$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft File: h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json) Hash identifier: zni/361FNL/naDJGIwxkfBDi45iks7cYEPucTCOxA8U= Subject key identifier: FB:56:6D:D9:F9:2A:7C:BA:06:56:A3:AE:3A:77:BF:B3:5D:21:E8:DE Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft Manifest number: 017F Signing time: Mon 02 Mar 2026 13:22:55 +0000 Manifest this update: Mon 02 Mar 2026 13:22:54 +0000 Manifest next update: Mon 09 Mar 2026 13:22:54 +0000 Files and hashes: 1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: RqABU5EbeInK70dEo49PaaGG9k90Rb+gxCUTwCmvoKs=) 2: 9E54710E16D511F09EF28A4EC4F9AE02.roa (hash: PS353luWU5EZRXf1V5KYpvKbmWd2t8tkTqJLhBlN/tY=) 3: F2D5C21216F511F086107D74C4F9AE02.roa (hash: ZuKywPCk/DkKyCpqoZBfyKV9L6QxTxAVdxmCPTDjvq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Validity Not Before: Mar 2 13:22:54 2026 GMT Not After : Mar 9 13:22:54 2026 GMT Subject: CN=69a58f2f-fa3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8e:b8:dd:bd:8b:f4:a4:b9:0e:21:31:e4:e2: dd:f3:60:a3:c3:4b:6a:4f:c2:54:e5:e9:37:7c:92: 8f:6e:1f:96:39:63:78:5d:0d:2d:63:b9:ed:85:15: ba:80:d5:04:5f:38:f4:d2:be:a7:eb:6d:55:b7:d3: 94:46:9d:cb:9e:46:18:8c:57:d2:c9:b2:fd:b4:04: f2:eb:63:3d:e1:40:b4:23:c5:3b:06:7b:db:b1:83: 3c:11:18:a6:71:4a:ec:e1:e6:6e:3f:52:ae:cc:3f: 8c:dd:56:07:7d:25:d1:fd:55:88:f0:f0:78:50:bd: de:a9:d2:c2:d6:e8:08:23:a6:7d:ce:9d:6f:48:f3: 18:54:74:47:91:fb:77:28:0f:ae:6a:dc:e7:6c:b0: 73:fe:15:79:1f:c7:1b:55:8c:b5:f5:c6:41:48:f8: 6a:db:2b:b1:ec:1b:c6:df:2a:c3:6b:5e:c7:3b:d4: d9:1a:a5:d8:5b:76:80:10:94:69:c3:d6:7a:1f:5c: 56:2b:a0:13:84:f4:a1:af:c6:d2:0e:a7:86:e7:d1: 92:71:ce:27:c0:79:d2:7d:77:68:c7:fa:17:84:a1: 3a:f7:70:af:1a:f2:ff:05:31:5a:8c:cc:66:27:75: 69:dd:97:63:ba:a7:d4:95:fc:d2:47:16:89:29:c2: 04:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:56:6D:D9:F9:2A:7C:BA:06:56:A3:AE:3A:77:BF:B3:5D:21:E8:DE X509v3 Authority Key Identifier: keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:9f:94:ce:1d:4b:49:aa:97:73:fd:c0:50:30:ab:d4:d5:c4: 02:e3:1f:1d:e6:08:86:c3:5d:07:50:9b:a6:92:c2:dd:a2:84: ff:48:88:8a:c3:6f:bc:8c:68:93:c7:a4:81:ff:e4:7a:4d:c5: 76:cb:4c:bf:fa:ae:3d:ba:65:1f:ad:a9:c9:f6:84:fa:01:f4: 9f:7c:05:b8:d3:3a:e2:9d:26:da:81:2b:8c:66:5d:91:58:c0: c2:49:ec:92:cc:cd:8e:b3:a3:b7:a7:fc:6a:43:67:c4:05:02: df:30:a5:95:94:b0:50:7a:73:e6:45:17:08:80:e6:7c:b5:78: e4:c2:08:d0:cd:fe:06:10:34:83:71:60:54:01:d7:3b:b2:ad: 66:b9:40:39:6f:2e:30:e8:e5:2a:68:28:c9:70:40:52:72:e4: 8e:60:bf:2c:c1:b7:83:97:1e:12:f9:e9:4f:69:22:ea:89:9e: 21:7a:48:d6:80:9a:ac:3e:74:a0:30:5d:e1:71:85:e2:31:b9: 61:40:0a:4f:10:ff:0b:06:51:da:d7:34:ad:aa:3f:00:c6:14: 76:c1:ec:6c:9b:fd:d9:64:12:c5:7c:04:c7:64:1d:20:d7:80: 81:e3:a2:44:2c:46:d7:fa:06:75:cb:b1:f0:ef:60:b1:d8:c0: 7b:f2:a2:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY5QTgxMTAvBgNVBAUTKDg3QjYyQzM0RThEQzVENDAyMzhDMEY2QkRFOTExNTZF NUQwNkE0NEIwHhcNMjYwMzAyMTMyMjU0WhcNMjYwMzA5MTMyMjU0WjAYMRYwFAYD VQQDEw02OWE1OGYyZi1mYTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl4643b2L9KS5DiEx5OLd82Cjw0tqT8JU5ek3fJKPbh+WOWN4XQ0tY7nthRW6 gNUEXzj00r6n621Vt9OURp3LnkYYjFfSybL9tATy62M94UC0I8U7BnvbsYM8ERim cUrs4eZuP1KuzD+M3VYHfSXR/VWI8PB4UL3eqdLC1ugII6Z9zp1vSPMYVHRHkft3 KA+uatznbLBz/hV5H8cbVYy19cZBSPhq2yux7BvG3yrDa17HO9TZGqXYW3aAEJRp w9Z6H1xWK6AThPShr8bSDqeG59GScc4nwHnSfXdox/oXhKE693CvGvL/BTFajMxm J3Vp3ZdjuqfUlfzSRxaJKcIEiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPtWbdn5 Kny6Blajrjp3v7NdIejeMB8GA1UdIwQYMBaAFIe2LDTo3F1AI4wPa96RFW5dBqRL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjlBOC9COTIzMDZGRUVC NkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hVQWpqQTlyM3BFVmJsMEdw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WXNOT2pjWFVBampBOXIzcEVWYmwwR3BFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjlBOC9COTIzMDZGRUVCNkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hV QWpqQTlyM3BFVmJsMEdwRXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAop+Uzh1LSaqXc/3AUDCr1NXEAuMfHeYIhsNdB1CbppLC3aKE/0iIisNvvIxo k8ekgf/kek3FdstMv/quPbplH62pyfaE+gH0n3wFuNM64p0m2oErjGZdkVjAwkns kszNjrOjt6f8akNnxAUC3zCllZSwUHpz5kUXCIDmfLV45MII0M3+BhA0g3FgVAHX O7KtZrlAOW8uMOjlKmgoyXBAUnLkjmC/LMG3g5ceEvnpT2ki6omeIXpI1oCarD50 oDBd4XGF4jG5YUAKTxD/CwZR2tc0rao/AMYUdsHsbJv92WQSxXwEx2QdINeAgeOi RCxG1/oGdcux8O9gsdjAe/KiCQ== -----END CERTIFICATE-----Generated at Mon Mar 2 16:49:37 2026 by rpki-client