$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft File: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft (raw, json) Hash identifier: MA3IIRXMqyr5zb6Fy85rxwGDuUo8n8sClejLEaRbTRA= Subject key identifier: 01:9D:C7:AA:A5:AB:A2:81:4D:CB:DA:D0:11:DB:49:F7:59:84:6D:2A Authority key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 Certificate issuer: /CN=A918EF87/serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft Manifest number: A3 Signing time: Sun 05 Apr 2026 06:39:11 +0000 Manifest this update: Sun 05 Apr 2026 06:39:11 +0000 Manifest next update: Sun 12 Apr 2026 06:39:11 +0000 Files and hashes: 1: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl (hash: 5QFRgf8IfrSRopBNIZP+/7XKc14IVz+dcPDC9xmqNCQ=) 2: 4C2B8F143BAD11F08B837C50C4F9AE02.roa (hash: M42F29+lHWSZmf5X/47K8ifG1ySfiTbA4ZzoyOCU96w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Validity Not Before: Apr 5 06:39:11 2026 GMT Not After : Apr 12 06:39:11 2026 GMT Subject: CN=69d2038f-f135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:3b:43:7e:4e:bb:b5:9f:35:1c:f2:a0:04: bf:55:48:c0:50:b4:45:32:f2:c1:2e:82:99:19:6e: 96:04:1b:56:32:45:49:d6:65:2a:73:38:84:db:f5: e0:a4:ca:93:f8:a8:61:46:ef:f3:7d:51:30:43:77: ae:d9:bb:2f:3b:1f:1c:67:59:12:fe:79:70:f6:67: e0:95:88:22:9d:c7:9e:6d:2f:85:e3:36:bd:9b:f4: dc:12:83:f0:6a:ae:48:04:bb:b0:d5:2f:bd:7b:a5: 16:8d:14:0e:69:97:0b:00:e1:97:7f:5e:a7:50:17: 47:86:88:eb:26:d4:5a:c6:21:5c:61:ca:b1:c9:7c: 5b:55:fe:fc:45:91:8a:ac:14:e2:46:67:d8:ec:a2: bc:e8:50:e0:35:ff:59:22:b3:b7:2a:51:46:8c:2c: 75:02:3a:83:f7:d6:7c:a0:1c:84:bc:fa:4f:e3:a1: 56:57:58:d2:09:a0:e5:58:0c:05:00:99:80:0f:b4: d7:fd:06:7d:c8:cf:05:d8:54:fd:70:1c:15:f6:96: 2d:da:63:d7:b7:2f:6c:96:77:7c:97:63:b8:1f:cc: 49:a2:d5:8d:f1:8f:4c:28:7d:da:f8:98:d5:35:e2: 56:6e:9a:87:71:9f:d0:e0:03:99:26:2b:e5:85:2f: 30:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9D:C7:AA:A5:AB:A2:81:4D:CB:DA:D0:11:DB:49:F7:59:84:6D:2A X509v3 Authority Key Identifier: keyid:0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:6f:3d:2e:7f:72:1d:3c:74:b9:99:a7:55:7a:0d:dc:a8:d6: 77:8d:76:c0:22:df:3d:2d:46:d7:d2:3f:76:58:09:d4:a8:12: c8:51:85:8f:a6:0b:9e:c7:69:6a:62:95:9b:14:35:b3:d2:90: 4d:50:2b:f7:67:c2:47:de:8b:a0:27:0f:46:e2:e6:30:ef:28: aa:5e:24:f5:92:05:fd:dc:23:36:82:2f:c3:1d:53:98:d0:0b: a1:12:1c:9e:00:e7:43:36:9a:3c:d6:0a:da:94:de:7e:71:62: d4:01:35:52:ed:14:d3:11:11:9e:cf:93:97:3b:c4:ce:95:d5: 80:18:82:26:21:41:6b:7d:14:bc:94:f7:d1:da:1a:ce:79:2f: 14:b5:6e:69:53:8a:9d:64:88:2d:13:3e:54:71:65:85:6f:f7: dd:90:91:d4:17:63:c6:df:ba:c5:d7:10:87:a6:4d:0d:ab:cf: ac:c2:ba:85:28:8c:06:f2:a7:35:5e:a8:40:63:91:71:ce:65: 34:ff:86:4c:01:58:f8:94:1e:6a:ea:60:04:d9:56:ad:41:65: d4:4e:71:b4:63:a9:3f:cc:6f:7b:5a:32:7c:a7:99:b5:0d:98: 89:a9:dc:89:eb:a3:d9:1d:88:73:f0:d9:f5:1e:73:88:8b:d1: 10:82:d1:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGODcxMTAvBgNVBAUTKDBCNkNEMTI3RDA0RUVDM0U4RUU0MTgzOTE5NDE0RkQ3 RUYzOUQ5MjQwHhcNMjYwNDA1MDYzOTExWhcNMjYwNDEyMDYzOTExWjAYMRYwFAYD VQQDEw02OWQyMDM4Zi1mMTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNI7Q35Ou7WfNRzyoAS/VUjAULRFMvLBLoKZGW6WBBtWMkVJ1mUqcziE2/Xg pMqT+KhhRu/zfVEwQ3eu2bsvOx8cZ1kS/nlw9mfglYginceebS+F4za9m/TcEoPw aq5IBLuw1S+9e6UWjRQOaZcLAOGXf16nUBdHhojrJtRaxiFcYcqxyXxbVf78RZGK rBTiRmfY7KK86FDgNf9ZIrO3KlFGjCx1AjqD99Z8oByEvPpP46FWV1jSCaDlWAwF AJmAD7TX/QZ9yM8F2FT9cBwV9pYt2mPXty9slnd8l2O4H8xJotWN8Y9MKH3a+JjV NeJWbpqHcZ/Q4AOZJivlhS8wAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAGdx6ql q6KBTcva0BHbSfdZhG0qMB8GA1UdIwQYMBaAFAts0SfQTuw+juQYORlBT9fvOdkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY4Ny8zQ0JFMzlBMjM4 QjMxMUYwOTE0MTgwODZDNEY5QUUwMi9DMnpSSjlCTzdENk81Qmc1R1VGUDEtODUy U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyelJKOUJPN0Q2TzVCZzVHVUZQMS04NTJTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY4Ny8zQ0JFMzlBMjM4QjMxMUYwOTE0MTgwODZDNEY5QUUwMi9DMnpSSjlCTzdE Nk81Qmc1R1VGUDEtODUyU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhm89Ln9yHTx0uZmnVXoN3KjWd412wCLfPS1G19I/dlgJ1KgSyFGFj6YLnsdp amKVmxQ1s9KQTVAr92fCR96LoCcPRuLmMO8oql4k9ZIF/dwjNoIvwx1TmNALoRIc ngDnQzaaPNYK2pTefnFi1AE1Uu0U0xERns+TlzvEzpXVgBiCJiFBa30UvJT30doa znkvFLVuaVOKnWSILRM+VHFlhW/33ZCR1Bdjxt+6xdcQh6ZNDavPrMK6hSiMBvKn NV6oQGORcc5lNP+GTAFY+JQeaupgBNlWrUFl1E5xtGOpP8xve1oyfKeZtQ2Yianc ieuj2R2Ic/DZ9R5ziIvREILRYg== -----END CERTIFICATE-----Generated at Mon Apr 6 10:11:34 2026 by rpki-client