$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft File: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft (raw, json) Hash identifier: tB1te8+3yhNPoglXBM/ehS19I3BkM+D/xVh1VTQdLNA= Subject key identifier: EA:F3:01:F7:08:A0:57:85:5C:D4:85:88:0C:8C:6E:37:AA:18:B9:09 Authority key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 Certificate issuer: /CN=A918EF87/serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft Manifest number: 9E Signing time: Fri 27 Mar 2026 06:52:41 +0000 Manifest this update: Fri 27 Mar 2026 06:52:40 +0000 Manifest next update: Fri 03 Apr 2026 06:52:40 +0000 Files and hashes: 1: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl (hash: 4SiyVMtFCxSut19K/QFQdllfoafjEwvafNL75eauqA4=) 2: 4C2B8F143BAD11F08B837C50C4F9AE02.roa (hash: M42F29+lHWSZmf5X/47K8ifG1ySfiTbA4ZzoyOCU96w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 06:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Validity Not Before: Mar 27 06:52:40 2026 GMT Not After : Apr 3 06:52:40 2026 GMT Subject: CN=69c62939-889d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:29:ae:8e:82:c5:96:6a:e3:29:c4:ad:fb:a9: 89:60:cb:c0:1b:39:92:0f:21:29:08:1b:38:0d:b7: cd:76:3d:1d:eb:99:84:dd:bc:98:86:75:50:4e:17: ce:6b:f7:6a:71:36:32:84:1b:44:91:75:95:da:6f: d5:65:7a:b7:a1:6d:15:c5:9c:c5:98:b6:68:f3:47: 03:a1:cc:20:09:54:02:28:a2:67:9c:02:eb:45:0d: 2b:b7:f8:5d:00:2d:ad:86:72:31:41:df:3d:de:93: a7:d7:ae:73:7b:1e:98:a9:86:9b:79:c7:34:3c:7f: f8:e7:ea:8d:3e:2e:5d:8d:55:d2:bd:90:6a:0e:ee: c8:85:96:61:9a:12:25:ca:bf:18:99:62:66:a2:73: 2d:14:ae:18:ca:e7:58:c0:1d:66:20:33:e6:31:0d: 60:f5:f6:a6:ce:2e:aa:ac:ee:81:41:81:1f:8d:8c: 25:a1:d3:49:6b:83:ea:e2:cf:7f:93:43:f7:2c:dc: bf:3b:e3:d1:df:da:8d:bc:7d:c4:7a:5b:9e:24:95: d5:24:bc:d6:15:60:c9:f2:9f:d6:d9:42:36:4f:96: 61:0f:1f:47:87:32:a3:b8:19:a3:9e:8d:b6:f5:65: 10:f6:e9:96:ac:f7:6b:c4:62:c8:2f:71:c5:db:60: a6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F3:01:F7:08:A0:57:85:5C:D4:85:88:0C:8C:6E:37:AA:18:B9:09 X509v3 Authority Key Identifier: keyid:0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:6b:c0:3d:11:ef:01:11:50:4e:f3:b0:fd:ca:96:77:55:c9: 9d:66:d8:59:eb:11:f3:6c:4e:d8:74:50:5a:03:c8:62:5b:27: ff:6b:bc:6c:11:7c:04:04:44:0d:48:47:4a:12:53:ae:58:91: 3c:3e:f7:af:94:0a:b1:6f:7a:f2:a0:b7:c0:d1:3e:75:c6:17: 68:ae:c9:64:73:88:74:db:45:c4:9d:94:c2:c6:49:12:32:f7: 59:cb:59:c7:5f:f4:14:aa:f6:63:93:44:dd:77:ac:65:e2:61: 15:2d:ac:0e:27:47:9a:82:81:a3:d7:4e:2d:fd:41:eb:c4:b8: ae:f1:9a:5d:e7:1d:c1:26:8a:a4:7a:40:13:d9:55:8d:a1:9c: 69:4a:f9:03:de:bc:de:ee:57:65:85:a7:37:4b:0c:81:8c:88: 77:eb:52:3f:17:82:d5:c6:4b:ff:d5:e2:25:1f:db:cb:98:57: 3d:82:6a:bc:77:1b:3c:ad:c1:22:3f:6b:a4:2f:90:67:20:eb: d7:41:76:71:a2:e4:bb:a1:df:01:72:af:fb:f8:41:59:cb:46: 99:89:bb:41:61:8f:5f:32:81:95:f7:10:42:18:c8:bd:5e:28: eb:7c:1a:82:53:c5:0e:22:6a:20:91:75:5d:23:a2:af:f8:2a: 0a:68:f2:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGODcxMTAvBgNVBAUTKDBCNkNEMTI3RDA0RUVDM0U4RUU0MTgzOTE5NDE0RkQ3 RUYzOUQ5MjQwHhcNMjYwMzI3MDY1MjQwWhcNMjYwNDAzMDY1MjQwWjAYMRYwFAYD VQQDEw02OWM2MjkzOS04ODlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjCmujoLFlmrjKcSt+6mJYMvAGzmSDyEpCBs4DbfNdj0d65mE3byYhnVQThfO a/dqcTYyhBtEkXWV2m/VZXq3oW0VxZzFmLZo80cDocwgCVQCKKJnnALrRQ0rt/hd AC2thnIxQd893pOn165zex6YqYabecc0PH/45+qNPi5djVXSvZBqDu7IhZZhmhIl yr8YmWJmonMtFK4YyudYwB1mIDPmMQ1g9famzi6qrO6BQYEfjYwlodNJa4Pq4s9/ k0P3LNy/O+PR39qNvH3EelueJJXVJLzWFWDJ8p/W2UI2T5ZhDx9HhzKjuBmjno22 9WUQ9umWrPdrxGLIL3HF22CmNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOrzAfcI oFeFXNSFiAyMbjeqGLkJMB8GA1UdIwQYMBaAFAts0SfQTuw+juQYORlBT9fvOdkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY4Ny8zQ0JFMzlBMjM4 QjMxMUYwOTE0MTgwODZDNEY5QUUwMi9DMnpSSjlCTzdENk81Qmc1R1VGUDEtODUy U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyelJKOUJPN0Q2TzVCZzVHVUZQMS04NTJTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY4Ny8zQ0JFMzlBMjM4QjMxMUYwOTE0MTgwODZDNEY5QUUwMi9DMnpSSjlCTzdE Nk81Qmc1R1VGUDEtODUyU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKmvAPRHvARFQTvOw/cqWd1XJnWbYWesR82xO2HRQWgPIYlsn/2u8bBF8BARE DUhHShJTrliRPD73r5QKsW968qC3wNE+dcYXaK7JZHOIdNtFxJ2UwsZJEjL3WctZ x1/0FKr2Y5NE3XesZeJhFS2sDidHmoKBo9dOLf1B68S4rvGaXecdwSaKpHpAE9lV jaGcaUr5A9683u5XZYWnN0sMgYyId+tSPxeC1cZL/9XiJR/by5hXPYJqvHcbPK3B Ij9rpC+QZyDr10F2caLku6HfAXKv+/hBWctGmYm7QWGPXzKBlfcQQhjIvV4o63wa glPFDiJqIJF1XSOir/gqCmjybA== -----END CERTIFICATE-----Generated at Fri Mar 27 09:15:50 2026 by rpki-client