$ rpki-client -vvf rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft File: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft (raw, json) Hash identifier: 2ukoULm3ke0wRaisCPKKiYrBuzb/YU3SIO+ucjPcO0g= Subject key identifier: 76:DD:FD:D7:E6:53:12:E2:6F:74:FE:E7:C8:9B:55:4D:32:AB:2D:76 Authority key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 Certificate issuer: /CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Certificate serial: 089B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft Manifest number: 0887 Signing time: Sat 28 Feb 2026 20:54:44 +0000 Manifest this update: Sat 28 Feb 2026 20:54:44 +0000 Manifest next update: Sat 07 Mar 2026 20:54:44 +0000 Files and hashes: 1: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl (hash: NKsdsTT6Yj9h54sAMk0ae3o2CdHOTAQ1KjYYKpFIgg0=) 2: 903E8812E38A11EAA3B8AE59C4F9AE02.roa (hash: DOctWr/OPgqaZuQo/Vg8BKPX28KWmuANahI8jBAfLDc=) 3: DA0C233E3EE411ED905A3415C4F9AE02.roa (hash: tSePHI7aLjEFlYS6xw+YOLrRBy4JYZe6TL89trJbrgc=) 4: B94BEEA036D811ECB5BD1470C4F9AE02.roa (hash: H1FuH2ZNH03uYQtNzb3TWzIjcp7o0St6uGtbs7VdGro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 20:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2203 (0x89b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D539, serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Validity Not Before: Feb 28 20:54:44 2026 GMT Not After : Mar 7 20:54:44 2026 GMT Subject: CN=69a35614-079e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a2:93:b8:9e:9d:bc:0b:ae:14:78:34:9b:0b: d6:b0:35:91:f0:cb:dc:95:5f:e8:b0:75:4c:86:45: 74:9d:b7:fe:2b:4b:7f:07:ec:d9:9b:a8:89:ef:ad: fe:e1:10:3c:56:20:74:8b:e5:32:37:eb:97:18:bf: a8:b2:de:d5:95:c2:d7:c5:e0:4a:de:e9:f3:19:bf: 65:aa:82:84:21:3e:b2:e9:b3:67:9f:0c:f7:84:d8: 67:53:05:e8:63:71:52:8f:47:13:1e:c1:30:f9:f4: 1c:55:ed:66:a2:38:18:00:ed:81:57:42:67:f6:1e: 88:bb:c7:de:1d:29:8e:b8:e0:79:16:22:90:7a:14: ea:29:bd:fa:a4:13:22:62:a3:6e:ee:b6:86:ee:9e: 69:33:ff:cf:46:de:8e:cb:95:86:1c:d4:ce:11:c5: bf:dc:f5:ef:0a:b6:df:f8:d6:89:2b:e1:2e:14:b2: 83:b4:a4:42:89:62:38:50:e4:6c:b3:c9:a9:c1:e6: fe:a7:68:4b:ff:f4:57:ed:8e:99:6b:c0:2a:04:4e: d2:25:4a:42:e3:3f:cc:f7:a4:0b:35:86:6c:3a:be: c0:95:aa:35:64:67:93:b6:87:88:75:ef:cc:93:87: 16:b8:eb:2c:ae:ce:58:6b:03:a6:3a:b3:44:8c:36: ac:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DD:FD:D7:E6:53:12:E2:6F:74:FE:E7:C8:9B:55:4D:32:AB:2D:76 X509v3 Authority Key Identifier: