$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft File: r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft (raw, json) Hash identifier: rcVKibPC7nie1O+/+CGBplvkjIsChPSt6dsbaFGhCN4= Subject key identifier: 20:B5:CC:9D:FA:54:C1:22:76:F4:2F:F3:E5:6A:49:DE:32:4F:52:F4 Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 Certificate issuer: /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Certificate serial: 08A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft Manifest number: 0894 Signing time: Sat 28 Feb 2026 20:53:43 +0000 Manifest this update: Sat 28 Feb 2026 20:53:42 +0000 Manifest next update: Sat 07 Mar 2026 20:53:42 +0000 Files and hashes: 1: r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl (hash: Utzc3iEzjyrN3fLE8r1e/GAMDYeFaxLifR1K7hHLvlo=) 2: 2A0CFF60000811EC9CB70449C4F9AE02.roa (hash: 6NwFc4G6kbW7IIFb4mldHTmS90zuZDDfhVsh0xYOrRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 20:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2210 (0x8a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EC82, serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Validity Not Before: Feb 28 20:53:42 2026 GMT Not After : Mar 7 20:53:42 2026 GMT Subject: CN=69a355d7-b04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4d:e3:03:db:37:89:27:e5:49:f8:c4:f3:aa: 11:d4:be:fa:66:db:fa:73:90:88:18:62:af:cf:51: f5:6b:2c:0a:35:3f:fa:7c:89:bd:b9:3a:f1:2c:6f: d0:b7:25:2e:96:93:2a:74:f7:e5:68:42:a7:fc:47: 0f:64:ce:ff:42:01:f2:e2:f8:49:5a:a8:f1:06:17: 87:0e:c4:2c:81:c7:df:8f:41:3b:8f:60:15:67:d7: 26:f4:c9:df:44:ef:83:71:12:60:5a:18:27:0c:08: 42:39:06:69:6d:45:f2:76:3e:d8:25:84:8a:a0:07: d1:7e:1a:70:2f:27:28:2f:4b:c3:fd:22:07:55:cd: 80:fa:fb:76:2b:67:fe:5c:b6:e5:fa:77:df:66:5a: 21:b9:a5:97:cf:ab:09:d8:9e:67:4d:da:47:d9:db: 0f:03:f5:22:33:1f:12:de:29:3b:0e:1a:41:09:c7: a0:e3:69:1d:8e:6e:84:61:f5:bb:22:f5:9f:78:6c: d8:83:a2:f2:4c:48:67:89:fb:9b:36:80:9a:f1:e2: 03:91:67:0c:33:c2:3f:4a:13:02:86:e0:38:62:24: 50:57:1b:2a:95:8c:61:e9:bc:5e:d7:05:eb:fb:52: 5b:06:6e:fc:c7:d1:6c:35:2a:c2:21:bc:79:df:e8: e0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B5:CC:9D:FA:54:C1:22:76:F4:2F:F3:E5:6A:49:DE:32:4F:52:F4 X509v3 Authority Key Identifier: keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:6c:87:2e:f3:75:78:47:8f:1f:2c:a0:43:5d:fa:59:4c:5e: be:67:33:0f:66:8f:50:3b:19:55:20:31:9b:fe:d8:3b:a0:b1: 9c:56:c0:3c:4c:ee:98:42:f4:88:1f:94:ae:fb:cb:62:3d:a0: 3b:59:e6:4e:86:55:16:76:b3:7e:9b:9a:06:54:b3:31:47:6d: 83:e7:c1:b9:c2:3e:50:31:73:1e:2d:aa:95:62:fc:24:66:32: 80:47:3b:a4:7f:e7:7b:6c:9a:ee:76:e9:5c:a1:b2:ee:4b:8a: 27:dc:d8:de:16:bd:53:6c:c5:84:84:11:93:02:03:51:06:38: f2:d1:15:06:c7:d1:74:56:16:0a:17:9e:e4:7a:98:54:bd:d6: 28:85:29:bc:09:12:71:23:43:72:ab:ed:c7:bb:26:38:f1:cc: 4d:cc:a3:d6:c0:25:16:2e:f9:ad:6f:35:ac:ed:14:4d:de:ec: f2:b8:52:d0:bd:de:12:af:df:9a:36:b0:b6:20:a5:90:c8:cd: d4:da:da:f8:07:e2:2d:50:9a:b1:0c:c5:31:e5:57:dd:6a:c8: 4c:b4:ef:2a:82:72:46:47:39:de:01:e5:db:6f:d6:ae:7b:16: 80:1a:a4:e6:d4:4b:87:05:7e:06:b9:fd:8e:6b:41:0f:43:2e: cc:40:54:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVDODIxMTAvBgNVBAUTKEFGNDFDOUQwNDQ2QTdGQTkxNEM2QzE2RTc4OENEMkMz RjgwQUY1MDIwHhcNMjYwMjI4MjA1MzQyWhcNMjYwMzA3MjA1MzQyWjAYMRYwFAYD VQQDDA02OWEzNTVkNy1iMDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyE3jA9s3iSflSfjE86oR1L76Ztv6c5CIGGKvz1H1aywKNT/6fIm9uTrxLG/Q tyUulpMqdPflaEKn/EcPZM7/QgHy4vhJWqjxBheHDsQsgcffj0E7j2AVZ9cm9Mnf RO+DcRJgWhgnDAhCOQZpbUXydj7YJYSKoAfRfhpwLycoL0vD/SIHVc2A+vt2K2f+ XLbl+nffZlohuaWXz6sJ2J5nTdpH2dsPA/UiMx8S3ik7DhpBCceg42kdjm6EYfW7 IvWfeGzYg6LyTEhnifubNoCa8eIDkWcMM8I/ShMChuA4YiRQVxsqlYxh6bxe1wXr +1JbBm78x9FsNSrCIbx53+jgnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCC1zJ36 VMEidvQv8+VqSd4yT1L0MB8GA1UdIwQYMBaAFK9BydBEan+pFMbBbniM0sP4CvUC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUM4Mi80MDI1ODA3Q0Ux RTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2a1V4c0Z1ZUl6U3dfZ0s5 UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwSEowRVJxZjZrVXhzRnVlSXpTd19nSzlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUM4Mi80MDI1ODA3Q0UxRTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2 a1V4c0Z1ZUl6U3dfZ0s5UUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKWyHLvN1eEePHyygQ136WUxevmczD2aPUDsZVSAxm/7YO6CxnFbAPEzumEL0 iB+UrvvLYj2gO1nmToZVFnazfpuaBlSzMUdtg+fBucI+UDFzHi2qlWL8JGYygEc7 pH/ne2ya7nbpXKGy7kuKJ9zY3ha9U2zFhIQRkwIDUQY48tEVBsfRdFYWChee5HqY VL3WKIUpvAkScSNDcqvtx7smOPHMTcyj1sAlFi75rW81rO0UTd7s8rhS0L3eEq/f mjawtiClkMjN1Nra+AfiLVCasQzFMeVX3WrITLTvKoJyRkc53gHl22/WrnsWgBqk 5tRLhwV+Brn9jmtBD0MuzEBUnw== -----END CERTIFICATE-----Generated at Sun Mar 1 21:14:43 2026 by rpki-client