$ rpki-client -vvf rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft File: X-0ED6bGtlZOQCsut2NpLOJDB-o.mft (raw, json) Hash identifier: TWmV9449bywY+l9DmzOYn6B5Qey0nDJS2j7Peta64Us= Subject key identifier: BE:5D:FE:20:29:DD:B0:79:5D:31:50:4B:9D:D8:E7:6D:CE:6A:6C:2C Authority key identifier: 5F:ED:04:0F:A6:C6:B6:56:4E:40:2B:2E:B7:63:69:2C:E2:43:07:EA Certificate issuer: /CN=A9192F5B/serialNumber=5FED040FA6C6B6564E402B2EB763692CE24307EA Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft Manifest number: 42 Signing time: Sun 01 Mar 2026 09:49:34 +0000 Manifest this update: Sun 01 Mar 2026 09:49:33 +0000 Manifest next update: Sun 08 Mar 2026 09:49:33 +0000 Files and hashes: 1: X-0ED6bGtlZOQCsut2NpLOJDB-o.crl (hash: pP3EAD45eRmseT9BCevdI8EGpO3RLksJK31WNUwUc8w=) 2: B44C2C06B4B211F08EEFDF43C4F9AE02.roa (hash: YYsxvMPCRrMVXD10L+51rkoUdNPvTH6rY0GaRqBHiU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.crl rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192F5B, serialNumber=5FED040FA6C6B6564E402B2EB763692CE24307EA Validity Not Before: Mar 1 09:49:33 2026 GMT Not After : Mar 8 09:49:33 2026 GMT Subject: CN=69a40bae-6397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:90:2b:d3:c5:1e:a5:08:e4:9e:a7:83:17:e7: 71:c4:09:b3:eb:0a:23:e0:3a:08:86:7c:2e:aa:84: 0f:3a:20:60:b8:46:48:92:a9:f8:5d:86:72:53:33: 96:6c:3c:f5:85:08:4a:4a:71:e9:7f:c2:53:fd:ab: 4e:f7:1e:60:27:40:14:ff:b1:1a:9f:0d:bc:30:94: 18:0e:3f:d7:ec:c3:4f:90:28:15:3b:47:ad:8e:05: eb:cf:a4:72:99:d5:23:9d:7c:f4:ee:15:b6:78:59: fc:13:7c:dd:b0:ff:07:ce:79:d2:83:06:e6:89:fc: 42:31:b4:65:8e:ed:33:d6:ea:33:f0:6d:38:c5:4a: f0:a0:9e:d2:22:d3:81:c4:9e:63:de:c2:d5:d9:97: b2:71:48:97:95:34:58:8e:be:0e:e6:e8:eb:d6:0a: 9b:86:b9:60:f6:4c:6b:20:4d:e2:96:c0:4b:33:ed: e8:cc:d3:dc:7f:32:2e:92:ed:eb:ed:1a:24:1f:ba: 61:b8:76:a9:9d:cc:99:40:aa:9e:c7:71:a4:9f:47: a9:14:28:51:5f:93:2c:67:f7:ca:54:cd:0b:24:9b: 04:a1:a6:f5:72:86:49:dc:5e:0b:6c:9f:3e:64:65: 55:f8:ff:8e:29:91:81:11:1d:a5:fd:02:08:41:f7: 9c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5D:FE:20:29:DD:B0:79:5D:31:50:4B:9D:D8:E7:6D:CE:6A:6C:2C X509v3 Authority Key Identifier: keyid:5F:ED:04:0F:A6:C6:B6:56:4E:40:2B:2E:B7:63:69:2C:E2:43:07:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:1d:8f:62:3e:bc:b2:49:fd:83:b4:e3:8a:e8:27:b6:e8:d0: