$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft File: fwOXxqlOUll2g0u_1YAvFbeV-44.mft (raw, json) Hash identifier: TPJMgxxpn1P4npT84KMsoO7W3Pfq+c96bgWclVIOLVE= Subject key identifier: 73:0E:D2:B7:E9:8E:09:CE:AB:CA:66:8C:88:DF:1F:A5:80:DF:97:3E Authority key identifier: 7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E Certificate issuer: /CN=A9189D9B/serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft Manifest number: A3 Signing time: Sun 01 Mar 2026 08:38:08 +0000 Manifest this update: Sun 01 Mar 2026 08:38:07 +0000 Manifest next update: Sun 08 Mar 2026 08:38:07 +0000 Files and hashes: 1: fwOXxqlOUll2g0u_1YAvFbeV-44.crl (hash: xi/RZtvGYCWoXzH5pvgDDx5oxhsQN1YIg7wOIUu1ZVE=) 2: 552F0C342E2011F0AF4AB70CC4F9AE02.roa (hash: zQFffL0yf3R/prXBnJUsP3rRavBwBN7cKDAWt7IRmxU=) 3: C865C1BC8D2E11F0A977AE41C4F9AE02.roa (hash: 4+U1k9OAedZH316Ll+MqnC5sjLliIqDqE+4KiwveiWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189D9B, serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E Validity Not Before: Mar 1 08:38:07 2026 GMT Not After : Mar 8 08:38:07 2026 GMT Subject: CN=69a3faf0-cba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c7:04:be:0b:78:ac:5e:06:0b:c2:25:39:b0: 40:95:63:7e:df:95:d6:69:2f:3e:66:78:ac:93:b6: 80:66:c8:29:41:d6:2f:99:c7:06:df:32:b6:fb:25: 4b:d6:50:bd:1a:a8:7d:33:5b:61:12:5b:26:cb:fc: 35:76:f8:e5:df:8b:0a:b7:6c:98:6b:2b:79:c6:12: a1:b8:72:ab:43:8f:87:28:d0:92:fc:d5:93:7c:f3: bf:bd:33:82:09:52:b2:05:2a:3e:8d:23:19:6c:6b: 1c:43:b9:2a:c7:35:90:09:86:81:00:d9:00:fb:a0: c4:f6:f3:7b:74:49:87:30:a8:a8:4c:92:96:d3:14: 43:9d:fe:08:59:08:ef:fb:f1:27:0f:86:1d:69:10: 21:24:41:c9:a3:46:73:a0:22:4f:5a:85:4b:99:19: 23:27:cd:1e:f0:ed:bc:f5:16:58:c9:8b:52:33:e9: e0:83:66:20:a1:0e:9d:85:3c:6c:14:27:e7:87:08: 17:cf:68:d3:39:95:86:85:5f:ea:99:f7:94:5e:3c: 92:c4:8d:e3:bf:09:7b:be:22:93:18:ab:4c:ce:b3: e3:e0:2d:3f:8f:5f:40:87:0b:ab:f7:b7:f6:8e:ab: 28:bb:b0:0a:4a:6a:59:88:da:0d:12:24:ee:82:49: 6f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0E:D2:B7:E9:8E:09:CE:AB:CA:66:8C:88:DF:1F:A5:80:DF:97:3E X509v3 Authority Key Identifier: keyid:7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:06:12:a7:2f:e9:2f:99:e6:43:84:d2:4b:a4:d1:30:f8:2a: 4d:63:b7:52:6b:fd:1a:e0:9d:67:86:01:5c:82:e9:82:05:26: 