$ rpki-client -vvf rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft File: D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft (raw, json) Hash identifier: p5sF49kIVdSl5c/SyuAsGnGrqrre3pYFpPCfB6xlFkc= Subject key identifier: A5:C6:F9:9F:BD:E5:03:39:14:99:49:E0:FD:53:0A:B5:B3:E6:B0:BA Authority key identifier: 0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 Certificate issuer: /CN=A9156B5D/serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft Manifest number: C2 Signing time: Sun 01 Mar 2026 22:50:29 +0000 Manifest this update: Sun 01 Mar 2026 22:50:28 +0000 Manifest next update: Sun 08 Mar 2026 22:50:28 +0000 Files and hashes: 1: D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl (hash: HLp6alsJDz/QJZjlDGVZ4CsJ+nMB+uwirz9w2K0HAQs=) 2: 41554C78F1C111EFA67D2459C4F9AE02.roa (hash: zH79Pg4ZQIEeTl4Pd39EmE15gNeuVouP/IuZpHLtxZU=) 3: 8CF57F0EF1C111EFAC8BCA59C4F9AE02.roa (hash: q11CNL+t4x5Vwq5rP/tYmXtfqpTGYiz7uq25DLAZUOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156B5D, serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Validity Not Before: Mar 1 22:50:28 2026 GMT Not After : Mar 8 22:50:28 2026 GMT Subject: CN=69a4c2b5-d336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1a:df:43:ee:a6:96:a9:9f:a5:a0:d9:68:a0: f1:be:35:5b:39:60:d0:89:31:92:fa:fd:a9:fd:bd: 6e:2a:70:90:99:84:09:0c:f7:a4:1e:96:8f:6d:69: 6d:f5:e3:d6:fd:43:c1:0c:33:9e:cc:b4:14:ac:9e: 5e:87:d0:f4:e9:a8:78:51:f0:58:99:02:9a:ad:21: 14:1b:9f:46:1e:6d:60:00:2e:1e:01:07:25:f6:ef: c4:3d:a1:8d:52:e6:6e:f9:b4:9e:e5:e4:0f:c4:0f: d0:ac:70:3b:ff:35:b0:21:e8:ab:fe:b3:f5:6e:fa: 89:0c:b5:e5:c2:a0:e6:49:94:f5:22:6b:aa:23:a2: c3:24:97:95:06:88:9c:7e:42:80:f6:95:4d:29:fc: 0c:2e:c3:a8:a4:a9:bc:0e:29:a7:6a:8d:2a:7f:a5: df:43:57:6a:6b:db:6e:38:0e:1c:f6:23:37:c0:f0: 17:08:6e:fb:77:ce:86:a5:cf:33:ee:cf:ce:0b:74: 5a:9f:cd:ea:37:5f:18:7f:6b:a8:3d:12:3d:51:7d: 01:ed:6e:8e:d8:2d:f3:66:b9:1c:08:a5:8c:22:96: b8:fb:86:20:45:c8:ff:6e:c4:57:46:40:46:26:ae: 7b:0d:24:e5:a1:b9:e7:c2:14:01:4c:f5:95:c2:89: 46:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C6:F9:9F:BD:E5:03:39:14:99:49:E0:FD:53:0A:B5:B3:E6:B0:BA X509v3 Authority Key Identifier: keyid:0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:2a:11:15:82:76:f5:2b:69:c5:b3:d7:9d:ad:9a:01:6c:ce: