$ rpki-client -vvf rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft File: Se4JeG9u2kI1x1dcppbboJnVR8w.mft (raw, json) Hash identifier: 1gI7USd6Wf7NQILvHvqgNJjYB99Z4+04Vrb42Yw+9gU= Subject key identifier: 0F:F2:CB:E9:18:8F:CD:F1:5C:92:8E:51:7F:3C:36:D3:DF:6B:D2:EF Authority key identifier: 49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC Certificate issuer: /CN=A9189E7C/serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC Certificate serial: 08A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft Manifest number: 089C Signing time: Mon 02 Mar 2026 00:28:24 +0000 Manifest this update: Mon 02 Mar 2026 00:28:23 +0000 Manifest next update: Mon 09 Mar 2026 00:28:23 +0000 Files and hashes: 1: Se4JeG9u2kI1x1dcppbboJnVR8w.crl (hash: T4AI89IXR5+V5eUbxHiffsuzwF05QxIMI+t27DqfbBg=) 2: 2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa (hash: 7FS9CMEH86Q4mtI2dPXmjRzPoofyBrffIFPKi5A84jA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2213 (0x8a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189E7C, serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC Validity Not Before: Mar 2 00:28:23 2026 GMT Not After : Mar 9 00:28:23 2026 GMT Subject: CN=69a4d9a8-45ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d6:42:74:21:ee:60:98:a7:2f:64:d2:cf:95: ea:f1:25:cc:b1:ff:9d:d3:3b:73:72:1f:63:20:fa: 73:88:b7:ab:fd:57:07:5b:ad:f3:b7:e3:e8:a6:64: 88:3f:92:3b:9b:57:2c:00:c4:54:76:53:c7:9b:f6: 68:9d:a6:f3:1b:01:c7:a1:00:59:07:84:eb:db:1f: 9f:e0:3e:ed:7e:f5:40:d0:ec:12:30:d9:3c:2c:b0: 6b:70:22:00:91:c5:dc:26:2d:fa:39:45:5d:a5:86: b7:29:71:da:d1:19:7a:96:9f:8c:b0:fd:ce:02:52: 84:d4:68:c5:06:ac:f4:f6:27:82:29:74:cd:cd:89: d8:c6:8d:af:0b:1f:98:a2:17:88:42:13:af:e1:dd: 0c:fc:16:43:99:6a:e5:67:b6:cb:96:1f:97:4b:87: 2f:b8:9b:87:e9:af:9a:ea:8e:86:dd:ba:cf:f5:3d: ed:c4:a2:90:5b:67:d2:8e:22:a7:14:38:d3:de:57: 49:09:90:9b:da:e2:11:3d:bf:b2:3b:fb:d4:6a:ab: 98:a9:48:48:6b:91:c3:57:5f:72:15:c6:c6:66:26: 55:a5:4d:37:4b:29:48:80:6c:7b:20:df:ed:3e:e1: 42:9a:ed:a6:a5:26:20:a2:87:71:62:1f:36:37:9a: eb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F2:CB:E9:18:8F:CD:F1:5C:92:8E:51:7F:3C:36:D3:DF:6B:D2:EF X509v3 Authority Key Identifier: keyid:49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:79:7b:07:ba:c4:6f:c4:68:af:15:38:e2:16:9a:52:e8:75: aa:44:b2:b9:17:68:b7:43:34:26:a1:52:ac:6b:e7:c7:bd:70: c2:5c:42:57:f9:db:8e:e3:7d:b2:06:56:ee:1b:0d:e7:b8:14: c7:27:b6:a3:5d:5a:85:84:17:92:bc:82:89:5a:70:1f:9b:bd: ba:1e:2c:4b:2a:c9:3a:5f:c8:0f:08:8d:ec:42:18:24:f6:e6: f7:93:b7:12:f7:76:1e:08:bc:4f:59:a2:aa:f1:e4:95:44:82: 5d:6d:2e:cd:35:e7:4f:74:15:8c:98:d2:71:4d:cc:64:31:bb: 86:63:ea:21:46:51:17:c6:3b:f2:21:02:69:0f:98:ef:48:e5: 73:26:95:80:01:34:18:8c:36:59:2d:85:62:2e:65:f1:96:60: 9e:7a:92:3c:e1:4f:66:19:ee:ab:49:c8:e3:07:7e:65:e7:cd: 49:e2:d3:c9:2b:8f:43:d0:55:f6:35:78:5b:ce:06:d6:cb:4f: a1:f0:f9:65:1b:90:84:81:c5:e2:40:f3:7d:6e:b3:d6:d7:0f: a4:82:1d:9b:22:31:7c:71:01:e1:f2:44:75:75:4b:49:83:70: 50:55:48:0e:08:0f:39:38:d7:ff:61:bf:eb:8a:a4:ad:2c:cc: 9d:65:9d:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlFN0MxMTAvBgNVBAUTKDQ5RUUwOTc4NkY2RURBNDIzNUM3NTc1Q0E2OTZEQkEw OTlENTQ3Q0MwHhcNMjYwMzAyMDAyODIzWhcNMjYwMzA5MDAyODIzWjAYMRYwFAYD VQQDEw02OWE0ZDlhOC00NWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA69ZCdCHuYJinL2TSz5Xq8SXMsf+d0ztzch9jIPpziLer/VcHW63zt+PopmSI P5I7m1csAMRUdlPHm/ZonabzGwHHoQBZB4Tr2x+f4D7tfvVA0OwSMNk8LLBrcCIA kcXcJi36OUVdpYa3KXHa0Rl6lp+MsP3OAlKE1GjFBqz09ieCKXTNzYnYxo2vCx+Y oheIQhOv4d0M/BZDmWrlZ7bLlh+XS4cvuJuH6a+a6o6G3brP9T3txKKQW2fSjiKn FDjT3ldJCZCb2uIRPb+yO/vUaquYqUhIa5HDV19yFcbGZiZVpU03SylIgGx7IN/t PuFCmu2mpSYgoodxYh82N5rrHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA/yy+kY j83xXJKOUX88NtPfa9LvMB8GA1UdIwQYMBaAFEnuCXhvbtpCNcdXXKaW26CZ1UfM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUU3Qy9GQzFFQjcwQ0RC QTkxMUVBOEEwMTcwN0RDNEY5QUUwMi9TZTRKZUc5dTJrSTF4MWRjcHBiYm9KblZS OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NlNEplRzl1MmtJMXgxZGNwcGJib0puVlI4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUU3Qy9GQzFFQjcwQ0RCQTkxMUVBOEEwMTcwN0RDNEY5QUUwMi9TZTRKZUc5dTJr STF4MWRjcHBiYm9KblZSOHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAXl7B7rEb8RorxU44haaUuh1qkSyuRdot0M0JqFSrGvnx71wwlxCV/nbjuN9 sgZW7hsN57gUxye2o11ahYQXkryCiVpwH5u9uh4sSyrJOl/IDwiN7EIYJPbm95O3 Evd2Hgi8T1miqvHklUSCXW0uzTXnT3QVjJjScU3MZDG7hmPqIUZRF8Y78iECaQ+Y 70jlcyaVgAE0GIw2WS2FYi5l8ZZgnnqSPOFPZhnuq0nI4wd+ZefNSeLTySuPQ9BV 9jV4W84G1stPofD5ZRuQhIHF4kDzfW6z1tcPpIIdmyIxfHEB4fJEdXVLSYNwUFVI DggPOTjX/2G/64qkrSzMnWWdXg== -----END CERTIFICATE-----Generated at Mon Mar 2 10:14:33 2026 by rpki-client