$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft File: 2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft (raw, json) Hash identifier: W+3xBLl1nKP1il18Sh+IuQ/GRRFaM7cWTaU+Vd8k5ag= Subject key identifier: 5C:DD:F4:C8:F7:9C:A8:46:BB:E0:86:5E:C4:1A:E3:5C:D9:42:98:08 Authority key identifier: DB:08:87:E2:5C:C0:D0:CF:76:88:DB:5D:DD:F4:19:65:32:CD:47:A6 Certificate issuer: /CN=A914BE8E/serialNumber=DB0887E25CC0D0CF7688DB5DDDF4196532CD47A6 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft Manifest number: 2D Signing time: Sun 01 Mar 2026 10:16:14 +0000 Manifest this update: Sun 01 Mar 2026 10:16:14 +0000 Manifest next update: Sun 08 Mar 2026 10:16:14 +0000 Files and hashes: 1: 2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl (hash: pt206AdJQb3WKGRwqE5bQNrS3qtw1FP7TiTPvOX0Vhw=) 2: 0FE42DACE16811F0AD117D783A6F56BC.roa (hash: c9KXGFBUEAhMxd6F/BpLXSZoY9CxETEfzOzJpxwZ6lE=) 3: 21EF23B2E16811F0AE4839883A6F56BC.roa (hash: ZKCQjdago1KprBkMVdzOhlrm6rDSw/wNal8SzmwglEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BE8E, serialNumber=DB0887E25CC0D0CF7688DB5DDDF4196532CD47A6 Validity Not Before: Mar 1 10:16:14 2026 GMT Not After : Mar 8 10:16:14 2026 GMT Subject: CN=69a411ee-cd07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:12:59:5f:40:1b:7c:82:5b:72:46:20:cf:c0: 6e:29:cb:62:71:96:4a:ef:9f:0a:62:5f:d2:87:24: 62:8f:54:97:f0:b1:71:ac:65:cd:4c:98:ea:82:4d: 9e:d6:4e:8e:a9:c2:20:3d:54:f8:78:da:32:b4:e1: c8:09:a4:83:16:12:71:8d:d7:ca:16:24:06:90:8e: 4a:05:59:ad:58:00:6c:fe:72:91:26:81:f4:27:33: 65:df:f7:11:22:17:9d:57:0b:4c:08:b4:bd:44:dd: 4e:b5:d8:6e:0c:6c:8c:1a:9b:ba:1b:ef:4c:8b:4e: 61:99:89:ab:43:ee:ea:e3:01:b1:19:b1:5b:9e:59: 6d:65:a9:3d:44:df:4f:72:e9:22:a4:7d:de:7f:45: 2d:08:8b:ca:d7:f2:2c:86:ce:0a:f8:e6:ba:b5:7d: bb:aa:7e:83:f4:57:3f:8c:43:49:6b:61:8f:49:83: 7a:15:20:b7:c8:93:6a:b1:37:56:80:7b:14:9f:26: fc:b2:d5:d4:8a:e7:2b:41:47:dc:55:ad:6e:da:97: d9:c2:7e:75:85:19:1b:57:39:07:f9:d7:d4:75:5a: 07:03:0d:a4:33:93:ed:6a:3b:8e:31:c3:9b:74:bb: 85:a6:e4:b1:f7:d8:49:f5:08:44:4d:0b:a1:10:b7: 93:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DD:F4:C8:F7:9C:A8:46:BB:E0:86:5E:C4:1A:E3:5C:D9:42:98:08 X509v3 Authority Key Identifier: keyid:DB:08:87:E2:5C:C0:D0:CF:76:88:DB:5D:DD:F4:19:65:32:CD:47:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:e4:7b:87:bb:e7:66:ec:79:42:6f:f2:e9:7f:9f:0e:87:0f: 