$ rpki-client -vvf rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft File: 2fpCBt8OmUfNUB39UlsuRmlv1EI.mft (raw, json) Hash identifier: /d0y0enxbAJNF83XJNrQQmGB/Bmfhn9kHLnDzPAagW0= Subject key identifier: 1C:2A:16:D4:2C:F7:C8:19:79:32:83:8D:CE:42:FC:47:23:B6:67:ED Authority key identifier: D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 Certificate issuer: /CN=A911D40B/serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft Manifest number: 01BD Signing time: Wed 25 Mar 2026 03:14:38 +0000 Manifest this update: Wed 25 Mar 2026 03:14:38 +0000 Manifest next update: Wed 01 Apr 2026 03:14:38 +0000 Files and hashes: 1: 2fpCBt8OmUfNUB39UlsuRmlv1EI.crl (hash: DUhEVWeA7qkzvDKHTGmdGmIS7okWZoIaBkaNaVWdJE4=) 2: 91BCF5D08E0811EE91C7BD62C4F9AE02.roa (hash: McXWsXXcIZmHr1+c7MXfi1yOdfqnkuMIhVjsAcxCbA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D40B, serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Validity Not Before: Mar 25 03:14:38 2026 GMT Not After : Apr 1 03:14:38 2026 GMT Subject: CN=69c3531e-6fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:74:dd:91:fe:c2:02:ce:80:23:a5:5d:71:b5: 5a:44:f7:a5:b6:ea:d7:0f:f5:d5:fc:ee:a0:96:25: 30:20:81:2c:53:6e:bf:f5:43:ee:32:94:6f:57:0c: b4:f6:d2:d5:ce:c8:d4:83:ac:fa:cc:97:ac:65:9f: f5:f2:2e:1d:a5:94:71:ca:55:13:7b:33:88:93:55: 0c:08:fe:52:84:44:64:38:17:d8:03:ea:f7:90:d5: 16:af:35:07:89:10:a3:d0:aa:75:f6:3b:eb:3a:bd: 9b:06:13:d6:f4:1e:c7:ae:81:35:71:17:3d:7b:76: 93:66:04:ce:64:7b:ea:9d:cc:bd:84:53:0f:dc:9f: a2:ef:be:71:cd:71:4f:6f:b4:ff:71:1b:33:cb:cc: e2:4e:71:4f:16:3b:91:7b:d4:7b:90:60:e1:c0:39: a1:18:a2:bc:db:d7:77:b0:a7:90:ab:73:75:ec:17: 64:43:a2:76:0c:a6:c9:3e:a3:a0:1b:c6:b2:5e:c0: 4c:9f:89:19:1e:23:91:71:3b:49:ab:ad:19:37:a0: 41:51:00:07:02:cf:94:37:0e:0b:77:68:60:bc:59: 29:f8:4a:44:79:a5:af:02:66:77:14:76:79:a1:54: c5:7c:4d:cf:65:02:0c:ee:65:33:34:20:94:87:93: ee:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2A:16:D4:2C:F7:C8:19:79:32:83:8D:CE:42:FC:47:23:B6:67:ED X509v3 Authority Key Identifier: keyid:D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:be:ba:85:f2:5a:41:fc:48:05:49:71:28:54:8f:1f:e2:1d: 92:39:80:1f:31:b3:a2:13:5f:fa:f8:aa:61:4a:95:8e:22:36: e4:74:f3:9a:aa:75:74:b7:ce:1b:30:80:e6:25:d8:43:b0:5c: 7f:e2:40:8c:51:89:f5:fb:af:a0:ad:09:cd:c1:a0:70:e6:e1: 03:ec:9e:6d:a6:da:d3:5b:e0:dd:ae:6e:eb:b4:65:e6:be:83: e7:24:09:e9:24:90:dd:f7:34:ff:fc:b6:45:81:c8:0b:dc:f4: c0:b2:d0:4c:3f:30:57:81:dc:ed:c2:61:85:fa:62:51:99:ec: 23:a8:ce:46:c6:d1:cf:4e:c0:97:a0:49:9e:1f:01:d4:b6:98: 30:12:54:13:c2:3f:90:16:51:dc:78:b4:f9:86:21:8a:f5:a4: 57:28:bc:01:15:b1:94:cd:f9:9c:8d:89:f9:d4:f5:d9:28:9a: 45:f8:f6:7b:89:8e:3e:77:16:1b:c9:c1:03:d3:4d:6f:d8:2e: 99:be:c5:3b:25:4f:06:81:d7:c6:1f:3a:e3:65:d2:c4:af:fb: 47:82:66:94:aa:d9:2c:2e:de:4c:ad:6b:9e:ee:5b:2e:c3:d7: 3e:f1:e1:c3:6a:e3:d2:cb:37:1f:23:10:c9:a6:6b:bb:44:78: ac:4b:55:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ0MEIxMTAvBgNVBAUTKEQ5RkE0MjA2REYwRTk5NDdDRDUwMURGRDUyNUIyRTQ2 Njk2RkQ0NDIwHhcNMjYwMzI1MDMxNDM4WhcNMjYwNDAxMDMxNDM4WjAYMRYwFAYD VQQDEw02OWMzNTMxZS02ZmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXTdkf7CAs6AI6VdcbVaRPelturXD/XV/O6gliUwIIEsU26/9UPuMpRvVwy0 9tLVzsjUg6z6zJesZZ/18i4dpZRxylUTezOIk1UMCP5ShERkOBfYA+r3kNUWrzUH iRCj0Kp19jvrOr2bBhPW9B7HroE1cRc9e3aTZgTOZHvqncy9hFMP3J+i775xzXFP b7T/cRszy8ziTnFPFjuRe9R7kGDhwDmhGKK829d3sKeQq3N17BdkQ6J2DKbJPqOg G8ayXsBMn4kZHiORcTtJq60ZN6BBUQAHAs+UNw4Ld2hgvFkp+EpEeaWvAmZ3FHZ5 oVTFfE3PZQIM7mUzNCCUh5PuTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBwqFtQs 98gZeTKDjc5C/EcjtmftMB8GA1UdIwQYMBaAFNn6QgbfDplHzVAd/VJbLkZpb9RC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDQwQi80NjI2QkIxQThF MDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21VZk5VQjM5VWxzdVJtbHYx RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmcENCdDhPbVVmTlVCMzlVbHN1Um1sdjFFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDQwQi80NjI2QkIxQThFMDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21V Zk5VQjM5VWxzdVJtbHYxRUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOr66hfJaQfxIBUlxKFSPH+IdkjmAHzGzohNf+viqYUqVjiI25HTzmqp1dLfO GzCA5iXYQ7Bcf+JAjFGJ9fuvoK0JzcGgcObhA+yebaba01vg3a5u67Rl5r6D5yQJ 6SSQ3fc0//y2RYHIC9z0wLLQTD8wV4Hc7cJhhfpiUZnsI6jORsbRz07Al6BJnh8B 1LaYMBJUE8I/kBZR3Hi0+YYhivWkVyi8ARWxlM35nI2J+dT12SiaRfj2e4mOPncW G8nBA9NNb9gumb7FOyVPBoHXxh8642XSxK/7R4JmlKrZLC7eTK1rnu5bLsPXPvHh w2rj0ss3HyMQyaZru0R4rEtVWw== -----END CERTIFICATE-----Generated at Thu Mar 26 12:26:52 2026 by rpki-client