$ rpki-client -vvf rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft File: _Ern2eP0GafSBKVMedHz76mn1sg.mft (raw, json) Hash identifier: 2aWEwSeZGI+9ryO+CulEVQVB+Bj+6TKXcoGYjtFPM/w= Subject key identifier: F0:5C:B6:8F:6B:B3:29:1D:F3:77:04:11:5A:49:6E:C2:C5:38:F5:3F Authority key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 Certificate issuer: /CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Certificate serial: 0252 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft Manifest number: 0248 Signing time: Fri 13 Mar 2026 01:37:16 +0000 Manifest this update: Fri 13 Mar 2026 01:37:16 +0000 Manifest next update: Fri 20 Mar 2026 01:37:16 +0000 Files and hashes: 1: _Ern2eP0GafSBKVMedHz76mn1sg.crl (hash: Xrr9B4O9M0n4WCaCkCbQbHf8CjvexnOrE9UGSJ3n6ek=) 2: 05BD1998108D11F197077311333D8C67.roa (hash: ZxF538zON35iTObIR2PUbabLdiG79qM6J447o9x0f0c=) 3: 8E412748A33311EDA2CB2420C4F9AE02.roa (hash: 8ooMgmV7Ud+S1xspsx7qZBXNFAFm0OtpaMWTTHwLKP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 01:37:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 594 (0x252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262F0, serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Validity Not Before: Mar 13 01:37:16 2026 GMT Not After : Mar 20 01:37:16 2026 GMT Subject: CN=69b36a4c-a737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:98:38:5e:94:56:aa:46:17:19:44:91:b9:94: f3:d5:69:bb:6c:ed:84:88:e7:bb:78:a4:ac:be:88: 93:48:c5:30:d5:b6:bc:c2:31:ac:9e:a2:3b:a9:b9: bc:58:aa:08:1d:cb:d4:84:0a:b7:b9:3a:4a:bf:bf: de:36:c2:3f:19:75:3b:eb:7a:12:34:2c:3f:58:10: 86:fc:3a:17:9e:c8:46:4d:06:fd:6d:8d:a6:f8:35: 46:c2:c8:f1:04:81:ee:28:6e:12:06:08:de:fd:af: a7:ba:8a:be:b0:43:31:f1:81:83:ae:7f:6a:b2:a1: c5:1c:f2:28:d7:16:9c:11:14:ad:62:9a:f6:0c:0a: 31:b1:f2:1f:b3:b5:ea:c6:91:6e:17:68:fa:ee:f1: 47:5a:ce:eb:45:04:d2:13:97:34:64:78:ca:50:3e: a8:b7:b0:58:74:d7:a5:ec:c4:e4:b9:0a:e6:ae:35: 50:93:c1:35:b5:11:44:00:1b:a6:46:d5:aa:6b:09: 00:a5:70:cb:40:d2:0e:60:ad:49:37:45:26:80:18: 82:0d:e5:c1:5b:2a:7d:d1:b4:9f:fb:9a:1e:3a:dd: 71:e3:b4:d1:62:4b:61:72:21:b5:d3:24:1d:45:6b: c7:ea:70:d4:98:0d:10:73:af:67:aa:de:c9:f7:ed: ca:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5C:B6:8F:6B:B3:29:1D:F3:77:04:11:5A:49:6E:C2:C5:38:F5:3F X509v3 Authority Key Identifier: keyid:FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:24:c3:61:52:ec:64:5c:41:53:1f:75:99:82:9e:d6:b9:86: fd:cd:45:92:e0:81:ae:ae:41:70:3f:19:fa:22:b7:40:c6:12: 4b:e2:5a:b6:b6:8a:1c:49:1e:47:c3:af:79:3f:80:ad:19:6b: 22:20:7a:75:b2:75:38:cb:04:85:28:aa:04:1e:59:05:e0:a2: d7:11:fa:d5:80:ed:67:2a:b7:02:ae:48:c5:ed:3e:e6:3b:76: b3:e8:ae:a6:36:58:8f:e3:3f:2c:dc:1d:32:2a:aa:89:7a:b5: 7f:ad:6e:b6:3a:2a:3d:b0:b1:68:7c:18:4d:77:be:5f:81:3c: 78:04:de:d8:e1:d6:b5:ca:2c:f5:1a:b0:fe:37:1d:c5:0b:88: c9:cf:d5:39:c7:d6:6c:6e:95:6d:4f:20:47:a8:c2:0f:5c:8e: 76:d6:0c:a1:7a:08:d1:18:e9:74:f1:b7:50:9a:3c:04:30:fa: 66:62:9e:a6:58:9d:ea:53:18:b8:89:d7:d9:bc:ff:7e:7d:60: af:7f:8c:71:9f:af:f6:7e:2a:ef:43:7d:53:e6:d8:94:d1:ef: 37:19:53:c1:8a:d7:0f:a0:60:2a:98:3d:b4:93:b3:87:99:19: 9d:7e:7c:2e:ce:a6:28:15:a1:42:55:92:60:16:95:05:6e:a7: d2:8f:58:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyRjAxMTAvBgNVBAUTKEZDNEFFN0Q5RTNGNDE5QTdEMjA0QTU0Qzc5RDFGM0VG QTlBN0Q2QzgwHhcNMjYwMzEzMDEzNzE2WhcNMjYwMzIwMDEzNzE2WjAYMRYwFAYD VQQDEw02OWIzNmE0Yy1hNzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkpg4XpRWqkYXGUSRuZTz1Wm7bO2EiOe7eKSsvoiTSMUw1ba8wjGsnqI7qbm8 WKoIHcvUhAq3uTpKv7/eNsI/GXU763oSNCw/WBCG/DoXnshGTQb9bY2m+DVGwsjx BIHuKG4SBgje/a+nuoq+sEMx8YGDrn9qsqHFHPIo1xacERStYpr2DAoxsfIfs7Xq xpFuF2j67vFHWs7rRQTSE5c0ZHjKUD6ot7BYdNel7MTkuQrmrjVQk8E1tRFEABum RtWqawkApXDLQNIOYK1JN0UmgBiCDeXBWyp90bSf+5oeOt1x47TRYkthciG10yQd RWvH6nDUmA0Qc69nqt7J9+3KjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPBcto9r sykd83cEEVpJbsLFOPU/MB8GA1UdIwQYMBaAFPxK59nj9Bmn0gSlTHnR8++pp9bI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJGMC8zM0FEMEE2MkEz MEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdhZlNCS1ZNZWRIejc2bW4x c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Fcm4yZVAwR2FmU0JLVk1lZEh6NzZtbjFzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjJGMC8zM0FEMEE2MkEzMEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdh ZlNCS1ZNZWRIejc2bW4xc2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAriTDYVLsZFxBUx91mYKe1rmG/c1FkuCBrq5BcD8Z+iK3QMYSS+JatraKHEke R8OveT+ArRlrIiB6dbJ1OMsEhSiqBB5ZBeCi1xH61YDtZyq3Aq5Ixe0+5jt2s+iu pjZYj+M/LNwdMiqqiXq1f61utjoqPbCxaHwYTXe+X4E8eATe2OHWtcos9Rqw/jcd xQuIyc/VOcfWbG6VbU8gR6jCD1yOdtYMoXoI0RjpdPG3UJo8BDD6ZmKeplid6lMY uInX2bz/fn1gr3+McZ+v9n4q70N9U+bYlNHvNxlTwYrXD6BgKpg9tJOzh5kZnX58 Ls6mKBWhQlWSYBaVBW6n0o9Ycw== -----END CERTIFICATE-----Generated at Sat Mar 14 00:13:08 2026 by rpki-client