$ rpki-client -vvf rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft File: 2UW2DwCc3xVcQp1Aha62z-BrzgA.mft (raw, json) Hash identifier: J9/diOkUbYad3LR4uR2uGLljBmiiz/del6dulsxPPH0= Subject key identifier: BD:78:4E:BC:7B:10:C8:7A:0E:53:8B:77:ED:47:B3:47:4E:20:FB:06 Authority key identifier: D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00 Certificate issuer: /CN=A9149CEF/serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00 Certificate serial: 0560 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft Manifest number: 0552 Signing time: Tue 24 Mar 2026 23:05:28 +0000 Manifest this update: Tue 24 Mar 2026 23:05:28 +0000 Manifest next update: Tue 31 Mar 2026 23:05:28 +0000 Files and hashes: 1: 2UW2DwCc3xVcQp1Aha62z-BrzgA.crl (hash: vI3GqiAO78RbZlKZl5aIdzJxUjn/TsQVP/oaNx2rweA=) 2: AFAC764C2C1711EC817C5912C4F9AE02.roa (hash: KV+oymiCQ8SI81Nw8YLk5LKF58JCB1ujUEL9Z05HDyg=) 3: AF22E83C2C1711EC817C5912C4F9AE02.roa (hash: 5f9ml2EUZAGAD2c6U/Z9/PW0M3VyIhaGC3vHQZLyq8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1376 (0x560) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149CEF, serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00 Validity Not Before: Mar 24 23:05:28 2026 GMT Not After : Mar 31 23:05:28 2026 GMT Subject: CN=69c318b8-a80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:67:0b:a3:2d:a9:55:ad:21:9e:cc:2b:6d:97: b7:58:09:68:27:5d:94:60:0e:04:9c:d7:39:5e:67: 9c:83:41:0d:90:e5:84:e1:04:a9:90:d0:d6:91:56: a8:fb:0d:9b:27:66:18:d6:d2:fc:dd:97:7c:b0:7f: d4:7c:99:d6:0c:b4:bc:ff:00:45:c0:5a:2a:86:1c: bb:a1:3a:b7:85:f3:28:cd:61:16:10:b2:8a:6f:91: a9:d0:12:cd:25:8d:64:6c:00:e6:fe:8c:c1:a3:a2: aa:da:61:d0:4b:2e:96:fc:ad:3f:35:ef:98:7f:e0: 3a:ca:a2:15:7a:fe:d6:91:42:bd:6d:7d:7b:65:2b: 29:82:da:73:46:36:02:6d:57:7b:9e:e3:cf:b7:e8: 6f:35:ad:63:9e:a9:6b:88:55:d4:e7:d5:91:0c:1e: 2c:8f:e4:cb:3a:60:0d:4d:8c:f8:b5:2a:2e:6f:bd: a9:f6:52:5f:82:f9:12:73:4e:79:f7:40:0f:0e:5b: f0:ed:28:3b:9e:93:e0:b8:cc:5d:44:61:af:b2:d9: ab:99:c1:7a:22:e8:e8:19:9b:d0:a0:2c:de:f7:2e: f6:76:3a:ac:67:89:7f:94:72:ca:f4:44:c7:05:8c: 21:78:5a:35:4c:11:17:56:c3:ed:0c:35:a4:83:fe: 2f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:78:4E:BC:7B:10:C8:7A:0E:53:8B:77:ED:47:B3:47:4E:20:FB:06 X509v3 Authority Key Identifier: keyid:D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d6:82:f6:9e:d5:b7:25:80:18:0d:29:a3:81:09:a6:87:07: ef:73:08:6e:2b:a2:b8:48:b0:fe:e2:20:92:dc:01:af:65:f4: b6:ef:bd:ac:1b:b7:85:0b:f9:6c:17:b6:75:da:74:61:6a:ed: 1c:64:54:0a:f8:6f:fd:41:a8:c8:85:6b:d9:2a:66:44:cb:e0: e4:3d:e3:e5:84:5c:de:df:40:db:9a:1f:46:1d:25:ee:ad:32: 9c:65:21:68:4b:35:b5:5f:bd:7b:af:b6:95:78:37:77:4e:69: fa:30:61:6d:43:64:fa:4b:c3:7e:c4:95:69:6b:c7:4a:f6:ff: bd:b2:84:f6:3d:4e:2c:9f:71:22:70:9d:2c:af:c1:9f:04:8e: 59:03:19:93:83:76:ca:1f:17:f4:5c:83:2b:24:12:6d:fa:a5: 45:26:4f:8e:41:e0:17:be:ae:d4:3f:ad:83:4d:63:84:2a:52: b1:89:5f:34:85:25:c4:62:3a:21:5d:e7:35:d4:84:42:05:ef: a0:c7:c6:f1:54:df:5b:02:6d:1b:d6:fd:9e:3e:6b:3c:57:61: 5c:cd:cf:85:94:58:76:61:0d:56:d6:0b:fb:aa:19:60:53:c6: c9:28:93:d7:bd:28:c0:9d:01:06:fb:7e:b7:94:94:34:24:25: 7d:ee:0a:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDRUYxMTAvBgNVBAUTKEQ5NDVCNjBGMDA5Q0RGMTU1QzQyOUQ0MDg1QUVCNkNG RTA2QkNFMDAwHhcNMjYwMzI0MjMwNTI4WhcNMjYwMzMxMjMwNTI4WjAYMRYwFAYD VQQDEw02OWMzMThiOC1hODBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2cLoy2pVa0hnswrbZe3WAloJ12UYA4EnNc5Xmecg0ENkOWE4QSpkNDWkVao +w2bJ2YY1tL83Zd8sH/UfJnWDLS8/wBFwFoqhhy7oTq3hfMozWEWELKKb5Gp0BLN JY1kbADm/ozBo6Kq2mHQSy6W/K0/Ne+Yf+A6yqIVev7WkUK9bX17ZSspgtpzRjYC bVd7nuPPt+hvNa1jnqlriFXU59WRDB4sj+TLOmANTYz4tSoub72p9lJfgvkSc055 90APDlvw7Sg7npPguMxdRGGvstmrmcF6IujoGZvQoCze9y72djqsZ4l/lHLK9ETH BYwheFo1TBEXVsPtDDWkg/4vAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL14Trx7 EMh6DlOLd+1Hs0dOIPsGMB8GA1UdIwQYMBaAFNlFtg8AnN8VXEKdQIWuts/ga84A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUNFRi9DNDAxOUQyNDJD MTMxMUVDQjQ1ODA4NDJDNEY5QUUwMi8yVVcyRHdDYzN4VmNRcDFBaGE2MnotQnJ6 Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJVVzJEd0NjM3hWY1FwMUFoYTYyei1CcnpnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUNFRi9DNDAxOUQyNDJDMTMxMUVDQjQ1ODA4NDJDNEY5QUUwMi8yVVcyRHdDYzN4 VmNRcDFBaGE2MnotQnJ6Z0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADdaC9p7VtyWAGA0po4EJpocH73MIbiuiuEiw/uIgktwBr2X0tu+9rBu3hQv5 bBe2ddp0YWrtHGRUCvhv/UGoyIVr2SpmRMvg5D3j5YRc3t9A25ofRh0l7q0ynGUh aEs1tV+9e6+2lXg3d05p+jBhbUNk+kvDfsSVaWvHSvb/vbKE9j1OLJ9xInCdLK/B nwSOWQMZk4N2yh8X9FyDKyQSbfqlRSZPjkHgF76u1D+tg01jhCpSsYlfNIUlxGI6 IV3nNdSEQgXvoMfG8VTfWwJtG9b9nj5rPFdhXM3PhZRYdmENVtYL+6oZYFPGySiT 170owJ0BBvt+t5SUNCQlfe4KbA== -----END CERTIFICATE-----Generated at Thu Mar 26 05:55:31 2026 by rpki-client