$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft File: Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json) Hash identifier: QB/pLpCCzg3mcrwJRFgvB3lp7I7+UTbt6enJtHh48Cs= Subject key identifier: 32:71:C3:44:98:E7:33:7F:B3:F0:AD:CC:AC:5B:C4:C1:A2:5C:AC:AE Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62 Certificate issuer: /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62 Certificate serial: 352A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft Manifest number: 351B Signing time: Sat 28 Feb 2026 15:09:01 +0000 Manifest this update: Sat 28 Feb 2026 15:09:01 +0000 Manifest next update: Sat 07 Mar 2026 15:09:01 +0000 Files and hashes: 1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: UVgHUo+SJ+7bGGCzSngnMFn16YUsIX3ora/3eu99dhA=) 2: E73006AA682811EB8D635520C4F9AE02.roa (hash: 3dh9yLLZm2+U6xobWuHKGIC0VGl5iGyZmQBPzOFbKDA=) 3: E7DDE5B8682811EB8D635520C4F9AE02.roa (hash: JPpUiaz8as6ncagKgyuUXaP5ZRdmrTGzakjmAvPZHY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 15:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13610 (0x352a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62 Validity Not Before: Feb 28 15:09:01 2026 GMT Not After : Mar 7 15:09:01 2026 GMT Subject: CN=69a3050d-8cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:80:30:64:bc:51:a3:5e:3f:ff:49:af:77:e9: f4:44:fe:f3:da:43:b8:cc:9d:df:bb:a3:b2:5b:e9: 29:e8:fa:0b:2b:e5:02:0f:2a:27:a4:75:6e:30:46: 36:b3:38:27:fc:0a:72:53:0d:12:45:2a:64:5d:9a: 36:9f:5b:38:b8:ee:37:5c:6f:b9:14:f9:9f:03:eb: bc:e7:35:10:ef:95:5d:09:16:65:a0:7a:0c:63:d0: 5d:a2:50:eb:15:14:5f:03:04:37:a6:39:d6:a7:8f: 30:aa:52:08:dc:8d:11:65:81:d2:a9:da:11:ab:d8: 4c:3f:54:9a:ce:c7:03:0b:ae:23:ab:c3:10:fe:97: 32:5d:97:ee:b7:8c:a9:18:81:23:0a:5b:8c:f1:e7: f4:44:be:32:ef:d2:63:17:58:eb:b7:c8:69:93:bd: 94:a0:7a:34:07:c2:d8:29:2c:10:7f:d2:b1:6b:86: 1f:2e:e0:e1:c2:28:6b:e0:2e:7b:31:0b:87:93:d2: 80:ab:d6:df:19:1e:46:cd:2e:07:9c:e1:d4:bf:a9: ca:83:1b:11:48:4b:98:dd:5d:cc:4e:ff:d7:d3:1d: 60:a5:5f:2f:29:7d:92:6d:b7:1f:1e:19:37:0f:ed: 96:8e:63:a8:44:27:71:cd:5b:32:45:0b:fd:2c:0d: 49:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:71:C3:44:98:E7:33:7F:B3:F0:AD:CC:AC:5B:C4:C1:A2:5C:AC:AE X509v3 Authority Key Identifier: keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:cb:57:96:ed:e6:08:ba:52:44:e5:77:0e:6a:61:23:d5:c6: 40:27:7c:d2:de:1f:c0:1b:e7:88:8e:3e:0a:90:af:fc:19:95: e7:82:bd:ec:56:ef:6f:06:dc:0c:0c:56:3b:86:fd:1f:f9:79: c7:ad:4e:d1:5d:71:81:0c:a8:27:14:83:6f:2f:6e:a0:f1:36: 59:8e:8d:44:eb:ee:61:98:b3:c6:62:ce:25:1c:21:74:a6:6b: 44:d6:e7:da:ae:e3:2e:e0:db:cb:0d:ab:c6:57:52:dd:38:db: ff:61:ae:b4:70:5f:dd:ac:15:9a:72:68:c5:ba:99:83:94:8d: 80:44:90:61:4c:8e:1d:a1:54:46:d8:52:8e:e4:5e:0d:59:da: 90:80:d9:81:31:ff:86:83:06:db:2a:a5:e3:cc:d5:d8:f2:e3: a5:df:71:f5:ef:48:b2:38:a3:39:c3:7c:33:b5:c9:41:b5:7e: e6:30:5c:5d:f9:92:c9:ee:6d:13:8f:c4:98:8d:93:7e:d2:73: f8:b8:6b:62:ac:14:e3:d3:35:11:63:35:65:d4:06:bb:11:4e: 31:83:08:bc:10:e7:8a:38:7f:22:6d:08:1e:88:f0:bb:c9:c8: c7:7d:18:d8:75:b0:70:2c:cd:c7:68:46:35:19:67:cf:c2:de: b6:00:15:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZEMjQxMTAvBgNVBAUTKDNFQzgzNDIwNEQ2QkFBRjk5MTQwQzAzQkQ3NjIxMTQ1 QzA3QkJBNjIwHhcNMjYwMjI4MTUwOTAxWhcNMjYwMzA3MTUwOTAxWjAYMRYwFAYD VQQDDA02OWEzMDUwZC04Y2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIAwZLxRo14//0mvd+n0RP7z2kO4zJ3fu6OyW+kp6PoLK+UCDyonpHVuMEY2 szgn/ApyUw0SRSpkXZo2n1s4uO43XG+5FPmfA+u85zUQ75VdCRZloHoMY9BdolDr FRRfAwQ3pjnWp48wqlII3I0RZYHSqdoRq9hMP1SazscDC64jq8MQ/pcyXZfut4yp GIEjCluM8ef0RL4y79JjF1jrt8hpk72UoHo0B8LYKSwQf9Kxa4YfLuDhwihr4C57 MQuHk9KAq9bfGR5GzS4HnOHUv6nKgxsRSEuY3V3MTv/X0x1gpV8vKX2SbbcfHhk3 D+2WjmOoRCdxzVsyRQv9LA1J/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDJxw0SY 5zN/s/CtzKxbxMGiXKyuMB8GA1UdIwQYMBaAFD7INCBNa6r5kUDAO9diEUXAe7pi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkQyNC81NTBFMjdGMjFE QTQxMUUyOEM1MzNCOUEwOEIwMkNEMi9Qc2cwSUUxcnF2bVJRTUE3MTJJUlJjQjd1 bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BzZzBJRTFycXZtUlFNQTcxMklSUmNCN3VtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkQyNC81NTBFMjdGMjFEQTQxMUUyOEM1MzNCOUEwOEIwMkNEMi9Qc2cwSUUxcnF2 bVJRTUE3MTJJUlJjQjd1bUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfctXlu3mCLpSROV3DmphI9XGQCd80t4fwBvniI4+CpCv/BmV54K97Fbvbwbc DAxWO4b9H/l5x61O0V1xgQyoJxSDby9uoPE2WY6NROvuYZizxmLOJRwhdKZrRNbn 2q7jLuDbyw2rxldS3Tjb/2GutHBf3awVmnJoxbqZg5SNgESQYUyOHaFURthSjuRe DVnakIDZgTH/hoMG2yql48zV2PLjpd9x9e9IsjijOcN8M7XJQbV+5jBcXfmSye5t E4/EmI2TftJz+LhrYqwU49M1EWM1ZdQGuxFOMYMIvBDnijh/Im0IHojwu8nIx30Y 2HWwcCzNx2hGNRlnz8LetgAVpw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:53:58 2026 by rpki-client