$ rpki-client -vvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft File: w7rY8KXaBY6fklA30EqnHJKLoXM.mft (raw, json) Hash identifier: 7/p36OqlPJvCY/fQOYSO2K7x3E0H+fOblVGwzQF+tPo= Subject key identifier: DF:E4:AC:8E:FF:7A:94:C7:B3:48:86:FB:41:C6:63:8F:F3:46:27:85 Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 Certificate issuer: /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Certificate serial: 1A54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft Manifest number: 1A48 Signing time: Mon 02 Mar 2026 01:48:13 +0000 Manifest this update: Mon 02 Mar 2026 01:48:11 +0000 Manifest next update: Mon 09 Mar 2026 01:48:11 +0000 Files and hashes: 1: w7rY8KXaBY6fklA30EqnHJKLoXM.crl (hash: WgNgXTUyhOZFNnUNQt4cEATKKWKaeVgQhofWL0HKDd8=) 2: 885DA760AA8811E799348329C4F9AE02.roa (hash: OgMqHQ2yVMx+7d3BSt5zC2aY7l1q21WR4K+bA1B1tR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6740 (0x1a54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189265, serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Validity Not Before: Mar 2 01:48:11 2026 GMT Not After : Mar 9 01:48:11 2026 GMT Subject: CN=69a4ec5d-a7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:69:1c:be:a8:d9:2d:f5:72:fa:be:fd:09:aa: 20:1f:4e:f5:3f:70:ce:52:32:d8:69:22:16:b6:d8: 35:ec:bf:be:ea:7d:a5:35:bd:87:aa:2a:5c:93:1b: 54:0d:05:a4:43:96:5d:b7:ea:3f:8d:96:64:57:91: 68:dc:5c:f9:13:e2:dd:5e:d4:60:f3:7f:4c:f1:c7: c8:2d:3b:72:5d:46:5d:ea:f3:1d:d6:20:61:83:a1: 9d:fe:5b:e6:59:ad:92:6e:04:16:6b:2b:c9:c2:68: 2d:9b:f7:fd:ea:c4:12:1c:6c:e8:64:47:a9:51:6d: 40:d0:b9:62:70:3b:ed:03:58:62:59:25:d0:b9:cc: 5f:bc:78:12:82:f9:0b:ae:95:29:10:29:28:07:4d: 9d:05:e5:9f:1b:ac:3f:e8:11:11:8f:44:ed:48:8b: 96:69:2c:92:15:12:88:b1:ca:16:56:13:73:c9:9d: 61:1e:0e:0a:0f:59:7e:49:50:ab:74:b8:e4:bb:d5: d9:32:4b:78:08:98:97:a6:13:eb:ce:2d:a1:6c:d0: 62:bf:ab:56:31:00:bb:11:b2:9d:03:24:2b:25:3b: 82:a8:df:21:b3:8e:b5:27:59:d7:be:17:50:c5:5a: f7:2f:7e:ad:b7:4a:09:ad:bc:41:4c:ce:a4:72:68: af:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E4:AC:8E:FF:7A:94:C7:B3:48:86:FB:41:C6:63:8F:F3:46:27:85 X509v3 Authority Key Identifier: keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:9c:8f:6b:d4:7f:be:89:8c:c7:15:81:d1:df:0b:5b:51:28: dd:68:e1:2b:8f:dc:7b:ef:75:9f:00:74:20:90:26:bc:4c:0b: 69:4f:e2:1a:32:5d:fd:3a:5e:d6:9d:9a:d6:6f:97:86:b8:7b: 85:76:42:31:a3:3e:c4:e4:fb:ce:0b:14:7b:de:3d:46:fa:ac: 7d:c9:51:9b:49:fa:b0:31:a6:d7:ae:2c:c4:04:8c:79:07:9c: 8f:6b:e3:b2:0c:6b:1e:d2:89:be:2d:f0:51:16:1c:9c:dc:ae: 1a:e3:49:ea:2f:94:3a:8a:c7:99:64:97:9f:af:a3:1c:f3:9d: de:e2:af:0b:91:40:4f:5d:4a:c4:14:9d:95:c8:0c:46:da:28: 20:0a:76:1a:e7:3b:03:a4:42:fe:84:f0:af:a9:b7:1c:33:e8: 60:cc:c9:4d:84:58:eb:4a:67:03:60:5b:e2:8f:2b:91:47:de: a9:8d:93:48:80:42:d4:0c:b6:45:61:d4:3a:fa:03:a5:4e:f3: dc:4a:d6:92:a7:73:97:c5:4a:91:23:38:ef:9b:30:72:fd:6c: 6a:d4:23:fe:7a:02:05:3a:b9:3f:2d:06:73:72:dc:f3:58:89: 5e:d4:1c:98:0d:96:c8:24:07:a1:1e:cc:12:b4:c2:8e:1c:04: d9:25:26:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyNjUxMTAvBgNVBAUTKEMzQkFEOEYwQTVEQTA1OEU5RjkyNTAzN0QwNEFBNzFD OTI4QkExNzMwHhcNMjYwMzAyMDE0ODExWhcNMjYwMzA5MDE0ODExWjAYMRYwFAYD VQQDEw02OWE0ZWM1ZC1hN2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2kcvqjZLfVy+r79CaogH071P3DOUjLYaSIWttg17L++6n2lNb2HqipckxtU DQWkQ5Zdt+o/jZZkV5Fo3Fz5E+LdXtRg839M8cfILTtyXUZd6vMd1iBhg6Gd/lvm Wa2SbgQWayvJwmgtm/f96sQSHGzoZEepUW1A0LlicDvtA1hiWSXQucxfvHgSgvkL rpUpECkoB02dBeWfG6w/6BERj0TtSIuWaSySFRKIscoWVhNzyZ1hHg4KD1l+SVCr dLjku9XZMkt4CJiXphPrzi2hbNBiv6tWMQC7EbKdAyQrJTuCqN8hs461J1nXvhdQ xVr3L36tt0oJrbxBTM6kcmivNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN/krI7/ epTHs0iG+0HGY4/zRieFMB8GA1UdIwQYMBaAFMO62PCl2gWOn5JQN9BKpxySi6Fz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2NS9EOEI0QjYxRTYw MjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZNmZrbEEzMEVxbkhKS0xv WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3clk4S1hhQlk2ZmtsQTMwRXFuSEpLTG9YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTI2NS9EOEI0QjYxRTYwMjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZ NmZrbEEzMEVxbkhKS0xvWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnJyPa9R/vomMxxWB0d8LW1Eo3WjhK4/ce+91nwB0IJAmvEwLaU/iGjJd/Tpe 1p2a1m+Xhrh7hXZCMaM+xOT7zgsUe949RvqsfclRm0n6sDGm164sxASMeQecj2vj sgxrHtKJvi3wURYcnNyuGuNJ6i+UOorHmWSXn6+jHPOd3uKvC5FAT11KxBSdlcgM RtooIAp2Guc7A6RC/oTwr6m3HDPoYMzJTYRY60pnA2Bb4o8rkUfeqY2TSIBC1Ay2 RWHUOvoDpU7z3ErWkqdzl8VKkSM475swcv1satQj/noCBTq5Py0Gc3Lc81iJXtQc mA2WyCQHoR7MErTCjhwE2SUmpQ== -----END CERTIFICATE-----Generated at Mon Mar 2 18:28:50 2026 by rpki-client