$ rpki-client -vvf rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft File: q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft (raw, json) Hash identifier: V7fmZuGlblBkcBscNikwRrUwNFi7N+MKOZ9OymK8y80= Subject key identifier: 8E:F3:A7:93:D0:FD:54:43:7B:93:04:62:E2:0F:DE:B4:16:AB:D6:71 Authority key identifier: AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0 Certificate issuer: /CN=A912B6D9/serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0 Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft Manifest number: A2 Signing time: Sun 01 Mar 2026 08:34:22 +0000 Manifest this update: Sun 01 Mar 2026 08:34:21 +0000 Manifest next update: Sun 08 Mar 2026 08:34:21 +0000 Files and hashes: 1: q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl (hash: DM9cY9pmK9UmBagiPxE7WsNpNqIhOf45GeGKpQsBkEI=) 2: 0E4F46F2532E11F0B87D127CC4F9AE02.roa (hash: +JT0f4RowYTHW2+9iIjJn3OKbrwqMZFChzHhfXtVmmk=) 3: 330409804CCE11F08ADD6485C4F9AE02.roa (hash: zyN+NtWVyoecz7nyEZ/xUxrT08G/oh3AIX0lScmlkrQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:34:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B6D9, serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0 Validity Not Before: Mar 1 08:34:21 2026 GMT Not After : Mar 8 08:34:21 2026 GMT Subject: CN=69a3fa0e-d54e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9e:07:17:10:0b:58:d2:49:04:60:18:a4:40: 7f:25:55:3b:d2:90:aa:da:65:12:29:8a:21:97:53: 88:87:a6:51:5b:13:0a:17:a9:6d:af:12:a7:b8:b3: 80:41:71:63:56:7b:d3:79:9e:25:37:52:5d:6d:ef: c1:b9:9c:e3:b3:6a:7e:7a:02:6d:9d:2c:de:d3:46: 3d:88:0d:fa:d3:3a:54:f8:63:0e:9b:d2:58:97:d9: 19:7c:7b:41:30:b7:a2:03:4d:8b:5c:96:bc:a5:30: 71:8e:39:3d:42:5a:76:34:06:0d:a0:72:50:7e:6c: 8a:16:c8:d0:72:9c:6a:40:b8:b7:ee:da:ae:d4:69: 22:4c:a9:8d:28:06:60:bf:d4:a5:04:af:63:79:58: 44:db:bf:76:2d:2c:f0:a3:74:b1:45:67:1a:bf:a3: 34:af:20:ee:42:1d:cc:21:ec:f3:de:a4:17:32:a6: 20:c0:53:1d:d7:e7:9d:f3:67:4b:8b:47:e7:b0:c6: e9:b7:8f:80:f8:d0:d8:2f:61:eb:08:92:50:95:53: 19:f3:7f:7c:21:9e:d9:7a:dc:cd:42:bf:57:4f:48: 83:e4:59:1d:8c:09:65:57:b1:72:06:fe:01:5d:cc: c2:f4:bf:7c:d9:44:41:24:d3:6b:a7:cd:ca:62:80: d9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F3:A7:93:D0:FD:54:43:7B:93:04:62:E2:0F:DE:B4:16:AB:D6:71 X509v3 Authority Key Identifier: keyid:AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:d5:d6:dd:a8:6d:05:77:44:df:2d:82:00:b4:c5:af:f5:42: 55:95:d0:42:d5:f2:dd:d1:41:26:be:68:2e:12:53:6a:3c:ef: d0:60:98:60:0a:b8:eb:0f:a6:ba:a8:61:9e:8b:95:14:db:d7: a2:47:df:9e:8b:be:d1:1c:df:38:f1:0c:10:bb:81:7e:77:46: 83:a2:38:1c:ae:e1:18:7d:07:f3:09:c8:f9:bb:a0:52:f0:2b: b3:9b:ec:fd:dd:25:6d:62:a0:49:f3:3a:04:b1:7d:53:6e:0e: 4e:c9:b9:70:2e:e7:29:e2:63:d6:73:fb:d2:14:f5:59:4f:49: 91:7a:ee:ed:46:28:21:86:f2:d3:66:f5:7c:87:47:4e:6a:34: 1f:9f:b4:49:cf:63:59:48:b6:00:12:cc:18:80:ea:63:ab:8f: 6b:a3:c1:4c:b7:59:a4:49:84:cb:2b:39:fb:27:25:a0:23:8d: 76:a2:e2:13:94:8b:13:06:05:ee:f1:40:13:59:14:b6:72:ac: 3b:05:6f:a8:84:0b:0a:7e:81:fb:2e:26:3c:bb:c5:ab:48:30: 0f:51:5b:30:32:20:38:20:4c:7b:12:57:d7:d2:c2:50:a6:e7: ad:c8:64:9b:89:67:2e:5b:de:64:2a:e4:ce:00:cf:25:78:d6: a9:14:9d:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2RDkxMTAvBgNVBAUTKEFCNjJEOTYzOTA4Q0MwRTNBODAxOTlBNDNEMzEyQTM0 QTA0ODgxRjAwHhcNMjYwMzAxMDgzNDIxWhcNMjYwMzA4MDgzNDIxWjAYMRYwFAYD VQQDEw02OWEzZmEwZS1kNTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3p4HFxALWNJJBGAYpEB/JVU70pCq2mUSKYohl1OIh6ZRWxMKF6ltrxKnuLOA QXFjVnvTeZ4lN1Jdbe/BuZzjs2p+egJtnSze00Y9iA360zpU+GMOm9JYl9kZfHtB MLeiA02LXJa8pTBxjjk9Qlp2NAYNoHJQfmyKFsjQcpxqQLi37tqu1GkiTKmNKAZg v9SlBK9jeVhE2792LSzwo3SxRWcav6M0ryDuQh3MIezz3qQXMqYgwFMd1+ed82dL i0fnsMbpt4+A+NDYL2HrCJJQlVMZ8398IZ7ZetzNQr9XT0iD5FkdjAllV7FyBv4B XczC9L982URBJNNrp83KYoDZCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI7zp5PQ /VRDe5MEYuIP3rQWq9ZxMB8GA1UdIwQYMBaAFKti2WOQjMDjqAGZpD0xKjSgSIHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjZEOS83NzQzRDUxRTFF NUYxMUYwQkEzODlBNEVDNEY5QUUwMi9xMkxaWTVDTXdPT29BWm1rUFRFcU5LQkln ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyTFpZNUNNd09Pb0FabWtQVEVxTktCSWdmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjZEOS83NzQzRDUxRTFFNUYxMUYwQkEzODlBNEVDNEY5QUUwMi9xMkxaWTVDTXdP T29BWm1rUFRFcU5LQklnZkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASNXW3ahtBXdE3y2CALTFr/VCVZXQQtXy3dFBJr5oLhJTajzv0GCYYAq46w+m uqhhnouVFNvXokffnou+0RzfOPEMELuBfndGg6I4HK7hGH0H8wnI+bugUvArs5vs /d0lbWKgSfM6BLF9U24OTsm5cC7nKeJj1nP70hT1WU9JkXru7UYoIYby02b1fIdH Tmo0H5+0Sc9jWUi2ABLMGIDqY6uPa6PBTLdZpEmEyys5+ycloCONdqLiE5SLEwYF 7vFAE1kUtnKsOwVvqIQLCn6B+y4mPLvFq0gwD1FbMDIgOCBMexJX19LCUKbnrchk m4lnLlveZCrkzgDPJXjWqRSd4w== -----END CERTIFICATE-----Generated at Sun Mar 1 21:00:10 2026 by rpki-client