$ rpki-client -vvf rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft File: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft (raw, json) Hash identifier: y8VhC7MueNXlnkzn51OTMGFMcn8AyXSjnr0z1kVqrOA= Subject key identifier: 72:B4:11:E5:01:40:0B:A2:85:60:52:F1:AA:17:2A:89:C3:41:4A:F3 Authority key identifier: D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 Certificate issuer: /CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Certificate serial: 0E10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft Manifest number: 0E02 Signing time: Sun 01 Mar 2026 22:21:18 +0000 Manifest this update: Sun 01 Mar 2026 22:21:17 +0000 Manifest next update: Sun 08 Mar 2026 22:21:17 +0000 Files and hashes: 1: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl (hash: yzNGXJsntD40PamKnExbkhV+n5WXxj9qulXJ98qqZco=) 2: DBDAFF6CC99611E9A41BCF75C4F9AE02.roa (hash: LJdsn8M+8WOyn3xfnVOerz5lCaK7ncj5KJBGdZ3Z5os=) 3: 3F67E64E62BD11EE8F393D25C4F9AE02.roa (hash: gEMIOBcajdhE7ILa/lRfnCIRCgvUIHfApcn6AAUhQyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3600 (0xe10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915617E, serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Validity Not Before: Mar 1 22:21:17 2026 GMT Not After : Mar 8 22:21:17 2026 GMT Subject: CN=69a4bbdd-3249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7b:27:c0:77:b2:59:22:d8:85:f6:25:77:c5: c3:a7:52:c0:05:aa:03:f1:50:27:70:fc:83:e8:10: 2a:8b:6e:cf:da:b3:14:47:1c:8c:be:78:49:9e:db: 95:4e:e1:7b:61:ff:c0:2b:a4:a8:fb:c0:d0:88:50: fe:3e:a5:6a:0c:2a:d5:98:89:aa:80:11:7f:67:83: b0:e2:95:c7:12:d8:14:fc:e2:5f:b7:77:6e:6d:08: 0c:8f:92:46:ed:2d:af:a4:9f:60:c0:93:62:50:e2: 1c:b0:d0:65:ed:3a:ea:98:d2:69:87:ce:7b:92:f9: c9:36:6f:0d:20:b7:bf:ca:a2:9c:e4:2f:06:9f:77: 93:18:2d:cd:ba:66:d4:b0:4a:b5:e5:a1:6f:ca:68: 52:f9:00:f4:c8:c4:2e:59:ee:08:e0:99:62:1e:a7: 0b:30:6b:6c:16:4c:6a:38:9e:04:21:ef:1c:ab:50: 91:e1:89:ec:ff:da:9e:ed:e9:09:ce:68:b7:ee:0a: 00:d1:2e:e7:db:06:75:d7:35:b0:03:52:58:cd:25: 0c:c1:75:3d:b1:87:d5:30:a8:5b:27:47:25:40:4c: 18:b1:5c:90:36:6e:67:8e:e8:3d:6d:7c:17:c7:15: 01:45:fd:eb:b5:12:71:e9:0c:e0:7c:36:12:f8:d9: 6c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B4:11:E5:01:40:0B:A2:85:60:52:F1:AA:17:2A:89:C3:41:4A:F3 X509v3 Authority Key Identifier: keyid:D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:fa:40:46:ba:4e:0a:f0:2c:c4:49:0e:c7:c4:d2:11:83:3e: 1e:ad:03:06:c2:a0:0c:86:c0:19:3b:38:e5:27:be:8f:81:3e: 0f:82:e6:2b:ca:07:13:df:b4:69:2d:27:1b:d1:2b:9a:ef:3e: 8d:32:e5:22:1c:d9:c3:05:a8:3f:93:98:c2:1c:c7:7b:7f:e5: 58:f9:7f:b7:b0:31:08:ea:ee:95:1d:d1:32:79:4e:d3:b3:a4: 5f:c4:0d:0d:ef:e0:20:18:02:8a:1c:a1:75:af:2f:b2:c7:66: 22:aa:4a:35:3c:bf:b0:b9:0e:fe:fe:1e:2f:9a:42:01:17:d5: 16:07:b3:3c:d6:f2:b8:ce:22:de:44:73:73:0b:6a:ef:a2:23: 5c:2d:86:6c:61:65:40:bc:fb:4a:32:7c:50:90:2b:72:f0:c6: 2a:27:d1:2b:31:7e:73:db:39:74:d1:df:5b:23:bd:ca:ab:c7: 5d:4c:45:9d:74:15:c2:5d:05:42:55:21:5e:c6:1a:57:7c:28: ff:f9:a5:22:8c:62:e0:e3:99:a1:ad:cf:15:d7:ea:c3:2a:b7: ef:c5:e5:96:dc:a7:86:c1:c9:e6:e5:bd:1b:f9:dc:1a:e2:05: 00:4c:d8:e4:db:73:13:05:a3:f4:62:40:83:7c:cb:29:1d:6b: f6:cd:c2:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxN0UxMTAvBgNVBAUTKEQyOEM1MkVEMDkwQzUzOUMxMEYyMjJERUVDRDlBNzND NDlBMTY4MDQwHhcNMjYwMzAxMjIyMTE3WhcNMjYwMzA4MjIyMTE3WjAYMRYwFAYD VQQDEw02OWE0YmJkZC0zMjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXsnwHeyWSLYhfYld8XDp1LABaoD8VAncPyD6BAqi27P2rMURxyMvnhJntuV TuF7Yf/AK6So+8DQiFD+PqVqDCrVmImqgBF/Z4Ow4pXHEtgU/OJft3dubQgMj5JG 7S2vpJ9gwJNiUOIcsNBl7TrqmNJph857kvnJNm8NILe/yqKc5C8Gn3eTGC3NumbU sEq15aFvymhS+QD0yMQuWe4I4JliHqcLMGtsFkxqOJ4EIe8cq1CR4Yns/9qe7ekJ zmi37goA0S7n2wZ11zWwA1JYzSUMwXU9sYfVMKhbJ0clQEwYsVyQNm5njug9bXwX xxUBRf3rtRJx6QzgfDYS+NlswwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHK0EeUB QAuihWBS8aoXKonDQUrzMB8GA1UdIwQYMBaAFNKMUu0JDFOcEPIi3uzZpzxJoWgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RS9FMUFEQjc0NkM5 OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1d1E4aUxlN05tblBFbWhh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBveFM3UWtNVTV3UThpTGU3Tm1uUEVtaGFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjE3RS9FMUFEQjc0NkM5OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1 d1E4aUxlN05tblBFbWhhQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm/pARrpOCvAsxEkOx8TSEYM+Hq0DBsKgDIbAGTs45Se+j4E+D4LmK8oHE9+0 aS0nG9Ermu8+jTLlIhzZwwWoP5OYwhzHe3/lWPl/t7AxCOrulR3RMnlO07OkX8QN De/gIBgCihyhda8vssdmIqpKNTy/sLkO/v4eL5pCARfVFgezPNbyuM4i3kRzcwtq 76IjXC2GbGFlQLz7SjJ8UJArcvDGKifRKzF+c9s5dNHfWyO9yqvHXUxFnXQVwl0F QlUhXsYaV3wo//mlIoxi4OOZoa3PFdfqwyq378XlltynhsHJ5uW9G/ncGuIFAEzY 5NtzEwWj9GJAg3zLKR1r9s3CpA== -----END CERTIFICATE-----Generated at Mon Mar 2 13:53:15 2026 by rpki-client