$ rpki-client -vvf rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft File: sc2DuJnOYCmsikIu278VgzU5HQg.mft (raw, json) Hash identifier: mxXWVEFm9pKfgYesSDEumE0CU/vdppzYDw1JZpJ/zZQ= Subject key identifier: 46:BE:EE:F7:DF:AA:F4:0B:6A:6F:3F:D6:C3:DC:E6:D5:B6:63:CB:42 Authority key identifier: B1:CD:83:B8:99:CE:60:29:AC:8A:42:2E:DB:BF:15:83:35:39:1D:08 Certificate issuer: /CN=A9168497/serialNumber=B1CD83B899CE6029AC8A422EDBBF158335391D08 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft Manifest number: 28 Signing time: Wed 25 Mar 2026 07:58:01 +0000 Manifest this update: Wed 25 Mar 2026 07:58:00 +0000 Manifest next update: Wed 01 Apr 2026 07:58:00 +0000 Files and hashes: 1: sc2DuJnOYCmsikIu278VgzU5HQg.crl (hash: wBz5ZHzqmo0b7cE651XSEHxDkOP5ZTVlGLv5hsGwqLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.crl rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168497, serialNumber=B1CD83B899CE6029AC8A422EDBBF158335391D08 Validity Not Before: Mar 25 07:58:00 2026 GMT Not After : Apr 1 07:58:00 2026 GMT Subject: CN=69c39589-ada1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fe:3b:ea:7a:7f:ce:02:d6:63:fe:81:b4:6d: 02:fd:8e:bc:f8:3a:63:83:62:78:90:71:f9:38:77: 46:3a:3c:8a:78:7c:e8:f8:cc:a5:3f:1d:79:b7:d3: 7c:18:d8:02:3e:a4:5f:36:74:e1:f4:1c:06:ec:78: d8:4c:69:56:df:c9:44:d0:39:0b:b9:3b:e8:dd:82: 68:68:e4:75:a5:a1:2e:27:3f:51:7c:68:a8:9a:6e: dc:9a:80:d2:fc:bd:e2:46:36:7f:ee:ce:ab:37:56: 23:2a:6e:fd:7d:c9:f9:a1:61:db:35:97:b8:fd:57: 82:31:4a:f5:93:fe:30:52:dd:ed:e6:23:f2:55:a9: 2b:bb:aa:50:6a:be:22:89:3d:71:45:5b:af:01:4b: 2d:66:89:cf:59:be:d4:ec:9c:70:31:cc:d2:37:aa: df:8f:2a:dc:2b:8c:07:7a:ef:e3:8e:78:cd:4d:38: fd:f3:e9:ef:92:3c:37:3d:ce:33:6c:d9:b0:6d:7d: 75:58:f8:78:9a:a4:af:e2:21:65:c8:2a:80:f0:13: ac:cd:bd:0f:39:6e:b1:c2:d9:0e:33:03:5e:9c:f8: a2:2c:6f:a9:75:4a:0c:64:63:7d:b3:0e:0a:8d:fa: ea:bb:01:eb:79:64:2c:64:d5:6b:e4:0d:82:cf:41: 73:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BE:EE:F7:DF:AA:F4:0B:6A:6F:3F:D6:C3:DC:E6:D5:B6:63:CB:42 X509v3 Authority Key Identifier: keyid:B1:CD:83:B8:99:CE:60:29:AC:8A:42:2E:DB:BF:15:83:35:39:1D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:34:0d:25:a2:5d:1b:58:10:38:fb:61:15:a2:e9:6f:2e:94: a3:e3:81:75:6f:49:a2:ef:88:08:13:73:34:25:58:f4:f7:5d: 