$ rpki-client -vvf rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft File: rDzLekAZEcjlFT8wFmpUyacWP3s.mft (raw, json) Hash identifier: VVX3CJWnuvA17X/8MiWD16f9/+BYTLf0es6ix4wXe74= Subject key identifier: 67:6B:32:E5:36:4A:31:DC:1B:B9:D0:49:03:B0:B7:EB:04:B1:C1:80 Authority key identifier: AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B Certificate issuer: /CN=A9189337/serialNumber=AC3CCB7A401911C8E5153F30166A54C9A7163F7B Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft Manifest number: 4B Signing time: Sun 01 Mar 2026 09:42:55 +0000 Manifest this update: Sun 01 Mar 2026 09:42:55 +0000 Manifest next update: Sun 08 Mar 2026 09:42:55 +0000 Files and hashes: 1: rDzLekAZEcjlFT8wFmpUyacWP3s.crl (hash: YlEz3FLM+8yRIDe5Y/Osk2H1W9p9UcPXN+zLeFAiiRA=) 2: 97B6FD12A81611F0BBD11A74C4F9AE02.roa (hash: +o1CGO8tcRdORT+HUDRB+r7Vejjj6YH1/8uUwSB82zw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.crl rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189337, serialNumber=AC3CCB7A401911C8E5153F30166A54C9A7163F7B Validity Not Before: Mar 1 09:42:55 2026 GMT Not After : Mar 8 09:42:55 2026 GMT Subject: CN=69a40a1f-066e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:dd:28:ea:ac:f8:a9:fb:b4:b5:76:61:22:05: 6f:59:fd:39:c1:3d:91:61:a8:0e:a6:97:ed:0b:b7: 48:5b:c1:c5:b8:20:97:f8:d0:e8:98:84:4e:9e:60: 8b:38:98:37:4f:d9:80:32:3e:c2:a1:56:dd:7b:b7: 82:d8:4f:34:b8:d3:b5:da:be:3e:48:2f:57:d2:50: 02:ec:1f:8c:51:14:d8:74:3e:76:f6:45:df:f4:9a: 55:43:10:b8:16:43:39:ac:9c:e9:8b:8f:62:2a:5f: 1c:0e:24:d4:c1:d2:52:13:ed:ab:fb:42:ca:95:8b: 1c:7e:56:82:b8:43:72:1a:e7:39:a3:20:e8:50:dd: ff:5b:8f:67:4d:2a:77:c3:54:fa:13:c3:bf:1a:d3: ac:3d:4f:15:c5:01:4b:34:72:03:59:95:9b:fe:a3: 14:2c:8d:2e:77:41:98:ed:15:93:a3:e1:5d:9b:99: 50:19:d1:3b:67:45:0b:1e:6c:57:ba:11:90:f1:f6: 49:a5:82:c5:4e:1d:8e:c0:b4:ce:ce:80:0f:4c:9d: 55:27:34:2f:c5:1c:99:06:e1:cd:8f:ca:90:fb:31: 73:bc:dc:52:13:7f:66:9a:86:c8:9e:8e:47:37:ce: 69:a0:b7:d1:5e:81:fd:8d:89:60:8e:ad:cf:f5:3a: b1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6B:32:E5:36:4A:31:DC:1B:B9:D0:49:03:B0:B7:EB:04:B1:C1:80 X509v3 Authority Key Identifier: keyid:AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:04:67:30:30:45:9b:06:b3:74:47:7c:a6:19:95:2d:d9:6d: 34:5f:5d:24:b6:a3:23:c4:63:e8:f7:54:de:7f:1a:50:6d:6e: