$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft File: f2OOENa_P0qFS8YKE8I5svNdFOE.mft (raw, json) Hash identifier: APesT0gBJbuY/iFGz2hPdsaeql7Edz2/Tuz3q527fEU= Subject key identifier: 4B:83:6C:F7:6A:6D:34:65:80:CF:04:26:65:25:DB:84:77:83:BC:21 Authority key identifier: 7F:63:8E:10:D6:BF:3F:4A:85:4B:C6:0A:13:C2:39:B2:F3:5D:14:E1 Certificate issuer: /CN=A9173D5E/serialNumber=7F638E10D6BF3F4A854BC60A13C239B2F35D14E1 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft Manifest number: 14 Signing time: Tue 03 Mar 2026 08:41:36 +0000 Manifest this update: Tue 03 Mar 2026 08:41:35 +0000 Manifest next update: Tue 10 Mar 2026 08:41:35 +0000 Files and hashes: 1: f2OOENa_P0qFS8YKE8I5svNdFOE.crl (hash: XPi45mzbBgKGpSYsk/Ixohju7v0l1Us2pinHEb1s4eU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.crl rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:41:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D5E, serialNumber=7F638E10D6BF3F4A854BC60A13C239B2F35D14E1 Validity Not Before: Mar 3 08:41:35 2026 GMT Not After : Mar 10 08:41:35 2026 GMT Subject: CN=69a69ec0-564a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:06:55:76:d3:45:4f:f4:f7:07:9e:b4:95:0d: e0:0f:fa:06:c3:31:7b:f0:85:67:c4:9d:67:5b:42: 03:67:1f:c5:bc:e6:10:23:ab:6d:23:25:61:44:9b: 68:25:74:fe:d8:03:4a:52:d8:a3:90:6a:f8:56:b7: 31:2a:d5:e2:5b:f0:13:8d:24:86:99:5f:70:e7:bb: 44:07:77:6b:72:de:67:f5:c8:0b:91:d8:d0:a1:8b: de:0e:83:63:0c:15:e6:9c:da:60:73:47:b9:1b:76: f0:9e:4c:c4:b2:cd:c5:8b:d4:74:e4:c6:fa:4f:41: 9e:b3:35:57:71:73:93:bb:a9:30:99:ac:dc:83:c6: b6:f6:38:b8:b5:fe:63:d5:76:c4:49:73:1c:35:a7: 5c:2e:86:ba:46:97:83:04:f4:1d:6f:79:2e:53:9c: 91:db:a1:48:2c:e9:d7:8f:51:8e:7d:63:66:b1:a8: 44:b5:2b:0d:ed:d9:2b:47:8d:2d:bf:53:52:27:01: 0f:e3:e9:28:67:4b:8e:9f:45:08:54:6d:b8:fd:50: 0a:b0:1b:6a:3a:d2:94:16:9e:79:ff:9b:61:bf:06: ff:ce:36:2f:98:42:f0:12:54:79:9e:d7:d0:e9:96: c5:5a:37:24:16:5b:20:c7:73:d3:82:6b:2a:7c:60: 9e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:83:6C:F7:6A:6D:34:65:80:CF:04:26:65:25:DB:84:77:83:BC:21 X509v3 Authority Key Identifier: keyid:7F:63:8E:10:D6:BF:3F:4A:85:4B:C6:0A:13:C2:39:B2:F3:5D:14:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:6a:0b:ef:a1:7d:76:74:10:74:e1:f6:b8:63:12:41:84:8a: 84:23:99:35:46:10:af:b9:ce:63:37:f2:a1:85:ba:3c:1b:f4: