$ rpki-client -vvf rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft File: 2szbgPh19VKJMaiCXRqvoYCpsXk.mft (raw, json) Hash identifier: LsuVXB2PVxAVM4cethQbjdK+OdDbLQq+zgl9JKMk+dU= Subject key identifier: EE:08:17:99:25:0E:DA:94:B4:E9:7A:A7:B9:48:3B:F0:D7:F3:EF:E9 Authority key identifier: DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79 Certificate issuer: /CN=A918D701/serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179 Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft Manifest number: 022C Signing time: Sun 01 Mar 2026 23:24:34 +0000 Manifest this update: Sun 01 Mar 2026 23:24:32 +0000 Manifest next update: Sun 08 Mar 2026 23:24:32 +0000 Files and hashes: 1: 2szbgPh19VKJMaiCXRqvoYCpsXk.crl (hash: iVszI3F7JYZoVOhaWUkYRcXL6Dh9ZqU9TTe/8NXWd6E=) 2: 98D5AE30C88C11ED907C1C0EC4F9AE02.roa (hash: ZjWTn7RPw7EchMonKVaN+HGBpWShBdJZb78EKus3MRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D701, serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179 Validity Not Before: Mar 1 23:24:32 2026 GMT Not After : Mar 8 23:24:32 2026 GMT Subject: CN=69a4cab2-63ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c9:9c:09:bc:be:46:21:21:e5:7a:fa:ea:63: c7:ed:31:13:5f:43:2d:9d:a8:3a:c9:9e:fc:98:fb: 50:79:7b:dd:c6:c0:d1:6d:90:56:33:a0:75:78:28: cb:4d:50:cd:ed:34:29:c4:4e:53:8a:40:c6:8e:bc: 2b:ea:c3:01:03:76:75:d1:69:9b:f3:10:bb:a3:5f: 69:f1:54:af:02:0b:17:e7:27:39:9d:ed:b0:51:32: 3b:cb:d4:3b:fa:cb:77:0b:ae:76:bb:33:b8:98:93: 4f:39:64:8c:53:ad:06:5f:52:dd:a1:3f:23:d0:bd: cd:07:72:5c:c9:82:a2:be:33:23:a2:f9:c4:61:84: a2:65:2d:6a:93:e7:0f:ac:5e:27:e4:d0:ce:c5:6a: 02:43:3f:e4:7c:25:a0:57:67:18:53:5e:d3:86:6f: 0f:75:67:13:36:29:34:a8:32:c8:3e:a1:51:81:73: 04:1c:a8:68:98:91:94:6c:8c:66:f2:fb:a6:65:80: 03:f1:5e:e2:fc:f0:06:97:3f:20:cd:63:79:b0:ec: 29:7f:83:6a:99:ed:c3:c9:c0:2b:52:2e:13:0e:20: 4f:06:2a:97:30:cc:d6:13:49:bb:3c:dd:fc:5c:78: cd:3c:6d:44:69:76:eb:b5:11:1b:4f:30:43:6b:dc: 68:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:08:17:99:25:0E:DA:94:B4:E9:7A:A7:B9:48:3B:F0:D7:F3:EF:E9 X509v3 Authority Key Identifier: keyid:DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e8:bc:4c:39:e5:2a:36:f3:81:e5:b5:cb:17:99:b6:8b:70: 5b:05:50:4d:db:71:1c:d2:b7:b1:2a:05:25:75:10:06:fb:f4: 1e:b8:56:3f:c1:f3:09:e1:1e:ec:d5:20:d4:8c:96:26:7d:2b: da:ed:13:c8:a1:fe:6e:77:ab:11:e6:6d:86:89:f4:e3:ab:1c: ac:06:d2:be:23:b9:05:00:02:69:be:46:59:c4:5b:20:ce:0f: cd:89:f1:20:b7:29:6d:9f:92:21:4e:f9:8f:49:0c:4b:c7:9f: b1:74:98:b5:86:8a:63:3e:c9:8e:30:28:d0:a9:e6:41:08:7f: dc:d7:f5:f4:78:6e:92:11:d3:79:29:6f:43:8e:10:cd:27:18: f2:09:4d:32:87:32:b7:b8:8c:b0:05:0b:4d:cb:93:0b:3a:a3: b7:da:9c:de:30:09:96:f3:ad:8d:38:ad:4d:dd:87:5e:50:e3: 6a:02:dd:56:54:99:fa:e7:1d:d2:10:b4:c0:30:22:9c:fd:38: 0f:23:96:66:55:73:32:5f:71:47:23:cd:1f:14:af:5b:18:10: 9a:55:e0:1b:38:f8:6d:ed:d0:ea:50:3a:c6:c2:46:12:57:38: c2:7c:6b:08:68:eb:f4:0a:d2:5a:d8:f9:56:63:e9:66:27:bc: 22:ac:14:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3MDExMTAvBgNVBAUTKERBQ0NEQjgwRjg3NUY1NTI4OTMxQTg4MjVEMUFBRkEx ODBBOUIxNzkwHhcNMjYwMzAxMjMyNDMyWhcNMjYwMzA4MjMyNDMyWjAYMRYwFAYD VQQDEw02OWE0Y2FiMi02M2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8mcCby+RiEh5Xr66mPH7TETX0Mtnag6yZ78mPtQeXvdxsDRbZBWM6B1eCjL TVDN7TQpxE5TikDGjrwr6sMBA3Z10Wmb8xC7o19p8VSvAgsX5yc5ne2wUTI7y9Q7 +st3C652uzO4mJNPOWSMU60GX1LdoT8j0L3NB3JcyYKivjMjovnEYYSiZS1qk+cP rF4n5NDOxWoCQz/kfCWgV2cYU17Thm8PdWcTNik0qDLIPqFRgXMEHKhomJGUbIxm 8vumZYAD8V7i/PAGlz8gzWN5sOwpf4Nqme3DycArUi4TDiBPBiqXMMzWE0m7PN38 XHjNPG1EaXbrtREbTzBDa9xoPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO4IF5kl DtqUtOl6p7lIO/DX8+/pMB8GA1UdIwQYMBaAFNrM24D4dfVSiTGogl0ar6GAqbF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDcwMS9EMTg3OEVGNkM4 ODcxMUVEQkJFNkEzMkJDNEY5QUUwMi8yc3piZ1BoMTlWS0pNYWlDWFJxdm9ZQ3Bz WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzemJnUGgxOVZLSk1haUNYUnF2b1lDcHNYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDcwMS9EMTg3OEVGNkM4ODcxMUVEQkJFNkEzMkJDNEY5QUUwMi8yc3piZ1BoMTlW S0pNYWlDWFJxdm9ZQ3BzWGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGui8TDnlKjbzgeW1yxeZtotwWwVQTdtxHNK3sSoFJXUQBvv0HrhWP8HzCeEe 7NUg1IyWJn0r2u0TyKH+bnerEeZthon046scrAbSviO5BQACab5GWcRbIM4PzYnx ILcpbZ+SIU75j0kMS8efsXSYtYaKYz7JjjAo0KnmQQh/3Nf19HhukhHTeSlvQ44Q zScY8glNMocyt7iMsAULTcuTCzqjt9qc3jAJlvOtjTitTd2HXlDjagLdVlSZ+ucd 0hC0wDAinP04DyOWZlVzMl9xRyPNHxSvWxgQmlXgGzj4be3Q6lA6xsJGElc4wnxr CGjr9ArSWtj5VmPpZie8IqwUnQ== -----END CERTIFICATE-----Generated at Mon Mar 2 15:01:21 2026 by rpki-client