$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft File: punLpSnAWpYkymA1SKPjFJF1jys.mft (raw, json) Hash identifier: Z0cdlZe09bgHNj+cu0Y2XPc7LwLewSgEKQLBaQcNVmM= Subject key identifier: 22:D3:8E:01:4F:38:CF:BE:E4:78:3B:53:AD:AA:72:6C:B8:4D:5E:B9 Authority key identifier: A6:E9:CB:A5:29:C0:5A:96:24:CA:60:35:48:A3:E3:14:91:75:8F:2B Certificate issuer: /CN=A9189B41/serialNumber=A6E9CBA529C05A9624CA603548A3E31491758F2B Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft Manifest number: 011E Signing time: Sun 01 Mar 2026 06:47:50 +0000 Manifest this update: Sun 01 Mar 2026 06:47:50 +0000 Manifest next update: Sun 08 Mar 2026 06:47:50 +0000 Files and hashes: 1: punLpSnAWpYkymA1SKPjFJF1jys.crl (hash: fkutLAta0zY4lM/M3uT47zHdxCDnSJi00BUT3DHdVwo=) 2: 17AF252C605A11EFB7F45361C4F9AE02.roa (hash: IdTeZSdJYpvrv4PlLAcbyZ45qrh+mkn1A6fS8tzZ0GE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.crl rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189B41, serialNumber=A6E9CBA529C05A9624CA603548A3E31491758F2B Validity Not Before: Mar 1 06:47:50 2026 GMT Not After : Mar 8 06:47:50 2026 GMT Subject: CN=69a3e116-608e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:64:b5:0c:a7:38:af:0d:89:c5:27:2b:16:9b: bc:ae:d7:b2:d2:d2:36:71:b6:56:bc:04:10:dc:75: 9e:85:07:93:46:c3:69:c0:19:50:5f:1a:fd:89:cf: 90:a1:c3:49:a2:fc:20:86:bb:e4:2a:f6:c8:d5:b4: 87:db:ab:ae:53:a1:e2:58:94:9d:0c:71:a9:d9:eb: 8a:85:ab:82:9c:95:74:20:a2:1c:e1:30:79:9e:6c: 60:e8:1f:ab:ef:db:e9:5e:89:f4:60:74:e4:0a:9a: d6:8b:5b:3b:1d:56:3b:43:04:f8:6b:6d:86:11:dd: 01:56:d8:6b:63:47:8c:74:a1:8e:cd:f5:67:50:e0: 0d:ff:7f:e2:35:ff:f7:b0:08:5a:d3:43:50:9c:61: b0:84:4d:44:9b:f8:aa:47:5d:3c:97:0d:8e:2f:d7: 6e:07:53:e8:6a:83:13:71:02:71:08:49:2c:86:b7: 45:8f:e4:08:a9:c0:75:58:fe:85:23:ff:d5:fb:6d: 42:3c:dd:11:7e:4a:58:57:ba:15:61:de:ab:10:70: e7:ae:f8:05:98:6b:a7:03:c3:b4:30:82:61:84:57: 17:65:75:54:39:4b:a1:53:49:0c:d8:c8:be:61:7d: c6:c7:93:4e:23:29:6e:d8:f9:b5:8c:1c:b7:19:36: 00:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D3:8E:01:4F:38:CF:BE:E4:78:3B:53:AD:AA:72:6C:B8:4D:5E:B9 X509v3 Authority Key Identifier: keyid:A6:E9:CB:A5:29:C0:5A:96:24:CA:60:35:48:A3:E3:14:91:75:8F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:40:33:eb:2c:42:d0:f9:18:71:73:3e:32:89:44:25:98:ae: c1:05:a1:14:3c:07:db:df:27:67:24:8f:fe:b4:21:3c:cf:6d: a9:d4:d6:ae:23:b3:6e:a3:d6:a8:7a:9c:b4:ff:be:9b:ee:4d: c4:5a:98:11:07:df:31:12:f2:70:98:12:1b:a7:51:2d:bd:49: 02:09:2d:2e:24:74:aa:5a:64:a3:ba:cb:f5:e8:e9:7c:e9:c3: 0a:e2:bd:5f:4a:59:c3:bd:db:e7:96:72:30:68:db:b2:50:c0: a1:c7:64:e1:ab:52:0d:e6:d3:65:fc:9d:6d:5d:64:52:48:85: 07:29:e2:d2:4f:f2:72:6d:e2:b4:5a:9e:62:d3:70:71:22:06: 7e:33:78:ca:09:31:a8:7e:69:d6:78:2a:b2:dd:5e:97:28:81: 18:b0:5e:43:fb:59:ed:c1:84:e6:0d:cb:91:d3:8e:72:ed:4e: 0c:b6:74:52:e7:83:9d:19:c2:77:c8:e4:cd:8d:91:a6:0a:04: 3b:cd:80:98:53:29:63:ee:a3:52:7e:e8:61:53:af:d0:cc:32: 04:28:2f:b5:5e:1f:01:40:8d:1f:3a:31:00:82:af:e6:b3:b9: 5f:e9:e2:b7:2d:5b:ef:5a:0f:b8:ee:f0:1d:69:29:53:54:88: 79:59:df:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCNDExMTAvBgNVBAUTKEE2RTlDQkE1MjlDMDVBOTYyNENBNjAzNTQ4QTNFMzE0 OTE3NThGMkIwHhcNMjYwMzAxMDY0NzUwWhcNMjYwMzA4MDY0NzUwWjAYMRYwFAYD VQQDEw02OWEzZTExNi02MDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWS1DKc4rw2JxScrFpu8rtey0tI2cbZWvAQQ3HWehQeTRsNpwBlQXxr9ic+Q ocNJovwghrvkKvbI1bSH26uuU6HiWJSdDHGp2euKhauCnJV0IKIc4TB5nmxg6B+r 79vpXon0YHTkCprWi1s7HVY7QwT4a22GEd0BVthrY0eMdKGOzfVnUOAN/3/iNf/3 sAha00NQnGGwhE1Em/iqR108lw2OL9duB1PoaoMTcQJxCEkshrdFj+QIqcB1WP6F I//V+21CPN0RfkpYV7oVYd6rEHDnrvgFmGunA8O0MIJhhFcXZXVUOUuhU0kM2Mi+ YX3Gx5NOIylu2Pm1jBy3GTYAQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCLTjgFP OM++5Hg7U62qcmy4TV65MB8GA1UdIwQYMBaAFKbpy6UpwFqWJMpgNUij4xSRdY8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUI0MS82OUI3Njk4RTYw NTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9wdW5McFNuQVdwWWt5bUExU0tQakZKRjFq eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3B1bkxwU25BV3BZa3ltQTFTS1BqRkpGMWp5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUI0MS82OUI3Njk4RTYwNTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9wdW5McFNuQVdw WWt5bUExU0tQakZKRjFqeXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvUAz6yxC0PkYcXM+MolEJZiuwQWhFDwH298nZySP/rQhPM9tqdTWriOzbqPW qHqctP++m+5NxFqYEQffMRLycJgSG6dRLb1JAgktLiR0qlpko7rL9ejpfOnDCuK9 X0pZw73b55ZyMGjbslDAocdk4atSDebTZfydbV1kUkiFByni0k/ycm3itFqeYtNw cSIGfjN4ygkxqH5p1ngqst1elyiBGLBeQ/tZ7cGE5g3LkdOOcu1ODLZ0UueDnRnC d8jkzY2RpgoEO82AmFMpY+6jUn7oYVOv0MwyBCgvtV4fAUCNHzoxAIKv5rO5X+ni ty1b71oPuO7wHWkpU1SIeVnfcA== -----END CERTIFICATE-----Generated at Mon Mar 2 15:01:58 2026 by rpki-client