$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft File: B2lXYTNYblq0-b9NpSttXKFtnNU.mft (raw, json) Hash identifier: iL54phF/7TZYSc88deR7lIZ655LOa0KNp4O+Q8e+qKY= Subject key identifier: 8C:1E:75:06:67:3B:AD:91:A2:6B:EB:5A:99:D9:AD:0C:4D:E3:7B:60 Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5 Certificate issuer: /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5 Certificate serial: 0C69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft Manifest number: 0C3A Signing time: Mon 02 Mar 2026 02:08:25 +0000 Manifest this update: Mon 02 Mar 2026 02:08:24 +0000 Manifest next update: Mon 09 Mar 2026 02:08:24 +0000 Files and hashes: 1: B2lXYTNYblq0-b9NpSttXKFtnNU.crl (hash: lqMv/qqFULgO1+KM6py3LabX9nly0JsIMCIQC8JCs50=) 2: 4B6A736E0A9111EEB13EAF44C4F9AE02.roa (hash: s0qB2iNNIUGZAV7Qs3yGnrF3Wpc6qo9NyC9+Hue+JMc=) 3: DAFD055806F811EC9558C827C4F9AE02.roa (hash: SIPUDEhwO81LNv9dhcibvLJQkdYFv/PIhTjKFY7R3oc=) 4: 4DC77C600A9111EEB13EAF44C4F9AE02.roa (hash: 2kqZ2ax/As32o8RRs0PQNYd+3fd0DLwwDpGPzi6gp20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3177 (0xc69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5 Validity Not Before: Mar 2 02:08:24 2026 GMT Not After : Mar 9 02:08:24 2026 GMT Subject: CN=69a4f119-e5c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1b:8e:03:a6:fe:1f:7f:a8:8b:ff:fc:39:b4: 06:2b:36:c9:22:63:bd:be:c6:7c:27:c5:84:4f:5f: 83:77:1e:2a:fa:f3:3f:35:e7:27:de:1f:be:a7:2d: e4:d7:47:9e:c3:e9:d3:ef:06:12:78:86:bf:e6:5c: a2:73:85:fc:9b:01:09:f0:a4:2b:a1:aa:f7:76:8b: c3:f6:2e:d6:f6:f3:b3:d1:07:06:ae:c8:57:9b:a3: 3a:1e:2e:b0:5a:71:eb:c3:9a:73:9b:55:34:b3:f5: 7d:b5:6d:d4:51:12:f7:31:d3:11:e5:64:74:3f:c7: 08:fd:94:a6:5e:e3:33:17:00:5f:4f:0e:66:f8:4d: a8:3a:7d:a9:87:a7:34:f9:c5:75:8b:68:90:c2:0f: 61:c3:58:8d:9c:94:b6:c8:17:2c:6b:d5:3c:d2:29: f3:e0:20:1c:be:aa:df:46:14:48:be:7b:d0:97:4b: fa:14:e6:03:4a:10:7b:ed:d0:3a:2e:52:6a:c1:ea: 6d:dc:7b:df:ac:a7:51:a4:83:58:14:81:66:79:e9: 88:ce:49:fe:cd:f0:ce:1d:cf:1e:47:ad:2f:8e:51: 94:23:58:48:30:2e:8d:bb:45:53:de:7b:02:b5:16: b0:05:8e:e1:a9:a2:38:ca:f1:2a:af:64:c7:06:f4: 82:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1E:75:06:67:3B:AD:91:A2:6B:EB:5A:99:D9:AD:0C:4D:E3:7B:60 X509v3 Authority Key Identifier: keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:e8:b2:4c:75:c7:1c:df:3f:07:41:82:78:45:05:13:cd:78: 