$ rpki-client -vvf rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft File: 2CIvXKRzliJE_BNBFXEOvtXjlWA.mft (raw, json) Hash identifier: TqxOXOwECbnReCpHLk7/oRq7iwQzQtDwDL6ZB85aEwE= Subject key identifier: FA:0F:B4:00:0A:AB:E0:F8:BF:C2:83:A1:FA:FB:C9:36:E7:5E:10:D2 Authority key identifier: D8:22:2F:5C:A4:73:96:22:44:FC:13:41:15:71:0E:BE:D5:E3:95:60 Certificate issuer: /CN=A9119624/serialNumber=D8222F5CA473962244FC134115710EBED5E39560 Certificate serial: 0C9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft Manifest number: 0C95 Signing time: Sun 01 Mar 2026 23:28:05 +0000 Manifest this update: Sun 01 Mar 2026 23:28:03 +0000 Manifest next update: Sun 08 Mar 2026 23:28:03 +0000 Files and hashes: 1: 2CIvXKRzliJE_BNBFXEOvtXjlWA.crl (hash: wjgXt2muK1kQ9UdJkVXFyWytJF4e7TfuWIWWjn+4w9E=) 2: A4049C06213E11EAAA89A95DC4F9AE02.roa (hash: UbwOi9U9kZof7b43F/HRMpxGF4fX5ioRAi/qvaW/Bgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.crl rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3230 (0xc9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119624, serialNumber=D8222F5CA473962244FC134115710EBED5E39560 Validity Not Before: Mar 1 23:28:03 2026 GMT Not After : Mar 8 23:28:03 2026 GMT Subject: CN=69a4cb84-eed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4c:bf:70:ff:b5:84:8a:da:c1:89:c0:cf:4a: 92:06:ff:c6:13:c3:67:0d:f7:af:08:82:a2:23:4d: 79:2e:b6:d6:c2:4a:4c:63:6e:60:f9:b0:4d:87:9b: ea:f0:ca:71:7b:6a:2d:8e:c9:c5:8e:1a:53:14:ff: 6c:e7:3c:ed:4c:a5:52:5b:8c:22:27:f3:13:26:49: 2c:45:b9:f0:a2:77:fd:b7:b0:25:09:67:9e:93:5a: df:39:57:d4:5f:a8:fa:b3:ae:a0:29:12:26:27:ff: 88:00:59:7b:79:c1:be:8b:b4:dd:9f:e8:c7:69:4e: d7:67:0e:c0:e1:49:15:5b:ad:e5:c5:c5:1f:ed:48: 76:c9:94:d6:82:d5:2b:0d:55:8c:85:9d:14:d8:aa: 48:da:c4:d0:9e:a4:ff:ea:c9:d8:cf:1b:0b:86:ba: e7:cb:f7:e1:f3:8a:0f:bd:19:80:25:a5:66:33:cc: d5:75:76:74:de:81:38:27:e2:2e:02:e6:c5:a2:21: 38:a8:68:e5:0d:f8:a4:45:37:14:8e:d1:2c:33:c4: cd:ee:bb:a8:77:2a:22:94:dd:00:10:8b:0a:8e:da: db:f2:77:57:de:7c:46:15:64:c7:d2:27:c5:66:a5: 06:b5:28:49:76:97:9b:37:62:b4:4b:6e:1f:63:09: fc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0F:B4:00:0A:AB:E0:F8:BF:C2:83:A1:FA:FB:C9:36:E7:5E:10:D2 X509v3 Authority Key Identifier: keyid:D8:22:2F:5C:A4:73:96:22:44:FC:13:41:15:71:0E:BE:D5:E3:95:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:8c:bc:6a:d1:20:cd:8d:58:14:96:fb:50:26:69:85:29:f0: 