$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft File: 99ZBYbOgStTlnAFz47gHWSgtQ8E.mft (raw, json) Hash identifier: 8gUenQazIhJC9H4IGZelFJasUrHmlHCLMVIYApbVLFw= Subject key identifier: E3:19:95:5D:EB:80:F3:56:0D:DE:C4:58:E1:4F:A0:BF:57:60:7D:E7 Authority key identifier: F7:D6:41:61:B3:A0:4A:D4:E5:9C:01:73:E3:B8:07:59:28:2D:43:C1 Certificate issuer: /CN=A919C7A9/serialNumber=F7D64161B3A04AD4E59C0173E3B80759282D43C1 Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft Manifest number: 01C9 Signing time: Mon 02 Mar 2026 00:08:12 +0000 Manifest this update: Mon 02 Mar 2026 00:08:10 +0000 Manifest next update: Mon 09 Mar 2026 00:08:10 +0000 Files and hashes: 1: 99ZBYbOgStTlnAFz47gHWSgtQ8E.crl (hash: 1S8BHSrsgwGosrXAkA/oLZ8DVMQAt7xF9PQzGhdjNwk=) 2: 5C5B89FAFF1D11F09172691B85EE528E.roa (hash: y/16UxSaEow8hcS36HAO4q+RTfuAIHH51e8kN8ywsyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.crl rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C7A9, serialNumber=F7D64161B3A04AD4E59C0173E3B80759282D43C1 Validity Not Before: Mar 2 00:08:10 2026 GMT Not After : Mar 9 00:08:10 2026 GMT Subject: CN=69a4d4eb-035c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:68:76:93:a8:e2:63:2d:33:95:68:a2:9b:e3: cb:cb:48:b0:d2:cf:ef:da:28:0d:bb:34:77:80:22: 42:e6:02:4c:60:11:54:11:55:d0:f9:be:16:b2:9f: 52:8e:6d:5a:78:d8:1e:1b:19:b2:7f:ee:70:a3:42: 97:d6:e5:31:96:0b:82:a1:6b:2e:0d:4d:c2:c8:1e: c2:ac:89:ea:93:a5:16:b3:f8:4c:71:a0:58:10:11: c3:90:3b:58:14:2b:f4:23:79:09:f7:86:ce:c5:00: 3e:69:0a:0f:52:69:92:3a:86:b9:bf:d7:3f:f1:94: e7:b3:05:1e:cb:55:a2:21:20:d7:70:76:a6:64:47: 72:6b:f0:f0:c8:96:4c:ad:b0:71:4a:9f:99:4f:0e: f0:86:6e:ae:93:5c:d8:c3:d6:a7:f7:99:12:e5:a0: 6a:ef:4e:6f:a5:61:fe:32:f5:5d:3e:32:81:1b:86: 4a:14:88:42:ca:d1:89:5e:48:32:7f:06:8b:da:2d: 32:8b:f3:84:e7:af:b5:f2:16:cc:23:66:03:6b:d4: 38:8e:25:73:62:f6:b3:df:37:8f:92:a2:bf:9d:9e: 2f:df:3e:63:66:70:80:20:c7:0a:e4:bc:04:f3:16: 83:48:62:17:1a:39:70:58:dd:07:99:af:df:d5:b0: 3b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:19:95:5D:EB:80:F3:56:0D:DE:C4:58:E1:4F:A0:BF:57:60:7D:E7 X509v3 Authority Key Identifier: keyid:F7:D6:41:61:B3:A0:4A:D4:E5:9C:01:73:E3:B8:07:59:28:2D:43:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:79:81:c2:78:6a:44:da:19:8d:5d:7b:d5:30:85:03:8d:a3: