$ rpki-client -vvf rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft File: x2h2G8gatP5_1EAVSCYcuocge-o.mft (raw, json) Hash identifier: COg3nS1Tx+jEDlAzOD4IxFJhMZL5CQpa12LZ2SqpYNg= Subject key identifier: 39:94:5F:72:7E:18:C6:CD:F0:2C:DC:62:CE:39:08:2C:58:D1:CF:7A Authority key identifier: C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA Certificate issuer: /CN=A9118022/serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Certificate serial: 0ED5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft Manifest number: 0EA1 Signing time: Tue 24 Mar 2026 17:34:59 +0000 Manifest this update: Tue 24 Mar 2026 17:34:59 +0000 Manifest next update: Tue 31 Mar 2026 17:34:59 +0000 Files and hashes: 1: x2h2G8gatP5_1EAVSCYcuocge-o.crl (hash: aRK8gCCuMeVUu0ZjEHx7LZTUiSmUxCkt7Py0Lp/EiQk=) 2: 670DF186232111EB9896B783C4F9AE02.roa (hash: JDnnr+gXElLZfFNqxroiEtHe91q0ZicgMHi1XY427Ss=) 3: 1BBE249C21D911EB85DAFE71C4F9AE02.roa (hash: IJy6vq3u18sfK/PaqQ4HkbGHvtQ0+WpPPGjw18M6VWY=) 4: 127D33EC027011EB98FEC44BC4F9AE02.roa (hash: xo+tt5lov3udnd3XAOiK90QcwkAcxMUW1iuUC+4M+z8=) 5: 1609CE067A4A11EB99C11F5FC4F9AE02.roa (hash: jPTrigcWq4coxSH4UL7oP5hGP5jZz/yTxLEnnmOBFlo=) 6: 1D93B82C21D911EB85DAFE71C4F9AE02.roa (hash: E+4UeHlGnBHL9IRmWm+TexcyHwom9b/OOAx0STjQIo0=) 7: 1C99C7E021D911EB85DAFE71C4F9AE02.roa (hash: bKvSPuftAoTubmq1z1G2lBaSXWyaRfT8vN+YYMv11yI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3797 (0xed5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118022, serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Validity Not Before: Mar 24 17:34:59 2026 GMT Not After : Mar 31 17:34:59 2026 GMT Subject: CN=69c2cb43-8e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:35:28:bf:19:10:80:01:d0:41:d7:06:c2:66: 91:87:07:9a:ca:23:9d:e2:53:b5:c0:83:42:4b:0c: ad:8e:7c:e7:0a:2f:f2:c0:3a:cb:30:29:69:37:4e: f6:60:42:e2:78:96:77:ef:3c:34:14:f4:de:81:8c: 8e:4b:7d:4a:ff:fc:64:63:d4:df:9f:75:30:93:ae: 05:52:84:4a:d1:19:fd:c4:ea:12:14:a6:f2:d6:11: 51:64:4d:7b:5f:fb:3f:ae:c6:86:29:a0:30:67:c1: 45:df:ce:9e:55:18:19:39:59:56:9c:b7:1a:06:46: 26:07:b7:d5:f5:49:75:fd:3c:3c:94:12:81:3e:8d: 14:d4:ec:03:dd:a6:e6:9b:76:69:08:b8:ae:b7:ed: 60:bf:aa:3b:da:95:a0:b8:c9:a9:81:55:99:1e:f3: 60:d0:41:69:a2:b0:0c:46:35:a1:5e:e7:f2:48:e2: 83:f5:98:c3:9b:f3:7d:f4:aa:e6:77:42:42:a6:55: 54:29:86:92:f5:a0:c4:5a:e8:52:0c:ac:8f:61:3d: f3:20:22:7c:0a:f9:1f:9e:bd:57:c1:0c:c5:a1:0c: df:05:58:27:bb:92:4d:11:bf:9c:4a:cd:71:fe:28: 4e:59:78:13:1c:bf:67:61:91:01:c2:7f:bd:d2:36: