$ rpki-client -vvf rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft File: f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft (raw, json) Hash identifier: 2vuwp83+XLYR+ipcCBD3PPnlAUC6bvxVrhBXVKfghEg= Subject key identifier: 31:D0:FE:0A:E8:61:71:FF:22:32:BB:CF:C6:CB:F3:27:1D:EA:B2:53 Authority key identifier: 7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF Certificate issuer: /CN=A9190992/serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Certificate serial: 04E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft Manifest number: 04D6 Signing time: Sun 01 Mar 2026 00:29:33 +0000 Manifest this update: Sun 01 Mar 2026 00:29:32 +0000 Manifest next update: Sun 08 Mar 2026 00:29:32 +0000 Files and hashes: 1: f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl (hash: 73QHBK/TMpduOb+aoOYM/99vVet527H2kTMqjn3ge4s=) 2: 5B24C51A60ED11EC874B903BC4F9AE02.roa (hash: felIFykAueE1zpxbDh5tJRrRqbmGpI4bTu0iWL6z7aM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 00:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1251 (0x4e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190992, serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Validity Not Before: Mar 1 00:29:32 2026 GMT Not After : Mar 8 00:29:32 2026 GMT Subject: CN=69a3886d-7444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3f:09:d5:db:07:4c:8a:d3:5a:4d:87:c2:14: 92:f7:74:30:b6:17:9e:2d:d8:26:fc:a9:88:9f:47: 4a:65:ad:a8:54:27:3a:b3:2f:dc:39:a2:bf:ed:2c: f4:dc:a9:1d:8a:ba:a7:c2:5f:99:50:38:f6:38:d6: 03:75:33:2d:6e:f6:ef:a6:cc:11:52:b7:27:dd:ea: 00:6d:53:7a:4d:dc:78:0e:6d:2a:6b:97:24:e1:8f: 94:03:c6:8e:a3:68:5d:8d:21:05:51:47:fc:ce:43: 9f:1e:ce:2a:38:c4:1a:69:23:96:e3:e2:37:b8:14: 5e:02:c4:93:84:51:df:51:ef:73:d2:13:f9:e8:d4: 92:56:66:a4:82:a1:ca:e5:87:6f:db:8f:34:e2:8c: d7:62:16:fd:ed:50:e0:5a:db:31:4b:f2:7a:2d:54: 61:51:1d:66:a7:93:c3:ad:18:bb:f7:e9:bf:4f:44: 8a:76:56:c1:e1:8d:a7:03:e0:56:0a:19:fc:70:ab: db:cf:17:cb:87:69:e3:91:13:70:6b:da:6e:d2:6e: 3e:94:fd:3e:b3:14:0a:26:9d:24:3d:4c:ee:54:97: 65:05:32:fd:da:ae:43:ea:eb:3a:b5:48:94:e1:bd: 0e:6b:4e:b5:8f:e2:0b:d4:08:93:49:d0:b6:43:0a: 82:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D0:FE:0A:E8:61:71:FF:22:32:BB:CF:C6:CB:F3:27:1D:EA:B2:53 X509v3 Authority Key Identifier: keyid:7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:72:23:8d:8d:69:f9:ad:bb:2d:d6:35:67:a7:8c:2c:b9:1e: 06:c1:ae:ad:b5:b8:b6:97:f1:5e:fd:76:10:58:49:a0:96:da: c8:10:51:e6:05:c7:00:f3:ce:a9:59:af:31:f0:2e:61:e6:94: cd:cc:77:89:79:ed:09:e6:bc:02:c2:d3:f8:9d:29:74:c6:6f: 61:e9:90:4f:69:aa:e6:60:ef:b2:49:d9:4f:9b:20:b4:10:bc: 51:6a:ce:b8:2a:1f:0f:9b:fa:48:f0:a5:42:57:6e:32:27:2c: 87:d3:53:38:a9:a4:f3:00:2a:91:08:e1:24:39:a3:18:b3:55: e4:3a:7b:fc:3a:38:e9:6a:0c:8d:0b:5c:74:b3:6e:51:18:2c: 63:90:4a:f5:5c:7e:f5:fa:b6:5e:ce:f9:36:4d:40:01:cb:07: 05:e7:5f:f3:bb:0d:83:35:0d:9f:8f:b2:bb:b8:33:c3:77:d7: 95:84:ac:0d:3d:63:4b:61:88:50:78:96:c4:89:44:1e:58:76: 55:5d:bb:56:b0:72:f9:dc:34:62:a6:54:a0:c2:ee:86:b8:ac: cf:84:94:fc:0b:76:76:eb:db:0c:41:9e:1e:df:57:05:9d:16: d0:3c:b6:94:44:78:07:3a:24:c4:dd:9e:00:e9:ab:53:cb:ed: b2:56:79:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5OTIxMTAvBgNVBAUTKDdGNjVDMTEwRTJBMTdFNDFENzcwRkMyREZBNDAzRDE2 QTMzRTVDQUYwHhcNMjYwMzAxMDAyOTMyWhcNMjYwMzA4MDAyOTMyWjAYMRYwFAYD VQQDDA02OWEzODg2ZC03NDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1z8J1dsHTIrTWk2HwhSS93QwtheeLdgm/KmIn0dKZa2oVCc6sy/cOaK/7Sz0 3Kkdirqnwl+ZUDj2ONYDdTMtbvbvpswRUrcn3eoAbVN6Tdx4Dm0qa5ck4Y+UA8aO o2hdjSEFUUf8zkOfHs4qOMQaaSOW4+I3uBReAsSThFHfUe9z0hP56NSSVmakgqHK 5Ydv24804ozXYhb97VDgWtsxS/J6LVRhUR1mp5PDrRi79+m/T0SKdlbB4Y2nA+BW Chn8cKvbzxfLh2njkRNwa9pu0m4+lP0+sxQKJp0kPUzuVJdlBTL92q5D6us6tUiU 4b0Oa061j+IL1AiTSdC2QwqCTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDHQ/gro YXH/IjK7z8bL8ycd6rJTMB8GA1UdIwQYMBaAFH9lwRDioX5B13D8LfpAPRajPlyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDk5Mi81QjNEMDgwMjVD MEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZrSFhjUHd0LWtBOUZxTS1Y SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YyWEJFT0toZmtIWGNQd3Qta0E5RnFNLVhLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDk5Mi81QjNEMDgwMjVDMEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZr SFhjUHd0LWtBOUZxTS1YSzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW3IjjY1p+a27LdY1Z6eMLLkeBsGurbW4tpfxXv12EFhJoJbayBBR5gXHAPPO qVmvMfAuYeaUzcx3iXntCea8AsLT+J0pdMZvYemQT2mq5mDvsknZT5sgtBC8UWrO uCofD5v6SPClQlduMicsh9NTOKmk8wAqkQjhJDmjGLNV5Dp7/Do46WoMjQtcdLNu URgsY5BK9Vx+9fq2Xs75Nk1AAcsHBedf87sNgzUNn4+yu7gzw3fXlYSsDT1jS2GI UHiWxIlEHlh2VV27VrBy+dw0YqZUoMLuhrisz4SU/At2duvbDEGeHt9XBZ0W0Dy2 lER4BzokxN2eAOmrU8vtslZ5HA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:29:18 2026 by rpki-client