$ rpki-client -vvf rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft File: 0_p517hB6Lp5mOoihhupD7llH2Q.mft (raw, json) Hash identifier: GeU5gxP/5CbBPlHY7LwQf1+ikI80iQoGof/OekKHOLg= Subject key identifier: 81:D9:64:5F:47:CF:03:E0:2F:1F:51:78:D2:1F:E3:AA:92:33:C3:FB Authority key identifier: D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64 Certificate issuer: /CN=A9189346/serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64 Certificate serial: 1C7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft Manifest number: 1C67 Signing time: Mon 02 Mar 2026 16:14:35 +0000 Manifest this update: Mon 02 Mar 2026 16:14:35 +0000 Manifest next update: Mon 09 Mar 2026 16:14:35 +0000 Files and hashes: 1: 0_p517hB6Lp5mOoihhupD7llH2Q.crl (hash: PAhvrF+V/usG/5OszffHfOzFiqCSde2MOix2vJ7WEZw=) 2: 082ADE2CF72411E6BA654B38C4F9AE02.roa (hash: QCwKUkVOKXGLScCAxDR4Vgfe1Cz3Vfsmtw6cpnZ9ZlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7290 (0x1c7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189346, serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64 Validity Not Before: Mar 2 16:14:35 2026 GMT Not After : Mar 9 16:14:35 2026 GMT Subject: CN=69a5b76b-23de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:94:c0:53:87:9e:4b:d4:92:dd:ef:8a:f8:47: 0e:2d:27:ee:73:75:38:d2:57:f0:48:d7:b9:15:23: 6a:d6:fc:23:d7:df:67:3e:97:af:b3:9a:3a:58:04: f0:e5:cc:21:d7:d3:7b:f3:85:25:a6:4f:c5:42:24: 60:5e:61:c0:88:ef:ad:44:f7:38:75:99:ce:2f:29: bb:82:d5:be:1a:7e:06:af:89:fd:12:9d:8d:b2:f9: 34:e5:1b:0f:a7:3e:07:ff:7d:f6:13:30:a6:e1:c4: b7:f6:40:4a:04:27:f6:ed:e0:a2:c7:19:cc:01:2a: 43:e0:bc:52:ce:76:e9:6f:b9:98:a2:a8:c7:43:03: e3:ef:e3:83:06:9e:dd:09:51:a6:49:73:ef:0e:cc: ee:60:9a:18:f8:71:47:84:40:b7:a9:f4:32:37:74: f0:ae:14:19:82:48:5c:b6:b8:16:a3:39:8a:8e:67: 88:0e:09:ab:5b:1a:a1:f5:5a:f7:bd:0d:bb:cd:63: 86:93:2b:06:14:29:88:1c:b9:3a:3d:2c:5a:e0:31: 6e:cb:5c:5b:48:ee:9a:0e:14:e1:cd:57:cb:14:67: 66:54:f8:3f:20:fe:b2:14:04:f9:36:e1:49:f6:74: 16:e3:8a:aa:7b:fd:28:52:d5:33:81:fe:37:81:6b: 78:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D9:64:5F:47:CF:03:E0:2F:1F:51:78:D2:1F:E3:AA:92:33:C3:FB X509v3 Authority Key Identifier: keyid:D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:30:b9:6d:ba:ed:b9:45:9c:d8:eb:ac:f8:cf:e9:8c:8a:4f: 