cd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:94:5F:72:7E:18:C6:CD:F0:2C:DC:62:CE:39:08:2C:58:D1:CF:7A X509v3 Authority Key Identifier: keyid:C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:7c:52:09:8a:45:13:53:b7:5b:4a:cf:1c:c6:92:e7:93:d5: 57:ff:e3:03:3a:f1:dc:d3:b8:32:eb:a3:02:dd:1a:ab:87:5c: 80:e3:5f:5e:2c:26:09:06:d7:e2:74:f6:91:49:91:73:8b:79: 91:f1:e3:37:4e:7d:35:cb:08:a1:64:d6:9c:47:44:b5:4d:59: f2:69:be:bf:f8:1b:3b:53:f7:23:c0:67:8b:df:5f:9f:7f:ca: d9:e0:00:84:9a:c0:f7:00:e9:bf:4f:d8:ab:e6:cf:61:84:c0: 6c:3a:be:8d:d4:68:c8:da:7a:d8:64:8e:58:50:7b:16:df:28: 02:6d:00:54:1c:f1:bf:30:c5:e5:72:3f:fa:4e:40:6d:4b:75: aa:d4:7f:52:f4:8f:64:99:66:e8:22:96:ac:10:93:7a:ee:64: d0:de:1c:43:a1:76:3c:08:f3:5b:37:68:f3:40:a7:d5:e6:c5: 16:65:2e:3e:56:9c:2f:05:0a:65:68:df:e0:87:3e:8b:06:6d: e9:86:61:f7:4f:b3:7d:78:38:a4:eb:93:23:69:d3:70:1a:53: bb:c1:a7:4c:83:13:4c:a5:9f:bb:ee:c3:5e:6d:07:1f:ce:9f: 8d:95:94:ca:5b:ab:cb:e8:43:9c:03:ff:98:1e:61:02:45:fd: d8:f0:75:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMjIxMTAvBgNVBAUTKEM3Njg3NjFCQzgxQUI0RkU3RkQ0NDAxNTQ4MjYxQ0JB ODcyMDdCRUEwHhcNMjYwMzI0MTczNDU5WhcNMjYwMzMxMTczNDU5WjAYMRYwFAYD VQQDEw02OWMyY2I0My04ZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjUovxkQgAHQQdcGwmaRhweayiOd4lO1wINCSwytjnznCi/ywDrLMClpN072 YELieJZ37zw0FPTegYyOS31K//xkY9Tfn3Uwk64FUoRK0Rn9xOoSFKby1hFRZE17 X/s/rsaGKaAwZ8FF386eVRgZOVlWnLcaBkYmB7fV9Ul1/Tw8lBKBPo0U1OwD3abm m3ZpCLiut+1gv6o72pWguMmpgVWZHvNg0EFporAMRjWhXufySOKD9ZjDm/N99Krm d0JCplVUKYaS9aDEWuhSDKyPYT3zICJ8Cvkfnr1XwQzFoQzfBVgnu5JNEb+cSs1x /ihOWXgTHL9nYZEBwn+90jbNMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDmUX3J+ GMbN8CzcYs45CCxY0c96MB8GA1UdIwQYMBaAFMdodhvIGrT+f9RAFUgmHLqHIHvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAyMi9DNjFDMjU2QUFE Q0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQNV8xRUFWU0NZY3VvY2dl LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gyaDJHOGdhdFA1XzFFQVZTQ1ljdW9jZ2Utby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAyMi9DNjFDMjU2QUFEQ0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQ NV8xRUFWU0NZY3VvY2dlLW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABHxSCYpFE1O3W0rPHMaS55PVV//jAzrx3NO4MuujAt0aq4dcgONfXiwmCQbX 4nT2kUmRc4t5kfHjN059NcsIoWTWnEdEtU1Z8mm+v/gbO1P3I8Bni99fn3/K2eAA hJrA9wDpv0/Yq+bPYYTAbDq+jdRoyNp62GSOWFB7Ft8oAm0AVBzxvzDF5XI/+k5A bUt1qtR/UvSPZJlm6CKWrBCTeu5k0N4cQ6F2PAjzWzdo80Cn1ebFFmUuPlacLwUK ZWjf4Ic+iwZt6YZh90+zfXg4pOuTI2nTcBpTu8GnTIMTTKWfu+7DXm0HH86fjZWU ylury+hDnAP/mB5hAkX92PB1tA== -----END CERTIFICATE-----Generated at Thu Mar 26 06:12:44 2026 by rpki-client