$ rpki-client -vvf rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft File: 2RBlAbU10PfK1XyOenR8oGnQTVk.mft (raw, json) Hash identifier: CrJZN74j+MCvRjy7Lq9OdnWrMlObCnyO7bAt6xsuHKg= Subject key identifier: 6B:2E:F1:07:7E:0F:24:FF:9E:39:F0:17:0A:CC:B3:E2:DE:8C:45:87 Authority key identifier: D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59 Certificate issuer: /CN=A916FACB/serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59 Certificate serial: 0456 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft Manifest number: 044F Signing time: Tue 24 Mar 2026 23:52:56 +0000 Manifest this update: Tue 24 Mar 2026 23:52:55 +0000 Manifest next update: Tue 31 Mar 2026 23:52:55 +0000 Files and hashes: 1: 2RBlAbU10PfK1XyOenR8oGnQTVk.crl (hash: iBdhwst2wIiptEQS7W9J+0Jp75XrqNgx4MRDnzEycgQ=) 2: 97D35382924311EC927C972FC4F9AE02.roa (hash: L7w9U1xIcAkgr7iuuigChOuAKtORsk2v9sh89ZFvz9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1110 (0x456) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FACB, serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59 Validity Not Before: Mar 24 23:52:55 2026 GMT Not After : Mar 31 23:52:55 2026 GMT Subject: CN=69c323d8-02be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:db:5f:26:f6:7c:ea:23:6d:4c:2b:9a:4f:03: c8:80:2b:81:51:ec:06:e1:ea:d0:aa:62:ef:93:de: 9c:49:ab:0a:38:c7:2a:3c:df:36:a9:06:b6:03:5e: c7:6e:6b:e0:ea:b9:e2:9b:40:51:80:2f:e9:c4:85: 92:74:c9:fe:1b:a2:34:9b:25:fa:58:46:5f:bc:5e: fc:3f:05:e2:e0:eb:9b:ab:4f:3b:ff:61:10:92:60: aa:cf:00:d2:ef:23:13:69:df:68:18:28:a9:56:84: e9:55:d5:4b:dd:2e:11:90:43:5d:54:74:f8:3d:c0: b4:2e:b9:a6:ed:49:38:03:c7:3a:d3:98:84:2a:f2: d4:86:62:3f:43:6e:3c:20:23:b7:f5:47:35:6d:95: 95:8a:dc:19:57:e3:53:7c:37:20:a4:88:14:47:e3: 8b:9e:a7:a4:23:e4:98:f5:ba:46:ea:64:cb:72:f1: 49:7c:48:1a:b0:1a:4d:7c:ee:54:ca:c1:58:a4:0c: 21:c6:d3:f8:8f:89:3b:8e:fe:84:1c:5a:2d:5b:c8: 8e:5f:ec:8d:7d:cd:7f:3d:f3:85:f3:43:c1:e6:e6: c2:94:9f:5e:38:c1:39:41:7d:67:8a:5f:83:cc:28: 20:7e:3a:8a:09:98:2b:c8:fd:50:d0:ec:ad:71:5c: d0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2E:F1:07:7E:0F:24:FF:9E:39:F0:17:0A:CC:B3:E2:DE:8C:45:87 X509v3 Authority Key Identifier: keyid:D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:f9:10:96:fc:87:21:3d:02:1a:23:3b:ce:61:18:2c:05:8c: 