$ rpki-client -vvf rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft File: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft (raw, json) Hash identifier: z8Vd84pxLDOVoJPkMBznKNt/Pwt7cI20PT/Y7mtx+ic= Subject key identifier: 83:0F:F9:1F:10:11:46:E9:B5:59:65:C9:89:AA:C0:DB:19:AA:7E:79 Authority key identifier: 04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6 Certificate issuer: /CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6 Certificate serial: 0226 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft Manifest number: 021A Signing time: Mon 02 Mar 2026 02:39:15 +0000 Manifest this update: Mon 02 Mar 2026 02:39:13 +0000 Manifest next update: Mon 09 Mar 2026 02:39:13 +0000 Files and hashes: 1: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl (hash: tbFwaGQbjT5g3LQkUaSbExH+ZOYm3IDiLPDOS2h2wd8=) 2: F607A6C8DF8C11ED9EAE5884C4F9AE02.roa (hash: /jnNf6yhC1u/KapU+QnPIqPvCzJZYcUOSV+8kDzVszA=) 3: F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa (hash: yifIUTqbn7Wd/uULyvr6BJeOjGF176Fhn2BVhJf8YA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126B7C, serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6 Validity Not Before: Mar 2 02:39:13 2026 GMT Not After : Mar 9 02:39:13 2026 GMT Subject: CN=69a4f853-aaef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:51:b4:2d:0f:09:25:58:66:4d:5f:78:41:c4: 1e:7a:c9:55:00:c8:35:0f:64:02:fd:91:eb:20:5c: c6:15:8f:ca:bf:9f:c1:39:c0:0c:c6:1f:fb:6e:eb: 01:92:18:b6:91:55:56:13:50:fa:6d:ad:59:1c:56: 49:1a:f4:5b:43:0a:94:e5:9d:66:fe:42:3b:94:5b: 3d:57:50:1f:6e:4e:df:6f:5a:bf:00:2c:d0:15:a6: 04:b1:b6:47:5f:90:9a:04:b2:c3:f9:8d:0c:cf:1d: 92:38:0a:74:c0:32:3a:fe:c2:36:3a:af:d5:d0:c9: ec:c5:5b:d1:75:d2:33:47:c0:8a:ec:8f:c7:d2:2a: cc:95:c5:67:c4:8b:c4:b1:ab:fe:a9:e1:b6:da:9e: dd:7c:67:f1:6b:44:b1:91:b8:b9:92:22:7f:a6:55: 30:eb:65:8f:f1:ce:cd:78:75:e2:c1:6c:34:22:55: 6b:ea:93:2b:a1:42:31:18:6e:37:2f:24:27:03:ea: ad:a4:db:c1:de:da:33:74:64:88:5f:59:2c:f7:9c: 8c:06:0c:5d:2e:43:90:73:e2:8b:09:5c:5f:3f:ff: 85:c0:e6:02:1d:92:03:e5:c2:dc:c3:72:6c:cc:df: 11:af:0e:19:f7:ec:82:81:04:d7:d7:7d:1d:86:e3: 0a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0F:F9:1F:10:11:46:E9:B5:59:65:C9:89:AA:C0:DB:19:AA:7E:79 X509v3 Authority Key Identifier: keyid:04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:1b:e2:70:15:d0:ed:3c:a6:43:78:15:b8:db:f3:90:8d:65: 