$ rpki-client -vvf rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft File: 2TIL_awMkLNCikT8fcoOL3kJd0E.mft (raw, json) Hash identifier: EGMPWNKnStQf1Ox4W1cLj5KuKniS0As8vIR2tedl3aw= Subject key identifier: 98:9E:CB:9A:1D:4D:E7:0A:EF:90:12:EE:9B:F5:F3:60:06:0E:A8:1D Authority key identifier: D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41 Certificate issuer: /CN=A9197ADE/serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft Manifest number: B8 Signing time: Sun 01 Mar 2026 08:18:10 +0000 Manifest this update: Sun 01 Mar 2026 08:18:10 +0000 Manifest next update: Sun 08 Mar 2026 08:18:10 +0000 Files and hashes: 1: 2TIL_awMkLNCikT8fcoOL3kJd0E.crl (hash: 8S2Z+4YJk7ZN+eL/DJSgXX5h5REx9GHVCKTGQEUkmx0=) 2: E0CFA54EFE4D11EF8274971BC4F9AE02.roa (hash: Ah769txZ1i8LI8a9aR/4aMRU/GBmcnuWkAw7rNhxenA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197ADE, serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741 Validity Not Before: Mar 1 08:18:10 2026 GMT Not After : Mar 8 08:18:10 2026 GMT Subject: CN=69a3f642-5043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:04:0e:47:82:27:ab:e9:d3:40:22:06:bd:11: c6:b2:50:97:a7:0d:3c:df:e6:85:3c:a0:f9:20:6c: 99:05:6b:1c:b0:96:0d:8e:81:08:ba:07:36:db:dc: 22:29:5d:2e:0e:bc:65:66:4a:a7:7d:c0:2f:27:ac: 0a:46:57:fd:91:6c:ac:18:0b:4b:6a:5d:ff:66:cf: 50:c2:2d:75:a4:d2:80:fb:bc:2b:0a:79:80:0f:77: da:f8:94:f2:8f:f4:e7:fb:7e:b2:18:17:20:c0:3e: 6c:3d:89:38:03:52:bc:31:8d:33:84:95:8c:b7:da: 70:97:32:62:c3:5a:62:80:22:06:6f:67:1f:60:6d: 2a:22:df:82:3a:03:94:84:1c:05:d2:72:bb:f1:97: d2:d0:38:7a:a6:f0:f8:b4:45:cf:d7:7f:09:b6:86: b8:64:ff:4b:bb:56:f6:ea:16:25:2e:5b:24:24:0d: 96:00:ef:7e:22:42:7c:b5:8b:34:f0:20:7c:fc:e2: e6:55:3a:93:43:db:f5:c6:a6:cc:7d:fd:c1:03:43: e0:18:ab:c4:f4:50:7d:fe:b3:f7:47:c8:0d:d2:74: fb:92:6d:2a:ba:fc:9d:90:2c:d8:7d:60:89:03:e9: 61:a7:e9:81:f4:5f:46:88:e9:a0:29:38:2d:c1:d8: d6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9E:CB:9A:1D:4D:E7:0A:EF:90:12:EE:9B:F5:F3:60:06:0E:A8:1D X509v3 Authority Key Identifier: keyid:D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:0e:3d:eb:b7:5d:0b:e0:5f:db:ae:ae:51:9a:7e:48:79:4d: e7:8b:46:f9:a1:cb:ec:42:95:1a:9d:cf:3b:e5:1e:eb:6c:be: e9:7a:36:73:3d:41:c5:33:1e:d8:76:31:83:6d:bb:a8:5d:42: ea:74:62:c0:2d:6b:2a:51:c3:d4:54:3d:c7:01:f5:94:f2:69: d2:01:af:e7:f1:33:17:68:84:47:9f:4b:f7:96:f9:36:51:ea: f5:27:54:72:d0:68:bf:b6:cf:9f:65:73:9e:8b:ab:54:fb:ce: 60:9b:c0:de:c9:4d:ff:ef:d2:34:98:0f:71:1d:dc:e4:7c:c2: da:70:e4:f1:43:27:b7:1b:de:44:e0:67:10:1c:ca:9e:7c:25: 98:9b:45:ab:25:f7:4e:89:63:20:de:37:11:f3:24:e8:3c:56: 45:db:de:36:73:86:4b:d8:65:eb:8b:e8:3a:28:e8:6c:a6:41: a1:cc:8e:6b:cf:5f:37:7a:bd:f1:ad:0c:cd:7b:0c:fd:6a:b6: 30:4e:ff:85:cd:af:69:04:2a:ec:51:85:8f:d7:10:8b:f2:58: c7:6d:33:27:94:c9:db:63:28:82:e8:21:1e:b2:f4:1a:49:42: 78:8e:6e:0e:25:24:f6:6d:dc:df:e6:1e:56:18:84:d5:72:35: 53:18:1f:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdBREUxMTAvBgNVBAUTKEQ5MzIwQkZEQUMwQzkwQjM0MjhBNDRGQzdEQ0EwRTJG NzkwOTc3NDEwHhcNMjYwMzAxMDgxODEwWhcNMjYwMzA4MDgxODEwWjAYMRYwFAYD VQQDEw02OWEzZjY0Mi01MDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAQOR4Inq+nTQCIGvRHGslCXpw083+aFPKD5IGyZBWscsJYNjoEIugc229wi KV0uDrxlZkqnfcAvJ6wKRlf9kWysGAtLal3/Zs9Qwi11pNKA+7wrCnmAD3fa+JTy j/Tn+36yGBcgwD5sPYk4A1K8MY0zhJWMt9pwlzJiw1pigCIGb2cfYG0qIt+COgOU hBwF0nK78ZfS0Dh6pvD4tEXP138Jtoa4ZP9Lu1b26hYlLlskJA2WAO9+IkJ8tYs0 8CB8/OLmVTqTQ9v1xqbMff3BA0PgGKvE9FB9/rP3R8gN0nT7km0quvydkCzYfWCJ A+lhp+mB9F9GiOmgKTgtwdjWvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJiey5od TecK75AS7pv182AGDqgdMB8GA1UdIwQYMBaAFNkyC/2sDJCzQopE/H3KDi95CXdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0FERS84OUE0OTNFMkZF NEQxMUVGQTFBRkZDMUFDNEY5QUUwMi8yVElMX2F3TWtMTkNpa1Q4ZmNvT0wza0pk MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJUSUxfYXdNa0xOQ2lrVDhmY29PTDNrSmQwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0FERS84OUE0OTNFMkZFNEQxMUVGQTFBRkZDMUFDNEY5QUUwMi8yVElMX2F3TWtM TkNpa1Q4ZmNvT0wza0pkMEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABA4967ddC+Bf266uUZp+SHlN54tG+aHL7EKVGp3PO+Ue62y+6Xo2cz1BxTMe 2HYxg227qF1C6nRiwC1rKlHD1FQ9xwH1lPJp0gGv5/EzF2iER59L95b5NlHq9SdU ctBov7bPn2VznourVPvOYJvA3slN/+/SNJgPcR3c5HzC2nDk8UMntxveROBnEBzK nnwlmJtFqyX3ToljIN43EfMk6DxWRdveNnOGS9hl64voOijobKZBocyOa89fN3q9 8a0MzXsM/Wq2ME7/hc2vaQQq7FGFj9cQi/JYx20zJ5TJ22MogughHrL0GklCeI5u DiUk9m3c3+YeVhiE1XI1Uxgfcg== -----END CERTIFICATE-----Generated at Mon Mar 2 07:23:27 2026 by rpki-client