$ rpki-client -vvf rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft File: s2MvNI2Zt8k-43IQ13M9KC8UWko.mft (raw, json) Hash identifier: Tj+1zgWjoHK92eWyparmRNCHFGeTMF8cEBwkZeXyKWg= Subject key identifier: D6:8D:5C:03:46:7D:B5:1B:2C:1A:51:BB:B0:C4:34:C9:7A:26:0B:AD Authority key identifier: B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A Certificate issuer: /CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft Manifest number: 022D Signing time: Sun 01 Mar 2026 03:25:19 +0000 Manifest this update: Sun 01 Mar 2026 03:25:19 +0000 Manifest next update: Sun 08 Mar 2026 03:25:19 +0000 Files and hashes: 1: s2MvNI2Zt8k-43IQ13M9KC8UWko.crl (hash: Bc+bOedFGeaLqDdduDhQ0Ef8QHvYi5DDaMqXdenR06E=) 2: A0B1EDDCC24011ED80139928C4F9AE02.roa (hash: q0gxIwkNCwpl+GpRB3VC1+XqnpcMFADLK5HDKiv5GL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E74A, serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Validity Not Before: Mar 1 03:25:19 2026 GMT Not After : Mar 8 03:25:19 2026 GMT Subject: CN=69a3b19f-d133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:10:f1:b7:2d:ed:e6:0e:af:66:c8:e5:9c:53: ef:4a:6e:46:81:55:2b:5f:20:6b:24:fd:12:1c:5e: 3c:35:5a:b1:eb:b1:c9:53:46:a2:5c:6c:bb:e9:59: 99:d3:70:87:6c:26:b4:a0:6b:3d:d6:2c:b1:18:e8: 13:d8:82:a7:b4:ea:ba:92:d5:8e:c7:65:93:5e:62: 10:40:bb:1d:61:5e:99:e7:d5:e4:7c:17:ed:dc:48: 54:91:77:78:f9:90:c3:d7:0f:6f:c3:f4:3a:5a:41: a4:6a:b7:2a:17:23:c4:67:a3:1d:8b:b6:85:a8:10: 4e:d0:35:36:46:cf:74:74:2e:11:2c:36:50:eb:6f: de:f9:a6:75:48:c1:08:93:0e:b1:8c:71:d0:0d:0f: cd:e2:9d:b8:b1:ca:72:ad:5b:78:88:2e:76:ea:dd: 44:26:cd:21:30:f9:00:55:c1:a5:34:5f:fa:00:9c: cc:92:1a:a7:96:94:6e:e1:d6:58:be:71:cd:12:2e: a1:c9:29:a9:9b:66:e6:9a:05:53:c0:03:bb:1b:0e: 23:14:18:32:72:d6:db:01:39:48:35:4c:c9:66:d2: e9:7b:44:85:5b:48:13:e5:8b:6c:98:55:e4:2c:77: ab:b6:50:46:ed:a6:e4:1e:b7:dd:b1:51:71:06:87: 01:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:8D:5C:03:46:7D:B5:1B:2C:1A:51:BB:B0:C4:34:C9:7A:26:0B:AD X509v3 Authority Key Identifier: keyid:B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:53:c3:ad:b2:8e:5d:0d:df:cd:f0:8a:6e:f9:2c:c7:5d:13: 6f:a3:1f:0c:60:e9:71:d8:7b:f6:bd:d5:e0:a6:35:3e:17:56: 09:7c:de:2f:56:58:a0:b4:e7:c6:e6:92:f4:62:03:6a:06:11: 13:c0:e1:c5:64:63:ab:03:2a:14:7c:7c:4b:da:90:73:9e:99: 2d:e5:1b:44:f1:cf:eb:b9:56:17:f6:74:67:d3:d3:a1:40:9f: 8c:35:d0:a0:2c:e1:8c:1a:3a:eb:59:eb:e9:f5:d8:83:d0:1b: dd:07:6b:1f:d0:f6:c1:65:4d:92:ab:a0:5c:46:7c:0b:df:57: 99:21:f7:b2:e9:85:54:1f:0d:69:ca:e3:bf:b7:4f:44:27:cb: 39:05:d9:9c:c0:ea:2d:b0:92:e5:20:a7:92:3b:f3:9a:22:3c: 70:15:55:a0:c4:1c:91:c2:fe:4a:88:40:6b:b0:39:fa:ef:e8: 15:85:15:19:01:5a:2a:0d:fb:40:ec:b1:2b:84:4b:4c:58:01: 58:6d:da:1a:ac:81:85:53:24:01:22:1b:8b:6f:68:23:c5:ac: 74:81:74:23:2d:45:b4:1c:96:0e:dc:ae:a2:7c:74:9c:1b:4f: 92:ec:4b:5b:fa:22:18:22:2d:0c:75:db:7f:ba:e5:dc:29:ea: d3:45:22:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NEExMTAvBgNVBAUTKEIzNjMyRjM0OEQ5OUI3QzkzRUUzNzIxMEQ3NzMzRDI4 MkYxNDVBNEEwHhcNMjYwMzAxMDMyNTE5WhcNMjYwMzA4MDMyNTE5WjAYMRYwFAYD VQQDDA02OWEzYjE5Zi1kMTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRDxty3t5g6vZsjlnFPvSm5GgVUrXyBrJP0SHF48NVqx67HJU0aiXGy76VmZ 03CHbCa0oGs91iyxGOgT2IKntOq6ktWOx2WTXmIQQLsdYV6Z59XkfBft3EhUkXd4 +ZDD1w9vw/Q6WkGkarcqFyPEZ6Mdi7aFqBBO0DU2Rs90dC4RLDZQ62/e+aZ1SMEI kw6xjHHQDQ/N4p24scpyrVt4iC526t1EJs0hMPkAVcGlNF/6AJzMkhqnlpRu4dZY vnHNEi6hySmpm2bmmgVTwAO7Gw4jFBgyctbbATlINUzJZtLpe0SFW0gT5YtsmFXk LHertlBG7abkHrfdsVFxBocB6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNaNXANG fbUbLBpRu7DENMl6JgutMB8GA1UdIwQYMBaAFLNjLzSNmbfJPuNyENdzPSgvFFpK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc0QS9CMDY4MkVFNEMy M0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4ay00M0lRMTNNOUtDOFVX a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MyTXZOSTJadDhrLTQzSVExM005S0M4VVdrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc0QS9CMDY4MkVFNEMyM0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4 ay00M0lRMTNNOUtDOFVXa28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF1PDrbKOXQ3fzfCKbvksx10Tb6MfDGDpcdh79r3V4KY1PhdWCXzeL1ZYoLTn xuaS9GIDagYRE8DhxWRjqwMqFHx8S9qQc56ZLeUbRPHP67lWF/Z0Z9PToUCfjDXQ oCzhjBo661nr6fXYg9Ab3QdrH9D2wWVNkqugXEZ8C99XmSH3sumFVB8Nacrjv7dP RCfLOQXZnMDqLbCS5SCnkjvzmiI8cBVVoMQckcL+SohAa7A5+u/oFYUVGQFaKg37 QOyxK4RLTFgBWG3aGqyBhVMkASIbi29oI8WsdIF0Iy1FtByWDtyuonx0nBtPkuxL W/oiGCItDHXbf7rl3Cnq00Uiwg== -----END CERTIFICATE-----Generated at Sun Mar 1 23:06:46 2026 by rpki-client