9AE02.roa (hash: vBEx8MN3paA8oMvLUSfioDhDYGeEtTZ7/oH2tL94g1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185259, serialNumber=745036097429CC1AC76C4C99898D06F83E075C13 Validity Not Before: Mar 1 09:38:07 2026 GMT Not After : Mar 8 09:38:07 2026 GMT Subject: CN=69a408ff-89e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:21:c1:25:cf:5c:a6:18:39:22:03:66:e6:b2: 85:81:33:53:de:34:85:aa:8f:10:15:62:2e:10:e7: 0f:f9:e1:23:9b:55:d3:5f:fd:1e:a9:1d:8d:eb:ab: f3:13:67:0e:e0:26:ca:68:2b:f2:0c:56:71:90:7a: 40:16:ae:3a:19:8e:aa:e6:6f:58:81:9e:ae:75:1f: e4:8d:d3:9f:b3:41:64:4c:03:9f:62:b0:c9:b4:85: 12:12:d1:a8:77:ed:cd:b8:57:03:ec:fe:df:fb:d3: 0f:88:65:4b:ad:42:d7:61:f3:44:bb:7a:61:9c:93: b1:03:8f:22:6d:1e:23:5a:e2:c9:ba:51:61:d9:68: 7c:96:0c:4e:98:b6:04:42:a0:8f:b4:ba:cb:be:4e: 2e:21:74:c5:1f:2f:b3:71:3c:ee:b6:dd:1b:f7:59: 8b:5c:f4:cc:57:36:87:dd:74:38:24:2f:87:fb:fa: f6:52:5b:5e:9c:d5:c4:d9:60:d9:e6:e1:f4:33:69: 74:58:77:c6:43:68:62:ac:12:47:89:7a:e6:49:6b: 0e:02:ed:b6:f4:f7:c6:96:6c:af:d2:7b:4f:16:9e: 16:8c:d9:f0:46:bc:6a:d4:f0:9b:c5:81:25:c1:40: 07:f5:37:6e:c5:e7:31:f7:ad:a5:f5:f0:ce:33:90: dc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D6:7F:F9:F5:88:2F:C3:49:19:EE:2D:B5:E9:F0:1E:D5:A2:3E:B8 X509v3 Authority Key Identifier: keyid:74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:50:cf:61:c4:29:5e:a3:c1:f4:02:b9:78:ac:de:ae:ef:6a: 73:b9:4e:50:39:08:cf:7f:b1:94:00:ed:ad:b6:06:2f:94:8a: d8:bf:eb:7d:eb:be:3e:58:19:93:f0:b0:a1:49:cb:74:8f:80: fb:26:9a:9b:a2:a4:06:bf:32:22:28:e4:86:5d:a7:3a:1c:aa: 15:85:a4:cd:07:09:40:c1:2a:a6:89:e7:b3:dd:56:31:c6:43: c2:fd:f9:b5:2d:57:ec:49:8e:7b:90:82:67:7f:61:24:77:62: 67:ac:06:e2:a4:35:de:de:d0:ff:bf:b6:af:2e:78:3e:17:69: ee:d8:aa:72:c5:0c:e7:c6:76:94:c2:d7:49:ac:aa:2c:2a:ec: 41:fe:68:d9:40:48:ac:0c:85:52:90:62:ce:4f:db:c4:cd:fa: 0c:54:19:46:95:e5:26:4e:f1:3a:54:c3:0c:e6:c9:b7:0b:d1: 73:2d:ac:67:ab:a5:48:31:ae:32:ae:32:5a:ab:51:db:87:2c: 3c:42:23:9d:a9:61:e9:25:df:1a:62:16:14:21:b1:1e:83:4f: 56:19:f2:a9:5d:fb:26:bc:58:14:3d:16:a1:fe:13:a6:a3:72: 13:3e:c8:67:8b:fd:d4:93:56:c1:e3:8a:3c:f8:5d:4c:75:9d: 52:30:05:29 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NTI1OTExMC8GA1UEBRMoNzQ1MDM2MDk3NDI5Q0MxQUM3NkM0Qzk5ODk4RDA2Rjgz RTA3NUMxMzAeFw0yNjAzMDEwOTM4MDdaFw0yNjAzMDgwOTM4MDdaMBgxFjAUBgNV BAMTDTY5YTQwOGZmLTg5ZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJIcElz1ymGDkiA2bmsoWBM1PeNIWqjxAVYi4Q5w/54SObVdNf/R6pHY3rq/MT Zw7gJspoK/IMVnGQekAWrjoZjqrmb1iBnq51H+SN05+zQWRMA59isMm0hRIS0ah3 7c24VwPs/t/70w+IZUutQtdh80S7emGck7EDjyJtHiNa4sm6UWHZaHyWDE6YtgRC oI+0usu+Ti4hdMUfL7NxPO623Rv3WYtc9MxXNofddDgkL4f7+vZSW16c1cTZYNnm 4fQzaXRYd8ZDaGKsEkeJeuZJaw4C7bb098aWbK/Se08WnhaM2fBGvGrU8JvFgSXB QAf1N27F5zH3raX18M4zkNz1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULdZ/+fWI L8NJGe4ttenwHtWiPrgwHwYDVR0jBBgwFoAUdFA2CXQpzBrHbEyZiY0G+D4HXBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1MjU5L0ZGOTA5MjhDOUNG ODExRjA4ODEyREUxRUM0RjlBRTAyL2RGQTJDWFFwekJySGJFeVppWTBHLUQ0SFhC TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZEZBMkNYUXB6QnJIYkV5WmlZMEctRDRIWEJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 MjU5L0ZGOTA5MjhDOUNGODExRjA4ODEyREUxRUM0RjlBRTAyL2RGQTJDWFFwekJy SGJFeVppWTBHLUQ0SFhCTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAeUM9hxCleo8H0Arl4rN6u72pzuU5QOQjPf7GUAO2ttgYvlIrYv+t9674+WBmT 8LChSct0j4D7JpqboqQGvzIiKOSGXac6HKoVhaTNBwlAwSqmieez3VYxxkPC/fm1 LVfsSY57kIJnf2Ekd2JnrAbipDXe3tD/v7avLng+F2nu2KpyxQznxnaUwtdJrKos KuxB/mjZQEisDIVSkGLOT9vEzfoMVBlGleUmTvE6VMMM5sm3C9FzLaxnq6VIMa4y rjJaq1Hbhyw8QiOdqWHpJd8aYhYUIbEeg09WGfKpXfsmvFgUPRah/hOmo3ITPshn i/3Uk1bB44o8+F1MdZ1SMAUp -----END CERTIFICATE-----Generated at Mon Mar 2 12:49:57 2026 by rpki-client