$ rpki-client -vvf rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft File: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft (raw, json) Hash identifier: gLOtCL93kp00KtyJ6qz45M2SsZlgU0VBpUPxoX6bagM= Subject key identifier: 55:0F:08:D2:21:D6:EA:F9:9A:36:58:0B:5D:6E:81:3B:CD:BD:C3:8B Authority key identifier: DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 Certificate issuer: /CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Certificate serial: 09D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft Manifest number: 09CD Signing time: Tue 24 Mar 2026 19:41:36 +0000 Manifest this update: Tue 24 Mar 2026 19:41:36 +0000 Manifest next update: Tue 31 Mar 2026 19:41:36 +0000 Files and hashes: 1: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl (hash: rmJiMHgsH9P6hRnxOtHSIWBpyCrO8+s3E6OdYjreFW0=) 2: 33CDE41E5A4711EFA5ED8487C4F9AE02.roa (hash: fay/JELjYgS3QhNYNRW2VHw728nS5DEnngJONGdEkuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:41:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2520 (0x9d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D687, serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Validity Not Before: Mar 24 19:41:36 2026 GMT Not After : Mar 31 19:41:36 2026 GMT Subject: CN=69c2e8f0-68c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4d:45:52:22:2f:27:5c:98:87:67:19:df:95: 33:b9:1e:74:ea:ca:f5:4b:d1:fc:e1:71:4f:50:cc: 00:28:3c:d5:a9:12:85:40:01:60:da:c3:ea:3b:12: f5:2f:ef:2c:a2:ff:86:d6:de:48:41:c9:91:38:e2: 36:87:c1:f6:db:1e:63:98:4a:31:1b:5f:c4:1f:5f: 78:cf:09:b2:ff:ad:4b:1d:66:17:05:24:f9:a2:ac: a0:f4:9e:cb:b6:af:9c:b1:10:68:5b:23:a2:6f:8e: 27:ab:6e:a5:54:4f:fb:41:ff:4a:57:16:c1:a1:ca: 86:64:94:da:9b:1d:ca:54:87:0a:0e:57:73:a3:e5: ee:37:c4:e4:2b:93:ce:bd:5d:c1:4d:01:33:f4:fa: 01:45:4c:a6:c1:b8:e3:0a:4b:bb:2e:36:4a:37:01: a2:1f:82:59:64:e4:2e:3f:3a:73:03:3b:36:46:39: ce:b9:c1:0d:0d:30:5c:6f:0b:af:39:08:06:68:80: 62:6b:7f:c3:1f:07:81:ba:89:6b:6a:ea:d3:fd:e3: 0a:b0:a1:ff:fa:ab:4d:6b:a4:18:bb:de:56:0d:e8: 3b:0b:a0:52:05:ca:c1:46:10:70:5f:4a:06:29:41: 77:bf:8b:46:6e:02:34:ad:f7:b8:45:a3:e9:87:cf: 42:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:0F:08:D2:21:D6:EA:F9:9A:36:58:0B:5D:6E:81:3B:CD:BD:C3:8B X509v3 Authority Key Identifier: keyid:DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:c6:a5:36:ae:e0:3a:10:16:c7:1a:89:74:87:cc:ad:f3:4a: 62:0d:21:b8:49:f1:9f:ee:4f:92:df:98:2a:34:3d:a6:d9:9a: 04:f5:41:fd:3b:41:b1:7e:c3:d7:6b:35:fe:1e:26:34:94:c0: b3:2a:ab:77:12:8e:2c:a5:a2:09:c9:94:d4:9a:50:1b:a4:be: 77:b8:3b:eb:34:9a:fa:4d:8a:a5:5b:0a:df:f9:33:f6:f0:8b: 0d:54:91:74:6f:01:bf:8d:12:48:08:e7:31:79:ef:be:32:12: d1:cf:f5:9f:99:36:94:d0:4d:2a:77:9a:48:6d:f7:04:73:f9: 73:74:24:b0:ad:bb:2f:d7:b6:d4:da:5f:e6:7b:16:87:35:88: 70:da:99:61:78:51:11:b0:80:de:3d:a6:47:b4:29:fe:dc:3c: a7:b8:90:e7:b4:bb:67:ec:95:a9:5f:4e:6b:3a:46:58:73:45: d4:b8:df:48:bd:8e:29:fc:25:96:23:64:2a:e0:60:a3:0c:92: a9:e6:2a:be:7a:59:c5:f1:a8:39:27:97:7a:a7:6a:c5:5d:d3: bb:ed:dc:e2:1a:99:41:6b:8a:25:bb:0f:ec:16:97:dc:2a:56: c0:86:d5:c9:bc:0a:5c:ba:d5:5d:c7:fb:ec:8a:fb:3b:70:ad: 13:5d:29:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2ODcxMTAvBgNVBAUTKERBQkIxNjlEOUU5RDc3RTY1NzZDMDE4MTAxMjUyQ0Iw QjQ4NTdGNjIwHhcNMjYwMzI0MTk0MTM2WhcNMjYwMzMxMTk0MTM2WjAYMRYwFAYD VQQDEw02OWMyZThmMC02OGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyE1FUiIvJ1yYh2cZ35UzuR506sr1S9H84XFPUMwAKDzVqRKFQAFg2sPqOxL1 L+8sov+G1t5IQcmROOI2h8H22x5jmEoxG1/EH194zwmy/61LHWYXBST5oqyg9J7L tq+csRBoWyOib44nq26lVE/7Qf9KVxbBocqGZJTamx3KVIcKDldzo+XuN8TkK5PO vV3BTQEz9PoBRUymwbjjCku7LjZKNwGiH4JZZOQuPzpzAzs2RjnOucENDTBcbwuv OQgGaIBia3/DHweBuolraurT/eMKsKH/+qtNa6QYu95WDeg7C6BSBcrBRhBwX0oG KUF3v4tGbgI0rfe4RaPph89CYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFUPCNIh 1ur5mjZYC11ugTvNvcOLMB8GA1UdIwQYMBaAFNq7Fp2enXfmV2wBgQElLLC0hX9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDY4Ny83NkI0M0I2NDlG NDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQtWlhiQUdCQVNVc3NMU0Zm MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyc1duWjZkZC1aWGJBR0JBU1Vzc0xTRmYySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDY4Ny83NkI0M0I2NDlGNDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQt WlhiQUdCQVNVc3NMU0ZmMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ8alNq7gOhAWxxqJdIfMrfNKYg0huEnxn+5Pkt+YKjQ9ptmaBPVB/TtBsX7D 12s1/h4mNJTAsyqrdxKOLKWiCcmU1JpQG6S+d7g76zSa+k2KpVsK3/kz9vCLDVSR dG8Bv40SSAjnMXnvvjIS0c/1n5k2lNBNKneaSG33BHP5c3QksK27L9e21Npf5nsW hzWIcNqZYXhREbCA3j2mR7Qp/tw8p7iQ57S7Z+yVqV9OazpGWHNF1LjfSL2OKfwl liNkKuBgowySqeYqvnpZxfGoOSeXeqdqxV3Tu+3c4hqZQWuKJbsP7BaX3CpWwIbV ybwKXLrVXcf77Ir7O3CtE10ppg== -----END CERTIFICATE-----Generated at Thu Mar 26 08:29:38 2026 by rpki-client