$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft File: _ONoVUVgesO8wzQNA5shaIJxJ74.mft (raw, json) Hash identifier: eQMwcaMhms3l8/HNE6e+auefTW00Pc9rV6puYCxEwc8= Subject key identifier: 1B:5C:C7:09:A9:2E:C6:ED:E7:02:B7:32:31:69:00:8B:FA:3D:E9:44 Authority key identifier: FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE Certificate issuer: /CN=A9198D02/serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE Certificate serial: 08D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft Manifest number: 08B2 Signing time: Mon 02 Mar 2026 00:59:33 +0000 Manifest this update: Mon 02 Mar 2026 00:59:31 +0000 Manifest next update: Mon 09 Mar 2026 00:59:31 +0000 Files and hashes: 1: _ONoVUVgesO8wzQNA5shaIJxJ74.crl (hash: R20vpAmd1nj8WgFpwpz9cx0QyJ6GzEeNmregtHBRskg=) 2: 51A7E3C28EB711EBB8A7B01DC4F9AE02.roa (hash: +lxeSugWEuY86E4w4UGBy7QvT+6uw0dBO3CLwKjhb3k=) 3: 3BF0A4D868F511ECAB15DE18C4F9AE02.roa (hash: d8G/TfpNpL6HX37ocKvM5TsVlVjVR76JD7mZYT1iKdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:59:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2257 (0x8d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D02, serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE Validity Not Before: Mar 2 00:59:31 2026 GMT Not After : Mar 9 00:59:31 2026 GMT Subject: CN=69a4e0f4-8c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f0:27:7d:e4:dc:9b:33:f8:ed:79:eb:37:e6: 98:c1:05:44:e4:67:ff:a6:e2:ac:6c:5a:1e:8a:40: 8e:28:87:33:9f:d6:28:be:b5:63:7f:c8:ee:21:18: af:ee:3b:be:cc:c5:80:b2:d8:23:76:bf:64:3a:df: 52:66:14:11:f8:7b:26:ba:df:3f:aa:b9:b1:4d:28: fa:ab:5f:87:46:60:12:06:0d:c1:5c:33:a1:96:dd: d4:cd:02:43:db:30:8c:e7:6d:21:cd:72:8d:35:c8: e4:10:88:2d:4c:19:41:40:53:12:f7:21:43:56:b4: 7e:47:24:6b:c0:8d:31:ef:ed:5d:86:1c:bf:5e:4b: e1:39:49:d3:8e:f4:cb:98:16:8b:53:04:2a:e3:29: 2a:46:a2:a2:fa:f7:a1:c4:03:86:aa:70:db:b7:aa: 8a:49:eb:d6:68:6c:bb:36:eb:d9:64:4a:c1:8d:14: e9:6f:05:e5:4d:c4:9d:05:b0:f5:94:c0:b7:68:2a: 1c:6c:4c:21:4c:66:6f:67:f5:f8:e8:b4:73:8c:6f: 64:1b:c4:cb:98:50:76:f1:20:bc:94:38:6c:5f:bf: 78:c0:04:ef:1c:52:f1:28:c8:8c:ee:6a:69:d5:4d: fb:4e:97:e6:4e:ea:f0:95:e5:50:cd:27:93:fd:51: ec:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5C:C7:09:A9:2E:C6:ED:E7:02:B7:32:31:69:00:8B:FA:3D:E9:44 X509v3 Authority Key Identifier: keyid:FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:6e:d8:ad:79:66:39:b2:a0:b1:42:3b:5e:f8:74:c4:d8:b3: