$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft File: _pmKu7E0uTwc5_hOi5--HdqbZKk.mft (raw, json) Hash identifier: wjMF8eYX6MHsLqwO3OeGVPB6V6yI0oh9fnpYE5d8/Sw= Subject key identifier: 16:F7:E5:79:7B:8A:C4:25:6A:8C:5A:D5:41:DB:D4:31:16:D7:7B:A5 Authority key identifier: FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9 Certificate issuer: /CN=A911ABA2/serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft Manifest number: 26 Signing time: Mon 02 Mar 2026 01:33:38 +0000 Manifest this update: Mon 02 Mar 2026 01:33:37 +0000 Manifest next update: Mon 09 Mar 2026 01:33:37 +0000 Files and hashes: 1: _pmKu7E0uTwc5_hOi5--HdqbZKk.crl (hash: k7/IOABUfYLZp0iFUjjQa2DtO5K0Qrh5j5+DfN1TJiA=) 2: 3A5DE11AE17511F084EED35B3E6F56BC.roa (hash: l3RVikFLeca+HYpW+WRcSqgwKP5/7iXrHIxKACBAWyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:33:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABA2, serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9 Validity Not Before: Mar 2 01:33:37 2026 GMT Not After : Mar 9 01:33:37 2026 GMT Subject: CN=69a4e8f2-dc06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:71:8f:80:fb:18:9c:f7:4c:a5:65:6a:5b:b1: d8:d4:8e:04:4a:5a:bd:23:65:9f:4d:d4:fa:58:ea: 81:cc:24:30:ed:61:7e:c3:7c:b9:c8:51:bc:2a:d1: 32:a4:d2:3a:43:ef:b4:54:1b:26:41:b2:c9:dc:b0: c5:ca:9b:40:f6:22:1e:8c:7d:b2:d1:dd:56:75:33: 11:0e:91:66:07:5f:28:5d:ce:63:23:f5:36:ad:f3: 16:e5:1f:d1:8e:7b:8c:0b:df:29:4c:d4:44:0d:61: f2:fa:22:e5:4c:78:4e:de:d4:61:39:c8:e3:6c:cc: c6:61:cb:ca:12:e9:6c:d6:ab:5c:d5:b5:5a:51:cb: a1:05:9e:a0:de:b1:ca:1f:ea:df:ec:43:97:cd:e1: b2:2a:23:cc:5d:c5:0b:13:7f:19:67:1f:5d:e2:7c: 78:e1:95:89:91:da:14:f4:d3:b5:12:a4:bd:6a:cf: 69:7f:3d:32:a3:ae:54:bd:3b:c1:c1:ee:aa:ea:98: d7:87:6f:bd:b6:50:a3:56:3f:f5:81:5c:bf:e9:46: d7:9a:e9:3c:1a:f8:81:01:90:ac:ed:26:bb:10:49: 33:ef:07:ff:97:ba:84:dc:8c:04:8c:37:ac:30:25: 58:29:54:d4:d0:4b:7f:97:99:6d:a4:6c:2c:c4:84: 70:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F7:E5:79:7B:8A:C4:25:6A:8C:5A:D5:41:DB:D4:31:16:D7:7B:A5 X509v3 Authority Key Identifier: keyid:FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:98:d5:94:66:2d:23:b1:aa:ee:94:73:45:fb:8c:d7:c1:fb: 3b:a8:1a:2b:dd:64:7f:ab:d8:17:04:49:5c:c2:b4:00:5d:80: