$ rpki-client -vvf rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft File: x2h2G8gatP5_1EAVSCYcuocge-o.mft (raw, json) Hash identifier: EgYjvP4OmLCwRj20wAJoe1ifX3z2RNSnItkZR2QC/wE= Subject key identifier: 64:77:21:09:68:D6:89:7E:D0:04:09:A9:D5:A4:E4:43:C5:50:B1:95 Authority key identifier: C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA Certificate issuer: /CN=A9118022/serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Certificate serial: 0EBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft Manifest number: 0E93 Signing time: Sat 28 Feb 2026 17:51:08 +0000 Manifest this update: Sat 28 Feb 2026 17:51:07 +0000 Manifest next update: Sat 07 Mar 2026 17:51:07 +0000 Files and hashes: 1: x2h2G8gatP5_1EAVSCYcuocge-o.crl (hash: ssgttqA7thWxMUWrwMXw5kMyS/xxE4BrtahXRcAOkoM=) 2: 1C99C7E021D911EB85DAFE71C4F9AE02.roa (hash: 6vTa2jFZRIl18mXvmJhTh/HGMJaVZWt9h8uikA4SPmc=) 3: 1D93B82C21D911EB85DAFE71C4F9AE02.roa (hash: lbAPfcc0myVwdYbEISgNYKY5g+qS8g/HzTgMPDxOCGE=) 4: 670DF186232111EB9896B783C4F9AE02.roa (hash: QRv08V7HqtcB3bHnZdM9X+W4jlFsB6z2SpL2l3Cbxgo=) 5: 127D33EC027011EB98FEC44BC4F9AE02.roa (hash: qtVktuatmgxYDOUKpmx9+4mvFE8ErGGHadU2rZXHHOI=) 6: 1BBE249C21D911EB85DAFE71C4F9AE02.roa (hash: 1hlPRZQBD73jEyWKbHC8ZRWrArjylE9If913X/Jb57A=) 7: 1609CE067A4A11EB99C11F5FC4F9AE02.roa (hash: rV1Z8AbpTv1d+o44R7LlYsk8JevP6flWo0s81DQ5Rok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 17:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3771 (0xebb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118022, serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Validity Not Before: Feb 28 17:51:07 2026 GMT Not After : Mar 7 17:51:07 2026 GMT Subject: CN=69a32b0c-a89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:de:65:47:08:64:75:cd:18:53:22:e5:25:57: ce:3c:56:a7:a8:72:70:4f:58:67:39:1d:85:21:1c: 1f:30:ef:91:20:b4:64:a9:c0:77:80:d8:c8:50:ee: 18:01:72:50:f2:50:a1:4e:31:7f:80:c6:5b:9c:fd: 45:ae:f1:18:2e:47:9d:b2:67:48:4d:9e:fb:15:ae: f2:7d:ea:da:12:41:0b:2b:3b:70:8d:87:7b:bc:7e: 21:17:0e:f8:0f:ae:e8:c7:b7:bc:58:42:ce:fd:a3: b0:02:7c:54:42:a6:11:e1:58:f0:c9:55:cf:19:7d: ad:22:2d:15:71:8b:df:17:ed:46:de:93:bf:64:f9: d7:6f:3a:9e:67:a9:73:29:59:00:1c:54:f9:54:e4: fa:1c:05:cc:bd:58:42:20:35:0b:63:e5:23:12:c8: 79:a4:04:95:05:ba:ad:7e:fd:01:70:5a:b8:af:90: 7c:52:16:c7:96:13:03:94:a5:10:f4:e1:a0:aa:ad: ba:9a:9f:1f:4f:39:d5:e1:99:af:9a:28:a3:0c:f1: a1:5b:71:8c:ca:ff:9f:96:58:3b:64:0a:c0:ee:8a: 2e:e7:f6:b7:45:8d:90:f0:2c:b9:ce:9b:30:93:f4: 89:7f:79:5d:11:cc:24:2f:a4:7a:dd:43:28:45:e8: d5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:77:21:09:68:D6:89:7E:D0:04:09:A9:D5:A4:E4:43:C5:50:B1:95 X509v3 Authority Key Identifier: keyid:C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b9:2f:88:aa:42:ad:31:49:04:96:62:68:fb:84:3d:90:6c: 87:ec:98:75:8f:e7:e4:aa:7b:15:aa:c6:70:ac:c4:19:6d:44: 53:82:8b:77:05:32:94:10:de:10:ec:4e:bf:49:d2:7b:1d:9f: 1e:56:80:6d:33:eb:9d:99:9a:a5:78:a4:52:2c:32:1c:eb:02: ec:2f:d8:ea:97:a2:03:82:c9:cf:73:33:6c:59:18:9a:6e:35: 46:60:72:b8:02:c6:a4:3b:49:75:3f:84:4b:42:26:3f:ec:7a: 5d:19:ac:8d:0a:0c:2a:21:ae:a8:78:26:af:3a:02:a1:3c:95: b6:54:01:7d:66:f2:90:00:31:3c:6e:34:ce:6d:48:3d:3d:13: b1:11:4e:27:5f:f3:96:3e:f0:af:2b:86:b7:17:f8:a0:a2:e6: 5d:d4:eb:ed:f0:11:d2:e9:e7:9e:ba:09:6c:d2:04:03:65:1a: 8a:09:aa:95:fc:df:78:ed:64:01:5a:45:56:9c:97:71:29:aa: 29:64:e1:25:ba:b9:b8:d8:16:99:25:75:87:2c:07:cd:5c:95: 8a:c1:96:5b:1b:9c:4f:62:0b:be:28:dc:ee:58:fe:dc:eb:d2: cd:31:17:82:27:89:88:80:e2:8b:46:f4:d4:81:9d:5c:f0:0d: d6:eb:d7:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMjIxMTAvBgNVBAUTKEM3Njg3NjFCQzgxQUI0RkU3RkQ0NDAxNTQ4MjYxQ0JB ODcyMDdCRUEwHhcNMjYwMjI4MTc1MTA3WhcNMjYwMzA3MTc1MTA3WjAYMRYwFAYD VQQDDA02OWEzMmIwYy1hODlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6N5lRwhkdc0YUyLlJVfOPFanqHJwT1hnOR2FIRwfMO+RILRkqcB3gNjIUO4Y AXJQ8lChTjF/gMZbnP1FrvEYLkedsmdITZ77Fa7yferaEkELKztwjYd7vH4hFw74 D67ox7e8WELO/aOwAnxUQqYR4VjwyVXPGX2tIi0VcYvfF+1G3pO/ZPnXbzqeZ6lz KVkAHFT5VOT6HAXMvVhCIDULY+UjEsh5pASVBbqtfv0BcFq4r5B8UhbHlhMDlKUQ 9OGgqq26mp8fTznV4ZmvmiijDPGhW3GMyv+fllg7ZArA7oou5/a3RY2Q8Cy5zpsw k/SJf3ldEcwkL6R63UMoRejVTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGR3IQlo 1ol+0AQJqdWk5EPFULGVMB8GA1UdIwQYMBaAFMdodhvIGrT+f9RAFUgmHLqHIHvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAyMi9DNjFDMjU2QUFE Q0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQNV8xRUFWU0NZY3VvY2dl LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gyaDJHOGdhdFA1XzFFQVZTQ1ljdW9jZ2Utby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAyMi9DNjFDMjU2QUFEQ0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQ NV8xRUFWU0NZY3VvY2dlLW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXrkviKpCrTFJBJZiaPuEPZBsh+yYdY/n5Kp7FarGcKzEGW1EU4KLdwUylBDe EOxOv0nSex2fHlaAbTPrnZmapXikUiwyHOsC7C/Y6peiA4LJz3MzbFkYmm41RmBy uALGpDtJdT+ES0ImP+x6XRmsjQoMKiGuqHgmrzoCoTyVtlQBfWbykAAxPG40zm1I PT0TsRFOJ1/zlj7wryuGtxf4oKLmXdTr7fAR0unnnroJbNIEA2UaigmqlfzfeO1k AVpFVpyXcSmqKWThJbq5uNgWmSV1hywHzVyVisGWWxucT2ILvijc7lj+3OvSzTEX gieJiIDii0b01IGdXPAN1uvXHg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:39:00 2026 by rpki-client