$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft File: FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft (raw, json) Hash identifier: XidUkORNsHuql8yRYWYNfhWHN/1kszAsgT54mYWsubI= Subject key identifier: D9:86:BD:65:8F:4B:BD:83:23:A9:CA:3E:89:3A:C1:FB:EE:E0:34:CF Authority key identifier: 16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 Certificate issuer: /CN=A9188F77/serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft Manifest number: 014C Signing time: Sun 01 Mar 2026 06:15:55 +0000 Manifest this update: Sun 01 Mar 2026 06:15:54 +0000 Manifest next update: Sun 08 Mar 2026 06:15:54 +0000 Files and hashes: 1: FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl (hash: PmeKjBqCpF75Cgw25GLZYup+EJLHQy/7pFIRYh5jbak=) 2: 1501E24625F511EF8F342F3EC4F9AE02.roa (hash: nyb0dAzbvJzklMfthLLqpt+z0+HXJ9fgrE8gdxbb/So=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:15:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F77, serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Validity Not Before: Mar 1 06:15:54 2026 GMT Not After : Mar 8 06:15:54 2026 GMT Subject: CN=69a3d99b-6b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:47:ed:aa:6f:47:7b:95:b6:50:be:be:e2: a3:9d:24:c3:79:0a:f8:67:f2:42:a1:cf:2c:b9:40: 32:80:d0:ff:3a:93:2a:e8:05:e5:1b:38:ce:28:62: f9:51:d9:e0:89:ea:ec:8d:d9:4c:09:ab:ef:ac:4b: 4f:ea:58:65:c9:7d:54:bd:a5:63:87:99:c5:b1:91: be:cd:83:a3:1c:d7:ad:c7:3d:5f:9d:39:6d:4f:1c: 30:45:6b:44:1e:8d:9e:eb:ad:2d:1d:b2:83:af:5f: 41:73:87:ec:71:2b:75:7f:f3:ba:9f:1b:8d:9e:02: ab:c8:4b:29:3b:26:4a:6e:f5:43:41:6c:04:7c:87: 92:3e:c1:7b:19:98:94:f9:e9:f7:de:4f:af:85:2b: 18:4d:fb:7c:b2:f6:02:d0:69:04:47:dc:e1:36:ed: 00:1e:68:1b:66:46:20:07:58:b7:05:d5:3b:c2:27: 43:4c:e7:2d:e1:c9:e6:ee:68:4c:6a:a6:87:be:c4: d4:4d:19:fb:5e:55:9e:82:e0:bd:4a:7e:dd:72:aa: 99:ea:56:c1:5f:56:f9:69:ad:1f:9d:fb:7f:30:1d: 3a:0f:ad:04:d1:d0:b9:b0:20:1c:d2:6a:9f:69:ef: f9:12:09:ee:77:e3:6e:aa:0e:53:43:95:4f:ea:db: 0a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:86:BD:65:8F:4B:BD:83:23:A9:CA:3E:89:3A:C1:FB:EE:E0:34:CF X509v3 Authority Key Identifier: keyid:16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:4c:24:fb:b9:29:47:04:b2:07:71:e3:e4:48:b8:2e:6d:54: a9:12:01:0f:3b:ad:ff:11:74:3b:ef:58:f3:45:fa:35:a1:5a: 96:83:69:83:a1:1e:53:76:f0:ca:1a:7c:b8:f3:f6:5e:ae:31: 6e:7e:9b:da:ac:9f:73:27:a3:31:c7:ab:3e:39:c7:d1:42:7a: cc:0a:aa:c6:64:bd:fb:62:f4:19:d4:fb:ab:78:fd:14:68:66: 07:ea:3c:9c:bb:b7:48:ce:ed:ea:38:a2:49:23:3b:b6:d2:4a: dd:dc:7b:05:62:ec:eb:37:71:8f:94:79:eb:ab:5f:23:d3:06: f8:15:7a:35:22:44:1d:36:4f:a5:97:43:8a:3e:fa:58:6e:11: 58:82:1b:de:dc:03:98:a9:4e:1a:67:28:e0:5c:88:1b:aa:bd: 8a:c0:78:ff:df:3f:39:45:69:40:a1:f6:f4:57:89:40:91:b5: 29:0a:91:c1:2d:00:4d:7e:5c:6b:08:0e:3f:e3:6c:37:df:fc: 49:5f:bf:63:0e:6f:33:49:6f:9f:3a:f1:84:dc:66:83:7d:af: c9:71:ae:5d:42:be:5e:3a:4e:da:23:bb:b8:2d:78:78:fb:03: cc:45:ec:2d:61:05:b8:54:0b:2c:d5:79:9f:f5:de:39:3f:f4: 58:e1:b7:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNzcxMTAvBgNVBAUTKDE2MzE1QTY4QTc0NTA4MEJEREI2QzhGMDE1NkQwNDMw Njg5MzFCNTcwHhcNMjYwMzAxMDYxNTU0WhcNMjYwMzA4MDYxNTU0WjAYMRYwFAYD VQQDEw02OWEzZDk5Yi02YjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRpH7apvR3uVtlC+vuKjnSTDeQr4Z/JCoc8suUAygND/OpMq6AXlGzjOKGL5 UdngiersjdlMCavvrEtP6lhlyX1UvaVjh5nFsZG+zYOjHNetxz1fnTltTxwwRWtE Ho2e660tHbKDr19Bc4fscSt1f/O6nxuNngKryEspOyZKbvVDQWwEfIeSPsF7GZiU +en33k+vhSsYTft8svYC0GkER9zhNu0AHmgbZkYgB1i3BdU7widDTOct4cnm7mhM aqaHvsTUTRn7XlWeguC9Sn7dcqqZ6lbBX1b5aa0fnft/MB06D60E0dC5sCAc0mqf ae/5Egnud+Nuqg5TQ5VP6tsKFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNmGvWWP S72DI6nKPok6wfvu4DTPMB8GA1UdIwQYMBaAFBYxWminRQgL3bbI8BVtBDBokxtX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY3Ny9DRDI4NzM4MjI1 QzExMUVGOTAwOTdGNUFDNEY5QUUwMi9GakZhYUtkRkNBdmR0c2p3RlcwRU1HaVRH MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZqRmFhS2RGQ0F2ZHRzandGVzBFTUdpVEcxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY3Ny9DRDI4NzM4MjI1QzExMUVGOTAwOTdGNUFDNEY5QUUwMi9GakZhYUtkRkNB dmR0c2p3RlcwRU1HaVRHMWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0Uwk+7kpRwSyB3Hj5Ei4Lm1UqRIBDzut/xF0O+9Y80X6NaFaloNpg6EeU3bw yhp8uPP2Xq4xbn6b2qyfcyejMcerPjnH0UJ6zAqqxmS9+2L0GdT7q3j9FGhmB+o8 nLu3SM7t6jiiSSM7ttJK3dx7BWLs6zdxj5R566tfI9MG+BV6NSJEHTZPpZdDij76 WG4RWIIb3twDmKlOGmco4FyIG6q9isB4/98/OUVpQKH29FeJQJG1KQqRwS0ATX5c awgOP+NsN9/8SV+/Yw5vM0lvnzrxhNxmg32vyXGuXUK+XjpO2iO7uC14ePsDzEXs LWEFuFQLLNV5n/XeOT/0WOG3Eg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:15:15 2026 by rpki-client