$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft File: 2tXg1z0FSml7IoOa8fpKzZT1Cho.mft (raw, json) Hash identifier: eY3RZn6z9J9cnOB7QcJml7m1yYIqn4fxzt/U8mHlO/w= Subject key identifier: 64:B2:3B:F1:89:12:68:35:A4:A8:F9:93:09:D9:62:86:80:DE:8F:23 Authority key identifier: DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A Certificate issuer: /CN=A9184F65/serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft Manifest number: 015B Signing time: Fri 27 Mar 2026 04:34:10 +0000 Manifest this update: Fri 27 Mar 2026 04:34:10 +0000 Manifest next update: Fri 03 Apr 2026 04:34:10 +0000 Files and hashes: 1: 2tXg1z0FSml7IoOa8fpKzZT1Cho.crl (hash: B1sJbLfNuF8WrmAQyYdOoQlGMhbTT9pJ/MkLtM7k5nE=) 2: 9F0B162A252C11EFB58A7552C4F9AE02.roa (hash: U+JPeLwDFc/9KD5pjtuqdCZiF9ijWo40ru9xcuKUWDA=) 3: 6923942E252711EF948A5E18C4F9AE02.roa (hash: O1muA/0EJVSd9L8bh/HkeYxU93aOIw8GOb3fRQGF3F0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 04:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184F65, serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A Validity Not Before: Mar 27 04:34:10 2026 GMT Not After : Apr 3 04:34:10 2026 GMT Subject: CN=69c608c2-d1d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8a:e5:81:6e:af:be:a6:cb:2b:e1:9c:dc:d2: 93:2c:fc:77:49:4e:11:e0:f1:d5:a3:5a:d6:ba:22: 98:b1:21:75:8e:71:06:6b:6e:ed:7b:9b:35:7b:93: 49:9d:46:26:5b:76:c7:c5:3a:7a:ba:5c:b3:d8:67: bf:72:4f:cb:d5:11:ea:bd:2c:48:c7:54:8f:cd:ae: c6:5a:a1:dd:31:67:7d:7f:ff:52:45:b3:11:fe:d0: f8:6f:ae:ae:6a:c8:d5:fd:53:bf:74:62:6a:d1:4e: d9:60:4c:8d:34:34:d1:de:aa:c7:9b:d1:9a:07:4e: a2:5b:68:22:11:b0:db:7b:f0:c7:f4:45:30:a4:3d: ef:d5:89:a9:a3:94:ab:a4:85:9b:05:cc:11:3a:32: 8b:73:a9:b1:72:29:5b:1d:52:4b:d5:47:0e:0f:81: 44:c2:3c:d3:3a:fd:7f:d4:cd:8d:21:0c:3e:14:9d: d7:23:d0:98:f3:3e:6c:ac:0c:56:cc:88:17:0f:6a: 25:a2:3a:9a:64:10:7a:e2:ee:68:2c:b3:7a:be:3c: 07:35:c6:37:02:ad:c3:e5:ea:85:a0:cf:13:6b:89: ff:94:11:2e:31:ea:93:3b:3b:27:a6:af:85:d0:88: 14:1d:e8:83:e6:11:dd:eb:fd:28:e9:49:47:8f:f9: ee:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B2:3B:F1:89:12:68:35:A4:A8:F9:93:09:D9:62:86:80:DE:8F:23 X509v3 Authority Key Identifier: keyid:DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:df:b0:0e:0a:cc:8c:ab:8e:3c:07:93:78:9b:0e:47:27:97: d6:63:78:c0:a4:0b:bb:1f:21:ab:78:56:d8:a2:94:82:49:f5: 02:12:85:53:52:45:b7:7d:e8:43:34:a3:12:e0:91:5b:48:1c: a2:0e:51:04:9d:6c:20:33:53:f6:c5:8d:54:31:cd:b5:d5:d0: 73:6c:67:87:e1:ca:cf:34:e1:ac:48:87:8c:a1:1c:6c:4e:30: 5d:fa:1d:49:92:93:ab:bd:30:9b:82:12:ba:2a:ca:8f:90:38: b7:b4:a3:b7:6c:7a:3b:c8:e9:dc:49:1e:68:36:9e:4b:60:dd: 23:24:d2:ff:17:fb:24:3c:78:db:10:a8:9d:21:be:db:8c:18: ea:fc:be:f2:d8:23:aa:4f:1f:cb:6e:9d:76:e7:14:e4:90:c3: f2:6c:68:d7:61:4e:c3:07:2e:d7:32:7a:0d:74:10:e7:6d:9e: 7f:28:95:6c:97:cd:18:51:65:38:80:ba:e0:fd:d6:e5:22:8a: 8c:33:02:8c:7d:a1:7a:2a:56:d1:00:c3:f0:13:1b:3c:4a:1a: 84:e0:23:60:9c:4c:76:e6:40:52:1a:35:1a:ea:7e:7e:57:2e: f2:35:6d:2f:05:a2:26:6c:03:b8:b1:29:36:20:8d:8c:82:65: 88:e4:2b:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRGNjUxMTAvBgNVBAUTKERBRDVFMEQ3M0QwNTRBNjk3QjIyODM5QUYxRkE0QUNE OTRGNTBBMUEwHhcNMjYwMzI3MDQzNDEwWhcNMjYwNDAzMDQzNDEwWjAYMRYwFAYD VQQDEw02OWM2MDhjMi1kMWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4rlgW6vvqbLK+Gc3NKTLPx3SU4R4PHVo1rWuiKYsSF1jnEGa27te5s1e5NJ nUYmW3bHxTp6ulyz2Ge/ck/L1RHqvSxIx1SPza7GWqHdMWd9f/9SRbMR/tD4b66u asjV/VO/dGJq0U7ZYEyNNDTR3qrHm9GaB06iW2giEbDbe/DH9EUwpD3v1Ympo5Sr pIWbBcwROjKLc6mxcilbHVJL1UcOD4FEwjzTOv1/1M2NIQw+FJ3XI9CY8z5srAxW zIgXD2olojqaZBB64u5oLLN6vjwHNcY3Aq3D5eqFoM8Ta4n/lBEuMeqTOzsnpq+F 0IgUHeiD5hHd6/0o6UlHj/nuzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGSyO/GJ Emg1pKj5kwnZYoaA3o8jMB8GA1UdIwQYMBaAFNrV4Nc9BUppeyKDmvH6Ss2U9Qoa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEY2NS9BQzYzQURDNjI1 MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNtbDdJb09hOGZwS3paVDFD aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ0WGcxejBGU21sN0lvT2E4ZnBLelpUMUNoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEY2NS9BQzYzQURDNjI1MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNt bDdJb09hOGZwS3paVDFDaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI9+wDgrMjKuOPAeTeJsORyeX1mN4wKQLux8hq3hW2KKUgkn1AhKFU1JFt33o QzSjEuCRW0gcog5RBJ1sIDNT9sWNVDHNtdXQc2xnh+HKzzThrEiHjKEcbE4wXfod SZKTq70wm4ISuirKj5A4t7Sjt2x6O8jp3EkeaDaeS2DdIyTS/xf7JDx42xConSG+ 24wY6vy+8tgjqk8fy26dducU5JDD8mxo12FOwwcu1zJ6DXQQ522efyiVbJfNGFFl OIC64P3W5SKKjDMCjH2heipW0QDD8BMbPEoahOAjYJxMduZAUho1Gup+flcu8jVt LwWiJmwDuLEpNiCNjIJliOQrkQ== -----END CERTIFICATE-----Generated at Sat Mar 28 10:41:55 2026 by rpki-client