$ rpki-client -vvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft File: czPiYYsz1lD-GNg_eCVFwj1PWp4.mft (raw, json) Hash identifier: q6WouGoGg/ROf8s5n0rJWZoZAzf4oLvqKDMXpy2o8oE= Subject key identifier: 6D:62:88:3B:86:4D:5B:71:F3:EB:EF:77:57:BA:54:37:F2:0E:35:72 Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E Certificate issuer: /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Certificate serial: 0CEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft Manifest number: 0CE0 Signing time: Mon 02 Mar 2026 03:11:54 +0000 Manifest this update: Mon 02 Mar 2026 03:11:52 +0000 Manifest next update: Mon 09 Mar 2026 03:11:52 +0000 Files and hashes: 1: czPiYYsz1lD-GNg_eCVFwj1PWp4.crl (hash: W6vK93G9OzspGoCJhJ+qvh4gnLAmgqTNOT0yWw5VMnQ=) 2: 0C1D4BF8038F11EA82150D4AC4F9AE02.roa (hash: P1ioyOhHYSe5vrV+nsOcBMRyefJ8DwpbFXIw1wGtzrQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3307 (0xceb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918098B, serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Validity Not Before: Mar 2 03:11:52 2026 GMT Not After : Mar 9 03:11:52 2026 GMT Subject: CN=69a4fffa-5524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d3:d4:07:f0:63:9d:ba:9f:75:cd:7a:6d:40: 50:19:89:eb:91:8c:c1:3a:8d:28:07:73:42:b2:38: 16:69:e6:eb:15:c5:ec:18:b9:e8:4a:d6:65:34:05: 6b:fa:45:ce:85:01:5b:17:3a:53:5e:08:97:ce:da: d7:97:31:8c:58:b6:39:90:99:f0:4c:31:42:b4:da: 3f:24:44:f2:df:2c:a0:5a:98:10:d9:ab:1e:d9:9f: 21:72:d4:5d:95:ca:82:37:92:fa:8b:e1:2b:78:33: 5d:8b:6b:2b:3a:7c:af:c4:ba:e3:ee:a7:42:89:97: f5:39:77:4c:24:80:4b:83:f3:e5:fd:76:d1:af:d5: 28:34:e0:a7:8b:bd:cf:73:58:7a:e2:7f:27:b2:b0: f8:f3:58:f2:7a:0b:06:b5:ed:e6:63:d1:06:47:c0: 29:ed:8e:6c:eb:c6:da:89:44:75:81:16:16:45:10: 7b:b9:b1:ee:59:ca:98:7a:c7:27:a2:b6:bd:85:be: 43:74:29:78:79:ac:27:d8:97:a9:78:ce:d6:18:29: 40:d2:b5:14:34:07:f9:8d:f4:cd:02:ce:50:a1:dc: b2:e4:3b:a5:55:e9:2b:e2:c8:a2:e2:24:65:b9:7b: 17:4e:d2:6b:ed:16:31:36:f7:8e:15:1d:f0:3f:e1: 26:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:62:88:3B:86:4D:5B:71:F3:EB:EF:77:57:BA:54:37:F2:0E:35:72 X509v3 Authority Key Identifier: keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:83:bf:42:67:0d:ed:0d:41:58:97:e4:37:e7:de:8d:9a:b5: 80:98:c0:56:a5:f8:19:1d:1d:02:61:0b:87:b4:6b:46:97:09: 76:64:7c:58:cf:ac:7f:8c:22:77:6d:75:f1:38:3a:a6:b6:a3: 0f:1b:29:d5:c4:68:b6:56:a5:c2:3e:44:41:64:f4:36:a5:9e: 0d:4b:01:a4:d4:e1:0a:53:8c:82:4f:fd:d0:88:81:df:26:ec: c8:b9:19:0f:2b:12:96:54:91:fb:94:ff:13:a6:8f:a5:77:42: c9:8c:36:8a:dd:f8:cf:ec:43:67:7f:c0:56:d5:3c:fe:71:e1: 90:2e:b6:d8:11:de:a4:2c:9f:6b:82:a1:13:75:44:ca:d0:6a: 1f:be:09:30:cb:58:73:6c:12:dc:ac:99:4b:ec:2a:e0:87:4c: 9c:f9:d4:7d:e2:24:b6:9b:05:a3:2a:f8:39:7c:11:e7:ac:98: f0:3e:73:7b:2c:0f:72:69:56:99:0e:10:60:ce:d9:ab:3a:67: fa:dc:a4:ed:26:90:15:0d:b7:7c:4b:e3:83:e9:3a:e6:02:43: 99:56:e2:2e:2b:f9:b6:ea:d2:79:87:d0:ef:63:fb:10:37:10: 51:d9:63:e4:d4:bb:18:04:f3:5c:f9:41:b4:49:dd:6c:2d:66: ff:3d:0a:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5OEIxMTAvBgNVBAUTKDczMzNFMjYxOEIzM0Q2NTBGRTE4RDgzRjc4MjU0NUMy M0Q0RjVBOUUwHhcNMjYwMzAyMDMxMTUyWhcNMjYwMzA5MDMxMTUyWjAYMRYwFAYD VQQDEw02OWE0ZmZmYS01NTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9PUB/Bjnbqfdc16bUBQGYnrkYzBOo0oB3NCsjgWaebrFcXsGLnoStZlNAVr +kXOhQFbFzpTXgiXztrXlzGMWLY5kJnwTDFCtNo/JETy3yygWpgQ2ase2Z8hctRd lcqCN5L6i+EreDNdi2srOnyvxLrj7qdCiZf1OXdMJIBLg/Pl/XbRr9UoNOCni73P c1h64n8nsrD481jyegsGte3mY9EGR8Ap7Y5s68baiUR1gRYWRRB7ubHuWcqYescn ora9hb5DdCl4eawn2JepeM7WGClA0rUUNAf5jfTNAs5Qodyy5DulVekr4sii4iRl uXsXTtJr7RYxNveOFR3wP+EmXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG1iiDuG TVtx8+vvd1e6VDfyDjVyMB8GA1UdIwQYMBaAFHMz4mGLM9ZQ/hjYP3glRcI9T1qe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDk4Qi9BQ0RENDI1NDAz OEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFsRC1HTmdfZUNWRndqMVBX cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6UGlZWXN6MWxELUdOZ19lQ1ZGd2oxUFdwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDk4Qi9BQ0RENDI1NDAzOEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFs RC1HTmdfZUNWRndqMVBXcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQIO/QmcN7Q1BWJfkN+fejZq1gJjAVqX4GR0dAmELh7RrRpcJdmR8WM+sf4wi d2118Tg6prajDxsp1cRotlalwj5EQWT0NqWeDUsBpNThClOMgk/90IiB3ybsyLkZ DysSllSR+5T/E6aPpXdCyYw2it34z+xDZ3/AVtU8/nHhkC622BHepCyfa4KhE3VE ytBqH74JMMtYc2wS3KyZS+wq4IdMnPnUfeIktpsFoyr4OXwR56yY8D5zeywPcmlW mQ4QYM7Zqzpn+tyk7SaQFQ23fEvjg+k65gJDmVbiLiv5turSeYfQ72P7EDcQUdlj 5NS7GATzXPlBtEndbC1m/z0KNg== -----END CERTIFICATE-----Generated at Mon Mar 2 05:52:15 2026 by rpki-client