$ rpki-client -vvf rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft File: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft (raw, json) Hash identifier: 03wp5pMz306ZiwvyVQke5V3x7w0oLG13rNTjc34z9vs= Subject key identifier: 0C:A0:AA:5E:4C:96:37:4E:A0:DC:31:F1:1B:EB:14:19:B1:02:F1:53 Authority key identifier: 0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6 Certificate issuer: /CN=A9157ADC/serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6 Certificate serial: 02BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft Manifest number: 02B8 Signing time: Mon 02 Mar 2026 00:45:49 +0000 Manifest this update: Mon 02 Mar 2026 00:45:47 +0000 Manifest next update: Mon 09 Mar 2026 00:45:47 +0000 Files and hashes: 1: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl (hash: BkQdZozt+kT2pEkh98mTszyi2HhA3kAQGX+xtrcFkis=) 2: 88FCD2C62DBA11ED94AFED62C4F9AE02.roa (hash: YXWFFFPBzpkV2m2yoFC2Tf/XolI9oJsfQCRArQVbJbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:45:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 702 (0x2be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157ADC, serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6 Validity Not Before: Mar 2 00:45:47 2026 GMT Not After : Mar 9 00:45:47 2026 GMT Subject: CN=69a4ddbc-5bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:79:37:54:aa:9c:14:53:25:9d:a6:8f:d8:12: e3:3d:15:ac:3e:a1:b9:48:3c:68:cb:6e:3e:da:3b: 6e:49:05:a4:37:7b:02:3f:b4:c5:d7:36:4f:46:82: a0:dc:22:77:b9:cf:aa:7f:3a:39:a4:26:64:2e:48: d5:3d:18:9a:39:cb:82:4d:67:14:4d:06:db:a6:d4: d0:91:e8:b2:c2:e0:20:7b:e1:f2:0f:30:ee:a8:a4: 0d:b0:49:c4:44:96:57:5b:53:83:23:f9:58:ba:8d: dc:59:a3:2f:aa:12:7a:ba:4c:84:47:9c:21:7e:a2: b6:b1:d0:14:73:f0:17:1c:d8:31:c8:92:c8:03:9c: 28:7f:0c:e7:b7:5a:7d:2d:15:f2:05:ef:4e:40:72: a2:88:2f:2d:fc:34:5b:39:38:ed:bd:d9:d8:b9:bf: 2c:32:e3:b5:af:dc:63:b0:76:28:0f:1e:ac:01:68: cb:a5:46:b0:9d:c0:55:98:01:e3:49:d2:64:a0:8c: ee:f0:2e:70:57:a9:53:e0:f7:4f:68:87:fc:8a:b6: 3a:1b:2e:53:33:c2:f2:44:77:11:cf:23:7a:b4:f0: 86:df:60:d7:da:0f:7d:03:c6:46:5f:a3:a9:76:cc: f6:05:74:07:6f:82:ec:11:f3:52:13:25:3f:04:b5: 99:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A0:AA:5E:4C:96:37:4E:A0:DC:31:F1:1B:EB:14:19:B1:02:F1:53 X509v3 Authority Key Identifier: keyid:0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:d8:b8:d5:b8:08:50:aa:90:39:46:fa:50:83:51:5b:2b:ee: ed:b2:96:8a:fd:b1:0d:15:29:1f:26:b3:1c:70:2e:d2:57:78: a1:c4:e0:36:b9:8f:d9:8c:16:73:96:bd:c1:a2:eb:0a:9c:29: 09:f7:54:97:7f:2f:5a:ee:4b:71:28:3a:33:da:bd:c7:f4:e7: 9c:8f:29:3a:da:4a:80:82:f8:3c:a1:7e:36:ea:a7:04:a6:aa: a3:72:f1:23:6f:e4:87:2f:32:77:97:38:e0:b2:be:5c:c6:64: 27:4a:f5:3f:00:62:0c:f0:9b:b8:05:af:99:cc:17:8a:a1:d3: 1b:e6:b6:d1:da:21:03:56:45:bd:ff:ff:14:cb:e1:bc:89:f3: b4:78:90:a0:5c:cc:cc:d6:c3:01:b4:9e:ad:ad:f3:46:5f:c7: cc:48:0c:aa:0f:70:2a:39:3e:44:38:5c:8b:25:5d:15:bf:25: b3:4a:10:77:ad:8e:15:52:7a:4f:01:1e:57:9e:dd:51:dc:5c: ee:ce:c4:ca:d1:4f:f5:0b:5a:e7:c0:35:51:9f:61:3c:b5:09: ed:42:a5:ff:9d:a5:08:6e:55:e6:98:c9:26:58:9a:69:4b:ce: ee:87:f7:d4:8d:7d:e3:f0:3a:9c:ee:8e:9a:b9:df:db:8b:d8: fa:e8:63:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdBREMxMTAvBgNVBAUTKDBDNEMxNzIyOUM2QUI2N0Y1NDNGRUM5QzREMDNFNUZF RTRFRDJGRjYwHhcNMjYwMzAyMDA0NTQ3WhcNMjYwMzA5MDA0NTQ3WjAYMRYwFAYD VQQDEw02OWE0ZGRiYy01YmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3k3VKqcFFMlnaaP2BLjPRWsPqG5SDxoy24+2jtuSQWkN3sCP7TF1zZPRoKg 3CJ3uc+qfzo5pCZkLkjVPRiaOcuCTWcUTQbbptTQkeiywuAge+HyDzDuqKQNsEnE RJZXW1ODI/lYuo3cWaMvqhJ6ukyER5whfqK2sdAUc/AXHNgxyJLIA5wofwznt1p9 LRXyBe9OQHKiiC8t/DRbOTjtvdnYub8sMuO1r9xjsHYoDx6sAWjLpUawncBVmAHj SdJkoIzu8C5wV6lT4PdPaIf8irY6Gy5TM8LyRHcRzyN6tPCG32DX2g99A8ZGX6Op dsz2BXQHb4LsEfNSEyU/BLWZuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAygql5M ljdOoNwx8RvrFBmxAvFTMB8GA1UdIwQYMBaAFAxMFyKcarZ/VD/snE0D5f7k7S/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0FEQy9GNTc1ODlFMjJE QjYxMUVEODIxNTlCNUVDNEY5QUUwMi9ERXdYSXB4cXRuOVVQLXljVFFQbF91VHRM X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFd1hJcHhxdG45VVAteWNUUVBsX3VUdExfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0FEQy9GNTc1ODlFMjJEQjYxMUVEODIxNTlCNUVDNEY5QUUwMi9ERXdYSXB4cXRu OVVQLXljVFFQbF91VHRMX1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ9i41bgIUKqQOUb6UINRWyvu7bKWiv2xDRUpHyazHHAu0ld4ocTgNrmP2YwW c5a9waLrCpwpCfdUl38vWu5LcSg6M9q9x/TnnI8pOtpKgIL4PKF+NuqnBKaqo3Lx I2/khy8yd5c44LK+XMZkJ0r1PwBiDPCbuAWvmcwXiqHTG+a20dohA1ZFvf//FMvh vInztHiQoFzMzNbDAbSera3zRl/HzEgMqg9wKjk+RDhciyVdFb8ls0oQd62OFVJ6 TwEeV57dUdxc7s7EytFP9Qta58A1UZ9hPLUJ7UKl/52lCG5V5pjJJliaaUvO7of3 1I194/A6nO6Omrnf24vY+uhjkg== -----END CERTIFICATE-----Generated at Mon Mar 2 08:06:11 2026 by rpki-client