$ rpki-client -vvf rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft File: 2kObzwPK_LW-ftCuezKPafiMGys.mft (raw, json) Hash identifier: wJbqG5CpHJbTlsJG+ymiC9ZV3zNbsv5jWM5TX/Y+UaY= Subject key identifier: EB:C7:EA:1F:62:95:51:FD:3A:F0:E1:66:54:08:80:E6:2C:94:25:83 Authority key identifier: DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B Certificate issuer: /CN=A9188EB6/serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B Certificate serial: 0528 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft Manifest number: 0520 Signing time: Tue 24 Mar 2026 23:15:44 +0000 Manifest this update: Tue 24 Mar 2026 23:15:44 +0000 Manifest next update: Tue 31 Mar 2026 23:15:44 +0000 Files and hashes: 1: 2kObzwPK_LW-ftCuezKPafiMGys.crl (hash: UzL+McM4qyPlDXX4HyuotbzasKh0623hkk12YxgByLE=) 2: E9E440F2411511ECBC2FB20BC4F9AE02.roa (hash: 1+kyZfwlYYLpY6rDzV9OldQ7LOSPDOBQp0/0LVGDmAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1320 (0x528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188EB6, serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B Validity Not Before: Mar 24 23:15:44 2026 GMT Not After : Mar 31 23:15:44 2026 GMT Subject: CN=69c31b20-59f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e2:1b:b6:5b:1c:fc:0e:b9:7e:2c:01:02:2d: de:31:02:29:78:b3:e2:b4:bf:b0:08:f4:ea:15:e3: a3:29:71:db:e0:78:92:36:05:94:2f:3e:d3:ef:06: a1:d9:46:09:fd:f4:d3:8a:bd:e7:1f:38:0c:54:90: 7e:67:3a:dc:0a:7c:89:de:d7:80:90:30:28:94:aa: 6b:1e:03:6b:7e:4e:9d:fc:3d:c7:6c:6f:3e:cc:2d: e1:5a:89:52:cb:91:34:ec:59:12:41:26:bc:20:73: 9f:8f:27:4f:5f:2d:4f:10:15:a7:57:13:7e:99:9e: 8f:82:71:d8:9a:c2:84:06:b3:5b:3f:5e:e4:27:de: df:63:c9:c3:f5:af:ab:47:35:50:70:d5:56:82:fd: 27:e1:b6:61:b5:37:83:ba:ff:40:75:7b:55:81:04: b3:23:b2:5f:f3:b1:51:72:e0:4f:4f:82:53:22:bb: bf:77:b1:ce:9e:f7:1a:4a:f8:d8:1e:ab:e8:27:4c: 7f:40:e3:a0:26:98:9c:15:50:81:5b:da:53:ba:13: 1c:87:84:a1:51:c8:2b:28:71:1f:a9:b6:81:5d:48: e7:77:1a:05:cc:65:e5:5e:9f:a5:18:63:b8:33:77: 0b:09:ba:19:74:9e:45:f5:2b:57:f0:80:81:42:14: 67:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C7:EA:1F:62:95:51:FD:3A:F0:E1:66:54:08:80:E6:2C:94:25:83 X509v3 Authority Key Identifier: keyid:DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:25:4f:98:76:d9:c1:95:2a:25:e1:a7:e5:69:51:9c:53:df: 29:87:37:43:bb:e8:1a:c5:74:47:14:a2:16:0c:7e:0e:ac:43: 19:4c:18:f9:c5:b6:39:39:d6:5c:3d:54:27:3c:49:31:9d:16: d0:3b:3a:a3:e2:83:88:37:ae:4d:43:f3:9e:b0:c9:74:31:d3: cb:cf:1b:75:a1:e8:96:66:1f:92:d8:8c:8b:9d:a0:e4:a0:71: ce:7b:ca:7a:c8:b3:14:c2:85:10:65:a9:4c:9d:47:a3:81:75: 75:fa:2b:a7:5b:b4:ed:15:d1:61:2e:d3:a5:36:04:2b:f4:c6: 4f:35:a6:b4:a3:4a:f9:b3:2d:30:a0:4c:2e:ad:f1:8c:f5:de: 05:ab:19:03:b1:ff:c8:b7:0d:57:44:6d:5a:2b:39:52:5f:fb: 7b:ac:4c:cb:50:77:d3:1d:f2:61:fe:9f:9e:cd:94:9b:5a:10: be:fb:51:c1:3b:0b:c5:dc:38:50:67:8d:b7:5f:73:b8:30:12: 06:3f:a6:91:ef:b6:a3:59:ad:6d:09:e5:ab:66:44:48:6a:25: 53:df:78:67:d4:c8:bb:a9:7a:a2:54:3d:34:bb:9a:f7:66:6d: 33:79:40:b2:70:50:f5:3a:5a:ae:5e:7a:d3:6f:49:f1:a1:b0: 15:ae:64:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhFQjYxMTAvBgNVBAUTKERBNDM5QkNGMDNDQUZDQjVCRTdFRDBBRTdCMzI4RjY5 Rjg4QzFCMkIwHhcNMjYwMzI0MjMxNTQ0WhcNMjYwMzMxMjMxNTQ0WjAYMRYwFAYD VQQDEw02OWMzMWIyMC01OWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4eIbtlsc/A65fiwBAi3eMQIpeLPitL+wCPTqFeOjKXHb4HiSNgWULz7T7wah 2UYJ/fTTir3nHzgMVJB+ZzrcCnyJ3teAkDAolKprHgNrfk6d/D3HbG8+zC3hWolS y5E07FkSQSa8IHOfjydPXy1PEBWnVxN+mZ6PgnHYmsKEBrNbP17kJ97fY8nD9a+r RzVQcNVWgv0n4bZhtTeDuv9AdXtVgQSzI7Jf87FRcuBPT4JTIru/d7HOnvcaSvjY HqvoJ0x/QOOgJpicFVCBW9pTuhMch4ShUcgrKHEfqbaBXUjndxoFzGXlXp+lGGO4 M3cLCboZdJ5F9StX8ICBQhRnBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOvH6h9i lVH9OvDhZlQIgOYslCWDMB8GA1UdIwQYMBaAFNpDm88Dyvy1vn7Qrnsyj2n4jBsr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEVCNi8zRUJGNDc5QTQx MTQxMUVDOEVBOTZEMEJDNEY5QUUwMi8ya09iendQS19MVy1mdEN1ZXpLUGFmaU1H eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrT2J6d1BLX0xXLWZ0Q3VlektQYWZpTUd5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEVCNi8zRUJGNDc5QTQxMTQxMUVDOEVBOTZEMEJDNEY5QUUwMi8ya09iendQS19M Vy1mdEN1ZXpLUGFmaU1HeXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXCVPmHbZwZUqJeGn5WlRnFPfKYc3Q7voGsV0RxSiFgx+DqxDGUwY+cW2OTnW XD1UJzxJMZ0W0Ds6o+KDiDeuTUPznrDJdDHTy88bdaHolmYfktiMi52g5KBxznvK esizFMKFEGWpTJ1Ho4F1dforp1u07RXRYS7TpTYEK/TGTzWmtKNK+bMtMKBMLq3x jPXeBasZA7H/yLcNV0RtWis5Ul/7e6xMy1B30x3yYf6fns2Um1oQvvtRwTsLxdw4 UGeNt19zuDASBj+mke+2o1mtbQnlq2ZESGolU994Z9TIu6l6olQ9NLua92ZtM3lA snBQ9Tparl56029J8aGwFa5kRA== -----END CERTIFICATE-----Generated at Thu Mar 26 14:10:07 2026 by rpki-client