$ rpki-client -vvf rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft File: dwOm1WxxgCG9nInrPEvtgX7VauU.mft (raw, json) Hash identifier: 2vC1RLVwHgt8cVPBr/kUZYv7i+Lmsesrrhino+OP5uU= Subject key identifier: 01:7D:74:D0:F5:B6:AF:5B:9E:43:C3:12:30:B0:30:28:2A:8E:64:B5 Authority key identifier: 77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5 Certificate issuer: /CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5 Certificate serial: 044A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft Manifest number: 043A Signing time: Sun 01 Mar 2026 01:04:34 +0000 Manifest this update: Sun 01 Mar 2026 01:04:34 +0000 Manifest next update: Sun 08 Mar 2026 01:04:34 +0000 Files and hashes: 1: dwOm1WxxgCG9nInrPEvtgX7VauU.crl (hash: f3tDosyxJG86t63T6aE0rVUiTvQHyeMA1moN5EhbWI0=) 2: FC5AFF000BE011ED9E3AA135C4F9AE02.roa (hash: FkNOr2OAvQ+/2fjoQ+ttW/rGycCdH0fNwqceJH3qGXA=) 3: D9AD698C961211ECB515C474C4F9AE02.roa (hash: 0Y4nA/Aph2MoTUodk+O6k9Ce17owZ/QgLBqclqJBZ7I=) 4: B56F2E9697B811ECA8AA4230C4F9AE02.roa (hash: qLefOo7dvmrLJXMQn53EKJf0jFwExcla3oAdVHf5x9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1098 (0x44a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F20B, serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5 Validity Not Before: Mar 1 01:04:34 2026 GMT Not After : Mar 8 01:04:34 2026 GMT Subject: CN=69a390a2-b88e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:93:c7:93:74:76:5f:59:02:5c:df:b1:6b:53: 68:34:4f:4d:ea:dd:4c:2b:eb:f8:59:e2:4f:57:d8: e1:5c:2f:45:c6:7f:2f:76:bd:4d:7a:ec:7b:4e:0e: 99:0e:db:8a:9c:f9:a9:d3:60:27:7f:6a:e0:1b:cd: c4:a2:ad:f9:21:8c:6a:a0:dd:5c:24:33:dc:62:2f: 45:ee:1a:df:ca:5a:4a:14:8a:73:9e:77:93:78:d1: 25:a0:2f:04:1e:17:9f:a1:b7:d8:38:ce:1d:cd:2a: 25:aa:1b:12:a1:09:b8:1b:57:51:d0:97:43:07:4e: ed:50:10:17:b5:9e:7a:d4:4a:be:db:a5:b9:ea:cd: 9e:97:ca:a7:fb:b9:b9:c9:7c:93:84:b4:b3:49:e9: f9:b3:da:17:9c:97:6f:e4:89:32:0f:9e:7d:b3:7f: 5c:71:09:f5:eb:71:5d:a7:11:ab:23:53:75:02:67: 9e:bb:5a:2e:32:37:56:0d:45:fb:6c:e7:44:b4:c0: 4d:7a:2c:4c:ee:d2:13:98:d3:41:29:6a:0c:1b:fa: 16:54:19:2b:40:92:8b:13:85:b4:17:ae:94:77:2a: 4f:4f:49:2e:dd:1a:b6:d4:7e:25:5e:ba:5d:97:08: dc:08:ea:ee:fc:19:93:90:ae:d0:48:01:ee:6d:51: 73:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7D:74:D0:F5:B6:AF:5B:9E:43:C3:12:30:B0:30:28:2A:8E:64:B5 X509v3 Authority Key Identifier: keyid:77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:40:3b:ce:17:6d:d7:ee:bb:af:26:fd:dc:2e:1c:49:a5:71: 46:32:ef:db:e9:47:e2:06:48:aa:5a:dc:24:3f:87:0a:6a:5e: bc:a7:c9:d1:f5:64:1d:09:46:aa:4a:51:80:cd:cb:62:29:66: 3a:27:cb:89:6c:b3:04:9c:13:22:f6:d9:e9:74:ae:13:ed:d7: 8c:5b:2b:b8:b5:c0:40:a2:c1:04:4d:cc:38:18:61:06:7e:c5: db:fc:36:2b:38:28:09:97:37:2b:06:10:c8:9c:4f:f6:04:d0: 88:f3:ec:cb:8a:44:5a:77:3f:75:ad:b7:96:12:32:84:9e:56: 77:0a:e1:5d:7a:70:b9:c8:e7:f5:3c:09:78:7a:b4:76:23:5f: c0:98:08:32:b7:96:97:07:00:c2:06:eb:38:3c:ad:c5:6e:f8: ad:f2:f2:b6:63:55:d4:76:54:42:ac:86:b0:25:87:3b:1e:30: 3a:df:7a:28:54:6e:64:7e:7b:f3:49:ed:59:3c:8b:5f:6e:f5: 27:37:1d:36:22:12:14:7c:20:9c:1d:60:9f:48:eb:3e:4b:36: 49:75:e9:cb:50:6b:48:27:e5:3e:da:46:95:24:db:c6:73:3e: ad:b0:60:36:3c:9b:23:7c:3c:31:e9:29:c7:9c:3d:92:fd:24: ed:29:0a:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYyMEIxMTAvBgNVBAUTKDc3MDNBNkQ1NkM3MTgwMjFCRDlDODlFQjNDNEJFRDgx N0VENTZBRTUwHhcNMjYwMzAxMDEwNDM0WhcNMjYwMzA4MDEwNDM0WjAYMRYwFAYD VQQDDA02OWEzOTBhMi1iODhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5PHk3R2X1kCXN+xa1NoNE9N6t1MK+v4WeJPV9jhXC9Fxn8vdr1Neux7Tg6Z DtuKnPmp02Anf2rgG83Eoq35IYxqoN1cJDPcYi9F7hrfylpKFIpznneTeNEloC8E HhefobfYOM4dzSolqhsSoQm4G1dR0JdDB07tUBAXtZ561Eq+26W56s2el8qn+7m5 yXyThLSzSen5s9oXnJdv5IkyD559s39ccQn163FdpxGrI1N1Ameeu1ouMjdWDUX7 bOdEtMBNeixM7tITmNNBKWoMG/oWVBkrQJKLE4W0F66UdypPT0ku3Rq21H4lXrpd lwjcCOru/BmTkK7QSAHubVFzCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAF9dND1 tq9bnkPDEjCwMCgqjmS1MB8GA1UdIwQYMBaAFHcDptVscYAhvZyJ6zxL7YF+1Wrl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjIwQi8xOUU0REJGNjk2 MEYxMUVDODkwQTQ0NkRDNEY5QUUwMi9kd09tMVd4eGdDRzluSW5yUEV2dGdYN1Zh dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3T20xV3h4Z0NHOW5JbnJQRXZ0Z1g3VmF1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjIwQi8xOUU0REJGNjk2MEYxMUVDODkwQTQ0NkRDNEY5QUUwMi9kd09tMVd4eGdD RzluSW5yUEV2dGdYN1ZhdVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR0A7zhdt1+67ryb93C4cSaVxRjLv2+lH4gZIqlrcJD+HCmpevKfJ0fVkHQlG qkpRgM3LYilmOifLiWyzBJwTIvbZ6XSuE+3XjFsruLXAQKLBBE3MOBhhBn7F2/w2 KzgoCZc3KwYQyJxP9gTQiPPsy4pEWnc/da23lhIyhJ5WdwrhXXpwucjn9TwJeHq0 diNfwJgIMreWlwcAwgbrODytxW74rfLytmNV1HZUQqyGsCWHOx4wOt96KFRuZH57 80ntWTyLX271JzcdNiISFHwgnB1gn0jrPks2SXXpy1BrSCflPtpGlSTbxnM+rbBg NjybI3w8Mekpx5w9kv0k7SkKbA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:58:55 2026 by rpki-client