$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft File: 0omLrZJnkc4JM8CSed-XmNfetpQ.mft (raw, json) Hash identifier: pkhctlXhQrjzRyeqv5E09XrYZRgVhCffSONKTjNZ0jw= Subject key identifier: A3:99:92:C3:04:02:4C:C2:DA:41:A1:FA:AA:8D:17:71:68:63:EC:4E Authority key identifier: D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 Certificate issuer: /CN=A912AC83/serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft Manifest number: DC Signing time: Mon 02 Mar 2026 02:55:14 +0000 Manifest this update: Mon 02 Mar 2026 02:55:12 +0000 Manifest next update: Mon 09 Mar 2026 02:55:12 +0000 Files and hashes: 1: 0omLrZJnkc4JM8CSed-XmNfetpQ.crl (hash: W/Kyke5TbS2gQd4Ds0qR8UjiuEV1eQG00GH5dhQ3O74=) 2: CEE70E84DDFB11EFB680E25BC4F9AE02.roa (hash: rHIJptD9OEcS2wFahG2dabzboPNIBNreWWEAZT1c52s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC83, serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Validity Not Before: Mar 2 02:55:12 2026 GMT Not After : Mar 9 02:55:12 2026 GMT Subject: CN=69a4fc12-5f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:01:d0:b1:61:c0:77:04:65:ff:bc:70:34:67: 9a:08:79:f6:59:30:d0:79:b3:96:a3:3e:fa:33:c5: 91:e2:b2:97:be:53:e6:67:8c:96:7f:39:e3:39:96: 3f:86:4c:3c:11:3f:6e:36:f4:98:05:ea:73:a9:89: 06:01:3d:44:77:1e:46:0d:6d:31:10:4d:9d:49:00: 61:5d:f0:0f:7a:02:e4:55:99:76:d5:fe:2c:be:f2: 17:9d:9e:6d:61:9f:46:1d:1f:8a:45:7a:6c:7c:48: 3e:83:17:4d:5b:a8:4e:77:f0:6b:75:b8:6a:1c:82: 70:63:ab:b8:38:b2:3c:7e:d5:49:eb:35:11:c5:5f: 86:de:60:21:16:d0:2b:fa:54:27:2a:82:7d:49:74: 90:8c:fa:7c:3f:a8:56:cb:74:04:a3:37:b7:e5:52: e7:c5:86:3d:55:6f:4f:b3:99:f1:45:fb:c8:b0:8b: 8b:2d:fd:c5:78:6d:96:54:4e:d2:7c:df:1e:19:a7: 1c:ab:1a:c1:2a:fa:eb:83:51:4d:78:82:c8:59:a5: 34:68:eb:6d:20:e9:f2:95:24:8f:76:50:21:79:be: ff:74:56:0e:fd:f3:66:45:15:1d:f0:94:02:97:1d: e3:16:8a:c4:a7:31:50:83:d5:0e:1d:93:b1:79:1a: 30:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:99:92:C3:04:02:4C:C2:DA:41:A1:FA:AA:8D:17:71:68:63:EC:4E X509v3 Authority Key Identifier: keyid:D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:87:6e:08:85:42:22:76:50:3f:ca:6d:82:f5:94:33:c0:09: 91:60:06:45:35:fc:84:30:7d:ac:81:12:66:bb:68:a3:b7:c4: 14:22:7f:9c:f0:6f:f2:87:40:c1:f0:4b:b1:79:5b:f8:c2:0f: 0c:ae:ad:10:41:ba:26:9f:3d:96:5e:db:a6:3f:43:e5:ad:e8: 5f:b2:d1:f8:da:d3:33:2e:9c:2c:7d:d2:18:73:a3:f5:0a:91: 69:20:fc:96:ee:f3:3b:45:d7:44:77:0a:73:24:8b:91:f9:4b: 0c:aa:1e:84:c0:9a:a5:bf:81:9e:2c:10:79:41:02:ff:3d:e6: ed:e9:bc:92:5f:da:b3:89:0f:f6:98:b4:5f:9c:c8:10:f1:71: be:8d:50:1f:90:a7:f4:72:72:9b:39:47:e0:23:0c:df:a0:fa: 81:d9:65:ec:36:96:27:b9:5e:0a:94:68:86:65:08:a8:17:42: 88:1e:d2:1b:0b:e6:90:ae:69:8d:66:d3:63:e2:03:41:73:4b: db:0a:13:ff:69:48:9f:c3:2f:b7:66:2e:b5:aa:af:26:bd:02: b1:36:f4:3e:03:da:4d:e2:31:d6:f7:2e:52:2f:47:00:79:11: 13:c0:2e:b0:3d:5c:f5:4f:ce:d1:bf:e0:9b:70:ad:fa:da:b1: 6e:c4:2f:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDODMxMTAvBgNVBAUTKEQyODk4QkFEOTI2NzkxQ0UwOTMzQzA5Mjc5REY5Nzk4 RDdERUI2OTQwHhcNMjYwMzAyMDI1NTEyWhcNMjYwMzA5MDI1NTEyWjAYMRYwFAYD VQQDEw02OWE0ZmMxMi01ZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wHQsWHAdwRl/7xwNGeaCHn2WTDQebOWoz76M8WR4rKXvlPmZ4yWfznjOZY/ hkw8ET9uNvSYBepzqYkGAT1Edx5GDW0xEE2dSQBhXfAPegLkVZl21f4svvIXnZ5t YZ9GHR+KRXpsfEg+gxdNW6hOd/BrdbhqHIJwY6u4OLI8ftVJ6zURxV+G3mAhFtAr +lQnKoJ9SXSQjPp8P6hWy3QEoze35VLnxYY9VW9Ps5nxRfvIsIuLLf3FeG2WVE7S fN8eGaccqxrBKvrrg1FNeILIWaU0aOttIOnylSSPdlAheb7/dFYO/fNmRRUd8JQC lx3jForEpzFQg9UOHZOxeRowgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKOZksME AkzC2kGh+qqNF3FoY+xOMB8GA1UdIwQYMBaAFNKJi62SZ5HOCTPAknnfl5jX3raU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUM4My8yMEE2MTM3RUND OTkxMUVGODc0MzdFMDlDNEY5QUUwMi8wb21MclpKbmtjNEpNOENTZWQtWG1OZmV0 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBvbUxyWkpua2M0Sk04Q1NlZC1YbU5mZXRwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUM4My8yMEE2MTM3RUNDOTkxMUVGODc0MzdFMDlDNEY5QUUwMi8wb21MclpKbmtj NEpNOENTZWQtWG1OZmV0cFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPYduCIVCInZQP8ptgvWUM8AJkWAGRTX8hDB9rIESZrtoo7fEFCJ/nPBv8odA wfBLsXlb+MIPDK6tEEG6Jp89ll7bpj9D5a3oX7LR+NrTMy6cLH3SGHOj9QqRaSD8 lu7zO0XXRHcKcySLkflLDKoehMCapb+BniwQeUEC/z3m7em8kl/as4kP9pi0X5zI EPFxvo1QH5Cn9HJymzlH4CMM36D6gdll7DaWJ7leCpRohmUIqBdCiB7SGwvmkK5p jWbTY+IDQXNL2woT/2lIn8Mvt2YutaqvJr0CsTb0PgPaTeIx1vcuUi9HAHkRE8Au sD1c9U/O0b/gm3Ct+tqxbsQv9A== -----END CERTIFICATE-----Generated at Mon Mar 2 09:17:25 2026 by rpki-client