$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft File: 2m6UHNv-AaruCRs_lVldbUAYMW0.mft (raw, json) Hash identifier: sLXBFgGw2UvwNkCAuiN73StyHdER1QVK3AUkeNSgsyc= Subject key identifier: 32:B5:DF:65:B7:29:48:03:C2:67:CC:5B:FD:2F:C2:EC:D9:39:0B:88 Authority key identifier: DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D Certificate issuer: /CN=A9122EBD/serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D Certificate serial: 066C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft Manifest number: 0660 Signing time: Mon 02 Mar 2026 02:23:11 +0000 Manifest this update: Mon 02 Mar 2026 02:23:08 +0000 Manifest next update: Mon 09 Mar 2026 02:23:08 +0000 Files and hashes: 1: 2m6UHNv-AaruCRs_lVldbUAYMW0.crl (hash: Uoq7jdhbtplMwAWATpiajoJ/4/yqFiOZf6PTWMTkmYo=) 2: 1576F19ABC5C11EB831EC25AC4F9AE02.roa (hash: /3x4vYPiXoG8rAiPY7APpgt+Ap9Ktaa/xQN8yrKkbXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1644 (0x66c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122EBD, serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D Validity Not Before: Mar 2 02:23:08 2026 GMT Not After : Mar 9 02:23:08 2026 GMT Subject: CN=69a4f48e-24d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f0:2d:d6:48:32:44:63:f1:bd:df:9d:21:80: 81:c9:bb:e1:7a:af:0e:52:1e:c5:44:dd:98:a4:3e: b6:26:47:29:e1:e8:1e:b9:ae:1b:cc:ff:28:c7:4f: 4f:e0:ab:5d:18:cf:a1:a0:07:90:cf:fe:59:31:c8: e5:cd:ed:07:81:ba:7e:d5:5d:bf:c1:2e:08:aa:f5: c1:62:da:50:42:a3:d3:fe:6f:00:a9:dc:c8:66:a5: c5:8e:44:1f:93:95:39:27:6b:16:4f:80:31:8a:e7: 6b:f9:d8:16:ce:5f:04:62:df:13:6a:44:67:0b:4d: 48:a1:98:08:51:a8:13:98:a4:c5:f3:6f:78:b2:6f: 4f:e6:67:59:17:ed:b6:c0:12:9f:34:92:f1:f0:3b: 3f:8a:3c:cb:99:bf:39:01:28:8b:cc:2f:ba:07:0e: 9b:be:99:bc:e2:c9:99:97:4a:cc:5c:e1:e4:b3:67: 71:ea:ac:7d:0c:81:7a:ac:d1:89:08:0a:93:c6:f9: c5:26:76:01:6e:63:95:60:d7:dc:7c:ef:22:51:1f: 6e:1c:ff:6e:a6:79:38:ad:0b:63:b9:43:3a:e0:ea: 07:28:55:90:62:6b:ba:57:fa:a0:ab:97:4c:6d:a2: 12:34:0d:59:57:a3:b0:60:94:d8:cb:16:42:f0:3d: 9f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B5:DF:65:B7:29:48:03:C2:67:CC:5B:FD:2F:C2:EC:D9:39:0B:88 X509v3 Authority Key Identifier: keyid:DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:f6:44:02:0c:67:a6:e6:32:f8:fa:44:0a:76:c2:61:54:82: 3f:0a:71:53:6a:c2:c6:72:f8:55:37:77:6c:06:d5:68:29:d5: 87:0e:d7:e2:c5:6b:39:2d:0b:d9:72:39:43:1c:a2:99:30:3b: fd:6e:6b:7b:d6:55:f1:70:15:a7:50:8f:94:a1:64:89:ba:20: 7c:c1:bc:fc:e7:eb:99:90:ff:20:58:90:70:4d:b7:c1:20:36: 00:12:ab:e6:9b:b5:88:e1:91:77:25:61:29:0d:53:fa:a3:73: 31:65:aa:e5:33:29:3b:2e:cc:5a:67:c2:66:d7:12:d5:6b:73: 90:37:35:82:63:cd:70:ba:24:88:cd:85:43:6c:f0:a4:56:40: 0e:b5:9b:92:d3:8e:68:0e:b7:92:59:9a:c6:d0:b6:6f:70:69: 7d:3a:ca:21:22:52:eb:1e:c1:1f:22:ee:0d:9b:be:aa:e3:2c: 28:a3:d0:28:1e:05:c5:66:2d:c9:a5:b6:e8:2e:9f:1e:31:3e: 49:6a:d3:96:0b:17:08:54:47:e5:a5:6d:d7:d1:46:62:24:d0: 27:c7:de:37:64:fe:bd:1f:ea:84:81:d5:d8:54:f2:e5:15:06: 3c:eb:86:c7:13:38:ad:99:12:8c:16:a8:7b:83:20:22:8e:4d: e9:ff:a1:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFQkQxMTAvBgNVBAUTKERBNkU5NDFDREJGRTAxQUFFRTA5MUIzRjk1NTk1RDZE NDAxODMxNkQwHhcNMjYwMzAyMDIyMzA4WhcNMjYwMzA5MDIyMzA4WjAYMRYwFAYD VQQDEw02OWE0ZjQ4ZS0yNGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPAt1kgyRGPxvd+dIYCBybvheq8OUh7FRN2YpD62Jkcp4egeua4bzP8ox09P 4KtdGM+hoAeQz/5ZMcjlze0Hgbp+1V2/wS4IqvXBYtpQQqPT/m8AqdzIZqXFjkQf k5U5J2sWT4Axiudr+dgWzl8EYt8TakRnC01IoZgIUagTmKTF8294sm9P5mdZF+22 wBKfNJLx8Ds/ijzLmb85ASiLzC+6Bw6bvpm84smZl0rMXOHks2dx6qx9DIF6rNGJ CAqTxvnFJnYBbmOVYNfcfO8iUR9uHP9upnk4rQtjuUM64OoHKFWQYmu6V/qgq5dM baISNA1ZV6OwYJTYyxZC8D2fPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDK132W3 KUgDwmfMW/0vwuzZOQuIMB8GA1UdIwQYMBaAFNpulBzb/gGq7gkbP5VZXW1AGDFt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkVCRC8zMTIwMDY1RUJD NUExMUVCOEUxRDkyNThDNEY5QUUwMi8ybTZVSE52LUFhcnVDUnNfbFZsZGJVQVlN VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtNlVITnYtQWFydUNSc19sVmxkYlVBWU1XMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkVCRC8zMTIwMDY1RUJDNUExMUVCOEUxRDkyNThDNEY5QUUwMi8ybTZVSE52LUFh cnVDUnNfbFZsZGJVQVlNVzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAafZEAgxnpuYy+PpECnbCYVSCPwpxU2rCxnL4VTd3bAbVaCnVhw7X4sVrOS0L 2XI5QxyimTA7/W5re9ZV8XAVp1CPlKFkibogfMG8/OfrmZD/IFiQcE23wSA2ABKr 5pu1iOGRdyVhKQ1T+qNzMWWq5TMpOy7MWmfCZtcS1WtzkDc1gmPNcLokiM2FQ2zw pFZADrWbktOOaA63klmaxtC2b3BpfTrKISJS6x7BHyLuDZu+quMsKKPQKB4FxWYt yaW26C6fHjE+SWrTlgsXCFRH5aVt19FGYiTQJ8feN2T+vR/qhIHV2FTy5RUGPOuG xxM4rZkSjBaoe4MgIo5N6f+hGA== -----END CERTIFICATE-----Generated at Mon Mar 2 15:54:32 2026 by rpki-client