$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft File: 0C2Q-5EqWWC75Wy051NRaiTG73s.mft (raw, json) Hash identifier: ol8CwZ9NZ0hvw8UXx5fHjXR5N8WxfYchfMcmgYD8XrM= Subject key identifier: 82:58:FA:27:FD:3D:15:E5:B3:C4:89:05:28:B4:20:E4:44:06:E9:23 Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B Certificate issuer: /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Certificate serial: 0B75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft Manifest number: 0B68 Signing time: Tue 24 Mar 2026 18:59:19 +0000 Manifest this update: Tue 24 Mar 2026 18:59:19 +0000 Manifest next update: Tue 31 Mar 2026 18:59:19 +0000 Files and hashes: 1: 0C2Q-5EqWWC75Wy051NRaiTG73s.crl (hash: j8awDqfkJ4jzueBgNK0nAkFJKB4iFdjUL98XkeWaO1w=) 2: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (hash: zG88fn2UfjBJBEOdOICeE0I4omqNMtKS0W4VEqtSRhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2933 (0xb75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148FE8, serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Validity Not Before: Mar 24 18:59:19 2026 GMT Not After : Mar 31 18:59:19 2026 GMT Subject: CN=69c2df07-3708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7a:ce:01:f0:fe:a3:71:6d:39:cd:df:9c:1b: 3a:48:8d:e1:5b:31:b7:fc:8b:16:45:98:55:b0:fb: 5f:d2:2a:3e:30:c5:7f:d1:c6:9f:a8:31:8f:e6:91: 2c:0c:b5:49:a1:3d:de:4b:9f:c6:75:5d:1c:f3:10: 20:1b:7a:63:48:b1:4d:92:c4:5a:a9:f5:ca:41:31: 5c:c0:78:a6:0d:0c:4c:5f:28:26:17:e5:23:e4:f3: 9f:3c:c3:43:72:35:41:02:eb:2c:09:e8:93:23:08: da:54:c6:75:4b:f9:98:ad:b2:11:4c:74:c7:ec:4d: 81:63:41:c3:75:16:4c:31:83:63:86:db:3b:06:d7: 73:76:31:e6:08:ac:ab:11:26:e1:1f:6d:2c:21:c3: 70:64:d8:9b:28:20:13:fc:6b:f1:39:a2:3b:e4:8b: 45:65:b8:af:e6:7a:a1:c3:7f:db:65:a3:85:27:e0: d3:7f:fb:a2:c3:f0:c3:83:e2:e2:02:38:b1:2f:90: 43:1c:b1:36:dc:4a:ea:60:89:48:88:10:e3:a9:f5: cb:5d:9e:d9:57:d5:17:d9:7c:89:b3:1e:8d:69:29: 53:11:b1:4c:8b:3f:13:6c:79:d0:e3:df:bc:95:a7: 46:be:6e:1d:72:0b:d9:71:7a:3d:02:85:f5:53:1a: ab:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:58:FA:27:FD:3D:15:E5:B3:C4:89:05:28:B4:20:E4:44:06:E9:23 X509v3 Authority Key Identifier: keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:dd:09:36:da:04:34:81:b7:6c:ed:04:34:5e:b6:69:b7:05: 98:01:1d:1c:e2:c0:db:f7:ab:01:cd:96:44:c7:92:b7:49:b2: e0:77:22:c0:63:5d:53:a4:81:3f:fa:b5:c6:c0:42:15:ed:10: 81:10:76:4b:c2:5d:58:a1:a0:b9:d9:6c:7e:44:01:e1:6f:87: 9f:15:0c:ec:f0:b7:c0:29:5a:6c:55:ca:ff:5e:97:c7:23:ed: 0c:fe:7b:e9:e9:35:4c:fd:71:0e:aa:e5:b2:83:56:be:e4:10: 82:9b:2e:ca:32:0e:ca:ff:34:61:da:86:ce:07:47:f9:fe:6b: 77:9a:ac:db:c7:49:c3:18:d4:ac:e1:2e:64:a1:30:54:de:6e: aa:13:46:6f:f2:e1:1e:55:63:61:bd:e8:eb:11:58:88:15:b0: 2f:86:f7:96:b1:b4:ed:8f:de:7a:6b:eb:61:dd:f4:03:e7:fb: 34:34:fb:b7:3f:eb:6f:c5:7c:09:72:c8:26:66:58:12:3e:61: 53:1d:df:d5:6d:e5:d8:32:a2:10:dc:85:e4:9d:8c:dc:18:ba: 76:4c:dd:90:a3:ef:f1:ea:c4:b9:9c:8f:c4:a1:38:35:41:7b: b2:4e:ca:a3:9c:72:f7:e9:2c:bc:5e:87:47:0b:36:9d:fc:17: 29:22:24:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGRTgxMTAvBgNVBAUTKEQwMkQ5MEZCOTEyQTU5NjBCQkU1NkNCNEU3NTM1MTZB MjRDNkVGN0IwHhcNMjYwMzI0MTg1OTE5WhcNMjYwMzMxMTg1OTE5WjAYMRYwFAYD VQQDEw02OWMyZGYwNy0zNzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmnrOAfD+o3FtOc3fnBs6SI3hWzG3/IsWRZhVsPtf0io+MMV/0cafqDGP5pEs DLVJoT3eS5/GdV0c8xAgG3pjSLFNksRaqfXKQTFcwHimDQxMXygmF+Uj5POfPMND cjVBAussCeiTIwjaVMZ1S/mYrbIRTHTH7E2BY0HDdRZMMYNjhts7BtdzdjHmCKyr ESbhH20sIcNwZNibKCAT/GvxOaI75ItFZbiv5nqhw3/bZaOFJ+DTf/uiw/DDg+Li AjixL5BDHLE23ErqYIlIiBDjqfXLXZ7ZV9UX2XyJsx6NaSlTEbFMiz8TbHnQ49+8 ladGvm4dcgvZcXo9AoX1UxqrfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIJY+if9 PRXls8SJBSi0IOREBukjMB8GA1UdIwQYMBaAFNAtkPuRKllgu+VstOdTUWokxu97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEZFOC8xMkY5NkZCMjRF RkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdXQzc1V3kwNTFOUmFpVEc3 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBDMlEtNUVxV1dDNzVXeTA1MU5SYWlURzczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEZFOC8xMkY5NkZCMjRFRkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdX Qzc1V3kwNTFOUmFpVEc3M3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArd0JNtoENIG3bO0ENF62abcFmAEdHOLA2/erAc2WRMeSt0my4HciwGNdU6SB P/q1xsBCFe0QgRB2S8JdWKGgudlsfkQB4W+HnxUM7PC3wClabFXK/16XxyPtDP57 6ek1TP1xDqrlsoNWvuQQgpsuyjIOyv80YdqGzgdH+f5rd5qs28dJwxjUrOEuZKEw VN5uqhNGb/LhHlVjYb3o6xFYiBWwL4b3lrG07Y/eemvrYd30A+f7NDT7tz/rb8V8 CXLIJmZYEj5hUx3f1W3l2DKiENyF5J2M3Bi6dkzdkKPv8erEuZyPxKE4NUF7sk7K o5xy9+ksvF6HRws2nfwXKSIkig== -----END CERTIFICATE-----Generated at Thu Mar 26 18:49:02 2026 by rpki-client