$ rpki-client -vvf rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft File: x2h2G8gatP5_1EAVSCYcuocge-o.mft (raw, json) Hash identifier: HG2iKZ941BsNmbogrYJqfSgo8YqYD5UYEqHaSnQnrZY= Subject key identifier: 2B:46:D2:40:A4:88:66:B0:AA:52:1C:D3:5A:7E:3D:B2:18:2F:44:4E Authority key identifier: C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA Certificate issuer: /CN=A9118022/serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Certificate serial: 0EC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft Manifest number: 0E95 Signing time: Mon 02 Mar 2026 00:57:13 +0000 Manifest this update: Mon 02 Mar 2026 00:57:12 +0000 Manifest next update: Mon 09 Mar 2026 00:57:12 +0000 Files and hashes: 1: x2h2G8gatP5_1EAVSCYcuocge-o.crl (hash: uZy2+4+zr3QNvpgx/BCgQwgDoLhWTL3s+NhrQzlwlzc=) 2: 1609CE067A4A11EB99C11F5FC4F9AE02.roa (hash: jPTrigcWq4coxSH4UL7oP5hGP5jZz/yTxLEnnmOBFlo=) 3: 1D93B82C21D911EB85DAFE71C4F9AE02.roa (hash: E+4UeHlGnBHL9IRmWm+TexcyHwom9b/OOAx0STjQIo0=) 4: 670DF186232111EB9896B783C4F9AE02.roa (hash: JDnnr+gXElLZfFNqxroiEtHe91q0ZicgMHi1XY427Ss=) 5: 1C99C7E021D911EB85DAFE71C4F9AE02.roa (hash: bKvSPuftAoTubmq1z1G2lBaSXWyaRfT8vN+YYMv11yI=) 6: 127D33EC027011EB98FEC44BC4F9AE02.roa (hash: xo+tt5lov3udnd3XAOiK90QcwkAcxMUW1iuUC+4M+z8=) 7: 1BBE249C21D911EB85DAFE71C4F9AE02.roa (hash: IJy6vq3u18sfK/PaqQ4HkbGHvtQ0+WpPPGjw18M6VWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3785 (0xec9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118022, serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Validity Not Before: Mar 2 00:57:12 2026 GMT Not After : Mar 9 00:57:12 2026 GMT Subject: CN=69a4e069-f066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cd:9b:17:94:c3:65:6b:cc:5b:5e:71:1f:5d: 7e:b7:68:cb:86:0a:da:34:39:a8:48:d0:0c:99:90: 38:c7:77:98:b3:88:8d:bf:d1:39:45:1b:81:fe:4b: 0d:56:f0:62:6f:c9:c2:e3:1d:bb:61:db:ea:a9:93: b3:7a:c6:eb:8f:84:93:2c:6a:93:84:0c:4a:4a:48: 0c:0f:3f:c0:56:42:32:65:39:af:4d:ca:c0:4b:61: f2:a1:fe:3b:7c:25:a7:e2:0d:d0:6f:4a:e2:61:69: 38:0c:89:d5:09:be:68:b5:e9:75:6b:e1:27:7f:ac: 74:63:76:46:a7:2a:c5:91:45:f5:21:60:81:21:64: 85:39:0d:2f:b1:da:2e:84:63:0d:89:fd:20:ab:a3: a8:4c:f1:27:e2:3f:42:c4:fe:2e:80:64:4d:c3:fe: fb:5f:2e:7f:d3:66:1d:0a:2a:28:b1:23:3b:8d:e6: 2b:30:60:06:87:d7:6d:ab:77:92:dc:ce:54:65:dd: 46:3a:e1:b1:ee:48:21:51:0c:be:8f:b5:02:cb:cf: d4:05:3c:eb:fe:60:f1:14:d5:e0:38:04:91:bc:f0: 57:3d:47:88:80:4f:0f:d7:e6:3b:9f:93:70:12:58: 5f:ef:d7:d9:1c:37:f6:70:ad:43:ba:40:68:61:86: 