$ rpki-client -vvf rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft File: r2rjJbT4gONiBR58Pf3xuLKlqBU.mft (raw, json) Hash identifier: 8vXdwsttawoXxpQihSDMH7n314bPklD7Rfu5IagMBSo= Subject key identifier: EA:7B:1C:5B:6C:96:4B:33:51:DF:A1:9A:AE:C8:33:1A:49:55:94:B5 Authority key identifier: AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 Certificate issuer: /CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Certificate serial: 2ADF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft Manifest number: 2AAE Signing time: Tue 24 Mar 2026 15:31:41 +0000 Manifest this update: Tue 24 Mar 2026 15:31:40 +0000 Manifest next update: Tue 31 Mar 2026 15:31:40 +0000 Files and hashes: 1: r2rjJbT4gONiBR58Pf3xuLKlqBU.crl (hash: rb9Uk5r8aTC9J3CyIUyS9/nNzTKs3EYjtTDysb+hHQ4=) 2: CDF2E51A092B11F08557BF1AC4F9AE02.roa (hash: URyChyU6OU774yRjtt526A9274JruEe4SeiRssUYwtQ=) 3: 2F70E1E0D4C711EB84791C0BC4F9AE02.roa (hash: mi5Z8QiyFyePXfXFb5bmVuyq1rksFrDBMyBn1iuDnTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10975 (0x2adf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620ED, serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Validity Not Before: Mar 24 15:31:40 2026 GMT Not After : Mar 31 15:31:40 2026 GMT Subject: CN=69c2ae5d-2313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:56:aa:e1:fe:b0:01:a1:ba:02:66:ed:54:53: de:af:1e:04:c0:d3:a7:47:57:e7:cb:78:42:af:ab: dc:33:a1:2d:14:63:22:b0:15:08:b2:9b:c2:9e:d6: e3:ce:60:5d:ad:fa:90:d3:58:26:0b:7b:37:d8:6e: e3:d2:15:12:6f:dc:18:0b:5e:a5:e8:fa:f3:fe:8f: d9:6c:40:05:70:b0:50:c5:38:e5:a1:c5:1e:2a:3f: 1a:a6:d9:be:51:76:8a:3a:00:1e:75:d8:9b:9e:1b: c8:bd:b6:d5:66:36:3f:df:0e:0b:21:a8:36:f4:07: 4e:94:3c:0c:b6:30:33:46:fc:29:1b:95:72:40:98: 5e:9d:77:ef:16:cb:d2:4a:e3:8f:3d:fa:24:0f:3f: cd:9a:63:44:e4:4c:55:30:de:d5:00:65:9a:e7:e6: f6:4c:62:9c:40:d9:ed:2d:22:a9:f0:c9:fd:dd:07: 53:87:3d:56:ab:98:eb:26:60:57:03:0c:ac:28:dc: 93:7f:72:c3:fd:75:ce:63:7a:37:24:1c:7d:cf:f8: cc:bd:c8:73:ff:52:57:09:59:2b:77:b1:e0:8a:d9: 5d:9a:86:40:e7:02:8f:6e:17:98:50:b4:09:6f:95: 76:0e:e9:e6:9c:fc:e8:79:bc:83:42:f0:a5:cb:00: de:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:7B:1C:5B:6C:96:4B:33:51:DF:A1:9A:AE:C8:33:1A:49:55:94:B5 X509v3 Authority Key Identifier: keyid:AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:45:ed:fb:0f:1b:72:fd:e3:a0:e4:a2:60:46:3c:17:85:f6: c2:dc:fb:0c:71:e3:7f:93:ae:2f:00:dd:7e:c8:45:8a:e7:89: 44:73:40:07:10:83:3d:a2:a1:ce:b6:0c:c9:e1:b5:74:41:ce: 0f:7f:e8:90:90:19:c3:84:df:ef:4e:a1:58:f9:e1:c5:78:05: 04:ee:63:9e:5b:99:4d:f6:c5:c9:b6:0c:76:5d:25:d6:9d:72: 58:c7:03:c8:da:24:8a:2f:19:96:15:75:6c:25:81:c2:44:43: ee:23:f9:5a:91:07:41:bf:d5:08:e9:13:41:c3:bb:f7:49:42: 8f:96:f4:29:a4:57:58:c5:37:3b:54:e0:9f:87:94:72:59:16: 88:25:43:be:82:07:1a:9c:fa:96:47:b5:6c:23:6a:b9:1a:97: 3a:b0:7d:5a:fa:d4:63:90:c9:62:aa:58:b7:7f:10:5e:d2:2c: 0b:95:db:9b:43:0e:44:f6:bf:8c:1c:df:e1:44:ce:70:c3:f3: a8:a1:80:d1:2e:c9:89:79:2e:8a:38:92:97:96:1c:53:28:de: db:c9:5d:11:fd:72:55:e8:3d:b9:cf:34:f3:71:82:f5:5b:4e: dd:c9:a4:4a:b0:61:cd:dc:83:a8:7d:22:1f:fd:8d:fa:12:e9: 5c:d8:a8:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRUQxMTAvBgNVBAUTKEFGNkFFMzI1QjRGODgwRTM2MjA1MUU3QzNERkRGMUI4 QjJBNUE4MTUwHhcNMjYwMzI0MTUzMTQwWhcNMjYwMzMxMTUzMTQwWjAYMRYwFAYD VQQDEw02OWMyYWU1ZC0yMzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6laq4f6wAaG6AmbtVFPerx4EwNOnR1fny3hCr6vcM6EtFGMisBUIspvCntbj zmBdrfqQ01gmC3s32G7j0hUSb9wYC16l6Prz/o/ZbEAFcLBQxTjlocUeKj8aptm+ UXaKOgAeddibnhvIvbbVZjY/3w4LIag29AdOlDwMtjAzRvwpG5VyQJhenXfvFsvS SuOPPfokDz/NmmNE5ExVMN7VAGWa5+b2TGKcQNntLSKp8Mn93QdThz1Wq5jrJmBX AwysKNyTf3LD/XXOY3o3JBx9z/jMvchz/1JXCVkrd7HgitldmoZA5wKPbheYULQJ b5V2DunmnPzoebyDQvClywDeDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOp7HFts lkszUd+hmq7IMxpJVZS1MB8GA1UdIwQYMBaAFK9q4yW0+IDjYgUefD398biypagV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFRC9FN0UyMzFFNjM3 MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdPTmlCUjU4UGYzeHVMS2xx QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IycmpKYlQ0Z09OaUJSNThQZjN4dUxLbHFCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFRC9FN0UyMzFFNjM3MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdP TmlCUjU4UGYzeHVMS2xxQlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtEXt+w8bcv3joOSiYEY8F4X2wtz7DHHjf5OuLwDdfshFiueJRHNABxCDPaKh zrYMyeG1dEHOD3/okJAZw4Tf706hWPnhxXgFBO5jnluZTfbFybYMdl0l1p1yWMcD yNokii8ZlhV1bCWBwkRD7iP5WpEHQb/VCOkTQcO790lCj5b0KaRXWMU3O1Tgn4eU clkWiCVDvoIHGpz6lke1bCNquRqXOrB9WvrUY5DJYqpYt38QXtIsC5Xbm0MORPa/ jBzf4UTOcMPzqKGA0S7JiXkuijiSl5YcUyje28ldEf1yVeg9uc8083GC9VtO3cmk SrBhzdyDqH0iH/2N+hLpXNioGg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:49:38 2026 by rpki-client