$ rpki-client -vvf rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft File: 2cYV0QtB5uVphlzKp_4oDRKOMRw.mft (raw, json) Hash identifier: fnE5QvhrEFok+U6brJyJpiNqisLD4XozEjYI48IEblA= Subject key identifier: DD:BA:E3:4C:AF:00:1F:B9:9B:54:F7:02:B1:2B:10:38:2D:AB:A7:98 Authority key identifier: D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C Certificate issuer: /CN=A91293E9/serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C Certificate serial: 06FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft Manifest number: 06EE Signing time: Tue 24 Mar 2026 21:50:33 +0000 Manifest this update: Tue 24 Mar 2026 21:50:32 +0000 Manifest next update: Tue 31 Mar 2026 21:50:32 +0000 Files and hashes: 1: 2cYV0QtB5uVphlzKp_4oDRKOMRw.crl (hash: 9DY2sFdmbxJzdH0Z8n2loHApRqrQJnJXriey2NiUxbA=) 2: 1AC1982A8C6A11EB91832D52C4F9AE02.roa (hash: /VloqaD2cYppLRVsQe+SclqEcygp/xKvnqbJFHuyZMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1788 (0x6fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91293E9, serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C Validity Not Before: Mar 24 21:50:32 2026 GMT Not After : Mar 31 21:50:32 2026 GMT Subject: CN=69c30729-f4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cd:79:0a:85:b2:f8:71:c7:da:81:03:97:81: 2e:21:7f:bf:dd:72:b2:9d:16:dd:ac:f3:5c:ce:ed: ee:97:fd:52:a7:48:22:19:92:8d:76:76:bd:1c:42: 42:ae:70:23:ac:c9:24:3b:48:32:be:55:c9:40:0b: a4:73:ef:9c:35:19:ad:67:49:60:d5:dc:b2:ff:28: 6c:05:0e:f7:43:55:0c:d9:0f:bf:6f:42:0b:0e:38: 99:f5:70:17:4d:73:f5:76:f5:be:c8:65:33:e1:c4: 28:c3:c5:42:85:7a:38:33:0e:7c:a5:d7:35:6a:32: a0:26:78:46:85:3b:24:ff:af:c6:1d:b3:71:d6:5d: b8:d4:8f:e2:dc:29:d6:ec:b0:f8:12:00:82:68:37: d5:ed:7c:e3:9d:39:a9:00:be:a9:1a:df:31:82:c0: 2e:12:4d:d0:25:a8:6f:a6:02:1e:84:1b:74:24:00: 77:ee:4f:e8:19:5e:07:74:ce:c1:62:46:32:e3:42: 67:9f:5c:eb:b6:8e:cd:19:ed:7d:1e:06:19:89:b2: 17:b8:c6:0c:a9:2c:9d:2b:e5:a6:e3:54:5c:ac:ff: 34:d8:df:9a:f8:1e:f3:df:90:02:33:29:1a:d4:64: 1e:9e:2e:4c:d9:47:98:91:a8:49:22:5a:d7:09:e2: 01:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BA:E3:4C:AF:00:1F:B9:9B:54:F7:02:B1:2B:10:38:2D:AB:A7:98 X509v3 Authority Key Identifier: keyid:D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:8d:65:2b:98:7a:c2:f3:77:fc:ff:6e:a1:00:26:2b:c2:43: 95:87:8f:91:37:aa:d3:64:ed:73:3b:c8:ab:a8:0f:37:fa:23: 37:81:9a:c0:c5:6c:43:07:23:b2:44:15:0d:d2:b3:13:00:95: d0:0f:50:f4:3c:d3:cf:05:7f:ad:3b:b1:79:59:25:8f:dd:7c: c8:3f:8d:5b:53:c3:7a:0b:fa:41:ed:1e:43:97:61:75:de:cb: 21:e4:f0:99:9d:39:b9:4d:19:87:a9:a1:d3:14:37:42:fa:1c: 59:87:51:48:72:48:81:c5:e9:a5:b7:62:b9:ff:17:5e:e5:7c: 51:35:35:82:d8:5a:f7:32:a7:9c:be:f2:e5:c7:da:04:22:50: 1c:dc:47:f4:1f:ec:93:0d:29:e1:ba:af:90:30:4b:ba:27:98: 97:b3:60:4a:d8:1c:a4:41:42:c9:71:63:f4:fa:b7:ee:27:d6: 09:3b:83:93:47:60:5c:a3:34:19:7c:c4:19:b8:4f:02:c2:0a: b2:10:a8:c0:fb:9c:27:b3:7e:48:03:f9:29:f0:11:e5:6a:df: fb:7b:20:d8:de:d8:4c:56:eb:98:cb:cb:c2:8f:a9:f7:47:e2: 81:e4:68:b1:3a:6f:7b:b2:c2:56:03:18:fa:33:f7:a2:2b:4c: 26:bf:1f:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkzRTkxMTAvBgNVBAUTKEQ5QzYxNUQxMEI0MUU2RTU2OTg2NUNDQUE3RkUyODBE MTI4RTMxMUMwHhcNMjYwMzI0MjE1MDMyWhcNMjYwMzMxMjE1MDMyWjAYMRYwFAYD VQQDEw02OWMzMDcyOS1mNGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAts15CoWy+HHH2oEDl4EuIX+/3XKynRbdrPNczu3ul/1Sp0giGZKNdna9HEJC rnAjrMkkO0gyvlXJQAukc++cNRmtZ0lg1dyy/yhsBQ73Q1UM2Q+/b0ILDjiZ9XAX TXP1dvW+yGUz4cQow8VChXo4Mw58pdc1ajKgJnhGhTsk/6/GHbNx1l241I/i3CnW 7LD4EgCCaDfV7XzjnTmpAL6pGt8xgsAuEk3QJahvpgIehBt0JAB37k/oGV4HdM7B YkYy40Jnn1zrto7NGe19HgYZibIXuMYMqSydK+Wm41RcrP802N+a+B7z35ACMyka 1GQeni5M2UeYkahJIlrXCeIBoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN2640yv AB+5m1T3ArErEDgtq6eYMB8GA1UdIwQYMBaAFNnGFdELQeblaYZcyqf+KA0SjjEc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTNFOS84M0ExNzRGQzhD NjgxMUVCOTgxQjI1NDJDNEY5QUUwMi8yY1lWMFF0QjV1VnBobHpLcF80b0RSS09N UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjWVYwUXRCNXVWcGhsektwXzRvRFJLT01Sdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTNFOS84M0ExNzRGQzhDNjgxMUVCOTgxQjI1NDJDNEY5QUUwMi8yY1lWMFF0QjV1 VnBobHpLcF80b0RSS09NUncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc41lK5h6wvN3/P9uoQAmK8JDlYePkTeq02TtczvIq6gPN/ojN4GawMVsQwcj skQVDdKzEwCV0A9Q9DzTzwV/rTuxeVklj918yD+NW1PDegv6Qe0eQ5dhdd7LIeTw mZ05uU0Zh6mh0xQ3QvocWYdRSHJIgcXppbdiuf8XXuV8UTU1gtha9zKnnL7y5cfa BCJQHNxH9B/skw0p4bqvkDBLuieYl7NgStgcpEFCyXFj9Pq37ifWCTuDk0dgXKM0 GXzEGbhPAsIKshCowPucJ7N+SAP5KfAR5Wrf+3sg2N7YTFbrmMvLwo+p90figeRo sTpve7LCVgMY+jP3oitMJr8f/A== -----END CERTIFICATE-----Generated at Thu Mar 26 22:27:46 2026 by rpki-client