$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft File: f2OOENa_P0qFS8YKE8I5svNdFOE.mft (raw, json) Hash identifier: 0vCmt5rbtFFBMMI9cjruy3wrVNlbPr1ptcgIgg60W8U= Subject key identifier: 4B:E2:22:C8:62:68:22:DD:92:81:AA:09:DC:4C:58:93:8E:04:07:97 Authority key identifier: 7F:63:8E:10:D6:BF:3F:4A:85:4B:C6:0A:13:C2:39:B2:F3:5D:14:E1 Certificate issuer: /CN=A9173D5E/serialNumber=7F638E10D6BF3F4A854BC60A13C239B2F35D14E1 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft Manifest number: 1F Signing time: Wed 25 Mar 2026 08:04:27 +0000 Manifest this update: Wed 25 Mar 2026 08:04:26 +0000 Manifest next update: Wed 01 Apr 2026 08:04:26 +0000 Files and hashes: 1: f2OOENa_P0qFS8YKE8I5svNdFOE.crl (hash: 6lrgCx4xofKIdRN88WjJhjmg9mlOYMkAmKCV071S7fc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.crl rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:04:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D5E, serialNumber=7F638E10D6BF3F4A854BC60A13C239B2F35D14E1 Validity Not Before: Mar 25 08:04:26 2026 GMT Not After : Apr 1 08:04:26 2026 GMT Subject: CN=69c3970b-cb86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7c:f8:ca:d7:82:cc:36:cd:9e:1f:ce:ce:c1: 17:d1:36:c4:42:0a:eb:a2:c2:0f:2a:61:ca:5c:ae: e9:66:2b:66:98:ab:df:ca:b4:5c:7d:82:38:35:b2: 68:58:fd:f6:88:6d:07:7a:4c:58:61:12:a7:ef:9e: 24:b1:a1:03:35:e3:8b:cd:bc:d8:bb:5a:d1:f3:23: 1b:9f:ec:dd:09:10:17:37:ee:41:67:3d:a8:47:c4: 25:31:c5:65:01:50:26:63:c8:a1:b6:de:e6:83:35: 5e:0b:be:46:cf:a6:74:d4:cc:86:c7:ef:f7:f7:49: dd:22:40:be:f6:dd:0a:23:21:10:e9:c9:52:92:32: 99:47:27:70:11:e1:97:ae:0c:8c:6e:d3:e1:80:dd: df:f1:4c:5b:6d:8f:72:f6:5d:40:1c:7a:df:8f:68: a4:c4:7a:94:ab:43:25:7e:05:83:36:9c:bf:49:1a: 49:b9:4e:c3:bd:11:1f:73:f7:25:d9:dc:9c:3e:d1: fd:6b:ee:b6:2f:a1:af:df:b6:f2:3f:da:e3:0a:5a: b2:b1:a3:c2:06:fc:5d:cf:41:0d:29:f4:76:28:7b: 84:e9:97:a9:38:29:77:c9:10:e7:65:e7:e9:86:1b: 1a:b9:63:2f:a0:98:a3:b3:bc:cb:a5:f9:61:76:52: eb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E2:22:C8:62:68:22:DD:92:81:AA:09:DC:4C:58:93:8E:04:07:97 X509v3 Authority Key Identifier: keyid:7F:63:8E:10:D6:BF:3F:4A:85:4B:C6:0A:13:C2:39:B2:F3:5D:14:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:8f:c7:e4:aa:50:bf:c9:66:2b:8f:bc:32:e0:1f:dd:d0:e0: 84:f7:3e:30:d0:ee:34:1f:35:f6:7f:41:31:63:82:b7:ae:fc: e2:39:8e:4d:ee:ee:b8:83:72:f4:f1:a1:99:b3:47:48:b4:36: e7:b2:7f:9d:1e:76:2f:da:22:8f:2e:97:22:c9:a8:68:26:6c: 65:17:45:fc:aa:01:5a:b1:2d:b8:1f:6c:e6:0b:44:06:2f:f1: 74:b6:ce:45:1e:82:7e:66:62:d2:4e:07:d1:5f:4e:4f:95:41: 45:71:cb:bc:f3:4b:3f:7f:ed:73:f5:2c:3f:0c:90:8f:65:53: 6c:b3:08:4a:16:d5:6d:6c:62:cc:09:df:25:f0:2f:33:fd:cf: cc:18:a6:67:b7:b3:de:e7:72:29:f3:8a:34:6f:31:10:47:c2: 44:1c:9b:08:5d:06:2a:29:09:c9:5f:4a:b6:ea:4c:16:ee:ef: ae:3a:14:a2:c4:b3:aa:9c:0f:fd:8b:4f:cc:25:32:84:24:a8: 61:ad:cd:27:f2:1e:aa:b9:5c:e5:e7:fd:a4:2a:71:ea:bd:d6: 22:a5:27:a8:13:96:06:ad:b9:c1:5f:f1:ec:1e:bb:46:19:58: 8c:60:1b:c7:9a:b3:10:48:f0:42:79:fb:13:62:b4:ce:ab:07: f4:24:83:c9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0Q1RTExMC8GA1UEBRMoN0Y2MzhFMTBENkJGM0Y0QTg1NEJDNjBBMTNDMjM5QjJG MzVEMTRFMTAeFw0yNjAzMjUwODA0MjZaFw0yNjA0MDEwODA0MjZaMBgxFjAUBgNV BAMTDTY5YzM5NzBiLWNiODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGfPjK14LMNs2eH87OwRfRNsRCCuuiwg8qYcpcrulmK2aYq9/KtFx9gjg1smhY /faIbQd6TFhhEqfvniSxoQM144vNvNi7WtHzIxuf7N0JEBc37kFnPahHxCUxxWUB UCZjyKG23uaDNV4LvkbPpnTUzIbH7/f3Sd0iQL723QojIRDpyVKSMplHJ3AR4Zeu DIxu0+GA3d/xTFttj3L2XUAcet+PaKTEepSrQyV+BYM2nL9JGkm5TsO9ER9z9yXZ 3Jw+0f1r7rYvoa/ftvI/2uMKWrKxo8IG/F3PQQ0p9HYoe4Tpl6k4KXfJEOdl5+mG Gxq5Yy+gmKOzvMul+WF2Uuv/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUS+IiyGJo It2SgaoJ3ExYk44EB5cwHwYDVR0jBBgwFoAUf2OOENa/P0qFS8YKE8I5svNdFOEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczRDVFLzJBQTZFMjQ0RkU2 NzExRjBBNzVDODg1MjUzNkY1NkJDL2YyT09FTmFfUDBxRlM4WUtFOEk1c3ZOZEZP RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZjJPT0VOYV9QMHFGUzhZS0U4STVzdk5kRk9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz RDVFLzJBQTZFMjQ0RkU2NzExRjBBNzVDODg1MjUzNkY1NkJDL2YyT09FTmFfUDBx RlM4WUtFOEk1c3ZOZEZPRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB7j8fkqlC/yWYrj7wy4B/d0OCE9z4w0O40HzX2f0ExY4K3rvziOY5N7u64g3L0 8aGZs0dItDbnsn+dHnYv2iKPLpciyahoJmxlF0X8qgFasS24H2zmC0QGL/F0ts5F HoJ+ZmLSTgfRX05PlUFFccu880s/f+1z9Sw/DJCPZVNsswhKFtVtbGLMCd8l8C8z /c/MGKZnt7Pe53Ip84o0bzEQR8JEHJsIXQYqKQnJX0q26kwW7u+uOhSixLOqnA/9 i0/MJTKEJKhhrc0n8h6quVzl5/2kKnHqvdYipSeoE5YGrbnBX/HsHrtGGViMYBvH mrMQSPBCefsTYrTOqwf0JIPJ -----END CERTIFICATE-----Generated at Fri Mar 27 01:29:11 2026 by rpki-client