$ rpki-client -vvf rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft File: CWjN62Rstqq8D0IyziOx3OVMrSA.mft (raw, json) Hash identifier: BuDhz+hJ54IKzoJYPIR1Ac2d8H20ksHxQomdJ/RfXK4= Subject key identifier: 7B:0A:4F:38:30:D0:6C:E7:5E:97:1F:A3:23:A9:E5:86:CD:82:0A:73 Authority key identifier: 09:68:CD:EB:64:6C:B6:AA:BC:0F:42:32:CE:23:B1:DC:E5:4C:AD:20 Certificate issuer: /CN=A9187CB1/serialNumber=0968CDEB646CB6AABC0F4232CE23B1DCE54CAD20 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft Manifest number: 4C Signing time: Sun 01 Mar 2026 09:41:48 +0000 Manifest this update: Sun 01 Mar 2026 09:41:47 +0000 Manifest next update: Sun 08 Mar 2026 09:41:47 +0000 Files and hashes: 1: CWjN62Rstqq8D0IyziOx3OVMrSA.crl (hash: b7G2gKAjw6m68HWq9bqNuKD51K013yAgZLE2Aejs9C0=) 2: C4FE3638A4D711F0A8D1DB3CC4F9AE02.roa (hash: bPau6Z6P+AYKpvnSxKbqaqw77/l2J2Yx/cJ0pxXB/hA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.crl rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187CB1, serialNumber=0968CDEB646CB6AABC0F4232CE23B1DCE54CAD20 Validity Not Before: Mar 1 09:41:47 2026 GMT Not After : Mar 8 09:41:47 2026 GMT Subject: CN=69a409dc-c8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:43:6b:96:59:8a:ff:f0:cd:3a:5c:ab:c9:47: ec:02:dc:6c:2a:d8:78:91:a6:0a:ab:ec:91:1e:d3: 3d:c7:46:d9:e7:dc:43:3e:e0:74:e4:1c:d2:17:50: e8:5e:bd:a5:51:ec:d2:f1:b5:56:0d:cc:3d:9d:9c: ab:55:8d:d8:40:6f:fe:54:76:7e:dd:d1:57:eb:55: 35:fc:8e:01:0f:33:01:6e:3f:f3:40:a6:0c:3f:52: 2e:f0:a4:97:d6:a7:48:77:81:cd:16:09:da:c7:5a: 4b:31:77:e2:a7:a9:21:7d:3c:83:cd:31:69:23:dd: 32:cf:c5:ef:2f:07:7e:6f:75:a4:ce:c1:01:8e:dc: f4:89:d3:da:69:2a:7b:8d:d2:bc:45:b8:85:5c:ed: f9:08:f3:c2:9b:d2:37:98:68:9a:92:70:38:af:a2: 0c:c1:17:87:b4:6b:0c:03:87:6a:e6:01:fa:d0:32: 87:97:11:40:9e:0a:b9:97:3c:ab:bb:3c:fe:55:cf: 6c:c9:64:c2:d3:27:be:a5:5e:39:c0:50:7d:77:5f: 3b:f8:d5:05:11:61:9d:d0:da:91:d1:ad:0c:91:b7: 21:7c:a2:2d:21:cd:2b:dc:45:6c:70:b6:2b:9b:f7: 5d:19:fa:45:3a:b7:dc:af:cf:c9:6f:99:a4:66:ca: 96:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0A:4F:38:30:D0:6C:E7:5E:97:1F:A3:23:A9:E5:86:CD:82:0A:73 X509v3 Authority Key Identifier: keyid:09:68:CD:EB:64:6C:B6:AA:BC:0F:42:32:CE:23:B1:DC:E5:4C:AD:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:82:fb:03:f5:eb:60:97:17:77:9e:1a:ae:64:92:25:a4:d1: