$ rpki-client -vvf rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft File: thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft (raw, json) Hash identifier: qhKbXo89NDxgcuiQOIor5Md0JXK3+bboY4Vd0CB2EiU= Subject key identifier: 13:2E:46:82:AD:B2:40:83:D7:15:95:A0:CC:57:82:A2:30:11:43:6E Authority key identifier: B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95 Certificate issuer: /CN=A9118B32/serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995 Certificate serial: 042B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft Manifest number: 0426 Signing time: Sun 01 Mar 2026 01:07:56 +0000 Manifest this update: Sun 01 Mar 2026 01:07:55 +0000 Manifest next update: Sun 08 Mar 2026 01:07:55 +0000 Files and hashes: 1: thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl (hash: txXmTyhkxTVfAIkZpObPQHi4qKy/rtu3Df82JKjGs2A=) 2: 0F291AFE9D2811EC83448E6FC4F9AE02.roa (hash: p2rd5X9PRaHj3dg5SJAK0M8GBgiGK7ul3HPfe5PMkz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1067 (0x42b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118B32, serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995 Validity Not Before: Mar 1 01:07:55 2026 GMT Not After : Mar 8 01:07:55 2026 GMT Subject: CN=69a3916c-48cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:57:7e:f6:2b:dc:78:58:c2:99:ee:2f:9e:7b: 47:6c:38:1b:dd:1b:45:b4:73:35:6b:db:91:b2:13: 4b:5f:8d:91:d1:29:4e:07:4e:fb:42:b6:6d:99:91: ff:31:34:95:45:7b:1d:0f:3c:70:67:5c:84:be:db: 70:20:9d:0b:fc:6c:55:c5:66:c1:44:46:8a:70:ce: 1e:82:37:ac:5d:d3:b6:8a:b7:ee:36:6f:d9:72:22: bf:b3:cf:10:f8:18:f6:7f:b0:18:44:ea:5d:c9:ff: 64:43:ce:b9:f3:2f:42:cf:7e:72:59:4a:23:57:39: 1d:9b:ff:ec:f8:89:16:2c:6b:6e:f7:e0:77:54:e9: 26:53:d3:1f:05:4b:a6:ea:f9:c6:cf:7e:6b:af:0f: cc:20:fa:80:56:23:c0:08:f4:85:32:7d:31:9d:7e: 49:e8:91:58:a2:99:5a:a3:be:c8:fd:56:7b:ce:83: 94:7b:ce:69:05:e2:57:94:b1:a1:79:c4:ed:de:95: 80:0d:6a:dc:6d:64:ce:f0:c1:bd:78:2f:3e:42:d3: ab:f5:fb:e4:8d:c8:3d:f2:37:60:c9:29:f3:4a:f5: 88:d2:98:29:d4:45:fb:cb:c7:2d:d3:ec:4f:38:9b: c1:8a:2c:10:92:a5:75:25:cd:ff:cf:62:30:56:c9: 12:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2E:46:82:AD:B2:40:83:D7:15:95:A0:CC:57:82:A2:30:11:43:6E X509v3 Authority Key Identifier: keyid:B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:47:56:94:03:26:74:bf:d9:73:3f:1b:cc:71:4b:8c:bb:c3: db:d0:49:52:15:6b:e3:c3:fd:75:83:5a:24:df:2a:c0:31:6e: ab:5a:aa:5d:07:97:66:f3:54:fb:77:db:c8:d5:41:c2:6c:ab: de:0e:4c:d7:49:05:91:ed:68:93:ec:59:f3:eb:bc:9c:80:eb: 65:5f:88:24:5b:24:d2:a8:53:1e:ea:b3:45:ba:91:e8:c4:bf: 20:75:1d:1e:d6:82:d1:eb:53:9b:fc:5f:6f:00:1c:a5:78:44: 8e:b8:00:9e:da:9c:98:27:24:8d:16:95:d3:a3:99:96:02:82: 6c:63:1a:bf:99:87:dc:1a:b9:72:50:e2:22:99:85:fe:57:a4: 89:03:ee:58:c9:99:06:e8:88:09:6f:a0:ba:fb:16:dd:cd:14: 17:10:8d:1d:ce:cd:d2:8f:cc:b8:74:4f:f1:6e:0a:ec:b1:fc: 2b:04:f8:4d:28:d8:cf:46:68:f3:e9:34:49:b7:c0:16:88:04: f0:b0:c4:dd:4d:b6:f2:52:eb:4c:0d:b3:5f:92:a3:75:a7:84: 0d:24:d8:1b:55:51:03:9b:33:ee:db:4d:a4:d1:9e:03:36:88: 67:20:04:56:a6:cb:ef:30:b0:fc:5d:0f:9d:d5:50:30:00:ad: 52:bc:49:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThCMzIxMTAvBgNVBAUTKEI2MTEwM0E1QzlDQzYwRUFEMTg4QTJGOUZEMTFFNjNE NTIzM0Q5OTUwHhcNMjYwMzAxMDEwNzU1WhcNMjYwMzA4MDEwNzU1WjAYMRYwFAYD VQQDDA02OWEzOTE2Yy00OGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Vd+9ivceFjCme4vnntHbDgb3RtFtHM1a9uRshNLX42R0SlOB077QrZtmZH/ MTSVRXsdDzxwZ1yEvttwIJ0L/GxVxWbBREaKcM4egjesXdO2irfuNm/ZciK/s88Q +Bj2f7AYROpdyf9kQ8658y9Cz35yWUojVzkdm//s+IkWLGtu9+B3VOkmU9MfBUum 6vnGz35rrw/MIPqAViPACPSFMn0xnX5J6JFYoplao77I/VZ7zoOUe85pBeJXlLGh ecTt3pWADWrcbWTO8MG9eC8+QtOr9fvkjcg98jdgySnzSvWI0pgp1EX7y8ct0+xP OJvBiiwQkqV1Jc3/z2IwVskS3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBMuRoKt skCD1xWVoMxXgqIwEUNuMB8GA1UdIwQYMBaAFLYRA6XJzGDq0Yii+f0R5j1SM9mV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEIzMi9GRjc3MUJCQzlE MjUxMUVDODVGREYzNkVDNEY5QUUwMi90aEVEcGNuTVlPclJpS0w1X1JIbVBWSXoy WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RoRURwY25NWU9yUmlLTDVfUkhtUFZJejJaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEIzMi9GRjc3MUJCQzlEMjUxMUVDODVGREYzNkVDNEY5QUUwMi90aEVEcGNuTVlP clJpS0w1X1JIbVBWSXoyWlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmEdWlAMmdL/Zcz8bzHFLjLvD29BJUhVr48P9dYNaJN8qwDFuq1qqXQeXZvNU +3fbyNVBwmyr3g5M10kFke1ok+xZ8+u8nIDrZV+IJFsk0qhTHuqzRbqR6MS/IHUd HtaC0etTm/xfbwAcpXhEjrgAntqcmCckjRaV06OZlgKCbGMav5mH3Bq5clDiIpmF /lekiQPuWMmZBuiICW+guvsW3c0UFxCNHc7N0o/MuHRP8W4K7LH8KwT4TSjYz0Zo 8+k0SbfAFogE8LDE3U228lLrTA2zX5KjdaeEDSTYG1VRA5sz7ttNpNGeAzaIZyAE VqbL7zCw/F0PndVQMACtUrxJSQ== -----END CERTIFICATE-----Generated at Sun Mar 1 20:14:16 2026 by rpki-client