$ rpki-client -vvf rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft File: 2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft (raw, json) Hash identifier: 6hzr2QysNYlkFo0yKATTY290uqJiBMFeDPSTVOuxyNg= Subject key identifier: 3D:1C:B0:4B:C2:AE:35:EF:B7:E9:B5:83:16:B5:C6:53:3E:DE:44:2E Authority key identifier: D8:AF:F5:03:FE:8C:5B:D2:26:6A:A2:EC:AB:E5:52:CA:75:14:7F:66 Certificate issuer: /CN=A918049D/serialNumber=D8AFF503FE8C5BD2266AA2ECABE552CA75147F66 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft Manifest number: 43 Signing time: Sun 01 Mar 2026 09:47:32 +0000 Manifest this update: Sun 01 Mar 2026 09:47:32 +0000 Manifest next update: Sun 08 Mar 2026 09:47:32 +0000 Files and hashes: 1: 2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl (hash: VpsuuKcmTAhnr1rU59jOdRHGHP7DfIKLTvVRfpkPGx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918049D, serialNumber=D8AFF503FE8C5BD2266AA2ECABE552CA75147F66 Validity Not Before: Mar 1 09:47:32 2026 GMT Not After : Mar 8 09:47:32 2026 GMT Subject: CN=69a40b34-1f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a1:5f:b3:2d:cb:a2:8e:5f:7c:b6:e8:e0:42: 76:fa:f1:94:07:86:6c:c8:24:37:1a:2d:32:cd:a6: 7d:d8:f8:57:c0:07:b3:c7:a7:41:b8:8f:8d:22:50: 40:c4:64:60:e5:73:a6:6a:42:cc:02:d7:af:18:cb: f7:3d:17:06:af:5e:3d:81:d4:3c:89:a9:3c:99:bf: 28:e5:81:84:0b:f4:9a:5d:3f:61:a8:6b:df:d1:01: 73:53:b1:2e:cc:cb:74:cd:2e:70:5d:6f:b0:84:e7: 90:12:f6:5f:af:8e:60:37:5f:b0:d0:13:44:ca:49: 9e:f2:77:af:cc:67:e9:12:26:f3:be:33:4f:5e:66: ac:0c:97:89:3f:cf:3a:81:a3:62:a6:b8:b1:72:d1: 7b:a4:00:db:ec:dd:4a:59:03:44:8b:05:71:fa:1d: e0:32:c8:4e:ea:2d:23:cd:28:37:a9:3a:7d:72:79: c4:89:7f:b6:9d:e3:f1:78:30:b2:0a:c6:9f:a8:d8: 38:95:e6:1b:a5:69:f2:ff:ea:53:26:0d:62:20:96: c3:c7:9c:15:84:e9:8f:3e:8b:11:ec:67:26:9c:bc: b2:4b:59:24:32:23:c7:f6:49:55:f1:10:2b:d2:41: d8:85:4a:fc:de:ab:ec:39:14:bb:cc:81:23:cd:27: 34:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1C:B0:4B:C2:AE:35:EF:B7:E9:B5:83:16:B5:C6:53:3E:DE:44:2E X509v3 Authority Key Identifier: keyid:D8:AF:F5:03:FE:8C:5B:D2:26:6A:A2:EC:AB:E5:52:CA:75:14:7F:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:85:51:54:6b:c2:81:88:c6:21:6c:1e:c2:df:c9:29:c6:51: de:9c:de:b1:36:f9:ca:ce:1a:ac:77:d8:17:65:c2:2f:36:f0: 