4c:bc:a4:be:91:32:ae:ac:cd:69:cd:28:a9:87:04:0a:a2:be: f4:d9:63:c2:a2:96:3e:e8:79:55:86:21:5c:f6:93:3c:80:0f: 86:5f:9c:0f:65:ba:df:b6:e9:55:e2:bc:93:8b:50:00:0b:60: 9c:7e:2e:51:19:44:31:a8:d5:6d:92:0b:60:f5:68:f3:9d:61: d6:ee:e9:33:ce:51:6e:be:01:1b:fa:24:2a:11:bd:6e:7c:f6: e3:be:54:7c:68:48:f3:8a:02:64:d2:82:58:b3:c5:54:ae:5d: b9:20:6b:77:07:cc:9e:80:34:e3:74:d4:ec:06:17:05:14:bf: 8c:45:e7:f9:aa:41:41:64:8d:1b:8b:ca:4f:31:39:5e:fb:1e: 1b:23:20:a4:e5:a8:b5:0a:cb:57:d8:83:03:fe:92:90:15:e9: ff:da:84:53:43:c4:39:c5:d9:d7:43:31:0e:34:43:bc:c1:2d: 37:02:83:b5:de:5a:23:d6:6b:ea:80:0a:e1:f5:03:66:4f:1c: e4:8c:ac:cf:71:21:34:93:4b:b6:2a:61:90:38:01:df:98:c3: c2:81:61:da:c3:7a:58:16:46:00:82:99:d0:20:4f:1e:b7:71: 63:80:6f:2e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QkU4RTExMC8GA1UEBRMoREIwODg3RTI1Q0MwRDBDRjc2ODhEQjVERERGNDE5NjUz MkNENDdBNjAeFw0yNjAzMDExMDE2MTRaFw0yNjAzMDgxMDE2MTRaMBgxFjAUBgNV BAMTDTY5YTQxMWVlLWNkMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2EllfQBt8gltyRiDPwG4py2JxlkrvnwpiX9KHJGKPVJfwsXGsZc1MmOqCTZ7W To6pwiA9VPh42jK04cgJpIMWEnGN18oWJAaQjkoFWa1YAGz+cpEmgfQnM2Xf9xEi F51XC0wItL1E3U612G4MbIwam7ob70yLTmGZiatD7urjAbEZsVueWW1lqT1E309y 6SKkfd5/RS0Ii8rX8iyGzgr45rq1fbuqfoP0Vz+MQ0lrYY9Jg3oVILfIk2qxN1aA exSfJvyy1dSK5ytBR9xVrW7al9nCfnWFGRtXOQf519R1WgcDDaQzk+1qO44xw5t0 u4Wm5LH32En1CERNC6EQt5OfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXN30yPec qEa74IZexBrjXNlCmAgwHwYDVR0jBBgwFoAU2wiH4lzA0M92iNtd3fQZZTLNR6Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCRThFLzQ5Qzc3NDg4RTE0 NjExRjA5MTY0RTBBODcxNkY1NkJDLzJ3aUg0bHpBME05MmlOdGQzZlFaWlRMTlI2 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMndpSDRsekEwTTkyaU50ZDNmUVpaVExOUjZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC RThFLzQ5Qzc3NDg4RTE0NjExRjA5MTY0RTBBODcxNkY1NkJDLzJ3aUg0bHpBME05 MmlOdGQzZlFaWlRMTlI2WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBY5HuHu+dm7HlCb/Lpf58Ohw9MvKS+kTKurM1pzSiphwQKor702WPCopY+6HlV hiFc9pM8gA+GX5wPZbrftulV4ryTi1AAC2Ccfi5RGUQxqNVtkgtg9WjznWHW7ukz zlFuvgEb+iQqEb1ufPbjvlR8aEjzigJk0oJYs8VUrl25IGt3B8yegDTjdNTsBhcF FL+MRef5qkFBZI0bi8pPMTle+x4bIyCk5ai1CstX2IMD/pKQFen/2oRTQ8Q5xdnX QzEONEO8wS03AoO13loj1mvqgArh9QNmTxzkjKzPcSE0k0u2KmGQOAHfmMPCgWHa w3pYFkYAgpnQIE8et3FjgG8u -----END CERTIFICATE-----Generated at Mon Mar 2 22:48:52 2026 by rpki-client