a4:b6:f9:bb:39:81:bc:7a:93:98:ad:e4:1c:07:f3:1d:d2:21: 5d:94:e3:39:11:bd:8d:4b:ad:95:8a:39:40:7c:5d:63:3b:60: 75:41:38:ad:77:65:57:51:22:83:85:ad:95:4e:83:45:e4:8e: 5e:15:e1:3b:6d:04:3e:e6:53:cc:d1:b5:34:0d:61:e6:95:87: 23:29:7f:90:68:9f:c4:5a:4f:c4:8e:0d:f7:50:46:b0:34:3b: 88:81:8a:9d:2e:0f:c4:c8:26:29:06:07:02:69:17:59:99:10: 0a:f2:1f:c3:b8:ed:3a:14:8f:e4:c7:68:35:cf:d6:bd:41:d4: f3:4d:13:57:06:e5:b5:a0:50:44:0c:ab:99:80:50:5a:4d:e8: 80:c0:35:80:09:83:9e:1c:90:89:a2:cc:6d:c7:ea:54:90:a7: 7d:31:69:25:70:28:4c:10:3a:a9:34:f8:ec:41:91:1c:3a:43: 49:21:bc:df:cb:1d:5d:64:bb:8e:71:fc:fc:fc:e0:75:04:db: 67:5f:3b:fa:ef:b9:9c:de:0b:eb:22:e8:11:88:cb:c8:33:9b: 7d:fd:91:00 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0Q1RTExMC8GA1UEBRMoN0Y2MzhFMTBENkJGM0Y0QTg1NEJDNjBBMTNDMjM5QjJG MzVEMTRFMTAeFw0yNjAzMDMwODQxMzVaFw0yNjAzMTAwODQxMzVaMBgxFjAUBgNV BAMTDTY5YTY5ZWMwLTU2NGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCOBlV200VP9PcHnrSVDeAP+gbDMXvwhWfEnWdbQgNnH8W85hAjq20jJWFEm2gl dP7YA0pS2KOQavhWtzEq1eJb8BONJIaZX3Dnu0QHd2ty3mf1yAuR2NChi94Og2MM Feac2mBzR7kbdvCeTMSyzcWL1HTkxvpPQZ6zNVdxc5O7qTCZrNyDxrb2OLi1/mPV dsRJcxw1p1wuhrpGl4ME9B1veS5TnJHboUgs6dePUY59Y2axqES1Kw3t2StHjS2/ U1InAQ/j6ShnS46fRQhUbbj9UAqwG2o60pQWnnn/m2G/Bv/ONi+YQvASVHme19Dp lsVaNyQWWyDHc9OCayp8YJ51AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUS4Ns92pt NGWAzwQmZSXbhHeDvCEwHwYDVR0jBBgwFoAUf2OOENa/P0qFS8YKE8I5svNdFOEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczRDVFLzJBQTZFMjQ0RkU2 NzExRjBBNzVDODg1MjUzNkY1NkJDL2YyT09FTmFfUDBxRlM4WUtFOEk1c3ZOZEZP RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZjJPT0VOYV9QMHFGUzhZS0U4STVzdk5kRk9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz RDVFLzJBQTZFMjQ0RkU2NzExRjBBNzVDODg1MjUzNkY1NkJDL2YyT09FTmFfUDBx RlM4WUtFOEk1c3ZOZEZPRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA/agvvoX12dBB04fa4YxJBhIqEI5k1RhCvuc5jN/Khhbo8G/Sktvm7OYG8epOY reQcB/Md0iFdlOM5Eb2NS62VijlAfF1jO2B1QTitd2VXUSKDha2VToNF5I5eFeE7 bQQ+5lPM0bU0DWHmlYcjKX+QaJ/EWk/Ejg33UEawNDuIgYqdLg/EyCYpBgcCaRdZ mRAK8h/DuO06FI/kx2g1z9a9QdTzTRNXBuW1oFBEDKuZgFBaTeiAwDWACYOeHJCJ osxtx+pUkKd9MWklcChMEDqpNPjsQZEcOkNJIbzfyx1dZLuOcfz8/OB1BNtnXzv6 77mc3gvrIugRiMvIM5t9/ZEA -----END CERTIFICATE-----Generated at Wed Mar 4 08:15:34 2026 by rpki-client