c7:5d:27:a2:c0:89:6e:e9:f2:58:f1:a6:20:08:fe:fc:71:07: b4:c7:ac:53:c7:1b:b9:09:e6:64:b9:55:32:d6:15:2e:44:5d: 20:fb:af:06:e7:e7:82:41:32:ed:2f:b4:dd:17:b3:92:b2:ee: 71:92:8b:38:a8:68:55:c1:9e:48:06:13:30:07:84:94:a0:1c: f5:64:5c:75:99:18:23:72:d4:13:59:8f:d8:83:c6:ac:ee:37: c5:a1:9f:bd:fb:b6:72:e8:7a:f3:ae:7d:c6:94:85:60:37:e5: ed:a3:54:8c:4e:56:d9:53:be:23:a1:b1:13:53:c4:16:8b:c0: 9d:a2:dc:f7:33:d5:80:02:af:20:b1:cf:cb:15:96:6d:43:e2: 1e:6d:3a:d5:92:8f:f1:13:11:49:39:15:e2:76:07:45:6b:a2: 8c:b4:f8:06:6e:95:af:d7:37:0d:d8:d8:4a:29:2e:69:0d:01: 6c:ef:10:cb:53:1a:a0:db:62:50:59:ad:48:aa:35:1c:95:72: e6:e2:f9:74:80:41:31:4e:25:99:e4:18:db:f1:11:0f:4f:86: b3:cb:99:0c:80:7b:b4:9a:a7:83:77:9e:2a:ec:bb:72:1d:67: d1:df:ae:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZCNUQxMTAvBgNVBAUTKDBGRTA2MzI0RjE3ODdDOEYyMTRGQkVBRTY3RDg4NkQy MkY4MTY3MDIwHhcNMjYwMzAxMjI1MDI4WhcNMjYwMzA4MjI1MDI4WjAYMRYwFAYD VQQDEw02OWE0YzJiNS1kMzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1BrfQ+6mlqmfpaDZaKDxvjVbOWDQiTGS+v2p/b1uKnCQmYQJDPekHpaPbWlt 9ePW/UPBDDOezLQUrJ5eh9D06ah4UfBYmQKarSEUG59GHm1gAC4eAQcl9u/EPaGN UuZu+bSe5eQPxA/QrHA7/zWwIeir/rP1bvqJDLXlwqDmSZT1ImuqI6LDJJeVBoic fkKA9pVNKfwMLsOopKm8Dimnao0qf6XfQ1dqa9tuOA4c9iM3wPAXCG77d86Gpc8z 7s/OC3Ran83qN18Yf2uoPRI9UX0B7W6O2C3zZrkcCKWMIpa4+4YgRcj/bsRXRkBG Jq57DSTlobnnwhQBTPWVwolG1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKXG+Z+9 5QM5FJlJ4P1TCrWz5rC6MB8GA1UdIwQYMBaAFA/gYyTxeHyPIU++rmfYhtIvgWcC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkI1RC85OEZEMUE0MkYx QzAxMUVGQTU3MTZCNTRDNEY5QUUwMi9ELUJqSlBGNGZJOGhUNzZ1WjlpRzBpLUJa d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QtQmpKUEY0Zkk4aFQ3NnVaOWlHMGktQlp3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkI1RC85OEZEMUE0MkYxQzAxMUVGQTU3MTZCNTRDNEY5QUUwMi9ELUJqSlBGNGZJ OGhUNzZ1WjlpRzBpLUJad0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGSoRFYJ29StpxbPXna2aAWzOx10nosCJbunyWPGmIAj+/HEHtMesU8cbuQnm ZLlVMtYVLkRdIPuvBufngkEy7S+03RezkrLucZKLOKhoVcGeSAYTMAeElKAc9WRc dZkYI3LUE1mP2IPGrO43xaGfvfu2cuh68659xpSFYDfl7aNUjE5W2VO+I6GxE1PE FovAnaLc9zPVgAKvILHPyxWWbUPiHm061ZKP8RMRSTkV4nYHRWuijLT4Bm6Vr9c3 DdjYSikuaQ0BbO8Qy1MaoNtiUFmtSKo1HJVy5uL5dIBBMU4lmeQY2/ERD0+Gs8uZ DIB7tJqng3eeKuy7ch1n0d+upw== -----END CERTIFICATE-----Generated at Mon Mar 2 10:21:37 2026 by rpki-client