f2:16:48:85:a9:7a:0f:9b:c4:73:13:3d:bb:9f:cc:07:b7:a4: 48:69:7b:2d:35:e6:21:85:c8:da:b8:08:b2:3c:82:ab:8d:1a: 1a:b3:45:d3:f1:d8:e9:50:e8:81:c8:a3:88:e1:96:e6:3a:c2: a3:7d:9a:4c:0a:4b:6b:92:95:7a:99:9b:b1:2d:54:2a:02:19: 5e:28:9d:9e:a0:43:59:16:17:32:9b:83:4c:bb:55:49:9b:68: 59:3b:9b:be:f9:ae:40:db:94:35:fc:f2:dc:4f:a3:22:8a:b4: 00:ac:52:38:46:dd:37:2e:c1:1c:75:fc:0e:e5:fc:08:da:4c: 8c:0f:c4:f2:3d:eb:2d:85:2d:34:c8:c3:db:fe:4f:2b:ab:54: f9:48:ce:8a:98:de:20:de:d6:a0:de:10:1d:d2:a2:46:5c:b3: 8e:55:de:9c:af:1f:f6:e0:85:b0:f7:d2:37:b4:b8:a9:5e:07: e9:fb:01:2f:dc:76:07:ea:df:b7:a9:ef:b3:aa:e9:ef:f6:46: e2:d7:d7:38:78:53:e1:ca:41:94:f8:9b:71:57:ff:73:1d:a3: fc:2e:11:25:9e:3d:b3:d0:1a:05:63:82:50:0a:81:82:77:f9: dd:28:7b:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3QTkxMTAvBgNVBAUTKEY3RDY0MTYxQjNBMDRBRDRFNTlDMDE3M0UzQjgwNzU5 MjgyRDQzQzEwHhcNMjYwMzAyMDAwODEwWhcNMjYwMzA5MDAwODEwWjAYMRYwFAYD VQQDEw02OWE0ZDRlYi0wMzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Wh2k6jiYy0zlWiim+PLy0iw0s/v2igNuzR3gCJC5gJMYBFUEVXQ+b4Wsp9S jm1aeNgeGxmyf+5wo0KX1uUxlguCoWsuDU3CyB7CrInqk6UWs/hMcaBYEBHDkDtY FCv0I3kJ94bOxQA+aQoPUmmSOoa5v9c/8ZTnswUey1WiISDXcHamZEdya/DwyJZM rbBxSp+ZTw7whm6uk1zYw9an95kS5aBq705vpWH+MvVdPjKBG4ZKFIhCytGJXkgy fwaL2i0yi/OE56+18hbMI2YDa9Q4jiVzYvaz3zePkqK/nZ4v3z5jZnCAIMcK5LwE 8xaDSGIXGjlwWN0Hma/f1bA78wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOMZlV3r gPNWDd7EWOFPoL9XYH3nMB8GA1UdIwQYMBaAFPfWQWGzoErU5ZwBc+O4B1koLUPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzdBOS9BRkEwRTJBNDgx RTMxMUVFODM4REE1MEFDNEY5QUUwMi85OVpCWWJPZ1N0VGxuQUZ6NDdnSFdTZ3RR OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk5WkJZYk9nU3RUbG5BRno0N2dIV1NndFE4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzdBOS9BRkEwRTJBNDgxRTMxMUVFODM4REE1MEFDNEY5QUUwMi85OVpCWWJPZ1N0 VGxuQUZ6NDdnSFdTZ3RROEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlnmBwnhqRNoZjV171TCFA42j8hZIhal6D5vEcxM9u5/MB7ekSGl7LTXmIYXI 2rgIsjyCq40aGrNF0/HY6VDogcijiOGW5jrCo32aTApLa5KVepmbsS1UKgIZXiid nqBDWRYXMpuDTLtVSZtoWTubvvmuQNuUNfzy3E+jIoq0AKxSOEbdNy7BHHX8DuX8 CNpMjA/E8j3rLYUtNMjD2/5PK6tU+UjOipjeIN7WoN4QHdKiRlyzjlXenK8f9uCF sPfSN7S4qV4H6fsBL9x2B+rft6nvs6rp7/ZG4tfXOHhT4cpBlPibcVf/cx2j/C4R JZ49s9AaBWOCUAqBgnf53Sh7SA== -----END CERTIFICATE-----Generated at Mon Mar 2 11:58:50 2026 by rpki-client