0a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:46:D2:40:A4:88:66:B0:AA:52:1C:D3:5A:7E:3D:B2:18:2F:44:4E X509v3 Authority Key Identifier: keyid:C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:93:f0:3e:d2:6b:ed:1f:1b:2a:b3:d6:c4:1d:5e:08:08:db: 61:04:8f:ea:69:c4:03:f1:19:b5:2d:d6:7a:77:d3:4a:0e:c5: 0c:ba:f0:af:5c:d5:50:ae:72:5b:77:a1:86:6d:a7:6c:46:46: 83:c4:bb:c9:23:1b:f3:af:3b:b6:36:b7:fc:16:4a:54:e9:f9: 5d:87:c6:ac:c5:44:d0:0a:01:d8:7c:4b:97:ec:ea:41:c2:34: b9:ed:a6:06:44:0f:2e:06:3f:0f:89:b7:ee:54:26:1e:97:a4: 54:a6:15:dd:d1:5b:3d:0e:98:b0:24:c1:4d:89:24:40:b6:7a: 7c:87:47:c5:2d:a1:a9:55:4f:26:a5:53:89:73:07:a2:d6:51: fc:5d:d9:75:6e:bf:1a:1c:5a:05:04:73:93:22:a8:c2:78:63: ed:23:0c:e6:1c:59:c4:af:8d:c5:56:8d:a2:6c:f3:82:83:e2: 3b:47:d8:ef:58:c1:a9:78:ec:6e:6b:54:23:63:73:58:60:0b: 6e:93:de:60:2e:d9:ec:08:5d:10:ba:f9:bb:c2:64:18:c4:b0: 23:8a:4b:b6:58:3e:4d:f7:4c:f4:ad:de:e5:34:b9:78:db:e7: 73:ae:3e:87:fd:d4:77:6c:74:50:68:04:40:fa:80:45:0a:ba: ca:cb:d1:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMjIxMTAvBgNVBAUTKEM3Njg3NjFCQzgxQUI0RkU3RkQ0NDAxNTQ4MjYxQ0JB ODcyMDdCRUEwHhcNMjYwMzAyMDA1NzEyWhcNMjYwMzA5MDA1NzEyWjAYMRYwFAYD VQQDEw02OWE0ZTA2OS1mMDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsc2bF5TDZWvMW15xH11+t2jLhgraNDmoSNAMmZA4x3eYs4iNv9E5RRuB/ksN VvBib8nC4x27YdvqqZOzesbrj4STLGqThAxKSkgMDz/AVkIyZTmvTcrAS2Hyof47 fCWn4g3Qb0riYWk4DInVCb5otel1a+Enf6x0Y3ZGpyrFkUX1IWCBIWSFOQ0vsdou hGMNif0gq6OoTPEn4j9CxP4ugGRNw/77Xy5/02YdCioosSM7jeYrMGAGh9dtq3eS 3M5UZd1GOuGx7kghUQy+j7UCy8/UBTzr/mDxFNXgOASRvPBXPUeIgE8P1+Y7n5Nw Elhf79fZHDf2cK1DukBoYYYKPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCtG0kCk iGawqlIc01p+PbIYL0ROMB8GA1UdIwQYMBaAFMdodhvIGrT+f9RAFUgmHLqHIHvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAyMi9DNjFDMjU2QUFE Q0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQNV8xRUFWU0NZY3VvY2dl LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gyaDJHOGdhdFA1XzFFQVZTQ1ljdW9jZ2Utby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAyMi9DNjFDMjU2QUFEQ0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQ NV8xRUFWU0NZY3VvY2dlLW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg5PwPtJr7R8bKrPWxB1eCAjbYQSP6mnEA/EZtS3WenfTSg7FDLrwr1zVUK5y W3ehhm2nbEZGg8S7ySMb8687tja3/BZKVOn5XYfGrMVE0AoB2HxLl+zqQcI0ue2m BkQPLgY/D4m37lQmHpekVKYV3dFbPQ6YsCTBTYkkQLZ6fIdHxS2hqVVPJqVTiXMH otZR/F3ZdW6/GhxaBQRzkyKownhj7SMM5hxZxK+NxVaNomzzgoPiO0fY71jBqXjs bmtUI2NzWGALbpPeYC7Z7AhdELr5u8JkGMSwI4pLtlg+TfdM9K3e5TS5eNvnc64+ h/3Ud2x0UGgEQPqARQq6ysvRhg== -----END CERTIFICATE-----Generated at Mon Mar 2 09:08:28 2026 by rpki-client