f1:fd:d4:a8:f0:c6:c8:b0:02:3a:df:e5:9a:11:c6:ac:27:99: e1:5b:c9:cd:b5:51:fd:2e:68:8c:2f:2e:cf:75:c2:bf:82:cf: bf:10:5d:13:b6:6f:d8:57:0a:03:a2:fa:8f:bf:cb:6f:a9:b3: ee:50:12:00:73:7f:8e:29:aa:9b:1e:2e:ee:35:53:ff:7e:b0: 08:35:a8:90:53:a2:eb:cd:17:21:e1:02:b1:5b:61:7d:05:04: 01:38:18:33:9f:cc:6c:b6:dd:49:4c:d2:2f:83:63:a0:08:56: 7a:70:0a:d1:a3:d5:b5:84:3e:20:3e:f5:1e:95:91:c1:d0:be: f8:f8:93:f4:ca:08:66:ed:e0:91:a6:d3:6a:8a:ce:1e:70:0e: bc:fb:c2:c9:2f:51:9b:5a:d7:cc:1b:46:5a:23:e8:2d:9d:5a: c8:c6:e2:9f:0e:e7:8d:a3:46:7c:c2:2c:cc:cc:5f:55:3b:98: f8:1a:a3:05:c6:16:e3:2b:d3:48:6b:aa:ce:a4:c2:d4:d7:bc: 65:58:cf:27:af:be:84:1b:e5:f0:79:ca:9f:41:cd:2a:e5:1c: c1:f3:9b:54:8f:05:7f:78:2d:a9:a9:d3:ff:ee:35:f2:93:c4: f5:f3:65:02 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0NCMTExMC8GA1UEBRMoMDk2OENERUI2NDZDQjZBQUJDMEY0MjMyQ0UyM0IxRENF NTRDQUQyMDAeFw0yNjAzMDEwOTQxNDdaFw0yNjAzMDgwOTQxNDdaMBgxFjAUBgNV BAMTDTY5YTQwOWRjLWM4ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2Q2uWWYr/8M06XKvJR+wC3Gwq2HiRpgqr7JEe0z3HRtnn3EM+4HTkHNIXUOhe vaVR7NLxtVYNzD2dnKtVjdhAb/5Udn7d0VfrVTX8jgEPMwFuP/NApgw/Ui7wpJfW p0h3gc0WCdrHWksxd+KnqSF9PIPNMWkj3TLPxe8vB35vdaTOwQGO3PSJ09ppKnuN 0rxFuIVc7fkI88Kb0jeYaJqScDivogzBF4e0awwDh2rmAfrQMoeXEUCeCrmXPKu7 PP5Vz2zJZMLTJ76lXjnAUH13Xzv41QURYZ3Q2pHRrQyRtyF8oi0hzSvcRWxwtiub 910Z+kU6t9yvz8lvmaRmypZpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUewpPODDQ bOdelx+jI6nlhs2CCnMwHwYDVR0jBBgwFoAUCWjN62Rstqq8D0IyziOx3OVMrSAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3Q0IxLzFDODk0MEE2QTRE NzExRjBCMzQwRkM4MUM0RjlBRTAyL0NXak42MlJzdHFxOEQwSXl6aU94M09WTXJT QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1dqTjYyUnN0cXE4RDBJeXppT3gzT1ZNclNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 Q0IxLzFDODk0MEE2QTRENzExRjBCMzQwRkM4MUM0RjlBRTAyL0NXak42MlJzdHFx OEQwSXl6aU94M09WTXJTQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDJgvsD9etglxd3nhquZJIlpNHx/dSo8MbIsAI63+WaEcasJ5nhW8nNtVH9LmiM Ly7PdcK/gs+/EF0Ttm/YVwoDovqPv8tvqbPuUBIAc3+OKaqbHi7uNVP/frAINaiQ U6LrzRch4QKxW2F9BQQBOBgzn8xstt1JTNIvg2OgCFZ6cArRo9W1hD4gPvUelZHB 0L74+JP0yghm7eCRptNqis4ecA68+8LJL1GbWtfMG0ZaI+gtnVrIxuKfDueNo0Z8 wizMzF9VO5j4GqMFxhbjK9NIa6rOpMLU17xlWM8nr76EG+XwecqfQc0q5RzB85tU jwV/eC2pqdP/7jXyk8T182UC -----END CERTIFICATE-----Generated at Mon Mar 2 09:30:13 2026 by rpki-client