$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft File: r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft (raw, json) Hash identifier: atmBjFh2S07TFzKLBrz3J8SB+nGMwT4Nh3vT1nObxig= Subject key identifier: 8C:7A:EC:B3:3C:48:9A:6D:02:12:FF:28:2D:13:47:97:5C:F3:30:F9 Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 Certificate issuer: /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Certificate serial: 08B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft Manifest number: 08A2 Signing time: Tue 24 Mar 2026 20:18:01 +0000 Manifest this update: Tue 24 Mar 2026 20:18:00 +0000 Manifest next update: Tue 31 Mar 2026 20:18:00 +0000 Files and hashes: 1: r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl (hash: qSAcU1ARwYM81/8337/PRsIpEh0UW2G/HI8GPiZIq4Q=) 2: 2A0CFF60000811EC9CB70449C4F9AE02.roa (hash: LTCbHauhqctukaxsBI7is9dw2rGH9a0l7IrT+OZtZLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2226 (0x8b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EC82, serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Validity Not Before: Mar 24 20:18:00 2026 GMT Not After : Mar 31 20:18:00 2026 GMT Subject: CN=69c2f178-f6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:4b:2b:46:ff:ec:2e:bb:0c:01:d0:b0:cb:a0: de:fb:b4:be:91:65:67:0b:86:2e:2b:55:0b:17:21: 63:a6:cf:71:41:69:45:8e:1e:10:8c:e2:40:bf:1b: f7:00:7d:23:19:30:1c:e9:58:84:e3:9d:20:14:d5: c9:da:75:57:00:bb:39:8e:07:c4:98:95:94:53:0f: 6a:df:d3:6d:8f:83:dc:9a:82:8a:71:a7:30:23:fa: 12:fb:6a:d1:93:9b:97:ab:53:6c:93:57:19:ea:0f: 00:84:ed:11:11:72:4d:d8:1d:31:0f:d1:66:45:ac: f9:82:32:3f:55:e4:99:3d:e4:05:6d:9a:71:32:f4: 61:13:5a:19:e5:8c:fe:33:d7:e8:ff:e9:5e:8e:19: 2d:96:8d:6b:5c:83:07:cb:a5:61:00:82:f6:8f:f0: 41:cb:be:f9:8f:eb:76:94:96:b6:ac:21:9d:d9:45: f0:3a:46:e2:28:f3:d8:ca:49:cb:e4:b2:8c:46:1d: e4:04:50:f0:3d:f4:0b:99:47:9a:6d:c7:b2:44:22: 54:5f:85:33:d3:48:4e:5a:2a:c4:aa:72:fa:30:48: 5b:37:a1:50:3f:fc:61:1d:44:3e:51:a8:dc:54:b2: 59:b9:5d:7b:5f:d2:ff:cc:59:48:72:21:53:1e:3e: 6e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7A:EC:B3:3C:48:9A:6D:02:12:FF:28:2D:13:47:97:5C:F3:30:F9 X509v3 Authority Key Identifier: keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:1b:3f:48:d2:55:6f:f9:8e:49:20:08:2b:f9:ae:67:dc:69: 9d:60:41:24:33:4f:9f:e6:0c:ef:d7:ae:b1:e4:4d:2b:40:6e: 8f:7b:3a:cc:93:b4:d8:b1:a6:b1:73:aa:e5:21:68:ed:5d:7f: c5:02:d6:68:bb:b4:e2:03:ae:a0:8a:dc:e5:38:8a:a9:c4:7f: b1:d6:06:de:7b:41:54:41:cc:30:8f:c1:b0:d8:7e:2f:fa:f1: 87:a3:c2:68:b5:21:1d:46:3b:e5:b2:20:8c:0a:83:01:71:df: ef:bd:62:72:c0:d9:b0:66:4c:fd:ac:69:a5:9e:c4:eb:43:15: b4:fa:b0:7b:f2:86:19:8b:ae:22:23:e0:59:ca:a3:e0:41:10: 64:d1:71:78:5c:2a:4c:7d:ba:61:45:61:00:94:ac:57:90:0c: 1a:26:c0:3e:a3:60:c1:4e:7e:75:6a:6c:6e:69:e9:ed:46:d1: 78:31:26:e9:7e:94:28:aa:02:69:c9:44:95:1c:ec:3f:2f:b8: 4c:fc:ba:82:06:41:06:1c:51:84:d0:59:a1:ee:33:5b:d0:58: 8b:28:3a:ed:e3:53:be:83:ba:7d:a9:ce:42:1a:10:58:d9:44: 1a:0e:6f:5e:5a:2b:97:2c:a3:06:e2:9b:f6:cd:e6:01:ba:83: 89:af:e0:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVDODIxMTAvBgNVBAUTKEFGNDFDOUQwNDQ2QTdGQTkxNEM2QzE2RTc4OENEMkMz RjgwQUY1MDIwHhcNMjYwMzI0MjAxODAwWhcNMjYwMzMxMjAxODAwWjAYMRYwFAYD VQQDEw02OWMyZjE3OC1mNmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ksrRv/sLrsMAdCwy6De+7S+kWVnC4YuK1ULFyFjps9xQWlFjh4QjOJAvxv3 AH0jGTAc6ViE450gFNXJ2nVXALs5jgfEmJWUUw9q39Ntj4PcmoKKcacwI/oS+2rR k5uXq1Nsk1cZ6g8AhO0REXJN2B0xD9FmRaz5gjI/VeSZPeQFbZpxMvRhE1oZ5Yz+ M9fo/+lejhktlo1rXIMHy6VhAIL2j/BBy775j+t2lJa2rCGd2UXwOkbiKPPYyknL 5LKMRh3kBFDwPfQLmUeabceyRCJUX4Uz00hOWirEqnL6MEhbN6FQP/xhHUQ+Uajc VLJZuV17X9L/zFlIciFTHj5uswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIx67LM8 SJptAhL/KC0TR5dc8zD5MB8GA1UdIwQYMBaAFK9BydBEan+pFMbBbniM0sP4CvUC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUM4Mi80MDI1ODA3Q0Ux RTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2a1V4c0Z1ZUl6U3dfZ0s5 UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwSEowRVJxZjZrVXhzRnVlSXpTd19nSzlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUM4Mi80MDI1ODA3Q0UxRTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2 a1V4c0Z1ZUl6U3dfZ0s5UUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmxs/SNJVb/mOSSAIK/muZ9xpnWBBJDNPn+YM79euseRNK0Buj3s6zJO02LGm sXOq5SFo7V1/xQLWaLu04gOuoIrc5TiKqcR/sdYG3ntBVEHMMI/BsNh+L/rxh6PC aLUhHUY75bIgjAqDAXHf771icsDZsGZM/axppZ7E60MVtPqwe/KGGYuuIiPgWcqj 4EEQZNFxeFwqTH26YUVhAJSsV5AMGibAPqNgwU5+dWpsbmnp7UbReDEm6X6UKKoC aclElRzsPy+4TPy6ggZBBhxRhNBZoe4zW9BYiyg67eNTvoO6fanOQhoQWNlEGg5v XlorlyyjBuKb9s3mAbqDia/gdw== -----END CERTIFICATE-----Generated at Thu Mar 26 21:19:58 2026 by rpki-client