4a:bb:36:2a:75:c5:1a:13:f2:8b:24:d5:9c:3f:cc:35:43:f0: 61:5b:d1:52:d2:0f:3b:f8:e1:ab:4a:47:4d:20:26:24:78:d6: 8d:7a:6f:c5:93:66:62:69:ca:3d:88:57:f0:19:68:74:5b:8a: 1a:de:8d:5c:99:65:0a:a0:6c:e7:30:dd:9a:f7:45:bb:f7:9d: e7:08:90:4d:e9:11:c0:db:bf:59:66:fe:68:d2:50:69:2c:82: 14:f1:22:26:ad:05:22:3b:ba:31:05:22:5c:45:b4:c4:38:bc: ab:b3:78:35:c6:86:9e:f3:34:2e:ba:fa:a8:b1:59:bd:3c:ca: a1:c6:49:96:2e:de:12:7b:c7:66:6c:76:fb:77:ce:b9:3f:62: ed:ed:fd:1b:44:60:a8:ac:a5:88:61:44:d7:c0:0d:3b:e7:49: 26:e6:09:9d:4d:3d:ea:27:af:2a:0f:43:69:f8:15:a2:29:9b: 42:f5:25:be:0b:22:1d:02:54:a9:d8:2d:f5:c5:a2:39:2b:d0: b0:72:91:90:9f:60:65:6c:a2:12:dc:d2:2f:ae:7b:7b:4d:c8: 72:72:d2:86:68:61:cf:a0:cc:6c:96:a4:43:39:4d:f2:ed:67: b8:39:ef:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2MjQxMTAvBgNVBAUTKEQ4MjIyRjVDQTQ3Mzk2MjI0NEZDMTM0MTE1NzEwRUJF RDVFMzk1NjAwHhcNMjYwMzAxMjMyODAzWhcNMjYwMzA4MjMyODAzWjAYMRYwFAYD VQQDEw02OWE0Y2I4NC1lZWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0y/cP+1hIrawYnAz0qSBv/GE8NnDfevCIKiI015LrbWwkpMY25g+bBNh5vq 8Mpxe2otjsnFjhpTFP9s5zztTKVSW4wiJ/MTJkksRbnwonf9t7AlCWeek1rfOVfU X6j6s66gKRImJ/+IAFl7ecG+i7Tdn+jHaU7XZw7A4UkVW63lxcUf7Uh2yZTWgtUr DVWMhZ0U2KpI2sTQnqT/6snYzxsLhrrny/fh84oPvRmAJaVmM8zVdXZ03oE4J+Iu AubFoiE4qGjlDfikRTcUjtEsM8TN7ruodyoilN0AEIsKjtrb8ndX3nxGFWTH0ifF ZqUGtShJdpebN2K0S24fYwn8dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPoPtAAK q+D4v8KDofr7yTbnXhDSMB8GA1UdIwQYMBaAFNgiL1ykc5YiRPwTQRVxDr7V45Vg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTYyNC9DNjk0ODIzNjEw RTAxMUVBOUJEMUE1NURDNEY5QUUwMi8yQ0l2WEtSemxpSkVfQk5CRlhFT3Z0WGps V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJDSXZYS1J6bGlKRV9CTkJGWEVPdnRYamxXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTYyNC9DNjk0ODIzNjEwRTAxMUVBOUJEMUE1NURDNEY5QUUwMi8yQ0l2WEtSemxp SkVfQk5CRlhFT3Z0WGpsV0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnIy8atEgzY1YFJb7UCZphSnwSrs2KnXFGhPyiyTVnD/MNUPwYVvRUtIPO/jh q0pHTSAmJHjWjXpvxZNmYmnKPYhX8BlodFuKGt6NXJllCqBs5zDdmvdFu/ed5wiQ TekRwNu/WWb+aNJQaSyCFPEiJq0FIju6MQUiXEW0xDi8q7N4NcaGnvM0Lrr6qLFZ vTzKocZJli7eEnvHZmx2+3fOuT9i7e39G0RgqKyliGFE18ANO+dJJuYJnU096iev Kg9DafgVoimbQvUlvgsiHQJUqdgt9cWiOSvQsHKRkJ9gZWyiEtzSL657e03IcnLS hmhhz6DMbJakQzlN8u1nuDnvFg== -----END CERTIFICATE-----Generated at Mon Mar 2 14:43:45 2026 by rpki-client