57:de:e7:35:2e:0a:1a:b6:91:03:35:44:75:f4:cc:de:88:c7: 0a:e8:40:bd:a1:7d:9f:b8:62:9f:34:88:cb:6e:94:0a:d1:72: 37:e5:c6:39:89:8e:02:38:17:1b:20:95:2e:ac:c5:a6:4a:a1: 3b:bd:a2:0f:15:49:1a:f9:87:f4:16:b0:66:ee:83:df:0b:3f: 2b:a8:1e:e7:28:e6:01:69:b9:ed:34:f8:1f:26:49:d3:eb:bb: 61:d1:65:cc:a8:90:76:8b:a8:3a:40:ec:b9:04:9e:3a:04:40: 3d:74:2d:60:68:48:f5:fa:42:1a:4a:d5:34:89:a4:b7:2b:79: 5e:53:b3:2b:a7:33:c4:af:05:5a:db:2f:5f:08:36:68:86:90: 19:8c:91:6a:e5:86:57:72:6d:b9:c2:c5:37:2c:d3:9a:a1:75: e7:0d:8a:eb:a0:06:62:ee:8b:c1:29:91:9d:4b:22:a5:71:d9: 25:e0:71:6a:14:c8:15:5e:28:11:3a:02:7a:92:60:54:82:8c: 81:fb:59:51:ca:e9:37:df:6c:65:59:59:e3:d4:ef:06:c0:cb: 28:f5:27:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlEOUIxMTAvBgNVBAUTKDdGMDM5N0M2QTk0RTUyNTk3NjgzNEJCRkQ1ODAyRjE1 Qjc5NUZCOEUwHhcNMjYwMzAxMDgzODA3WhcNMjYwMzA4MDgzODA3WjAYMRYwFAYD VQQDEw02OWEzZmFmMC1jYmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnscEvgt4rF4GC8IlObBAlWN+35XWaS8+Znisk7aAZsgpQdYvmccG3zK2+yVL 1lC9Gqh9M1thElsmy/w1dvjl34sKt2yYayt5xhKhuHKrQ4+HKNCS/NWTfPO/vTOC CVKyBSo+jSMZbGscQ7kqxzWQCYaBANkA+6DE9vN7dEmHMKioTJKW0xRDnf4IWQjv +/EnD4YdaRAhJEHJo0ZzoCJPWoVLmRkjJ80e8O289RZYyYtSM+ngg2YgoQ6dhTxs FCfnhwgXz2jTOZWGhV/qmfeUXjySxI3jvwl7viKTGKtMzrPj4C0/j19Ahwur97f2 jqsou7AKSmpZiNoNEiTugklvDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHMO0rfp jgnOq8pmjIjfH6WA35c+MB8GA1UdIwQYMBaAFH8Dl8apTlJZdoNLv9WALxW3lfuO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUQ5Qi9CMkE1NzdDMjI3 NDUxMUYwQUVEMkI0NjlDNEY5QUUwMi9md09YeHFsT1VsbDJnMHVfMVlBdkZiZVYt NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z3T1h4cWxPVWxsMmcwdV8xWUF2RmJlVi00NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUQ5Qi9CMkE1NzdDMjI3NDUxMUYwQUVEMkI0NjlDNEY5QUUwMi9md09YeHFsT1Vs bDJnMHVfMVlBdkZiZVYtNDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyAYSpy/pL5nmQ4TSS6TRMPgqTWO3Umv9GuCdZ4YBXILpggUmV97nNS4KGraR AzVEdfTM3ojHCuhAvaF9n7hinzSIy26UCtFyN+XGOYmOAjgXGyCVLqzFpkqhO72i DxVJGvmH9BawZu6D3ws/K6ge5yjmAWm57TT4HyZJ0+u7YdFlzKiQdouoOkDsuQSe OgRAPXQtYGhI9fpCGkrVNImktyt5XlOzK6czxK8FWtsvXwg2aIaQGYyRauWGV3Jt ucLFNyzTmqF15w2K66AGYu6LwSmRnUsipXHZJeBxahTIFV4oEToCepJgVIKMgftZ UcrpN99sZVlZ49TvBsDLKPUnoA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:31:57 2026 by rpki-client