66:e7:35:91:34:1e:d4:e2:5b:2e:4f:c8:08:1f:fb:8e:3c:02: 5e:e8:c4:1b:17:95:d7:84:a2:39:f1:02:58:00:10:1c:91:c9: 68:f1:44:bf:c4:c4:c1:2e:d1:35:bd:6d:9e:bb:1b:94:85:56: 81:8e:da:d9:75:48:8e:90:84:a1:27:0a:e5:45:94:43:bb:53: fa:69:ad:02:88:f9:a2:26:76:e2:18:99:a2:70:5a:0e:1a:14: 10:23:5f:8e:34:69:51:4b:b0:b8:c5:8e:ed:f4:e3:a5:3e:72: 41:e8:75:e7:4b:c6:6a:d7:fa:73:d6:c1:eb:62:e0:06:b3:10: 66:76:95:9b:aa:d1:64:a5:66:f8:96:ca:ac:38:f5:c3:8f:42: 39:1a:a0:b7:d4:ec:f8:c7:be:5b:17:02:11:6b:87:7c:fb:e6: 10:af:59:f2:ca:f2:d1:19:3c:4e:b0:7a:74:18:12:8f:4d:c3: 36:ce:85:73:8e:6e:26:80:1b:25:28:bf:df:d7:16:b8:b0:ac: 72:cf:5b:de:a7:0e:c2:b3:f3:ad:c2:c3:f6:ed:6d:92:2b:c2: dd:b7:b2:3b:ea:1f:74:ed:85:14:fc:b9:1b:95:5a:40:8d:75: b2:a8:97:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBQ0IxMTAvBgNVBAUTKEQ5MTA2NTAxQjUzNUQwRjdDQUQ1N0M4RTdBNzQ3Q0Ew NjlEMDRENTkwHhcNMjYwMzI0MjM1MjU1WhcNMjYwMzMxMjM1MjU1WjAYMRYwFAYD VQQDEw02OWMzMjNkOC0wMmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndtfJvZ86iNtTCuaTwPIgCuBUewG4erQqmLvk96cSasKOMcqPN82qQa2A17H bmvg6rnim0BRgC/pxIWSdMn+G6I0myX6WEZfvF78PwXi4Oubq087/2EQkmCqzwDS 7yMTad9oGCipVoTpVdVL3S4RkENdVHT4PcC0Lrmm7Uk4A8c605iEKvLUhmI/Q248 ICO39Uc1bZWVitwZV+NTfDcgpIgUR+OLnqekI+SY9bpG6mTLcvFJfEgasBpNfO5U ysFYpAwhxtP4j4k7jv6EHFotW8iOX+yNfc1/PfOF80PB5ubClJ9eOME5QX1nil+D zCggfjqKCZgryP1Q0OytcVzQ6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGsu8Qd+ DyT/njnwFwrMs+LejEWHMB8GA1UdIwQYMBaAFNkQZQG1NdD3ytV8jnp0fKBp0E1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkFDQi9GNTU5OEQwODky NDAxMUVDQkVENERBMkNDNEY5QUUwMi8yUkJsQWJVMTBQZksxWHlPZW5SOG9HblFU VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJSQmxBYlUxMFBmSzFYeU9lblI4b0duUVRWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkFDQi9GNTU5OEQwODkyNDAxMUVDQkVENERBMkNDNEY5QUUwMi8yUkJsQWJVMTBQ ZksxWHlPZW5SOG9HblFUVmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARfkQlvyHIT0CGiM7zmEYLAWMZuc1kTQe1OJbLk/ICB/7jjwCXujEGxeV14Si OfECWAAQHJHJaPFEv8TEwS7RNb1tnrsblIVWgY7a2XVIjpCEoScK5UWUQ7tT+mmt Aoj5oiZ24hiZonBaDhoUECNfjjRpUUuwuMWO7fTjpT5yQeh150vGatf6c9bB62Lg BrMQZnaVm6rRZKVm+JbKrDj1w49CORqgt9Ts+Me+WxcCEWuHfPvmEK9Z8sry0Rk8 TrB6dBgSj03DNs6Fc45uJoAbJSi/39cWuLCscs9b3qcOwrPzrcLD9u1tkivC3bey O+ofdO2FFPy5G5VaQI11sqiXZg== -----END CERTIFICATE-----Generated at Thu Mar 26 04:11:00 2026 by rpki-client