2e:d1:4d:2d:df:49:5d:8c:c7:09:31:88:ba:e9:b6:92:9b:cb: ae:bc:63:0c:30:80:6b:cd:d7:d2:fc:0f:1e:7a:4c:6b:cd:5a: 3c:fc:43:51:09:78:4f:5d:92:f3:80:1d:58:85:53:3c:a2:e1: 56:05:c7:ea:61:b5:a5:a6:0b:02:95:18:55:0e:d6:1b:56:62: c9:a8:99:2a:95:e5:d7:a5:91:74:29:39:a4:d0:aa:15:8b:f7: a9:db:1e:3d:89:48:9c:15:80:71:9d:c6:8f:d9:fa:84:4f:d8: 14:42:4c:a5:67:d1:50:d1:b1:02:b3:12:df:d5:da:c0:e7:ba: 2d:48:3b:9a:54:aa:9c:dc:b9:d1:64:b0:3c:28:92:63:58:cb: c8:1a:2c:f5:dc:b4:03:eb:24:f0:c6:8e:fd:1a:26:1d:e5:61: e8:25:d2:c8:42:95:14:26:a4:57:32:c8:75:3d:4d:34:e8:62: dc:e3:42:a1:27:3d:c1:80:b3:a3:97:2c:54:10:7f:37:d0:85: ef:b4:d0:f8:b5:c0:6e:ff:41:06:98:9a:59:d4:2d:16:4c:a1: 94:d4:1e:99:50:ee:e6:4f:e7:9d:5b:8f:af:e4:54:da:ce:0d: 81:40:fb:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkzNDYxMTAvBgNVBAUTKEQzRkE3OUQ3Qjg0MUU4QkE3OTk4RUEyMjg2MUJBOTBG Qjk2NTFGNjQwHhcNMjYwMzAyMTYxNDM1WhcNMjYwMzA5MTYxNDM1WjAYMRYwFAYD VQQDEw02OWE1Yjc2Yi0yM2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5TAU4eeS9SS3e+K+EcOLSfuc3U40lfwSNe5FSNq1vwj199nPpevs5o6WATw 5cwh19N784Ulpk/FQiRgXmHAiO+tRPc4dZnOLym7gtW+Gn4Gr4n9Ep2Nsvk05RsP pz4H/332EzCm4cS39kBKBCf27eCixxnMASpD4LxSznbpb7mYoqjHQwPj7+ODBp7d CVGmSXPvDszuYJoY+HFHhEC3qfQyN3TwrhQZgkhctrgWozmKjmeIDgmrWxqh9Vr3 vQ27zWOGkysGFCmIHLk6PSxa4DFuy1xbSO6aDhThzVfLFGdmVPg/IP6yFAT5NuFJ 9nQW44qqe/0oUtUzgf43gWt4mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIHZZF9H zwPgLx9ReNIf46qSM8P7MB8GA1UdIwQYMBaAFNP6ede4Qei6eZjqIoYbqQ+5ZR9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTM0Ni84QzY1QjZFNkY3 MjIxMUU2ODYxNzg4MzVDNEY5QUUwMi8wX3A1MTdoQjZMcDVtT29paGh1cEQ3bGxI MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBfcDUxN2hCNkxwNW1Pb2loaHVwRDdsbEgyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTM0Ni84QzY1QjZFNkY3MjIxMUU2ODYxNzg4MzVDNEY5QUUwMi8wX3A1MTdoQjZM cDVtT29paGh1cEQ3bGxIMlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALDC5bbrtuUWc2Ous+M/pjIpPLtFNLd9JXYzHCTGIuum2kpvLrrxjDDCAa83X 0vwPHnpMa81aPPxDUQl4T12S84AdWIVTPKLhVgXH6mG1paYLApUYVQ7WG1ZiyaiZ KpXl16WRdCk5pNCqFYv3qdsePYlInBWAcZ3Gj9n6hE/YFEJMpWfRUNGxArMS39Xa wOe6LUg7mlSqnNy50WSwPCiSY1jLyBos9dy0A+sk8MaO/RomHeVh6CXSyEKVFCak VzLIdT1NNOhi3ONCoSc9wYCzo5csVBB/N9CF77TQ+LXAbv9BBpiaWdQtFkyhlNQe mVDu5k/nnVuPr+RU2s4NgUD7yg== -----END CERTIFICATE-----Generated at Mon Mar 2 22:49:08 2026 by rpki-client