$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft File: 0C2Q-5EqWWC75Wy051NRaiTG73s.mft (raw, json) Hash identifier: amJUKHL/URf2vs/7cwx1VxXisG+WQyvnGw4RWUr9qEs= Subject key identifier: 2B:44:9F:CE:2B:90:B9:6B:0A:B5:0C:19:86:4E:BA:C6:79:34:6C:1A Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B Certificate issuer: /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Certificate serial: 0B91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft Manifest number: 0B83 Signing time: Tue 12 May 2026 19:11:32 +0000 Manifest this update: Tue 12 May 2026 19:11:32 +0000 Manifest next update: Tue 19 May 2026 19:11:32 +0000 Files and hashes: 1: 0C2Q-5EqWWC75Wy051NRaiTG73s.crl (hash: zN8yfhDW9t50vEVhnOcRvR+ztEjAsJlvgktP4qI3A3A=) 2: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (hash: jyqFCgst06RVpDB0gLXfdOd67pDYJBgZGVMmj+J0u70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:11:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2961 (0xb91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148FE8, serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Validity Not Before: May 12 19:11:32 2026 GMT Not After : May 19 19:11:32 2026 GMT Subject: CN=6a037b64-60e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:e4:36:99:bb:89:38:f7:82:c9:22:19:03: 80:b3:51:c6:ea:1f:20:fd:74:ad:7f:64:8f:c1:50: 80:2c:79:8e:7a:a7:ee:5c:64:90:1b:ab:10:e8:c6: 6a:16:e4:60:67:c1:20:f7:04:b0:7f:93:c8:71:b9: d3:61:b1:a3:d5:60:49:7f:db:21:5d:46:ac:20:ae: f4:02:87:95:18:67:b9:7f:ea:6e:03:83:ce:d9:18: 87:f3:7b:2e:2c:90:9b:9a:a0:88:6c:a2:c2:b3:23: d4:0a:48:c6:16:6c:64:ef:25:79:e8:ab:00:0c:09: 74:1b:4e:bc:d0:bb:14:3d:11:eb:2b:db:f3:3d:3a: 5f:50:95:fc:18:30:c6:14:a9:d2:04:a6:dc:b1:c3: 28:ec:23:24:3c:07:5e:e5:20:71:cf:38:d9:d8:26: 8d:4d:fc:b4:40:ca:51:54:ce:83:5e:30:01:e0:13: a0:dd:ce:37:f0:8f:c5:45:79:b5:c2:8c:f6:8b:66: 81:f0:a3:5e:6e:d9:9b:fb:22:ab:6b:07:c0:91:0a: bd:a3:a1:1b:b1:f2:37:56:51:be:e6:2a:51:14:88: 61:4b:9b:a1:11:20:5d:ab:38:8a:97:48:a4:8f:f4: 73:a5:09:a2:fd:8c:79:b6:bf:68:39:d2:9b:a1:ea: dd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:44:9F:CE:2B:90:B9:6B:0A:B5:0C:19:86:4E:BA:C6:79:34:6C:1A X509v3 Authority Key Identifier: keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:1b:c0:12:3c:cb:5f:5a:dd:71:4b:ce:a7:27:d6:32:81:ff: 93:b8:d3:ef:98:3d:c9:13:5d:71:fb:72:82:ee:19:63:b1:2f: 9d:21:49:c8:dc:d0:96:ff:33:c8:10:70:41:be:fb:7a:23:e7: 3a:92:fe:ba:46:70:e1:d5:20:2f:79:9c:17:ed:7f:f6:e2:aa: d2:a5:5c:1a:66:bc:68:eb:28:ff:db:58:bd:e5:cf:bd:e3:88: c4:fc:ed:e5:6e:43:37:58:b1:0b:1c:b7:ba:05:69:fb:eb:20: 06:53:74:2b:35:55:7c:01:43:63:c1:e4:6c:92:8f:05:a3:2a: e5:fe:c4:e9:fd:15:1f:b6:ea:f5:a9:ca:fc:36:4f:3a:83:24: a8:91:52:f3:8f:8b:a8:d7:5c:50:74:d1:f8:79:6e:33:d1:b2: 60:d3:00:8a:8f:83:dd:e2:58:36:94:e2:1b:c2:1d:13:a9:68: cf:1e:91:83:cc:5b:c5:c8:3d:c3:14:9b:6d:d6:f3:46:c6:e0: 8e:be:dd:3a:35:56:98:b8:f1:c5:b9:27:7d:28:37:90:e7:cd: 59:00:72:99:fd:5a:f4:ca:4e:8d:a6:cd:b1:fc:d2:d7:99:9e: 65:82:bc:83:c0:d0:d3:b1:10:06:e2:07:98:c5:93:45:eb:1c: 4c:02:7d:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGRTgxMTAvBgNVBAUTKEQwMkQ5MEZCOTEyQTU5NjBCQkU1NkNCNEU3NTM1MTZB MjRDNkVGN0IwHhcNMjYwNTEyMTkxMTMyWhcNMjYwNTE5MTkxMTMyWjAYMRYwFAYD VQQDEw02YTAzN2I2NC02MGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2jkNpm7iTj3gskiGQOAs1HG6h8g/XStf2SPwVCALHmOeqfuXGSQG6sQ6MZq FuRgZ8Eg9wSwf5PIcbnTYbGj1WBJf9shXUasIK70AoeVGGe5f+puA4PO2RiH83su LJCbmqCIbKLCsyPUCkjGFmxk7yV56KsADAl0G0680LsUPRHrK9vzPTpfUJX8GDDG FKnSBKbcscMo7CMkPAde5SBxzzjZ2CaNTfy0QMpRVM6DXjAB4BOg3c438I/FRXm1 woz2i2aB8KNebtmb+yKrawfAkQq9o6EbsfI3VlG+5ipRFIhhS5uhESBdqziKl0ik j/RzpQmi/Yx5tr9oOdKboerd7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCtEn84r kLlrCrUMGYZOusZ5NGwaMB8GA1UdIwQYMBaAFNAtkPuRKllgu+VstOdTUWokxu97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEZFOC8xMkY5NkZCMjRF RkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdXQzc1V3kwNTFOUmFpVEc3 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBDMlEtNUVxV1dDNzVXeTA1MU5SYWlURzczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEZFOC8xMkY5NkZCMjRFRkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdX Qzc1V3kwNTFOUmFpVEc3M3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXxvAEjzLX1rdcUvOpyfWMoH/k7jT75g9yRNdcftygu4ZY7EvnSFJyNzQlv8z yBBwQb77eiPnOpL+ukZw4dUgL3mcF+1/9uKq0qVcGma8aOso/9tYveXPveOIxPzt 5W5DN1ixCxy3ugVp++sgBlN0KzVVfAFDY8HkbJKPBaMq5f7E6f0VH7bq9anK/DZP OoMkqJFS84+LqNdcUHTR+HluM9GyYNMAio+D3eJYNpTiG8IdE6lozx6Rg8xbxcg9 wxSbbdbzRsbgjr7dOjVWmLjxxbknfSg3kOfNWQBymf1a9MpOjabNsfzS15meZYK8 g8DQ07EQBuIHmMWTRescTAJ9eg== -----END CERTIFICATE-----Generated at Wed May 13 08:34:15 2026 by rpki-client