ae:46:7a:5c:f7:fe:09:89:02:bd:5b:04:3e:a2:d2:e6:af:7b: 37:21:9f:76:5e:3f:f9:74:4d:1f:d6:a4:91:be:8a:af:74:6e: 02:d2:cf:a1:52:14:50:14:45:a5:42:c9:8a:3b:b5:e2:aa:27: 97:cd:be:39:ad:7f:f7:b8:d4:56:f9:ff:09:35:64:2c:90:3a: 17:fa:1a:95:b9:7d:2c:06:b6:d4:30:0e:26:e6:dc:5d:f5:39: cd:06:b6:51:37:1d:61:65:2e:da:1b:22:eb:c4:a4:51:26:1b: 08:88:49:ae:0c:da:76:3d:60:cb:6b:1a:eb:43:8e:a5:b0:39: d8:74:95:47:d0:e7:0a:32:47:6a:e2:98:ef:87:4f:f6:c6:17: 9f:d8:3f:11:18:4c:4f:f0:f2:20:9b:6f:24:2b:36:b1:1b:40: 85:e3:3c:21:df:c7:83:34:c5:4a:42:64:52:30:b4:2b:f5:7a: 23:9f:d8:26:f2:65:e9:f5:b8:04:07:7c:c9:d3:1e:b7:c3:d9: 6c:c2:8b:3a:7d:2b:18:c7:0a:bc:85:7f:98:ce:5d:26:3f:32: 24:ce:54:3c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QUJBMjExMC8GA1UEBRMoRkU5OThBQkJCMTM0QjkzQzFDRTdGODRFOEI5RkJFMURE QTlCNjRBOTAeFw0yNjAzMDIwMTMzMzdaFw0yNjAzMDkwMTMzMzdaMBgxFjAUBgNV BAMTDTY5YTRlOGYyLWRjMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDcY+A+xic90ylZWpbsdjUjgRKWr0jZZ9N1PpY6oHMJDDtYX7DfLnIUbwq0TKk 0jpD77RUGyZBssncsMXKm0D2Ih6MfbLR3VZ1MxEOkWYHXyhdzmMj9Tat8xblH9GO e4wL3ylM1EQNYfL6IuVMeE7e1GE5yONszMZhy8oS6WzWq1zVtVpRy6EFnqDescof 6t/sQ5fN4bIqI8xdxQsTfxlnH13ifHjhlYmR2hT007USpL1qz2l/PTKjrlS9O8HB 7qrqmNeHb722UKNWP/WBXL/pRtea6Twa+IEBkKztJrsQSTPvB/+XuoTcjASMN6ww JVgpVNTQS3+XmW2kbCzEhHBLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFvfleXuK xCVqjFrVQdvUMRbXe6UwHwYDVR0jBBgwFoAU/pmKu7E0uTwc5/hOi5++HdqbZKkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBQkEyL0I0NDM2MEM4RTE3 NDExRjBBNTQxRDAyRDNFNkY1NkJDL19wbUt1N0UwdVR3YzVfaE9pNS0tSGRxYlpL ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3BtS3U3RTB1VHdjNV9oT2k1LS1IZHFiWktrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB QkEyL0I0NDM2MEM4RTE3NDExRjBBNTQxRDAyRDNFNkY1NkJDL19wbUt1N0UwdVR3 YzVfaE9pNS0tSGRxYlpLay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBAmNWUZi0jsarulHNF+4zXwfs7qBor3WR/q9gXBElcwrQAXYCuRnpc9/4JiQK9 WwQ+otLmr3s3IZ92Xj/5dE0f1qSRvoqvdG4C0s+hUhRQFEWlQsmKO7XiqieXzb45 rX/3uNRW+f8JNWQskDoX+hqVuX0sBrbUMA4m5txd9TnNBrZRNx1hZS7aGyLrxKRR JhsIiEmuDNp2PWDLaxrrQ46lsDnYdJVH0OcKMkdq4pjvh0/2xhef2D8RGExP8PIg m28kKzaxG0CF4zwh38eDNMVKQmRSMLQr9Xojn9gm8mXp9bgEB3zJ0x63w9lswos6 fSsYxwq8hX+Yzl0mPzIkzlQ8 -----END CERTIFICATE-----Generated at Mon Mar 2 03:57:14 2026 by rpki-client