$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft File: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft (raw, json) Hash identifier: mKZKZJkUsV6sKD5UlXSCq0FVhSJrfsI9++kQey9qEKg= Subject key identifier: 5A:F6:42:D7:E9:4E:C9:77:0B:A8:94:E4:3A:E8:73:34:F1:8A:F9:A7 Authority key identifier: A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39 Certificate issuer: /CN=A912BE25/serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439 Certificate serial: 0397 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft Manifest number: 0380 Signing time: Wed 25 Mar 2026 00:33:16 +0000 Manifest this update: Wed 25 Mar 2026 00:33:15 +0000 Manifest next update: Wed 01 Apr 2026 00:33:15 +0000 Files and hashes: 1: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl (hash: HRvzBm6MvOB/O3xXKMSAJQVZ2yWdmwyai7cpmRIhKjY=) 2: 3824E928764711F0980D9877C4F9AE02.roa (hash: RNrBzsULWKNLzQ9xO26elmeen/lXKp/Fjr/z7K/9x2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 919 (0x397) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE25, serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439 Validity Not Before: Mar 25 00:33:15 2026 GMT Not After : Apr 1 00:33:15 2026 GMT Subject: CN=69c32d4c-c517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ab:41:76:dc:b3:21:d3:d7:43:72:00:f0:e1: 8d:0b:a2:fb:bc:00:82:ad:e2:2d:bb:fd:a3:de:5c: 46:69:21:da:68:33:c0:04:0f:c1:2a:48:68:2f:f1: ea:1b:b5:f6:ae:85:0f:ba:fe:3c:a2:7c:61:06:aa: b5:00:47:dd:18:c7:40:83:be:20:f7:58:e3:81:04: 3f:03:fb:c0:d2:97:ff:a5:d1:31:fc:91:0f:7d:f1: c2:50:83:5e:8c:e3:49:f7:b1:82:ae:82:ab:f3:8b: a8:a9:d5:e0:39:5c:12:95:ed:be:86:0d:f8:b1:85: 77:e5:b4:9f:a7:8a:f5:73:6d:88:3c:30:cf:d5:3c: bb:85:21:e9:da:34:2a:45:00:e4:81:f3:a3:08:e3: 37:2f:97:36:6d:8b:38:ad:2d:f5:07:85:b0:20:f2: 89:bf:a9:4e:f2:15:64:1d:fb:3f:f6:63:0d:0d:dc: 5c:1c:95:38:aa:85:7f:fc:f5:90:22:f1:b7:45:6c: c1:3d:f9:65:b5:73:0a:9c:6e:65:51:cf:77:52:ae: e1:00:0b:8b:00:fa:d9:a6:d2:d3:9a:ce:ff:62:7c: ac:7e:33:d4:83:2f:74:d6:38:e2:f0:e5:48:52:8e: 64:dc:cb:19:2f:ae:0a:b5:5b:91:e2:36:b9:75:eb: 26:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F6:42:D7:E9:4E:C9:77:0B:A8:94:E4:3A:E8:73:34:F1:8A:F9:A7 X509v3 Authority Key Identifier: keyid:A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:e2:81:05:53:ab:e8:89:43:ae:6b:82:b9:74:f7:b8:3b:a3: 03:e0:9c:6f:54:fe:3c:de:75:8e:04:98:ef:b6:28:93:de:04: 58:35:5a:32:c6:b1:15:bc:a4:38:1a:31:59:38:d6:a9:dc:0c: be:c7:3d:28:2d:97:9f:82:a4:d4:03:c9:51:ad:87:14:50:05: 67:3a:ac:cf:f8:a3:a9:84:a6:ce:ed:4d:c8:c2:8c:f6:0f:c3: 05:ce:4f:76:d2:99:87:8a:2c:1d:76:64:f3:ab:6c:fc:fa:c8: a8:1f:00:3e:15:65:ca:8b:85:f6:68:fe:9d:07:66:c1:46:5e: b1:6b:93:67:21:29:29:e6:47:eb:7b:c9:e0:34:0c:b1:0f:8c: bf:30:49:5f:71:1d:27:2e:b3:60:ac:35:48:53:34:b9:6a:83: ce:66:cd:da:0e:59:7b:c5:29:29:93:3e:da:5c:25:6f:d7:62: d3:35:07:d7:42:fd:b0:0e:bf:5f:9a:14:2e:54:fb:5b:ce:cc: 45:f7:0b:66:05:4c:aa:f2:d0:62:a7:5e:4f:8d:fa:27:cb:9e: 5b:66:17:0e:22:de:1d:c5:21:9a:63:50:ab:5f:7c:6f:d1:eb: a5:ed:c2:be:1f:2d:f5:59:69:2a:56:eb:47:3d:90:a4:3c:bb: f7:27:5f:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFMjUxMTAvBgNVBAUTKEE3NjBBREUwQzlEMDVFRTY3OUVDMzA0MTIyQkMzMzUw QzhEMkE0MzkwHhcNMjYwMzI1MDAzMzE1WhcNMjYwNDAxMDAzMzE1WjAYMRYwFAYD VQQDEw02OWMzMmQ0Yy1jNTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnatBdtyzIdPXQ3IA8OGNC6L7vACCreItu/2j3lxGaSHaaDPABA/BKkhoL/Hq G7X2roUPuv48onxhBqq1AEfdGMdAg74g91jjgQQ/A/vA0pf/pdEx/JEPffHCUINe jONJ97GCroKr84uoqdXgOVwSle2+hg34sYV35bSfp4r1c22IPDDP1Ty7hSHp2jQq RQDkgfOjCOM3L5c2bYs4rS31B4WwIPKJv6lO8hVkHfs/9mMNDdxcHJU4qoV//PWQ IvG3RWzBPflltXMKnG5lUc93Uq7hAAuLAPrZptLTms7/YnysfjPUgy901jji8OVI Uo5k3MsZL64KtVuR4ja5desmXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFr2Qtfp Tsl3C6iU5DroczTxivmnMB8GA1UdIwQYMBaAFKdgreDJ0F7meewwQSK8M1DI0qQ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkUyNS9EOTA1MjZFNEVF MTExMUVDOTUyOTk5ODJDNEY5QUUwMi9wMkN0NE1uUVh1WjU3REJCSXJ3elVNalNw RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AyQ3Q0TW5RWHVaNTdEQkJJcnd6VU1qU3BEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkUyNS9EOTA1MjZFNEVFMTExMUVDOTUyOTk5ODJDNEY5QUUwMi9wMkN0NE1uUVh1 WjU3REJCSXJ3elVNalNwRGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE+KBBVOr6IlDrmuCuXT3uDujA+Ccb1T+PN51jgSY77Yok94EWDVaMsaxFbyk OBoxWTjWqdwMvsc9KC2Xn4Kk1APJUa2HFFAFZzqsz/ijqYSmzu1NyMKM9g/DBc5P dtKZh4osHXZk86ts/PrIqB8APhVlyouF9mj+nQdmwUZesWuTZyEpKeZH63vJ4DQM sQ+MvzBJX3EdJy6zYKw1SFM0uWqDzmbN2g5Ze8UpKZM+2lwlb9di0zUH10L9sA6/ X5oULlT7W87MRfcLZgVMqvLQYqdeT436J8ueW2YXDiLeHcUhmmNQq198b9Hrpe3C vh8t9VlpKlbrRz2QpDy79ydf1g== -----END CERTIFICATE-----Generated at Thu Mar 26 16:39:43 2026 by rpki-client