$ rpki-client -vvf rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft File: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft (raw, json) Hash identifier: hNOBuzG90tcX1HmerIgZuyWtX8WnmjDN6rod335SEcM= Subject key identifier: 28:E2:2B:5D:24:83:AA:19:B7:5D:79:AB:9F:63:E0:E3:24:46:B5:78 Authority key identifier: D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD Certificate issuer: /CN=A9122219/serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD Certificate serial: 0BD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft Manifest number: 0BCC Signing time: Sat 04 Apr 2026 18:45:21 +0000 Manifest this update: Sat 04 Apr 2026 18:45:20 +0000 Manifest next update: Sat 11 Apr 2026 18:45:20 +0000 Files and hashes: 1: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl (hash: STqCE3ZozQaKLZQspuKdxkVscyKo7R3Ee4tD1RZEUVM=) 2: CD145D246E4E11EDBE02B065C4F9AE02.roa (hash: XKDSZPzMqa5QorcvgY8yeybuV/ov43f+onvjmQy64ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3032 (0xbd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122219, serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD Validity Not Before: Apr 4 18:45:20 2026 GMT Not After : Apr 11 18:45:20 2026 GMT Subject: CN=69d15c41-0b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:78:18:32:8c:37:34:b1:68:64:fb:16:4e:62: 56:6f:08:cd:1d:7c:41:b8:74:c5:b2:8a:ac:3d:f8: 0e:3c:1c:b3:a3:98:96:55:e0:84:a5:8d:63:32:e6: e4:dd:b4:72:de:34:bb:70:88:f1:11:c8:34:07:a0: 40:35:fd:9a:c3:ce:b7:5c:a0:15:13:df:e0:46:4a: 98:0d:9f:d2:82:93:02:79:d7:57:0f:85:e6:01:1f: 99:6a:67:bb:89:b6:e4:43:18:0c:ae:05:24:c5:1a: da:0a:c6:62:8a:4d:2f:1a:03:94:9e:50:47:60:da: e5:08:fe:0d:a0:47:0a:f8:57:a7:3e:98:2a:db:90: 90:b6:15:8e:e1:de:23:81:05:1f:3a:03:89:d1:e7: d9:c1:87:4f:fa:d6:eb:f4:15:ce:eb:89:52:8a:10: 7a:4b:25:a6:e6:9a:d4:7f:fb:43:8d:6d:4d:87:f2: e7:e5:66:6b:da:dd:f6:3b:28:2f:a8:60:69:1e:e6: 04:f2:6d:98:60:0d:29:5b:10:71:3d:cd:ca:bd:ff: c3:d7:e5:61:54:66:20:b1:14:ff:1e:a9:2e:df:79: e8:26:85:bc:0f:2d:35:b2:3c:eb:6b:c9:4c:60:9d: 70:91:3d:51:cd:69:ca:d1:85:7c:b9:75:96:e2:39: 7e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E2:2B:5D:24:83:AA:19:B7:5D:79:AB:9F:63:E0:E3:24:46:B5:78 X509v3 Authority Key Identifier: keyid:D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:a1:b3:bb:ae:fd:bc:a0:93:97:23:d2:a1:21:9f:41:e6:3e: e4:95:9a:be:d8:e4:bc:44:91:72:30:88:b0:17:df:ac:20:fc: 4a:0e:4b:34:4c:21:cc:55:5e:cc:3f:cb:bf:62:c6:3c:3c:4b: 6d:97:c2:4f:3f:fb:40:da:7e:71:9c:e6:cf:ef:b0:a7:84:58: b4:b5:3f:43:97:57:ac:67:2e:c2:f0:36:4d:83:ce:cd:78:9d: 1d:b0:b3:3a:0d:3d:17:8c:7f:b5:42:a3:a8:5d:24:cf:dd:12: de:c4:2a:60:39:07:76:dd:8f:14:5e:b7:89:65:63:bb:bd:b1: 44:68:c9:0d:da:d9:c9:85:e1:06:3e:22:6e:c3:6f:00:a4:f2: af:3f:40:21:cb:f9:dc:ce:17:e7:14:d1:ca:0e:76:6c:3b:3e: d1:10:9d:fd:b2:67:62:2a:91:0c:ba:8d:ac:ed:1d:f0:63:45: 31:ef:b1:86:74:43:3b:6d:6d:58:05:d5:04:4f:20:b9:25:1a: 4f:16:1e:4e:f4:16:ce:b3:09:78:40:97:c7:0b:71:f2:af:80: 7e:30:2b:64:6d:da:c3:85:c1:d1:39:21:0d:db:38:e1:34:83: 0b:92:b8:c7:c0:4e:02:32:89:a8:af:9f:e9:35:c1:15:f3:a2: b0:3b:89:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyMTkxMTAvBgNVBAUTKEQwRDJGNDVBNDZEMjY3NjYwMTRCNzg2MDE5QTA5QTgz MzQ4NzNEQUQwHhcNMjYwNDA0MTg0NTIwWhcNMjYwNDExMTg0NTIwWjAYMRYwFAYD VQQDEw02OWQxNWM0MS0wYjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHgYMow3NLFoZPsWTmJWbwjNHXxBuHTFsoqsPfgOPByzo5iWVeCEpY1jMubk 3bRy3jS7cIjxEcg0B6BANf2aw863XKAVE9/gRkqYDZ/SgpMCeddXD4XmAR+Zame7 ibbkQxgMrgUkxRraCsZiik0vGgOUnlBHYNrlCP4NoEcK+FenPpgq25CQthWO4d4j gQUfOgOJ0efZwYdP+tbr9BXO64lSihB6SyWm5prUf/tDjW1Nh/Ln5WZr2t32Oygv qGBpHuYE8m2YYA0pWxBxPc3Kvf/D1+VhVGYgsRT/Hqku33noJoW8Dy01sjzra8lM YJ1wkT1RzWnK0YV8uXWW4jl+pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCjiK10k g6oZt115q59j4OMkRrV4MB8GA1UdIwQYMBaAFNDS9FpG0mdmAUt4YBmgmoM0hz2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjIxOS84MkZFODlDQzND MzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oyWUJTM2hnR2FDYWd6U0hQ YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBOTDBXa2JTWjJZQlMzaGdHYUNhZ3pTSFBhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjIxOS84MkZFODlDQzNDMzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oy WUJTM2hnR2FDYWd6U0hQYTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARqGzu679vKCTlyPSoSGfQeY+5JWavtjkvESRcjCIsBffrCD8Sg5LNEwhzFVe zD/Lv2LGPDxLbZfCTz/7QNp+cZzmz++wp4RYtLU/Q5dXrGcuwvA2TYPOzXidHbCz Og09F4x/tUKjqF0kz90S3sQqYDkHdt2PFF63iWVju72xRGjJDdrZyYXhBj4ibsNv AKTyrz9AIcv53M4X5xTRyg52bDs+0RCd/bJnYiqRDLqNrO0d8GNFMe+xhnRDO21t WAXVBE8guSUaTxYeTvQWzrMJeECXxwtx8q+AfjArZG3aw4XB0TkhDds44TSDC5K4 x8BOAjKJqK+f6TXBFfOisDuJwg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:33 2026 by rpki-client