3d:ec:bd:30:22:18:1c:1e:bd:37:9f:5e:3f:c7:36:2d:c6:7c: 5f:8b:7c:7e:29:fd:79:4a:2f:5c:7c:b9:bc:21:1f:04:ef:00: f5:ef:a8:b9:60:62:4a:04:44:34:8a:85:66:50:85:cf:75:d8: 86:7a:e7:f3:7d:8e:32:66:66:ea:6e:25:61:a4:4a:ba:5e:5c: 5d:ec:a7:bf:d6:17:eb:88:0f:36:96:2d:d5:2e:bb:ae:1a:8b: 04:c4:a4:2f:02:85:12:6e:91:a4:e8:7d:0a:6d:9c:73:8c:2b: b1:35:ec:32:e7:f0:88:fe:be:30:c7:44:03:27:e3:33:63:01: ce:de:01:9f:13:92:5e:45:59:d0:84:8d:a2:73:1f:11:d4:ba: 7a:69:b2:35:55:4a:55:14:f3:8d:ff:72:50:2f:52:70:03:1f: f6:7a:fc:15:af:aa:d1:c8:8e:95:08:c7:cd:c3:35:be:56:ee: ad:08:dc:3b:24:ad:22:52:8f:8a:61:32:c4:a4:30:61:34:b6: f8:51:93:bc:4b:0d:9b:a4:d3:f0:fa:07:7d:36:87:1a:0a:0b: ef:ae:75:9a:d1:ab:de:c4:06:f2:37:f0:fb:51:dd:3f:4b:8e: e2:dd:f2:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA1N0IxMTAvBgNVBAUTKDA3Njk1NzYxMzM1ODZFNUFCNEY5QkY0REE1MkI2RDVD QTE2RDlDRDUwHhcNMjYwMzAyMDIwODI0WhcNMjYwMzA5MDIwODI0WjAYMRYwFAYD VQQDEw02OWE0ZjExOS1lNWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxuOA6b+H3+oi//8ObQGKzbJImO9vsZ8J8WET1+Ddx4q+vM/Necn3h++py3k 10eew+nT7wYSeIa/5lyic4X8mwEJ8KQroar3dovD9i7W9vOz0QcGrshXm6M6Hi6w WnHrw5pzm1U0s/V9tW3UURL3MdMR5WR0P8cI/ZSmXuMzFwBfTw5m+E2oOn2ph6c0 +cV1i2iQwg9hw1iNnJS2yBcsa9U80inz4CAcvqrfRhRIvnvQl0v6FOYDShB77dA6 LlJqwept3HvfrKdRpINYFIFmeemIzkn+zfDOHc8eR60vjlGUI1hIMC6Nu0VT3nsC tRawBY7hqaI4yvEqr2THBvSCpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIwedQZn O62RomvrWpnZrQxN43tgMB8GA1UdIwQYMBaAFAdpV2EzWG5atPm/TaUrbVyhbZzV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDU3Qi9BOTE3RTc1NDI2 MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJscTAtYjlOcFN0dFhLRnRu TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IybFhZVE5ZYmxxMC1iOU5wU3R0WEtGdG5OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDU3Qi9BOTE3RTc1NDI2MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJs cTAtYjlOcFN0dFhLRnRuTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY+iyTHXHHN8/B0GCeEUFE814Pey9MCIYHB69N59eP8c2LcZ8X4t8fin9eUov XHy5vCEfBO8A9e+ouWBiSgRENIqFZlCFz3XYhnrn832OMmZm6m4lYaRKul5cXeyn v9YX64gPNpYt1S67rhqLBMSkLwKFEm6RpOh9Cm2cc4wrsTXsMufwiP6+MMdEAyfj M2MBzt4BnxOSXkVZ0ISNonMfEdS6emmyNVVKVRTzjf9yUC9ScAMf9nr8Fa+q0ciO lQjHzcM1vlburQjcOyStIlKPimEyxKQwYTS2+FGTvEsNm6TT8PoHfTaHGgoL7651 mtGr3sQG8jfw+1HdP0uO4t3yqQ== -----END CERTIFICATE-----Generated at Mon Mar 2 14:48:35 2026 by rpki-client