$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft File: xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft (raw, json) Hash identifier: 0VP/rO5A+O420s/QD/7gx8iuT6Yd+lohxTmzaRHiykk= Subject key identifier: 38:C0:A5:D0:64:68:99:EE:74:C9:93:3C:2D:B8:E8:A9:BB:7A:35:75 Authority key identifier: C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 Certificate issuer: /CN=A9161857/serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft Manifest number: 96 Signing time: Tue 03 Mar 2026 07:06:34 +0000 Manifest this update: Tue 03 Mar 2026 07:06:34 +0000 Manifest next update: Tue 10 Mar 2026 07:06:34 +0000 Files and hashes: 1: xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl (hash: kjdgk8ppHeifIQPJ7GgVfZD+oldxNMqqVo8T29Hqt0w=) 2: 4660810C41DE11F083E3205EC4F9AE02.roa (hash: 8cuDD60OBi1vO/7c9lhKgZt7KgJpxsLM7iezV0RYbzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 07:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Validity Not Before: Mar 3 07:06:34 2026 GMT Not After : Mar 10 07:06:34 2026 GMT Subject: CN=69a6887a-c8a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:a6:e7:de:cb:e7:ac:0f:71:3a:a7:e0:5c: 81:99:45:3a:09:e8:be:ec:17:40:1d:1c:1c:9a:89: 68:68:ae:b3:c9:32:9e:37:7b:b0:b6:7e:d9:01:17: d8:c1:ec:46:bf:f2:01:e4:a0:f6:a0:85:56:f6:49: 84:d9:3f:b9:cd:35:82:f0:26:ea:ae:a3:8e:38:ec: 60:05:0a:ea:40:fb:e0:9c:be:e2:df:a6:41:79:e0: 52:44:06:da:da:79:aa:4a:1d:1f:49:f7:d6:4a:6a: e7:3f:0b:08:f0:ab:eb:38:1a:ce:ba:13:11:9a:b4: 04:8a:63:8b:5e:89:db:f0:01:9f:a9:9d:23:0d:96: ec:24:bb:06:30:b2:07:76:be:f4:a5:6a:d2:bd:98: 3f:d3:54:d2:a8:c3:e1:00:6e:8a:87:78:8c:3b:ee: a4:f6:47:c7:ea:56:0f:64:a9:18:28:f2:22:b3:6e: 57:50:44:e2:bd:12:47:5e:ea:57:f8:68:9e:e2:54: 9b:9e:d3:bb:42:ed:8e:7c:e5:a7:4f:88:aa:10:6a: 9e:7e:f6:6d:35:d5:d1:1f:24:71:36:13:09:7d:82: b2:10:b3:52:2a:17:94:5a:36:5d:3c:d0:c4:d6:24: 37:b2:43:3b:f5:75:d9:5d:da:3f:10:00:80:45:26: 23:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C0:A5:D0:64:68:99:EE:74:C9:93:3C:2D:B8:E8:A9:BB:7A:35:75 X509v3 Authority Key Identifier: keyid:C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:c6:bd:40:d5:99:12:a9:4b:7e:f5:1d:00:38:2c:8a:0b:63: ca:ff:25:b1:c4:29:a1:01:ac:54:5a:ec:1f:b7:7e:34:8e:f7: ff:08:5a:84:94:b8:03:94:b5:2d:23:b1:64:64:fb:74:66:04: 70:01:18:f0:9b:44:f3:10:97:e8:bb:e9:5f:bc:19:8c:98:7c: 42:d7:95:a2:93:58:63:4e:78:02:b3:2d:f3:81:ef:c5:b4:c1: 33:5e:7a:a8:1b:d9:b7:12:82:3e:19:98:57:5f:34:23:82:18: f9:12:77:81:d0:ad:79:c2:ea:2b:be:1b:f0:74:bf:39:61:3b: 6f:12:f3:35:70:1b:54:c4:2d:54:a0:f1:60:ad:2b:b7:db:9b: 46:2a:ae:4d:5e:29:9f:6a:28:f1:dc:e8:40:10:a0:ce:fd:48: 51:c1:8b:f8:b1:aa:0b:4a:33:ed:45:5b:f0:b4:de:b1:cb:2b: 56:9a:a2:6e:26:04:fd:ad:7f:e5:7d:78:3c:b5:98:7b:eb:4b: 6b:7f:7a:80:20:ca:7a:9e:aa:d9:b1:e5:ec:66:8d:d1:49:81: 92:e6:18:ce:87:26:56:43:6f:a9:4d:a7:57:c1:07:7c:99:31: 99:5c:44:f7:01:11:bd:58:4d:10:97:da:74:0a:f7:47:15:98: dc:87:1d:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4NTcxMTAvBgNVBAUTKEM0MjZENDI2NDAwNjc2NTU1OTczREZFREU0RUIyNjQ0 QkVFRDI4NzMwHhcNMjYwMzAzMDcwNjM0WhcNMjYwMzEwMDcwNjM0WjAYMRYwFAYD VQQDEw02OWE2ODg3YS1jOGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYum597L56wPcTqn4FyBmUU6Cei+7BdAHRwcmoloaK6zyTKeN3uwtn7ZARfY wexGv/IB5KD2oIVW9kmE2T+5zTWC8CbqrqOOOOxgBQrqQPvgnL7i36ZBeeBSRAba 2nmqSh0fSffWSmrnPwsI8KvrOBrOuhMRmrQEimOLXonb8AGfqZ0jDZbsJLsGMLIH dr70pWrSvZg/01TSqMPhAG6Kh3iMO+6k9kfH6lYPZKkYKPIis25XUETivRJHXupX +Gie4lSbntO7Qu2OfOWnT4iqEGqefvZtNdXRHyRxNhMJfYKyELNSKheUWjZdPNDE 1iQ3skM79XXZXdo/EACARSYjyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDjApdBk aJnudMmTPC246Km7ejV1MB8GA1UdIwQYMBaAFMQm1CZABnZVWXPf7eTrJkS+7Shz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTg1Ny9DMUY3MzA3MjND OTgxMUYwQUYxMjRCMzhDNEY5QUUwMi94Q2JVSmtBR2RsVlpjOV90NU9zbVJMN3RL SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hDYlVKa0FHZGxWWmM5X3Q1T3NtUkw3dEtITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTg1Ny9DMUY3MzA3MjNDOTgxMUYwQUYxMjRCMzhDNEY5QUUwMi94Q2JVSmtBR2Rs VlpjOV90NU9zbVJMN3RLSE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA08a9QNWZEqlLfvUdADgsigtjyv8lscQpoQGsVFrsH7d+NI73/whahJS4A5S1 LSOxZGT7dGYEcAEY8JtE8xCX6LvpX7wZjJh8QteVopNYY054ArMt84HvxbTBM156 qBvZtxKCPhmYV180I4IY+RJ3gdCtecLqK74b8HS/OWE7bxLzNXAbVMQtVKDxYK0r t9ubRiquTV4pn2oo8dzoQBCgzv1IUcGL+LGqC0oz7UVb8LTescsrVpqibiYE/a1/ 5X14PLWYe+tLa396gCDKep6q2bHl7GaN0UmBkuYYzocmVkNvqU2nV8EHfJkxmVxE 9wERvVhNEJfadAr3RxWY3IcdJA== -----END CERTIFICATE-----Generated at Wed Mar 4 08:22:44 2026 by rpki-client