$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft File: MYjUHQwG76LJaocHNWno4QNE4s0.mft (raw, json) Hash identifier: rppAcKdzk0WPUCjvmokDwFrxmkOw4pM9P0KgpideD0Y= Subject key identifier: DC:7E:29:6C:15:02:76:B1:21:3A:87:BA:82:77:EC:A9:A3:ED:B8:C2 Authority key identifier: 31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD Certificate issuer: /CN=A9147CA8/serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft Manifest number: 3E Signing time: Tue 03 Mar 2026 07:31:17 +0000 Manifest this update: Tue 03 Mar 2026 07:31:16 +0000 Manifest next update: Tue 10 Mar 2026 07:31:16 +0000 Files and hashes: 1: MYjUHQwG76LJaocHNWno4QNE4s0.crl (hash: qY6dhnJVGXI3bNBmS12K5M8PdzmnyO+b0rzcx+YRgIk=) 2: 195EB36402A311F188F4114D3A3D8C67.roa (hash: F3OBgRf88JWl0zPxAOaJdKhZybrbUfnPqOHJTTCy2CM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 07:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CA8, serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD Validity Not Before: Mar 3 07:31:16 2026 GMT Not After : Mar 10 07:31:16 2026 GMT Subject: CN=69a68e44-b52f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b5:0b:bc:5c:32:76:83:ef:0c:31:53:4a:61: c6:33:03:80:f3:81:e5:a1:d0:8c:37:75:51:7e:b0: 13:b0:0a:d0:da:1f:2b:c9:ca:91:65:c8:6f:28:97: 91:ef:cc:a0:ba:92:ec:3c:76:65:f8:ad:b8:9e:be: 1a:80:35:c6:55:4e:8c:c0:af:e6:f6:0f:36:e7:bc: 5f:1d:56:df:a4:71:6d:55:4f:36:e4:d2:fe:06:38: a0:4a:be:83:8e:48:ba:a1:02:49:6d:30:00:13:68: 56:69:e9:45:d1:b9:b1:1e:b6:c9:43:99:80:0c:e7: 37:ed:4b:12:a5:8a:fd:a7:67:a5:55:9d:a2:4a:00: 7b:ba:b9:60:de:35:4b:eb:6e:1f:5c:b6:8c:89:51: e7:22:69:9f:8b:8e:3e:a7:95:f4:93:19:c7:35:50: c8:49:e8:60:fb:1d:58:f5:ef:5f:1a:e5:0f:d0:a7: 3b:0b:c6:d9:36:fe:21:b9:c9:f6:4e:72:4b:04:d8: fe:61:46:b9:1d:56:a3:f5:6b:5e:25:f7:b8:9a:0c: 71:ba:f0:e8:10:7b:14:c2:fe:04:3a:52:f5:e6:78: 75:33:16:e5:01:7a:62:e9:dc:42:10:a4:61:c0:4f: c4:27:35:b3:86:3d:6e:f2:67:74:3a:55:b5:19:bd: 14:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7E:29:6C:15:02:76:B1:21:3A:87:BA:82:77:EC:A9:A3:ED:B8:C2 X509v3 Authority Key Identifier: keyid:31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:af:b4:73:6b:9f:10:6d:88:a7:ab:1d:a8:5a:0e:a1:b3:6b: 91:cb:e0:39:00:5c:3b:1c:a3:67:a7:f6:19:41:aa:df:2b:05: 45:3e:46:cf:0a:cd:61:28:ba:ff:34:9d:ed:38:6f:ee:dd:61: 8b:fb:0f:9d:0c:ab:48:c7:83:c4:00:de:2a:9e:e6:dd:0e:d8: 26:4f:0a:db:42:5e:20:78:83:5b:f6:10:ad:54:b5:07:72:a4: 84:9e:03:1e:ee:48:a8:f7:85:9e:bb:12:e2:14:21:bb:4a:c8: fe:46:9a:2a:18:60:8d:74:20:9e:d5:51:1f:cb:20:46:6c:7f: ef:77:7d:54:68:ce:26:3e:e2:65:6b:97:41:42:3e:9a:43:e6: c8:31:1c:29:c6:31:bb:0f:93:fd:11:fd:f9:c5:fe:dd:50:7a: 42:09:cd:e4:8c:a5:b1:b9:ca:5b:52:2d:12:21:c3:b5:27:7d: 83:11:0d:ec:fc:5e:64:60:eb:c3:d5:23:83:c5:bb:9d:b9:69: 4b:77:b1:e6:ae:09:8a:38:0c:b2:c3:c4:52:05:6c:dd:77:57: 40:22:2a:c0:8a:24:a9:a2:e6:6d:e8:5b:7e:f9:49:b4:a0:ae: 92:71:f2:71:46:40:29:b1:b6:44:96:4a:49:fe:c3:a1:db:51: 69:96:4d:97 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0NBODExMC8GA1UEBRMoMzE4OEQ0MUQwQzA2RUZBMkM5NkE4NzA3MzU2OUU4RTEw MzQ0RTJDRDAeFw0yNjAzMDMwNzMxMTZaFw0yNjAzMTAwNzMxMTZaMBgxFjAUBgNV BAMTDTY5YTY4ZTQ0LWI1MmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvtQu8XDJ2g+8MMVNKYcYzA4DzgeWh0Iw3dVF+sBOwCtDaHyvJypFlyG8ol5Hv zKC6kuw8dmX4rbievhqANcZVTozAr+b2DzbnvF8dVt+kcW1VTzbk0v4GOKBKvoOO SLqhAkltMAATaFZp6UXRubEetslDmYAM5zftSxKliv2nZ6VVnaJKAHu6uWDeNUvr bh9ctoyJUeciaZ+Ljj6nlfSTGcc1UMhJ6GD7HVj1718a5Q/QpzsLxtk2/iG5yfZO cksE2P5hRrkdVqP1a14l97iaDHG68OgQexTC/gQ6UvXmeHUzFuUBemLp3EIQpGHA T8QnNbOGPW7yZ3Q6VbUZvRQJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3H4pbBUC drEhOoe6gnfsqaPtuMIwHwYDVR0jBBgwFoAUMYjUHQwG76LJaocHNWno4QNE4s0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3Q0E4LzJEOThDQzVBQzUw NjExRjA4QzZCQTMyQkM0RjlBRTAyL01ZalVIUXdHNzZMSmFvY0hOV25vNFFORTRz MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVlqVUhRd0c3NkxKYW9jSE5Xbm80UU5FNHMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 Q0E4LzJEOThDQzVBQzUwNjExRjA4QzZCQTMyQkM0RjlBRTAyL01ZalVIUXdHNzZM SmFvY0hOV25vNFFORTRzMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBOr7Rza58QbYinqx2oWg6hs2uRy+A5AFw7HKNnp/YZQarfKwVFPkbPCs1hKLr/ NJ3tOG/u3WGL+w+dDKtIx4PEAN4qnubdDtgmTwrbQl4geINb9hCtVLUHcqSEngMe 7kio94WeuxLiFCG7Ssj+RpoqGGCNdCCe1VEfyyBGbH/vd31UaM4mPuJla5dBQj6a Q+bIMRwpxjG7D5P9Ef35xf7dUHpCCc3kjKWxucpbUi0SIcO1J32DEQ3s/F5kYOvD 1SODxbuduWlLd7HmrgmKOAyyw8RSBWzdd1dAIirAiiSpouZt6Ft++Um0oK6ScfJx RkApsbZElkpJ/sOh21Fplk2X -----END CERTIFICATE-----Generated at Wed Mar 4 08:21:06 2026 by rpki-client