c3:87:b5:81:2b:4c:a3:ec:0c:f2:e2:01:fa:cf:da:e7:b3:02: 27:d2:51:bd:27:84:e0:39:29:a8:2c:12:08:51:7c:84:62:de: 54:f7:5d:06:34:1e:bd:ac:82:c4:86:c8:5b:11:2e:9c:4a:3c: f8:f0:00:9f:c0:83:e8:ae:19:72:a3:a8:fb:f0:b7:43:37:a6: 35:5a:84:6b:fa:17:f7:ce:7a:d6:fb:34:7a:1d:d9:f1:bf:77: dd:74:59:56:a9:b1:64:d9:3c:b1:e3:c0:6b:3e:cc:16:0f:9e: 77:07:c2:b8:bd:0e:ea:16:c9:d9:85:5d:0a:ef:7e:34:95:07: 79:bf:d5:bb:e9:c7:2f:21:67:d0:57:15:23:69:0e:a1:27:2b: 08:d1:cd:74:ff:48:67:eb:b9:7b:04:ed:96:d4:ca:53:b8:d6: 3f:e5:67:17:e6:d2:60:f8:9d:0f:a1:c6:b0:09:e3:f1:7c:9a: 0f:6e:a0:b0:b8:be:64:3d:90:dc:b4:45:cc:ad:00:f0:d7:c0: e8:11:f7:37:44:82:c8:a3:78:f8:b9:2f:d2:8a:37:b2:b4:92: 85:21:d0:e8:46:b8:b5:75:3b:c7:e8:fe:32:ff:bd:48:61:19: d2:91:40:e0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MkY1QjExMC8GA1UEBRMoNUZFRDA0MEZBNkM2QjY1NjRFNDAyQjJFQjc2MzY5MkNF MjQzMDdFQTAeFw0yNjAzMDEwOTQ5MzNaFw0yNjAzMDgwOTQ5MzNaMBgxFjAUBgNV BAMTDTY5YTQwYmFlLTYzOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBkCvTxR6lCOSep4MX53HECbPrCiPgOgiGfC6qhA86IGC4RkiSqfhdhnJTM5Zs PPWFCEpKcel/wlP9q073HmAnQBT/sRqfDbwwlBgOP9fsw0+QKBU7R62OBevPpHKZ 1SOdfPTuFbZ4WfwTfN2w/wfOedKDBuaJ/EIxtGWO7TPW6jPwbTjFSvCgntIi04HE nmPewtXZl7JxSJeVNFiOvg7m6OvWCpuGuWD2TGsgTeKWwEsz7ejM09x/Mi6S7evt GiQfumG4dqmdzJlAqp7HcaSfR6kUKFFfkyxn98pUzQskmwShpvVyhkncXgtsnz5k ZVX4/44pkYERHaX9AghB95wDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvl3+ICnd sHldMVBLndjnbc5qbCwwHwYDVR0jBBgwFoAUX+0ED6bGtlZOQCsut2NpLOJDB+ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyRjVCL0Q3MURDMjU0QjRC MTExRjBBREMyQjExRkM0RjlBRTAyL1gtMEVENmJHdGxaT1FDc3V0Mk5wTE9KREIt by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWC0wRUQ2Ykd0bFpPUUNzdXQyTnBMT0pEQi1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky RjVCL0Q3MURDMjU0QjRCMTExRjBBREMyQjExRkM0RjlBRTAyL1gtMEVENmJHdGxa T1FDc3V0Mk5wTE9KREItby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBrHY9iPryySf2DtOOK6Ce26NDDh7WBK0yj7Azy4gH6z9rnswIn0lG9J4TgOSmo LBIIUXyEYt5U910GNB69rILEhshbES6cSjz48ACfwIPorhlyo6j78LdDN6Y1WoRr +hf3znrW+zR6Hdnxv3fddFlWqbFk2Tyx48BrPswWD553B8K4vQ7qFsnZhV0K7340 lQd5v9W76ccvIWfQVxUjaQ6hJysI0c10/0hn67l7BO2W1MpTuNY/5WcX5tJg+J0P ocawCePxfJoPbqCwuL5kPZDctEXMrQDw18DoEfc3RILIo3j4uS/SijeytJKFIdDo Rri1dTvH6P4y/71IYRnSkUDg -----END CERTIFICATE-----Generated at Mon Mar 2 09:14:11 2026 by rpki-client