$ rpki-client -vvf rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft File: SdD0BpcqgFseep_CD7OpzLdmKs4.mft (raw, json) Hash identifier: DCafNwZ34LrNLD1TUfT88nWFF0PZfdooubqKqCzTjj8= Subject key identifier: A1:C3:C4:AE:A1:4C:30:BC:49:70:FA:BF:AB:AE:C9:BB:5F:E9:0E:84 Authority key identifier: 49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE Certificate issuer: /CN=A919D396/serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft Manifest number: 0210 Signing time: Sun 01 Mar 2026 03:42:11 +0000 Manifest this update: Sun 01 Mar 2026 03:42:11 +0000 Manifest next update: Sun 08 Mar 2026 03:42:11 +0000 Files and hashes: 1: SdD0BpcqgFseep_CD7OpzLdmKs4.crl (hash: s1VzmmCn5Hs4zPY8W3oNjCfObA4KdN1WL0MfDJYK5LQ=) 2: 110CB61EEFA211ED87AD1F0BC4F9AE02.roa (hash: H97m0xGfwTSK15tOF7js1ABWMy5iF+l3/IsWtR98xbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D396, serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE Validity Not Before: Mar 1 03:42:11 2026 GMT Not After : Mar 8 03:42:11 2026 GMT Subject: CN=69a3b593-f8ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:1f:4d:36:39:ce:a0:1e:86:87:7a:10:cf: 67:8b:9c:1a:1b:1b:8b:d0:b4:c0:d1:dd:7b:50:2a: 02:4f:85:7d:69:b9:f8:c8:3e:b4:51:00:6f:3f:64: da:48:34:4a:3d:dc:cd:9c:00:ce:e5:7a:9b:7a:1e: 13:c3:eb:3c:d1:ad:25:82:11:a4:df:ac:82:91:26: 1a:9e:85:d3:bf:1c:08:a9:5b:c5:aa:c6:50:5c:2b: b0:68:3b:31:47:d1:00:b6:b2:3d:70:ea:ae:e9:fb: 36:b3:51:10:18:79:5d:ee:0a:7e:a4:f9:29:f5:65: 4c:23:ef:69:13:27:f4:94:d7:93:e7:6e:0d:6b:8b: 66:c4:6d:79:51:53:df:f3:e7:61:3f:56:88:fd:91: 7a:23:76:59:fc:f4:72:b8:88:48:7b:22:5f:b9:5a: 6b:a3:4d:4c:07:80:c9:31:5c:e2:90:cb:4e:a0:34: a7:38:0b:7d:e1:c1:15:48:f6:95:a6:2e:8e:38:d9: f1:9f:ca:a9:df:1a:fd:b7:d3:4d:2f:c8:46:b8:43: d5:6f:c4:2b:0b:5e:c9:d2:d1:be:b6:f0:12:b4:3f: b0:31:5d:8b:b2:64:8d:64:cb:f5:0d:87:c4:83:59: a6:16:d1:b0:de:c4:3c:1b:d2:d4:c1:58:02:ce:1e: bf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C3:C4:AE:A1:4C:30:BC:49:70:FA:BF:AB:AE:C9:BB:5F:E9:0E:84 X509v3 Authority Key Identifier: keyid:49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:d9:56:9d:fe:ef:96:c6:18:c2:9a:d0:01:4e:ff:fd:9f:d0: aa:8a:a0:05:00:28:e6:ef:63:a2:14:2b:a1:2f:29:25:7d:1f: 09:9b:8b:a1:65:bc:a2:76:ec:cc:1b:53:e7:c5:ad:03:a1:e0: 67:e2:86:9b:7f:dd:c3:b8:13:f5:d5:52:a0:8d:0a:fd:f5:f3: 68:77:7f:a0:be:58:cc:64:d5:f8:9d:80:d5:31:37:b6:ae:8b: a8:26:34:ff:5a:41:19:cd:12:77:a2:b1:37:be:de:80:34:62: 98:d4:6d:6e:67:47:7a:41:67:e3:fe:4e:62:70:2e:36:34:ec: 5b:88:8f:15:4b:3b:56:9e:09:f9:e1:1f:99:ac:6d:ca:e6:bc: ba:db:9e:3a:e8:32:0f:f0:20:f4:07:fd:86:1b:c5:15:8f:29: 43:b1:0b:31:4b:5e:8a:02:eb:40:9e:fa:22:e0:68:33:99:02: a4:02:4c:df:4b:77:8a:94:0a:9d:aa:c3:25:81:03:e4:f5:01: 22:c9:64:2d:55:47:6d:0b:68:4b:95:22:6f:87:dd:9a:fa:b3: 36:cb:9f:52:b4:47:a8:ef:6d:7a:f9:ad:0e:0c:26:e8:8c:fa: f4:62:be:40:0a:2a:14:fc:ae:ab:a2:44:ff:4b:a8:61:2d:88: 0e:42:a7:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQzOTYxMTAvBgNVBAUTKDQ5RDBGNDA2OTcyQTgwNUIxRTdBOUZDMjBGQjNBOUND Qjc2NjJBQ0UwHhcNMjYwMzAxMDM0MjExWhcNMjYwMzA4MDM0MjExWjAYMRYwFAYD VQQDDA02OWEzYjU5My1mOGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvR0fTTY5zqAehod6EM9ni5waGxuL0LTA0d17UCoCT4V9abn4yD60UQBvP2Ta SDRKPdzNnADO5Xqbeh4Tw+s80a0lghGk36yCkSYanoXTvxwIqVvFqsZQXCuwaDsx R9EAtrI9cOqu6fs2s1EQGHld7gp+pPkp9WVMI+9pEyf0lNeT524Na4tmxG15UVPf 8+dhP1aI/ZF6I3ZZ/PRyuIhIeyJfuVpro01MB4DJMVzikMtOoDSnOAt94cEVSPaV pi6OONnxn8qp3xr9t9NNL8hGuEPVb8QrC17J0tG+tvAStD+wMV2LsmSNZMv1DYfE g1mmFtGw3sQ8G9LUwVgCzh6/7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKHDxK6h TDC8SXD6v6uuybtf6Q6EMB8GA1UdIwQYMBaAFEnQ9AaXKoBbHnqfwg+zqcy3ZirO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDM5Ni85NUQwREY3QUVG OUMxMUVEOUJGNjNCODZDNEY5QUUwMi9TZEQwQnBjcWdGc2VlcF9DRDdPcHpMZG1L czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NkRDBCcGNxZ0ZzZWVwX0NEN09wekxkbUtzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDM5Ni85NUQwREY3QUVGOUMxMUVEOUJGNjNCODZDNEY5QUUwMi9TZEQwQnBjcWdG c2VlcF9DRDdPcHpMZG1LczQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVdlWnf7vlsYYwprQAU7//Z/QqoqgBQAo5u9johQroS8pJX0fCZuLoWW8onbs zBtT58WtA6HgZ+KGm3/dw7gT9dVSoI0K/fXzaHd/oL5YzGTV+J2A1TE3tq6LqCY0 /1pBGc0Sd6KxN77egDRimNRtbmdHekFn4/5OYnAuNjTsW4iPFUs7Vp4J+eEfmaxt yua8utueOugyD/Ag9Af9hhvFFY8pQ7ELMUteigLrQJ76IuBoM5kCpAJM30t3ipQK narDJYED5PUBIslkLVVHbQtoS5Uib4fdmvqzNsufUrRHqO9tevmtDgwm6Iz69GK+ QAoqFPyuq6JE/0uoYS2IDkKnOg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:23:29 2026 by rpki-client