31:91:31:a7:e9:a9:28:b8:c2:00:bb:f7:18:6d:8b:d0:34:de: 4e:d6:5c:e8:7d:94:42:d4:72:89:cb:52:53:cb:69:17:38:49: 13:ec:6d:58:3d:da:64:25:51:67:4f:fe:50:36:a0:4f:0d:a7: ad:fc:67:3d:60:5c:e4:e4:2c:37:ba:da:bc:87:2f:73:3b:5e: 01:c4:7c:1c:d1:16:b8:4c:8c:99:d4:ae:91:79:ba:ab:c8:54: 12:d1:7c:61:af:dd:5f:7d:dc:e9:fa:ed:55:ca:41:67:66:51: 76:d2:e5:bb:60:ec:bd:65:62:d7:b7:a6:0e:cd:1a:36:3b:cc: b0:91:4f:ff:ad:eb:bc:a3:42:31:76:d3:64:bc:31:fc:a4:3a: e7:f2:3f:8b:ff:67:f7:fe:52:c4:fa:99:7b:b4:ad:85:30:2f: 0b:ea:9c:30:ca:27:1a:c0:91:47:5b:98:7e:b4:07:84:b4:77: b7:e7:13:69:00:5e:7e:d7:bf:64:68:72:c9:2b:48:b2:f1:30: d3:c3:e1:18:b0:ce:91:4f:91:78:d4:25:c5:be:76:1c:7f:18: a4:d4:12:bc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODQ5NzExMC8GA1UEBRMoQjFDRDgzQjg5OUNFNjAyOUFDOEE0MjJFREJCRjE1ODMz NTM5MUQwODAeFw0yNjAzMjUwNzU4MDBaFw0yNjA0MDEwNzU4MDBaMBgxFjAUBgNV BAMTDTY5YzM5NTg5LWFkYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2/jvqen/OAtZj/oG0bQL9jrz4OmODYniQcfk4d0Y6PIp4fOj4zKU/HXm303wY 2AI+pF82dOH0HAbseNhMaVbfyUTQOQu5O+jdgmho5HWloS4nP1F8aKiabtyagNL8 veJGNn/uzqs3ViMqbv19yfmhYds1l7j9V4IxSvWT/jBS3e3mI/JVqSu7qlBqviKJ PXFFW68BSy1mic9ZvtTsnHAxzNI3qt+PKtwrjAd67+OOeM1NOP3z6e+SPDc9zjNs 2bBtfXVY+HiapK/iIWXIKoDwE6zNvQ85brHC2Q4zA16c+KIsb6l1SgxkY32zDgqN +uq7Aet5ZCxk1WvkDYLPQXPVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURr7u99+q 9Atqbz/Ww9zm1bZjy0IwHwYDVR0jBBgwFoAUsc2DuJnOYCmsikIu278VgzU5HQgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4NDk3LzAzMzJCQzY0RjEz NDExRjBCRUQxRjg3MDUzNkY1NkJDL3NjMkR1Sm5PWUNtc2lrSXUyNzhWZ3pVNUhR Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvc2MyRHVKbk9ZQ21zaWtJdTI3OFZnelU1SFFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 NDk3LzAzMzJCQzY0RjEzNDExRjBCRUQxRjg3MDUzNkY1NkJDL3NjMkR1Sm5PWUNt c2lrSXUyNzhWZ3pVNUhRZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCRNA0lol0bWBA4+2EVoulvLpSj44F1b0mi74gIE3M0JVj0910xkTGn6akouMIA u/cYbYvQNN5O1lzofZRC1HKJy1JTy2kXOEkT7G1YPdpkJVFnT/5QNqBPDaet/Gc9 YFzk5Cw3utq8hy9zO14BxHwc0Ra4TIyZ1K6RebqryFQS0Xxhr91ffdzp+u1VykFn ZlF20uW7YOy9ZWLXt6YOzRo2O8ywkU//reu8o0IxdtNkvDH8pDrn8j+L/2f3/lLE +pl7tK2FMC8L6pwwyicawJFHW5h+tAeEtHe35xNpAF5+179kaHLJK0iy8TDTw+EY sM6RT5F41CXFvnYcfxik1BK8 -----END CERTIFICATE-----Generated at Thu Mar 26 02:40:54 2026 by rpki-client