$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft File: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft (raw, json) Hash identifier: +xEdos75qvB8PkcVwIrPk7NtbZ9d/M4My57xduoWYYA= Subject key identifier: B5:B0:67:5B:78:CB:2A:F9:9F:58:5A:8E:F4:B1:B7:9F:5C:06:97:C6 Authority key identifier: 0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F Certificate issuer: /CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft Manifest number: 01C8 Signing time: Mon 02 Mar 2026 01:50:59 +0000 Manifest this update: Mon 02 Mar 2026 01:50:57 +0000 Manifest next update: Mon 09 Mar 2026 01:50:57 +0000 Files and hashes: 1: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl (hash: Yg2mKiXEF1QerYmOoOor6RclqxqzcaDwJikp8Iu8120=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883, serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Validity Not Before: Mar 2 01:50:57 2026 GMT Not After : Mar 9 01:50:57 2026 GMT Subject: CN=69a4ed02-11bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b9:ae:6c:9b:26:22:fa:a1:53:cf:80:c8:67: 86:38:73:63:62:25:ec:c1:14:aa:be:bd:42:af:f2: e1:0e:91:83:fd:33:62:e9:50:e7:40:61:d4:a9:a0: 98:59:e8:0b:72:5c:0e:33:e9:df:88:8c:5c:f3:ca: 14:34:61:d7:88:40:82:f0:6f:6e:ce:51:d7:3a:fa: e8:4c:9c:36:c8:5a:84:41:a4:5a:11:ce:1f:60:05: 7f:51:f2:28:69:70:d8:c9:a5:28:6c:f2:5c:ed:27: ab:ca:89:7c:f2:71:64:b8:89:54:24:ab:5a:ae:bd: 1f:e1:c0:a4:ef:33:6d:0b:89:97:05:2a:28:6e:c8: 0a:42:06:7d:39:bb:5c:76:1e:bd:94:62:8c:a9:92: af:69:ad:6f:35:8d:93:e0:98:f6:3a:86:77:e2:ea: a5:47:1c:ac:55:ce:4c:27:db:62:29:87:22:85:4b: 4d:1e:4a:89:47:99:84:dd:90:71:9c:af:3c:42:98: db:8c:64:da:df:67:8c:2f:05:b3:af:f0:f7:66:5a: d6:89:f7:df:60:45:01:54:9a:aa:79:b5:2f:9e:8d: 6b:4b:4a:dd:97:90:48:92:14:01:36:70:63:9d:e9: eb:48:df:b3:23:d9:c2:c1:ab:08:f0:53:6b:bf:c1: 2e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B0:67:5B:78:CB:2A:F9:9F:58:5A:8E:F4:B1:B7:9F:5C:06:97:C6 X509v3 Authority Key Identifier: keyid:0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:41:f9:c6:0f:11:a1:ee:f9:86:49:32:96:fb:5f:b9:25:d4: 5b:2f:97:ca:d3:ad:71:15:c5:09:8d:c3:0c:56:dc:d5:e5:27: 14:69:18:89:c3:6a:6c:d1:6b:2d:1c:73:d5:e7:65:d1:de:37: 2c:0a:a8:7e:20:b9:df:60:b6:cf:e9:ab:6c:ac:37:30:9f:02: bd:71:7d:7e:88:6f:fe:8a:05:af:3b:3a:5d:3b:14:bc:bb:42: f2:d3:ed:27:60:a4:45:3e:62:96:bb:0a:f1:8f:ac:1c:5a:cc: bd:d3:8b:b6:5c:d7:82:ee:0f:9d:84:d0:e9:62:aa:76:4c:f8: 2f:fe:8a:08:44:ea:8b:81:30:e7:1c:6a:88:eb:c1:23:57:9e: ef:aa:b6:a8:b3:25:e3:84:b5:91:98:d4:95:ba:22:d1:ad:55: f2:71:6f:02:de:32:21:5b:f1:d8:11:a8:62:e1:3e:b7:f2:45: 20:24:52:13:5e:a2:9a:2f:8d:89:09:a9:42:5a:8f:1f:0a:8a: 80:a1:5e:b6:dd:51:f7:68:21:06:fc:13:d5:5e:a5:dd:ef:92: 2e:aa:5d:4d:1e:36:57:90:91:45:70:65:a6:64:31:5a:b0:f4: c8:3d:01:e3:15:e6:38:22:22:45:78:22:a7:46:75:db:9e:f7: f6:1f:2b:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4ODMxMTAvBgNVBAUTKDBGRDcwRTc4QTEwRTA5MThFRjFDOUREODJBRTJFOUZE QzM1QUE0OUYwHhcNMjYwMzAyMDE1MDU3WhcNMjYwMzA5MDE1MDU3WjAYMRYwFAYD VQQDEw02OWE0ZWQwMi0xMWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LmubJsmIvqhU8+AyGeGOHNjYiXswRSqvr1Cr/LhDpGD/TNi6VDnQGHUqaCY WegLclwOM+nfiIxc88oUNGHXiECC8G9uzlHXOvroTJw2yFqEQaRaEc4fYAV/UfIo aXDYyaUobPJc7Seryol88nFkuIlUJKtarr0f4cCk7zNtC4mXBSoobsgKQgZ9Obtc dh69lGKMqZKvaa1vNY2T4Jj2OoZ34uqlRxysVc5MJ9tiKYcihUtNHkqJR5mE3ZBx nK88QpjbjGTa32eMLwWzr/D3ZlrWifffYEUBVJqqebUvno1rS0rdl5BIkhQBNnBj nenrSN+zI9nCwasI8FNrv8Eu+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLWwZ1t4 yyr5n1hajvSxt59cBpfGMB8GA1UdIwQYMBaAFA/XDnihDgkY7xyd2Cri6f3DWqSf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9CMTIyMjg0NjVD NTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NSanZISjNZS3VMcF9jTmFw SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5Y09lS0VPQ1JqdkhKM1lLdUxwX2NOYXBKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njg4My9CMTIyMjg0NjVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NS anZISjNZS3VMcF9jTmFwSjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcEH5xg8Roe75hkkylvtfuSXUWy+XytOtcRXFCY3DDFbc1eUnFGkYicNqbNFr LRxz1edl0d43LAqofiC532C2z+mrbKw3MJ8CvXF9fohv/ooFrzs6XTsUvLtC8tPt J2CkRT5ilrsK8Y+sHFrMvdOLtlzXgu4PnYTQ6WKqdkz4L/6KCETqi4Ew5xxqiOvB I1ee76q2qLMl44S1kZjUlboi0a1V8nFvAt4yIVvx2BGoYuE+t/JFICRSE16imi+N iQmpQlqPHwqKgKFett1R92ghBvwT1V6l3e+SLqpdTR42V5CRRXBlpmQxWrD0yD0B 4xXmOCIiRXgip0Z125739h8r6A== -----END CERTIFICATE-----Generated at Mon Mar 2 13:25:09 2026 by rpki-client