e8:60:2e:e5:00:09:76:38:ec:03:da:b1:d3:61:be:22:3f:13: a5:d1:0e:36:cd:ef:90:b4:ac:f1:12:37:89:83:bc:13:d4:9c: 15:86:26:fa:b5:5f:96:73:35:e7:65:84:76:e4:fa:0f:8b:91: af:7e:80:fe:4d:65:86:cf:c0:61:c5:96:7e:87:fa:ab:d1:c8: 1f:9d:68:a3:5f:c3:01:b9:bd:55:42:4c:9a:62:2e:70:a9:9b: 33:4f:84:d0:4e:f4:7e:21:87:05:08:ba:2d:d5:3a:dc:4c:99: fc:ab:9d:3c:60:8d:cb:43:06:55:74:bb:54:72:af:aa:2d:72: 72:c4:aa:02:95:0b:dc:98:ae:14:f6:dd:58:2e:c9:3e:c4:46: d2:df:94:1a:2c:f3:25:24:6b:84:b7:2b:1b:6b:d4:46:00:18: 7b:43:cc:76:b6:36:56:95:8f:37:29:f6:59:08:de:24:2d:66: a3:fc:c4:bf:73:64:a0:55:02:fd:66:65:53:55:bf:a0:58:e2: b9:98:3f:88:e9:7c:3b:84:c2:be:de:94:c7:ac:91:b5:b9:92: 4e:12:8a:08:4f:bf:87:6a:e3:95:49:eb:f1:25:ee:2c:46:f9: 9d:4f:8b:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThEMDIxMTAvBgNVBAUTKEZDRTM2ODU1NDU2MDdBQzNCQ0MzMzQwRDAzOUIyMTY4 ODI3MTI3QkUwHhcNMjYwMzAyMDA1OTMxWhcNMjYwMzA5MDA1OTMxWjAYMRYwFAYD VQQDEw02OWE0ZTBmNC04Yzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPAnfeTcmzP47XnrN+aYwQVE5Gf/puKsbFoeikCOKIczn9YovrVjf8juIRiv 7ju+zMWAstgjdr9kOt9SZhQR+Hsmut8/qrmxTSj6q1+HRmASBg3BXDOhlt3UzQJD 2zCM520hzXKNNcjkEIgtTBlBQFMS9yFDVrR+RyRrwI0x7+1dhhy/XkvhOUnTjvTL mBaLUwQq4ykqRqKi+vehxAOGqnDbt6qKSevWaGy7NuvZZErBjRTpbwXlTcSdBbD1 lMC3aCocbEwhTGZvZ/X46LRzjG9kG8TLmFB28SC8lDhsX794wATvHFLxKMiM7mpp 1U37TpfmTurwleVQzSeT/VHsLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBtcxwmp Lsbt5wK3MjFpAIv6PelEMB8GA1UdIwQYMBaAFPzjaFVFYHrDvMM0DQObIWiCcSe+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQwMi8yOEE1MDZGQUQ4 NjcxMUVBOEI1MTYyMERDNEY5QUUwMi9fT05vVlVWZ2VzTzh3elFOQTVzaGFJSnhK NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19PTm9WVVZnZXNPOHd6UU5BNXNoYUlKeEo3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQwMi8yOEE1MDZGQUQ4NjcxMUVBOEI1MTYyMERDNEY5QUUwMi9fT05vVlVWZ2Vz Tzh3elFOQTVzaGFJSnhKNzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl27YrXlmObKgsUI7Xvh0xNiz6GAu5QAJdjjsA9qx02G+Ij8TpdEONs3vkLSs 8RI3iYO8E9ScFYYm+rVflnM152WEduT6D4uRr36A/k1lhs/AYcWWfof6q9HIH51o o1/DAbm9VUJMmmIucKmbM0+E0E70fiGHBQi6LdU63EyZ/KudPGCNy0MGVXS7VHKv qi1ycsSqApUL3JiuFPbdWC7JPsRG0t+UGizzJSRrhLcrG2vURgAYe0PMdrY2VpWP Nyn2WQjeJC1mo/zEv3NkoFUC/WZlU1W/oFjiuZg/iOl8O4TCvt6Ux6yRtbmSThKK CE+/h2rjlUnr8SXuLEb5nU+LHw== -----END CERTIFICATE-----Generated at Mon Mar 2 16:48:43 2026 by rpki-client