a8:04:fc:61:39:d8:e5:30:10:a4:3c:d9:47:7d:3f:e4:aa:0c: d8:32:85:79:40:dc:f5:9e:1f:d7:7b:76:fe:11:1b:57:94:f0: e7:61:c9:b4:c7:88:e1:23:59:d6:48:1a:d2:b1:2e:b5:4a:b0: f0:f1:8a:a8:cf:1d:27:02:1b:46:3e:3d:e1:c4:da:5e:6c:bf: 6f:65:b8:c8:1e:d2:0b:41:b8:41:d9:25:18:c4:e9:58:15:69: da:3e:7b:29:67:7a:7f:20:b1:41:95:f5:f6:bf:1d:ea:af:3c: 4f:b5:ac:1b:e3:ce:fc:63:03:0c:92:ca:41:5c:48:a5:a1:c9: b4:db:4d:6a:37:d6:78:6c:8a:ed:ec:00:76:b9:fa:ec:02:bf: 86:38:57:44:94:ec:d9:c5:f2:2b:4f:2d:67:81:50:38:11:19: ec:99:29:e4:48:87:f1:75:89:8f:2c:5f:83:36:ec:7a:ce:4b: 6f:24:d8:77:ff:fc:8f:a1:49:41:c7:3d:55:82:21:88:02:ae: 9c:ac:0d:f8:f2:60:68:d5:8f:cf:e4:92:9d:8a:d0:5d:99:4c: 23:a2:de:04 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OTMzNzExMC8GA1UEBRMoQUMzQ0NCN0E0MDE5MTFDOEU1MTUzRjMwMTY2QTU0QzlB NzE2M0Y3QjAeFw0yNjAzMDEwOTQyNTVaFw0yNjAzMDgwOTQyNTVaMBgxFjAUBgNV BAMTDTY5YTQwYTFmLTA2NmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD13SjqrPip+7S1dmEiBW9Z/TnBPZFhqA6ml+0Lt0hbwcW4IJf40OiYhE6eYIs4 mDdP2YAyPsKhVt17t4LYTzS407Xavj5IL1fSUALsH4xRFNh0Pnb2Rd/0mlVDELgW QzmsnOmLj2IqXxwOJNTB0lIT7av7QsqVixx+VoK4Q3Ia5zmjIOhQ3f9bj2dNKnfD VPoTw78a06w9TxXFAUs0cgNZlZv+oxQsjS53QZjtFZOj4V2bmVAZ0TtnRQsebFe6 EZDx9kmlgsVOHY7AtM7OgA9MnVUnNC/FHJkG4c2PypD7MXO83FITf2aahsiejkc3 zmmgt9Fegf2NiWCOrc/1OrHFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZ2sy5TZK MdwbudBJA7C36wSxwYAwHwYDVR0jBBgwFoAUrDzLekAZEcjlFT8wFmpUyacWP3sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5MzM3LzNFMDlGMEU0QTgx NjExRjA4NDk4QUU3MEM0RjlBRTAyL3JEekxla0FaRWNqbEZUOHdGbXBVeWFjV1Az cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvckR6TGVrQVpFY2psRlQ4d0ZtcFV5YWNXUDNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 MzM3LzNFMDlGMEU0QTgxNjExRjA4NDk4QUU3MEM0RjlBRTAyL3JEekxla0FaRWNq bEZUOHdGbXBVeWFjV1Azcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAbBGcwMEWbBrN0R3ymGZUt2W00X10ktqMjxGPo91TefxpQbW6oBPxhOdjlMBCk PNlHfT/kqgzYMoV5QNz1nh/Xe3b+ERtXlPDnYcm0x4jhI1nWSBrSsS61SrDw8Yqo zx0nAhtGPj3hxNpebL9vZbjIHtILQbhB2SUYxOlYFWnaPnspZ3p/ILFBlfX2vx3q rzxPtawb4878YwMMkspBXEilocm0201qN9Z4bIrt7AB2ufrsAr+GOFdElOzZxfIr Ty1ngVA4ERnsmSnkSIfxdYmPLF+DNux6zktvJNh3//yPoUlBxz1VgiGIAq6crA34 8mBo1Y/P5JKditBdmUwjot4E -----END CERTIFICATE-----Generated at Mon Mar 2 13:06:49 2026 by rpki-client