$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft File: 2QewWcyN7ki84-g5oeaIF6LWOtQ.mft (raw, json) Hash identifier: LzcBXHSli4iEEC7HYU0ITotzcr3QO7MSPPBLzCyqz6I= Subject key identifier: 4C:88:EF:30:3F:2A:CF:58:53:48:73:09:AE:C0:A4:A2:CF:74:CC:45 Authority key identifier: D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4 Certificate issuer: /CN=A9186F51/serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4 Certificate serial: 082D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft Manifest number: 0821 Signing time: Tue 24 Mar 2026 20:45:45 +0000 Manifest this update: Tue 24 Mar 2026 20:45:45 +0000 Manifest next update: Tue 31 Mar 2026 20:45:45 +0000 Files and hashes: 1: 2QewWcyN7ki84-g5oeaIF6LWOtQ.crl (hash: 6jdaZLQneTpqcLdMD1CxlpkcrKb5QSYsrr8KXIsPQ2Q=) 2: 083499C00F7711EBBCB67820C4F9AE02.roa (hash: iKOlmepNJ2Cs3U5hWGbf9IJf0JMlwqn81QfKtYqpKgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2093 (0x82d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186F51, serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4 Validity Not Before: Mar 24 20:45:45 2026 GMT Not After : Mar 31 20:45:45 2026 GMT Subject: CN=69c2f7f9-3b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6d:4c:1a:02:2f:10:b4:ac:9a:3a:fe:ff:d4: 3a:1a:eb:7d:8d:f1:4a:4a:9d:fc:73:87:11:4e:27: 1e:44:cd:1b:b6:e6:c3:9f:30:94:15:d3:db:56:8e: 73:2f:bf:47:8d:79:40:41:68:90:4a:93:29:d0:93: 1b:50:a6:f6:f1:24:f6:de:98:6e:bc:6d:ba:04:3b: 43:e2:52:fe:90:44:a1:49:c5:c5:2c:32:3f:1e:d8: 35:a8:74:dc:00:4b:13:fe:56:95:3c:92:fd:77:e5: c1:54:51:07:8c:3b:27:11:d0:30:80:af:79:75:15: 06:61:6d:1f:e7:c1:94:f4:93:2e:7a:32:05:11:bc: b4:4f:cd:40:28:27:80:26:a0:01:da:bd:54:1b:6c: 7a:ee:e7:f1:d8:51:78:fb:1b:b1:65:e6:f7:87:6b: 87:bd:78:e3:fd:73:d8:eb:13:b9:66:1e:c9:02:11: 4c:eb:19:f8:ea:fa:d6:3c:db:21:10:b3:95:a6:fd: 24:9e:aa:23:fc:60:4b:d3:c8:c3:31:ac:1c:a9:b9: f2:b9:2e:be:e3:d7:2a:b3:6f:6c:39:87:1d:9f:08: bc:6a:6e:7b:18:41:b9:30:8b:f0:58:82:6d:a8:00: e7:87:5e:26:fd:42:42:24:c2:d4:d5:0b:00:d3:30: a3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:88:EF:30:3F:2A:CF:58:53:48:73:09:AE:C0:A4:A2:CF:74:CC:45 X509v3 Authority Key Identifier: keyid:D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:5d:a2:13:b9:0b:58:2e:d7:58:0d:c2:6d:84:e9:be:70:59: 77:63:b5:3a:a6:8f:9f:78:3c:ba:a1:3f:c4:c9:15:ae:7f:04: 68:0c:d9:1c:5c:ea:08:5b:3f:46:4e:82:4a:d7:83:7e:b1:30: 10:85:d8:57:ef:17:89:fc:94:61:20:54:3a:1c:6a:9f:d0:61: 91:39:3c:d1:4d:6b:6c:3c:a0:6d:59:51:6d:d0:aa:93:39:10: 8f:93:b1:7f:27:ae:b6:d2:cd:86:9e:cf:ed:0f:a8:96:62:64: 6f:61:a2:c6:61:b6:1c:de:57:1b:0e:88:f8:9a:77:1a:f5:50: 8b:7b:66:c6:fa:7a:26:02:39:3a:88:18:d6:eb:f1:7c:8a:38: 9b:6f:bd:9a:ff:c2:cc:42:9c:1f:45:17:50:f8:80:6f:8d:8b: 1d:e1:2d:13:44:a8:4b:dc:a0:39:ab:23:82:8c:3f:6b:d9:07: f6:2c:d9:91:29:98:ad:47:2d:45:a4:a6:a8:58:a0:2c:f2:df: 26:f7:5d:89:1a:01:ff:a4:02:9e:63:c2:4d:8a:ee:86:a4:66: dd:58:d9:09:3f:78:11:08:cf:03:b5:49:aa:d2:27:ce:92:73: 59:c8:b2:7b:c4:9b:44:c8:56:7a:7e:14:d4:cc:5e:7c:40:2d: bb:13:ae:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZGNTExMTAvBgNVBAUTKEQ5MDdCMDU5Q0M4REVFNDhCQ0UzRTgzOUExRTY4ODE3 QTJENjNBRDQwHhcNMjYwMzI0MjA0NTQ1WhcNMjYwMzMxMjA0NTQ1WjAYMRYwFAYD VQQDEw02OWMyZjdmOS0zYjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnG1MGgIvELSsmjr+/9Q6Gut9jfFKSp38c4cRTiceRM0btubDnzCUFdPbVo5z L79HjXlAQWiQSpMp0JMbUKb28ST23phuvG26BDtD4lL+kEShScXFLDI/Htg1qHTc AEsT/laVPJL9d+XBVFEHjDsnEdAwgK95dRUGYW0f58GU9JMuejIFEby0T81AKCeA JqAB2r1UG2x67ufx2FF4+xuxZeb3h2uHvXjj/XPY6xO5Zh7JAhFM6xn46vrWPNsh ELOVpv0knqoj/GBL08jDMawcqbnyuS6+49cqs29sOYcdnwi8am57GEG5MIvwWIJt qADnh14m/UJCJMLU1QsA0zCjgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEyI7zA/ Ks9YU0hzCa7ApKLPdMxFMB8GA1UdIwQYMBaAFNkHsFnMje5IvOPoOaHmiBei1jrU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkY1MS9CMjk5MzI2MDBG NzUxMUVCOUQwMDIwMUZDNEY5QUUwMi8yUWV3V2N5TjdraTg0LWc1b2VhSUY2TFdP dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRZXdXY3lON2tpODQtZzVvZWFJRjZMV090US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkY1MS9CMjk5MzI2MDBGNzUxMUVCOUQwMDIwMUZDNEY5QUUwMi8yUWV3V2N5Tjdr aTg0LWc1b2VhSUY2TFdPdFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXl2iE7kLWC7XWA3CbYTpvnBZd2O1OqaPn3g8uqE/xMkVrn8EaAzZHFzqCFs/ Rk6CSteDfrEwEIXYV+8XifyUYSBUOhxqn9BhkTk80U1rbDygbVlRbdCqkzkQj5Ox fyeuttLNhp7P7Q+olmJkb2GixmG2HN5XGw6I+Jp3GvVQi3tmxvp6JgI5OogY1uvx fIo4m2+9mv/CzEKcH0UXUPiAb42LHeEtE0SoS9ygOasjgow/a9kH9izZkSmYrUct RaSmqFigLPLfJvddiRoB/6QCnmPCTYruhqRm3VjZCT94EQjPA7VJqtInzpJzWciy e8SbRMhWen4U1MxefEAtuxOuEQ== -----END CERTIFICATE-----Generated at Thu Mar 26 08:57:25 2026 by rpki-client