$ rpki-client -vvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft File: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft (raw, json) Hash identifier: 2PPH+yRUZDJCFSs3pw8y0d+xiiiKu8Avh5KMJXEzvfo= Subject key identifier: BB:71:7D:E1:B2:3F:A9:7A:91:FA:2B:10:90:61:E6:00:26:46:E1:EE Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E Certificate issuer: /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E Certificate serial: 0500 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft Manifest number: 04EF Signing time: Sun 01 Mar 2026 00:21:38 +0000 Manifest this update: Sun 01 Mar 2026 00:21:37 +0000 Manifest next update: Sun 08 Mar 2026 00:21:37 +0000 Files and hashes: 1: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl (hash: 30AieNz6CTgfqobuQZU0Ha4qPZJaT2wmvcBDQwYR4Ac=) 2: F943257E12F511EDA9E7C939C4F9AE02.roa (hash: ZmMCsrKFb8F3TXCoPQLd/r/io3kjRIIOGoFQ0FZJG1s=) 3: 4CC86698C4FA11EE86A51C0EC4F9AE02.roa (hash: KF7ZSTRzk7H7eSuSlkMbC7mPu67a1YIUs7/7FFX+ckI=) 4: D9A7B280C4FA11EEA3AF2932C4F9AE02.roa (hash: 6iTGc41KA0sY+gsHQWYfF7qQd2pfwJizCymHv2EKb+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 00:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1280 (0x500) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C19A, serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E Validity Not Before: Mar 1 00:21:37 2026 GMT Not After : Mar 8 00:21:37 2026 GMT Subject: CN=69a38692-9f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:65:6e:ea:4e:76:d0:0b:79:3f:ec:c1:25:6e: 37:22:67:b4:21:b5:66:72:d1:ea:bf:0b:ba:9a:7d: 71:63:5a:f1:c2:e0:02:b0:a5:5e:14:1c:6c:76:01: 7e:99:17:aa:b1:55:e5:8b:20:d1:42:21:76:a2:11: 30:73:ad:38:ea:a3:38:54:7d:dc:2e:fb:6d:ac:66: 4e:ba:70:80:6c:a8:d9:52:e1:a2:29:ff:95:02:2e: 2b:f8:bf:32:f7:3a:f9:d0:cf:ca:dd:d1:af:b5:37: c3:3a:aa:3b:70:0b:df:54:12:a3:fa:a7:5e:ac:09: 67:57:71:e1:c8:47:f0:58:c1:13:a7:e2:a9:9e:3e: 99:de:9c:aa:4a:d6:00:f8:3c:15:a9:ca:6f:94:58: a7:d6:31:ef:27:89:bb:ee:26:d6:c2:e2:9d:3c:89: f9:1a:85:74:e0:49:f5:ae:06:f1:85:88:9c:d6:bc: 53:d4:5c:66:bb:90:ba:8f:a7:d0:0d:ce:1b:c5:be: b7:8a:00:e2:7c:59:9f:59:d7:c1:d9:9b:6d:1d:36: f6:04:c6:ce:6f:f0:e9:44:6a:d2:71:72:44:79:0f: ff:0c:d8:89:da:4c:38:8f:d6:ba:f8:02:12:8d:64: d4:cb:13:ec:c9:1c:ff:c7:ba:76:c8:ba:7a:95:ee: 1f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:71:7D:E1:B2:3F:A9:7A:91:FA:2B:10:90:61:E6:00:26:46:E1:EE X509v3 Authority Key Identifier: keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:d7:dd:db:d6:9e:0a:86:8b:09:07:12:cb:fb:61:39:1f:9f: d4:c1:b6:e1:2a:4d:81:5e:45:a3:55:24:9c:e9:3c:fe:73:f1: 22:9d:fa:9c:9a:ff:45:b7:eb:6e:6f:8d:68:2c:de:c5:81:ac: 75:70:4c:fa:d9:0d:e7:c7:36:a3:b2:d4:3b:7b:a2:ce:30:20: c9:34:5e:d7:90:07:bc:30:d3:4c:c6:d0:af:14:56:90:61:2f: 2b:76:20:b7:c8:88:9a:cc:2b:04:bf:cd:a1:3f:08:58:96:d3: ec:fa:75:f8:f3:f9:02:49:4a:62:73:d5:47:66:51:4a:74:59: 6f:25:00:92:4f:9e:e8:17:a3:db:15:2b:65:6e:0a:d9:4a:33: cc:8c:03:5c:20:03:42:d9:a2:5e:a4:75:51:47:96:85:48:a9: 43:cc:56:ed:2c:ee:57:8c:be:a0:34:c6:a4:15:6d:93:5f:13: ee:84:f1:d5:0a:1c:81:90:59:21:a0:94:f0:cf:e9:12:45:d3: f7:14:5c:8d:24:24:19:6b:e3:3d:ad:ea:57:d5:c6:53:a1:cb: 69:87:83:74:80:b7:cd:15:cb:25:f2:5e:05:81:96:44:d3:ec: 20:b5:6f:e6:63:3e:23:92:b8:b4:8c:b4:14:83:ed:99:7b:fc: 16:8e:d1:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMxOUExMTAvBgNVBAUTKEQ4OUNGRjZEN0Q5NTUxQUU3MDREOTNFOTc1NTM2MTZD OERCMTNGNUUwHhcNMjYwMzAxMDAyMTM3WhcNMjYwMzA4MDAyMTM3WjAYMRYwFAYD VQQDDA02OWEzODY5Mi05ZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGVu6k520At5P+zBJW43Ime0IbVmctHqvwu6mn1xY1rxwuACsKVeFBxsdgF+ mReqsVXliyDRQiF2ohEwc6046qM4VH3cLvttrGZOunCAbKjZUuGiKf+VAi4r+L8y 9zr50M/K3dGvtTfDOqo7cAvfVBKj+qderAlnV3HhyEfwWMETp+Kpnj6Z3pyqStYA +DwVqcpvlFin1jHvJ4m77ibWwuKdPIn5GoV04En1rgbxhYic1rxT1Fxmu5C6j6fQ Dc4bxb63igDifFmfWdfB2ZttHTb2BMbOb/DpRGrScXJEeQ//DNiJ2kw4j9a6+AIS jWTUyxPsyRz/x7p2yLp6le4fRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLtxfeGy P6l6kforEJBh5gAmRuHuMB8GA1UdIwQYMBaAFNic/219lVGucE2T6XVTYWyNsT9e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzE5QS8yNEFCMkMzRTRG OEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVhNXdUWlBwZFZOaGJJMnhQ MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJKel9iWDJWVWE1d1RaUHBkVk5oYkkyeFAxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzE5QS8yNEFCMkMzRTRGOEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVh NXdUWlBwZFZOaGJJMnhQMTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgtfd29aeCoaLCQcSy/thOR+f1MG24SpNgV5Fo1UknOk8/nPxIp36nJr/Rbfr bm+NaCzexYGsdXBM+tkN58c2o7LUO3uizjAgyTRe15AHvDDTTMbQrxRWkGEvK3Yg t8iImswrBL/NoT8IWJbT7Pp1+PP5AklKYnPVR2ZRSnRZbyUAkk+e6Bej2xUrZW4K 2UozzIwDXCADQtmiXqR1UUeWhUipQ8xW7SzuV4y+oDTGpBVtk18T7oTx1QocgZBZ IaCU8M/pEkXT9xRcjSQkGWvjPa3qV9XGU6HLaYeDdIC3zRXLJfJeBYGWRNPsILVv 5mM+I5K4tIy0FIPtmXv8Fo7RYw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:16:41 2026 by rpki-client