$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft File: rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft (raw, json) Hash identifier: oO+pmOmpM+2EdTwJRejxRZHRE0vsc7qdBMeBCekEZDc= Subject key identifier: 16:32:C0:9B:C5:FC:08:78:0A:ED:8F:6C:47:03:27:87:99:3C:82:7A Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 Certificate issuer: /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Certificate serial: 10F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft Manifest number: 10E8 Signing time: Mon 02 Mar 2026 17:18:20 +0000 Manifest this update: Mon 02 Mar 2026 17:18:20 +0000 Manifest next update: Mon 09 Mar 2026 17:18:20 +0000 Files and hashes: 1: rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl (hash: O8z1rZNOIdPJbymdMozbyyph4qGlKgjzxJEv3dArBeY=) 2: 6B1B75BC756311EFB6C7E64CC4F9AE02.roa (hash: UBjBwHlmM/IFjT10AU767yueXJrZgOYMUiv13BTyuu0=) 3: CBAED530FE6A11ECAB640344C4F9AE02.roa (hash: RiDf1XLYKZh+wmu0a6//ACSvTiLlex2fq/GN1xb8xX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 17:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4340 (0x10f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Validity Not Before: Mar 2 17:18:20 2026 GMT Not After : Mar 9 17:18:20 2026 GMT Subject: CN=69a5c65c-cf17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:96:c4:7f:47:68:ce:3b:8f:8e:5b:59:94:d4: 2e:d2:de:03:9f:35:c6:bf:99:d0:22:a4:1c:25:58: 4b:16:f7:ad:08:78:92:bc:73:a8:ff:42:a4:38:96: 98:46:c7:30:25:bc:6a:fb:74:3e:0c:39:fd:9f:ca: 68:8e:6b:1d:b6:4a:de:ca:bd:93:5f:88:c1:86:55: 6f:ba:b0:97:59:a9:ed:ab:23:33:d8:4a:b8:dd:3c: 8d:e8:a3:48:b5:04:b0:58:b6:61:f4:39:60:47:5d: 9c:cb:a1:b9:81:67:78:81:75:16:89:a4:0a:01:20: 98:3f:59:b1:67:83:72:1e:e5:77:1f:85:2e:7f:57: 96:a8:95:e3:ca:2a:45:50:db:cb:12:14:7a:12:e9: 03:b0:93:5b:4d:2c:40:36:73:12:8f:81:d2:69:d9: 9d:eb:49:75:9c:6c:60:a1:de:c3:44:25:e4:38:c5: 04:16:fc:4b:b7:3c:3d:de:0b:86:c5:9e:2d:0e:7a: ae:26:4d:e5:f4:f2:0c:23:36:a8:68:cc:94:96:12: b0:3b:b6:1e:b4:b6:94:00:bd:a6:81:bd:5e:74:41: 25:e6:92:43:3b:51:d7:c5:77:96:24:2b:6d:00:43: 39:02:cf:b1:fb:5a:69:56:01:00:c2:e9:fc:4d:53: 51:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:32:C0:9B:C5:FC:08:78:0A:ED:8F:6C:47:03:27:87:99:3C:82:7A X509v3 Authority Key Identifier: keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:2d:c0:d9:e4:cd:ea:67:5c:bd:e6:e0:79:bd:be:5e:fa:f7: 62:72:68:5b:32:05:8d:c9:98:3d:d5:bd:43:25:d8:6c:35:05: 0c:2f:ce:70:da:63:6d:f0:47:13:96:b1:35:bf:89:d1:89:fa: 64:cc:af:c0:84:bc:73:8d:47:8b:15:55:9f:a3:2f:60:45:fc: 57:0f:2c:81:df:e2:41:61:d6:d3:40:fd:df:fb:0e:2c:60:c0: 48:d0:4f:40:29:61:66:83:81:f4:88:ce:2b:32:91:6c:a6:b6: 73:74:c4:e9:cd:63:3f:93:64:90:2c:b8:11:59:16:2c:98:d5: 9f:ac:ae:f4:cd:0b:a6:2c:f9:6b:de:c8:50:24:be:2f:ce:30: d5:47:78:c2:e2:ea:68:3a:b8:a7:6d:3b:4e:b1:f4:5e:c4:f0: 0e:92:65:76:5f:eb:65:2b:80:c3:da:d0:08:b4:17:57:bd:3f: 6b:30:05:a7:ce:84:cf:a8:79:15:c4:0e:b1:35:9a:ff:2e:6e: 38:bd:72:8e:7c:d5:3a:d7:1e:c6:90:47:25:de:dc:f2:17:6f: 65:b0:81:0b:f2:2a:65:d3:da:eb:9b:b7:e3:13:5c:fd:3c:b6: 36:c4:14:fd:0c:47:23:94:7d:b9:16:ab:28:29:1a:c9:be:e9: 71:6b:63:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEFDODg2NDI2MzgyNEVERTM2NTVCOTk3NDJERkIzOUU4 ODNCQjkxNDUwHhcNMjYwMzAyMTcxODIwWhcNMjYwMzA5MTcxODIwWjAYMRYwFAYD VQQDEw02OWE1YzY1Yy1jZjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkZbEf0dozjuPjltZlNQu0t4DnzXGv5nQIqQcJVhLFvetCHiSvHOo/0KkOJaY RscwJbxq+3Q+DDn9n8pojmsdtkreyr2TX4jBhlVvurCXWantqyMz2Eq43TyN6KNI tQSwWLZh9DlgR12cy6G5gWd4gXUWiaQKASCYP1mxZ4NyHuV3H4Uuf1eWqJXjyipF UNvLEhR6EukDsJNbTSxANnMSj4HSadmd60l1nGxgod7DRCXkOMUEFvxLtzw93guG xZ4tDnquJk3l9PIMIzaoaMyUlhKwO7YetLaUAL2mgb1edEEl5pJDO1HXxXeWJCtt AEM5As+x+1ppVgEAwun8TVNRswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBYywJvF /Ah4Cu2PbEcDJ4eZPIJ6MB8GA1UdIwQYMBaAFKyIZCY4JO3jZVuZdC37OeiDu5FF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FMTA1QjNCQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdlTmxXNWwwTGZzNTZJTzdr VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JJaGtKamdrN2VObFc1bDBMZnM1NklPN2tVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9FMTA1QjNCQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdl TmxXNWwwTGZzNTZJTzdrVVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApC3A2eTN6mdcvebgeb2+Xvr3YnJoWzIFjcmYPdW9QyXYbDUFDC/OcNpjbfBH E5axNb+J0Yn6ZMyvwIS8c41HixVVn6MvYEX8Vw8sgd/iQWHW00D93/sOLGDASNBP QClhZoOB9IjOKzKRbKa2c3TE6c1jP5NkkCy4EVkWLJjVn6yu9M0Lpiz5a97IUCS+ L84w1Ud4wuLqaDq4p207TrH0XsTwDpJldl/rZSuAw9rQCLQXV70/azAFp86Ez6h5 FcQOsTWa/y5uOL1yjnzVOtcexpBHJd7c8hdvZbCBC/IqZdPa65u34xNc/Ty2NsQU /QxHI5R9uRarKCkayb7pcWtjGQ== -----END CERTIFICATE-----Generated at Wed Mar 4 08:22:44 2026 by rpki-client