$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json) Hash identifier: f2IeUqC538k5u7XMSqmC53FL+JjB0i0M8x7fvTiw2XI= Subject key identifier: 10:49:97:E5:EA:9C:66:5D:53:01:40:21:61:8B:2E:25:83:FE:B6:96 Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0D47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft Manifest number: 0D29 Signing time: Sat 28 Feb 2026 18:13:35 +0000 Manifest this update: Sat 28 Feb 2026 18:13:35 +0000 Manifest next update: Sat 07 Mar 2026 18:13:35 +0000 Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: ttg86c4EdLNfeIWknJlWmnlcw8BLpfjknLlNwg2siU4=) 2: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: bcWV9If/HkIEw6hnBH3pLaQkTOmCSNPL+NkOOV2t9w0=) 3: 4AD97410632C11EE96048122C4F9AE02.roa (hash: Kha4B3O3qamR+l9aTTTF0PytPbYw8JUKGu9zz6Pcn9M=) 4: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: 9K94XURicN1zdV3E+GS8wi/6Xv8R6a1xqP7qJN2QSyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 18:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3399 (0xd47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: Feb 28 18:13:35 2026 GMT Not After : Mar 7 18:13:35 2026 GMT Subject: CN=69a3304f-f0d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:a2:11:37:4c:d7:61:14:81:1e:2c:7b:96: 42:82:10:06:4f:bd:5a:ae:f4:6e:23:e2:38:d4:09: 0c:25:4d:10:37:bf:80:a3:cc:0f:ae:9f:8d:a5:55: 54:b2:03:85:43:82:54:8b:09:e6:f6:d3:a6:3a:08: 2b:9f:e1:f3:a9:25:a7:69:8a:46:0f:6a:01:f1:3a: d2:08:d4:d5:d7:1b:98:e4:54:b8:26:6f:a4:8c:57: 34:7c:a1:bf:ea:37:fc:e8:41:6c:2e:b9:39:c2:5d: 77:11:40:ba:5f:78:d7:a1:f5:33:53:81:1c:06:18: e9:3e:80:9a:69:92:fa:43:ef:31:e4:2f:4b:05:63: 9d:62:00:68:1c:d1:39:22:f0:14:47:73:86:92:ba: fd:9a:21:29:85:f1:ed:31:81:a1:15:82:65:fc:03: 4c:b1:48:0f:dd:e8:93:de:3c:44:48:fb:d6:6f:6f: 3f:30:f2:71:5d:97:e1:8b:4f:82:56:8c:5c:4d:30: 1a:da:cf:42:69:f6:e0:04:67:e3:c3:47:b5:44:33: 5f:02:e8:24:c1:9c:cc:03:42:af:a7:38:54:dd:88: b2:5d:81:bb:e3:92:87:d7:ac:0d:63:69:3b:6e:29: c4:9b:72:0a:36:c7:3c:3d:66:43:a7:98:eb:c9:91: 8a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:49:97:E5:EA:9C:66:5D:53:01:40:21:61:8B:2E:25:83:FE:B6:96 X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:0e:ff:77:39:7f:c7:dc:4a:23:40:ef:2e:fd:68:71:d6:a0: 55:e6:35:39:9c:87:fe:2e:cd:4a:ed:f3:b3:f0:02:7d:db:5c: eb:5a:a5:ef:26:94:d6:14:e4:01:93:b5:a4:59:9b:31:51:a2: 31:9e:c5:b0:9e:77:69:f8:e6:cd:bd:11:df:ff:32:38:58:23: 5b:c0:a2:24:38:9f:81:c7:5b:70:48:34:db:69:8a:d2:66:24: 7f:61:3d:d0:46:e8:9e:e8:41:ad:3f:8d:39:3b:7a:fe:0b:60: 27:8f:ef:a2:5b:2f:6e:27:e8:15:7d:51:d3:8d:6a:4e:77:96: 17:54:b4:19:d6:a7:03:bd:bb:17:9a:b9:32:89:c7:02:31:f8: d9:4c:18:51:92:a3:2f:d8:0e:da:82:0b:b5:71:1e:01:55:ae: bd:eb:b6:af:29:2b:7a:7b:c2:de:4a:16:ab:81:77:20:4d:0f: a0:8a:78:a4:ea:e5:f3:bf:96:bf:50:83:18:da:f5:bf:93:05: e2:a2:0c:a3:df:16:c5:ba:83:d1:47:f0:b8:6f:66:9d:0d:59: 8e:15:3a:87:61:9f:41:5a:e5:e7:45:e7:7e:c5:a8:06:f7:b7: 05:ce:45:2b:25:7c:48:b0:b5:b4:c4:ba:59:df:5f:65:74:90: 48:f1:00:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjYwMjI4MTgxMzM1WhcNMjYwMzA3MTgxMzM1WjAYMRYwFAYD VQQDDA02OWEzMzA0Zi1mMGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSCiETdM12EUgR4se5ZCghAGT71arvRuI+I41AkMJU0QN7+Ao8wPrp+NpVVU sgOFQ4JUiwnm9tOmOggrn+HzqSWnaYpGD2oB8TrSCNTV1xuY5FS4Jm+kjFc0fKG/ 6jf86EFsLrk5wl13EUC6X3jXofUzU4EcBhjpPoCaaZL6Q+8x5C9LBWOdYgBoHNE5 IvAUR3OGkrr9miEphfHtMYGhFYJl/ANMsUgP3eiT3jxESPvWb28/MPJxXZfhi0+C VoxcTTAa2s9CafbgBGfjw0e1RDNfAugkwZzMA0KvpzhU3YiyXYG745KH16wNY2k7 binEm3IKNsc8PWZDp5jryZGKQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBBJl+Xq nGZdUwFAIWGLLiWD/raWMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R U3E5MXAzRWFVdmZiR2xEYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlQ7/dzl/x9xKI0DvLv1ocdagVeY1OZyH/i7NSu3zs/ACfdtc61ql7yaU1hTk AZO1pFmbMVGiMZ7FsJ53afjmzb0R3/8yOFgjW8CiJDifgcdbcEg022mK0mYkf2E9 0EbonuhBrT+NOTt6/gtgJ4/volsvbifoFX1R041qTneWF1S0GdanA727F5q5MonH AjH42UwYUZKjL9gO2oILtXEeAVWuveu2rykrenvC3koWq4F3IE0PoIp4pOrl87+W v1CDGNr1v5MF4qIMo98WxbqD0UfwuG9mnQ1ZjhU6h2GfQVrl50XnfsWoBve3Bc5F KyV8SLC1tMS6Wd9fZXSQSPEA5g== -----END CERTIFICATE-----Generated at Sun Mar 1 23:12:59 2026 by rpki-client