15:cb:85:72:2e:ce:02:df:ab:81:21:83:b5:c6:1d:32:d4:e5: fe:99:ec:d8:05:77:d1:69:5f:5f:b7:9a:98:ec:1f:cc:06:e9: 20:97:fd:1b:fb:70:31:70:2a:df:64:b1:dc:bd:83:2f:d2:0f: 94:19:be:33:0f:5b:7f:d8:d3:5a:3a:3c:ec:ef:18:fe:41:9f: ed:82:b8:72:9d:d7:37:c9:ae:c5:80:e2:31:b3:89:e3:17:49: aa:6d:a6:4d:3f:2b:6f:5b:19:c3:0d:6f:21:1f:18:a8:29:9e: 4d:24:84:59:56:fa:fb:7f:21:c3:9c:8d:0d:8c:3e:c3:14:11: ab:d8:31:9e:60:5a:13:50:8b:59:88:3e:0f:93:7c:56:ef:c7: a6:b5:17:d4:2f:90:97:9a:65:03:87:65:c8:25:46:14:41:e0: ea:84:d1:32:ca:9d:d8:58:19:fd:54:a6:f8:2a:96:01:ae:e5: c8:82:10:d2:3a:f6:aa:87:d9:24:7a:9b:3e:91:3e:36:83:d5: 21:98:b1:cb:6b:13:4a:07:d0:f9:ec:b1:96:13:0d:b9:26:47: e2:17:c0:30:36:68:ec:83:a5:3f:ef:a2:64:fd:37:ce:b7:6d: 22:54:57:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZCN0MxMTAvBgNVBAUTKDA0RjA3NEEwQkE4NzgwNUM1MEZDNzk5M0Q0MDQxMEI4 NEExMUQyRjYwHhcNMjYwMzAyMDIzOTEzWhcNMjYwMzA5MDIzOTEzWjAYMRYwFAYD VQQDEw02OWE0Zjg1My1hYWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6VG0LQ8JJVhmTV94QcQeeslVAMg1D2QC/ZHrIFzGFY/Kv5/BOcAMxh/7busB khi2kVVWE1D6ba1ZHFZJGvRbQwqU5Z1m/kI7lFs9V1Afbk7fb1q/ACzQFaYEsbZH X5CaBLLD+Y0Mzx2SOAp0wDI6/sI2Oq/V0MnsxVvRddIzR8CK7I/H0irMlcVnxIvE sav+qeG22p7dfGfxa0Sxkbi5kiJ/plUw62WP8c7NeHXiwWw0IlVr6pMroUIxGG43 LyQnA+qtpNvB3tozdGSIX1ks95yMBgxdLkOQc+KLCVxfP/+FwOYCHZID5cLcw3Js zN8Rrw4Z9+yCgQTX130dhuMKjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIMP+R8Q EUbptVllyYmqwNsZqn55MB8GA1UdIwQYMBaAFATwdKC6h4BcUPx5k9QEELhKEdL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkI3Qy81MUE5NDQ1QURG ODgxMUVEQUZCRjJCN0ZDNEY5QUUwMi9CUEIwb0xxSGdGeFFfSG1UMUFRUXVFb1Iw dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JQQjBvTHFIZ0Z4UV9IbVQxQVFRdUVvUjB2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkI3Qy81MUE5NDQ1QURGODgxMUVEQUZCRjJCN0ZDNEY5QUUwMi9CUEIwb0xxSGdG eFFfSG1UMUFRUXVFb1IwdlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAShvicBXQ7TymQ3gVuNvzkI1lFcuFci7OAt+rgSGDtcYdMtTl/pns2AV30Wlf X7eamOwfzAbpIJf9G/twMXAq32Sx3L2DL9IPlBm+Mw9bf9jTWjo87O8Y/kGf7YK4 cp3XN8muxYDiMbOJ4xdJqm2mTT8rb1sZww1vIR8YqCmeTSSEWVb6+38hw5yNDYw+ wxQRq9gxnmBaE1CLWYg+D5N8Vu/HprUX1C+Ql5plA4dlyCVGFEHg6oTRMsqd2FgZ /VSm+CqWAa7lyIIQ0jr2qofZJHqbPpE+NoPVIZixy2sTSgfQ+eyxlhMNuSZH4hfA MDZo7IOlP++iZP03zrdtIlRXNQ== -----END CERTIFICATE-----Generated at Mon Mar 2 06:33:08 2026 by rpki-client