45:36:9b:ec:cb:6f:c6:29:e8:d9:80:df:75:9a:6e:ab:44:ef: 68:80:b8:fe:a1:2e:6b:ff:cc:f3:5a:eb:5b:1b:59:9b:09:8e: a9:68:cb:9f:9d:73:f0:a3:4d:28:63:b0:9a:18:74:b5:53:2b: 5e:05:f0:08:b1:f7:4e:b1:9d:34:6e:0b:2e:99:36:b7:58:6b: 57:d4:62:0c:a0:74:f2:a9:2e:59:37:05:0e:ce:57:01:54:39: 11:44:97:cb:29:6e:e7:83:19:6b:12:58:bc:6a:18:62:f6:75: 45:e2:97:19:9c:3e:61:2d:8d:e7:db:79:0d:5e:2a:2f:6c:89: 02:15:ce:41:46:b3:a1:28:47:3a:4a:3d:4a:a9:87:43:29:b2: 85:df:bb:d2:1d:9f:a8:ed:e1:21:01:a8:af:de:55:35:f0:44: 5c:e5:8a:47:62:7d:51:aa:ec:b5:f7:c2:be:da:d5:61:10:94: 30:de:e4:65:68:06:97:4a:be:63:28:2a:cd:af:f7:b1:6f:b2: d8:9a:5a:27:3b:ee:21:98:1d:89:83:26:76:53:9d:e3:1a:c1: f3:a8:7a:b6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MDQ5RDExMC8GA1UEBRMoRDhBRkY1MDNGRThDNUJEMjI2NkFBMkVDQUJFNTUyQ0E3 NTE0N0Y2NjAeFw0yNjAzMDEwOTQ3MzJaFw0yNjAzMDgwOTQ3MzJaMBgxFjAUBgNV BAMTDTY5YTQwYjM0LTFmNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNoV+zLcuijl98tujgQnb68ZQHhmzIJDcaLTLNpn3Y+FfAB7PHp0G4j40iUEDE ZGDlc6ZqQswC168Yy/c9FwavXj2B1DyJqTyZvyjlgYQL9JpdP2Goa9/RAXNTsS7M y3TNLnBdb7CE55AS9l+vjmA3X7DQE0TKSZ7yd6/MZ+kSJvO+M09eZqwMl4k/zzqB o2KmuLFy0XukANvs3UpZA0SLBXH6HeAyyE7qLSPNKDepOn1yecSJf7ad4/F4MLIK xp+o2DiV5hulafL/6lMmDWIglsPHnBWE6Y8+ixHsZyacvLJLWSQyI8f2SVXxECvS QdiFSvzeq+w5FLvMgSPNJzTvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPRywS8Ku Ne+36bWDFrXGUz7eRC4wHwYDVR0jBBgwFoAU2K/1A/6MW9ImaqLsq+VSynUUf2Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwNDlEL0I1N0NBNTU4QjJD NjExRjA5MTM0QkE2REM0RjlBRTAyLzJLXzFBXzZNVzlJbWFxTHNxLVZTeW5VVWYy WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMktfMUFfNk1XOUltYXFMc3EtVlN5blVVZjJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw NDlEL0I1N0NBNTU4QjJDNjExRjA5MTM0QkE2REM0RjlBRTAyLzJLXzFBXzZNVzlJ bWFxTHNxLVZTeW5VVWYyWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBfhVFUa8KBiMYhbB7C38kpxlHenN6xNvnKzhqsd9gXZcIvNvBFNpvsy2/GKejZ gN91mm6rRO9ogLj+oS5r/8zzWutbG1mbCY6paMufnXPwo00oY7CaGHS1UyteBfAI sfdOsZ00bgsumTa3WGtX1GIMoHTyqS5ZNwUOzlcBVDkRRJfLKW7ngxlrEli8ahhi 9nVF4pcZnD5hLY3n23kNXiovbIkCFc5BRrOhKEc6Sj1KqYdDKbKF37vSHZ+o7eEh Aaiv3lU18ERc5YpHYn1Rquy198K+2tVhEJQw3uRlaAaXSr5jKCrNr/exb7LYmlon O+4hmB2JgyZ2U53jGsHzqHq2 -----END CERTIFICATE-----Generated at Mon Mar 2 00:27:35 2026 by rpki-client