$ rpki-client -vvf rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft File: 2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft (raw, json) Hash identifier: kMqe28tN/vPsmuIwaiUDu/lxBGNS0SpN5kxlzAxe/LA= Subject key identifier: 22:71:DD:A3:F6:C9:89:54:7E:34:6E:62:BF:3F:15:0B:98:1A:17:12 Authority key identifier: DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC Certificate issuer: /CN=A9127A9B/serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC Certificate serial: 3521 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft Manifest number: 3521 Signing time: Thu 26 Mar 2026 14:52:06 +0000 Manifest this update: Thu 26 Mar 2026 14:52:06 +0000 Manifest next update: Thu 02 Apr 2026 14:52:06 +0000 Files and hashes: 1: 2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl (hash: N6JyB1aCzW0GuyWxnG/mX81TR0KyaLmBHaJOMeb8Hi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13601 (0x3521) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127A9B, serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC Validity Not Before: Mar 26 14:52:06 2026 GMT Not After : Apr 2 14:52:06 2026 GMT Subject: CN=69c54816-1e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:af:c6:da:66:3a:d8:64:48:b8:b9:9a:60:f0: b6:64:33:03:80:73:0b:a3:12:56:54:37:7d:5d:f9: a6:28:fe:06:a0:21:3f:92:1a:4d:f3:04:b2:21:c6: 9b:f0:c8:4d:53:79:8e:a1:6a:1e:60:08:9f:85:e0: 8a:bf:a5:29:78:13:e0:02:aa:c2:02:6e:e3:1a:86: 40:2b:ee:d7:ef:c9:41:9f:71:15:2e:e3:9b:13:64: 4c:98:34:ff:78:ad:0c:0e:7f:24:55:63:b7:72:e6: 61:0c:90:9b:88:2f:9a:c6:58:4d:39:dc:53:e5:e8: 22:a4:40:bb:6f:77:a1:59:f0:f2:11:e3:e4:94:c9: 0a:61:c5:ca:86:75:27:d8:41:b4:84:2b:96:29:50: 64:84:6b:d6:21:e4:77:5c:86:20:cb:c3:81:8b:b7: 7a:09:8e:bf:c9:02:ab:95:5b:c1:3c:2c:ea:49:e9: 0a:71:86:f7:de:1a:d6:0b:36:fe:36:87:ad:33:fa: 6f:86:ea:96:32:9a:18:29:e6:82:3b:12:2a:8b:f9: 96:14:fe:fd:50:bc:69:c8:a5:71:39:57:7f:44:67: a5:94:ac:bb:16:f8:81:63:f7:ea:98:a3:79:92:4e: 8f:3a:9b:12:0c:e1:14:be:7f:23:60:a3:60:ed:f8: 81:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:71:DD:A3:F6:C9:89:54:7E:34:6E:62:BF:3F:15:0B:98:1A:17:12 X509v3 Authority Key Identifier: keyid:DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:0b:85:68:59:1d:8f:dc:15:17:c2:7e:20:1f:1a:6a:2b:c3: a7:68:36:af:dc:e0:90:63:12:95:92:17:4d:f4:b8:62:8e:d4: 24:66:00:98:eb:4b:02:5e:08:cb:51:dc:9a:1f:fb:12:97:eb: b0:f5:8c:9e:31:98:dc:1a:60:5e:b2:78:19:07:d8:59:50:72: 92:de:e1:63:1e:b6:c5:ec:55:28:21:7d:4f:d4:9f:65:e3:47: 16:ee:83:30:e8:28:6e:14:37:75:3f:70:36:85:dd:7d:4b:a2: 64:e8:3e:ec:bf:7a:c3:9b:6e:10:0d:e3:1b:4c:3a:4c:40:55: 8a:3d:44:3b:97:da:d3:5d:54:66:cd:71:22:11:42:25:85:c4: f8:1d:4a:5f:17:cd:ad:52:e2:38:d1:d1:9f:25:37:b2:2d:a1: 6b:cd:ab:d7:21:07:24:b3:ad:8b:a3:3b:ad:fa:fd:9b:43:1d: 22:aa:ee:18:02:73:56:eb:18:41:e5:81:1c:56:41:a6:8f:47: f6:d3:93:d6:de:09:37:be:93:1d:2d:ad:17:b7:61:bf:fa:53: 94:6a:12:15:71:72:46:91:d6:79:8e:80:42:7e:1a:ba:b0:7e: c5:96:3a:3b:38:3c:6b:37:3a:34:97:72:17:bf:8d:da:15:fd: 5c:b4:ee:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdBOUIxMTAvBgNVBAUTKERBNjA0Q0ZEQjI3MzBBOERFNzI1RkM3NEFCMEZDNjNF MDU1OEU1REMwHhcNMjYwMzI2MTQ1MjA2WhcNMjYwNDAyMTQ1MjA2WjAYMRYwFAYD VQQDEw02OWM1NDgxNi0xZTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6/G2mY62GRIuLmaYPC2ZDMDgHMLoxJWVDd9XfmmKP4GoCE/khpN8wSyIcab 8MhNU3mOoWoeYAifheCKv6UpeBPgAqrCAm7jGoZAK+7X78lBn3EVLuObE2RMmDT/ eK0MDn8kVWO3cuZhDJCbiC+axlhNOdxT5egipEC7b3ehWfDyEePklMkKYcXKhnUn 2EG0hCuWKVBkhGvWIeR3XIYgy8OBi7d6CY6/yQKrlVvBPCzqSekKcYb33hrWCzb+ NoetM/pvhuqWMpoYKeaCOxIqi/mWFP79ULxpyKVxOVd/RGellKy7FviBY/fqmKN5 kk6POpsSDOEUvn8jYKNg7fiBxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCJx3aP2 yYlUfjRuYr8/FQuYGhcSMB8GA1UdIwQYMBaAFNpgTP2ycwqN5yX8dKsPxj4FWOXc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0E5Qi9GQzA1OEU1NjFE OTUxMUUyQjFBMDQ2N0UwOEIwMkNEMi8ybUJNX2JKekNvM25KZngwcXdfR1BnVlk1 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtQk1fYkp6Q28zbkpmeDBxd19HUGdWWTVkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0E5Qi9GQzA1OEU1NjFEOTUxMUUyQjFBMDQ2N0UwOEIwMkNEMi8ybUJNX2JKekNv M25KZngwcXdfR1BnVlk1ZHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbguFaFkdj9wVF8J+IB8aaivDp2g2r9zgkGMSlZIXTfS4Yo7UJGYAmOtLAl4I y1Hcmh/7EpfrsPWMnjGY3BpgXrJ4GQfYWVBykt7hYx62xexVKCF9T9SfZeNHFu6D MOgobhQ3dT9wNoXdfUuiZOg+7L96w5tuEA3jG0w6TEBVij1EO5fa011UZs1xIhFC JYXE+B1KXxfNrVLiONHRnyU3si2ha82r1yEHJLOti6M7rfr9m0MdIqruGAJzVusY QeWBHFZBpo9H9tOT1t4JN76THS2tF7dhv/pTlGoSFXFyRpHWeY6AQn4aurB+xZY6 Ozg8azc6NJdyF7+N2hX9XLTu0g== -----END CERTIFICATE-----Generated at Fri Mar 27 04:13:43 2026 by rpki-client