keyid:22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:21:1e:c3:c3:9e:67:39:b6:e9:40:d5:ec:ee:1b:2e:e6:69: d7:b6:ea:fc:c4:83:3c:c4:7d:ff:30:78:6a:43:b4:1b:ef:c1: e6:85:a7:e1:c0:2e:05:89:ad:4a:aa:d2:a7:8f:a4:5c:5b:84: b3:80:ba:55:4e:9d:06:fe:7a:c5:f1:67:fa:8b:03:4f:9d:58: da:50:59:a2:b6:e0:a0:c0:27:03:8e:b4:72:a6:eb:2e:6e:bc: ac:b0:3d:86:5c:0f:f5:97:b2:dc:5e:72:6e:6a:68:23:af:9b: 8b:83:f7:43:aa:28:d2:86:29:03:b9:48:3c:2d:56:8b:e3:ba: 32:1c:63:2d:73:ad:c1:f7:5a:e5:b5:3f:37:fb:c3:fd:d0:79: 06:7b:a9:d5:36:d5:6d:8d:38:4b:5b:d3:ef:1c:bf:65:d2:8c: 64:12:16:35:ca:e0:cd:bf:78:7b:9e:20:78:70:9d:f0:71:8c: f9:5f:32:54:f4:f3:ff:69:8d:c0:22:8a:df:66:ed:31:01:0d: 39:db:8f:8c:21:03:9e:df:f8:ce:b0:d8:a0:16:51:9e:6a:8a: 1e:44:57:c3:62:23:fe:eb:86:bd:69:9f:82:12:32:4f:4a:95: ec:09:80:21:4a:89:91:be:65:55:43:d7:19:2c:84:c8:ed:92: 9a:32:e6:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1MzkxMTAvBgNVBAUTKDIyMUY1MDE0M0UxRDVGOTNDNENEMzFDOUZFRTdBMjRE RTgwMUYyRDcwHhcNMjYwMjI4MjA1NDQ0WhcNMjYwMzA3MjA1NDQ0WjAYMRYwFAYD VQQDDA02OWEzNTYxNC0wNzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqKTuJ6dvAuuFHg0mwvWsDWR8MvclV/osHVMhkV0nbf+K0t/B+zZm6iJ763+ 4RA8ViB0i+UyN+uXGL+ost7VlcLXxeBK3unzGb9lqoKEIT6y6bNnnwz3hNhnUwXo Y3FSj0cTHsEw+fQcVe1mojgYAO2BV0Jn9h6Iu8feHSmOuOB5FiKQehTqKb36pBMi YqNu7raG7p5pM//PRt6Oy5WGHNTOEcW/3PXvCrbf+NaJK+EuFLKDtKRCiWI4UORs s8mpweb+p2hL//RX7Y6Za8AqBE7SJUpC4z/M96QLNYZsOr7Alao1ZGeTtoeIde/M k4cWuOssrs5YawOmOrNEjDasxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHbd/dfm UxLib3T+58ibVU0yqy12MB8GA1UdIwQYMBaAFCIfUBQ+HV+TxM0xyf7nok3oAfLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDUzOS9DMTI2NURDMEUz ODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1UEV6VEhKX3VlaVRlZ0I4 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0loOVFGRDRkWDVQRXpUSEpfdWVpVGVnQjh0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDUzOS9DMTI2NURDMEUzODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1 UEV6VEhKX3VlaVRlZ0I4dGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvSEew8OeZzm26UDV7O4bLuZp17bq/MSDPMR9/zB4akO0G+/B5oWn4cAuBYmt SqrSp4+kXFuEs4C6VU6dBv56xfFn+osDT51Y2lBZorbgoMAnA460cqbrLm68rLA9 hlwP9Zey3F5ybmpoI6+bi4P3Q6oo0oYpA7lIPC1Wi+O6MhxjLXOtwfda5bU/N/vD /dB5Bnup1TbVbY04S1vT7xy/ZdKMZBIWNcrgzb94e54geHCd8HGM+V8yVPTz/2mN wCKK32btMQENOduPjCEDnt/4zrDYoBZRnmqKHkRXw2Ij/uuGvWmfghIyT0qV7AmA IUqJkb5lVUPXGSyEyO2SmjLmJQ== -----END CERTIFICATE-----Generated at Mon Mar 2 03:14:57 2026 by rpki-client