$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft File: 2kcELjdqlHP8Dt_IRFc53RMorg4.mft (raw, json) Hash identifier: D+oTd86qKsO9EL40hjRCtdE/uZSwv0Wqxd7FTzrm3r8= Subject key identifier: 84:BC:93:14:59:E9:2C:AE:FA:A5:28:FB:07:74:5B:CB:0A:E1:9F:40 Authority key identifier: DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E Certificate issuer: /CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Certificate serial: 0EA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft Manifest number: 0E8D Signing time: Thu 26 Mar 2026 17:41:59 +0000 Manifest this update: Thu 26 Mar 2026 17:41:59 +0000 Manifest next update: Thu 02 Apr 2026 17:41:59 +0000 Files and hashes: 1: 2kcELjdqlHP8Dt_IRFc53RMorg4.crl (hash: f3zdXkapWTVI28SAhbQ7BkJDhpPSdb2zBto2XYwic/E=) 2: B922DB22E84211EA918B8F09C4F9AE02.roa (hash: LfIFl6rYWrXVoxcyn0clPS9g9F++NUROBoNirluuY6Y=) 3: B5D4A156598B11EC82C8685CC4F9AE02.roa (hash: DFvUjSl+6A6klX7hNwdfn4zHvZwMt+wqIU2vy92vesE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3752 (0xea8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DF4, serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Validity Not Before: Mar 26 17:41:59 2026 GMT Not After : Apr 2 17:41:59 2026 GMT Subject: CN=69c56fe7-c868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8f:57:bd:17:83:eb:7c:dd:c7:6c:29:fc:4b: 7e:25:27:76:eb:02:92:b2:68:42:94:7d:b8:79:01: f2:8d:04:ec:dd:a2:01:10:74:25:1b:a3:d2:f4:6e: 86:85:07:fb:6e:17:30:96:cf:ec:9a:36:dc:6e:db: b4:8d:de:56:02:97:86:df:ed:e4:02:bb:58:3f:ec: 8b:67:8f:6d:8f:4c:27:81:09:6d:d2:fd:ea:c2:f5: b1:31:63:39:9c:f5:97:94:ad:97:1b:a7:39:3c:7d: 55:9d:62:52:99:37:d9:a0:95:97:4e:c7:d6:7d:ed: 66:6e:be:27:4a:34:7d:ce:61:db:25:c1:6d:76:77: b3:d4:eb:f9:0c:b1:b0:45:c9:af:18:e1:88:1b:d3: 6b:cd:36:0c:eb:b4:b4:e9:eb:f9:e8:5c:b3:42:fc: 54:06:e3:1e:55:ba:6d:db:b5:13:1a:a0:92:0e:2a: 3d:21:12:06:a0:7a:70:b5:87:ef:fe:e8:0a:35:9e: 5a:83:a7:45:b2:03:cc:3a:d8:97:28:81:3b:e9:6e: 67:bf:99:e3:34:f4:cb:6e:8b:47:f6:67:a6:28:92: e8:01:e7:5f:af:80:5c:cf:c1:97:b7:61:36:cf:e3: d3:07:d4:37:ff:a2:af:5c:2c:cb:d7:0e:bb:89:99: ed:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BC:93:14:59:E9:2C:AE:FA:A5:28:FB:07:74:5B:CB:0A:E1:9F:40 X509v3 Authority Key Identifier: keyid:DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:15:97:ca:50:46:a1:a8:0a:43:d2:80:2f:f7:26:90:09:3f: 20:85:02:ad:ec:c4:d7:6f:89:df:a2:90:f5:f1:69:1e:b7:80: 8e:b8:c9:00:d8:fb:2f:79:aa:55:a3:49:43:e2:d2:ad:43:b8: df:1d:57:8a:22:55:16:08:6c:c4:6b:b9:47:b1:ed:33:f1:9e: f6:a5:86:3e:53:a6:d5:8c:12:87:8b:1f:83:9c:37:39:db:db: 48:de:63:46:ae:d6:7d:d6:19:01:b1:77:10:75:8d:5f:fc:9e: fd:49:61:ce:31:72:68:f2:46:a2:04:5d:aa:71:7a:eb:8b:3f: bd:6c:9a:f0:d1:12:27:c4:07:e0:04:c9:70:18:71:27:4f:11: af:c6:28:28:cd:b2:22:ca:42:4e:58:6a:63:62:f5:92:05:23: 20:b7:0f:fc:e5:5f:88:ff:51:dc:9a:57:c8:7c:35:01:ac:b1: 88:fc:fc:1f:94:9f:0f:b1:98:d4:cb:bd:17:cc:c9:66:77:2e: d5:03:23:dd:7a:b4:6d:7e:56:6e:43:3e:d9:69:ca:57:78:7c: 92:a4:8e:db:c7:e4:db:47:59:67:eb:2b:a0:b0:59:43:f9:00: b8:78:b5:cf:b1:84:a9:44:ec:c3:46:89:af:fc:29:ca:7f:a8: 5c:1c:7d:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERjQxMTAvBgNVBAUTKERBNDcwNDJFMzc2QTk0NzNGQzBFREZDODQ0NTczOURE MTMyOEFFMEUwHhcNMjYwMzI2MTc0MTU5WhcNMjYwNDAyMTc0MTU5WjAYMRYwFAYD VQQDEw02OWM1NmZlNy1jODY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk49XvReD63zdx2wp/Et+JSd26wKSsmhClH24eQHyjQTs3aIBEHQlG6PS9G6G hQf7bhcwls/smjbcbtu0jd5WApeG3+3kArtYP+yLZ49tj0wngQlt0v3qwvWxMWM5 nPWXlK2XG6c5PH1VnWJSmTfZoJWXTsfWfe1mbr4nSjR9zmHbJcFtdnez1Ov5DLGw RcmvGOGIG9NrzTYM67S06ev56FyzQvxUBuMeVbpt27UTGqCSDio9IRIGoHpwtYfv /ugKNZ5ag6dFsgPMOtiXKIE76W5nv5njNPTLbotH9memKJLoAedfr4Bcz8GXt2E2 z+PTB9Q3/6KvXCzL1w67iZntAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIS8kxRZ 6Syu+qUo+wd0W8sK4Z9AMB8GA1UdIwQYMBaAFNpHBC43apRz/A7fyERXOd0TKK4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURGNC9GNDFEMUMxOEIz OEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxIUDhEdF9JUkZjNTNSTW9y ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrY0VMamRxbEhQOER0X0lSRmM1M1JNb3JnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURGNC9GNDFEMUMxOEIzOEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxI UDhEdF9JUkZjNTNSTW9yZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABxWXylBGoagKQ9KAL/cmkAk/IIUCrezE12+J36KQ9fFpHreAjrjJANj7L3mq VaNJQ+LSrUO43x1XiiJVFghsxGu5R7HtM/Ge9qWGPlOm1YwSh4sfg5w3OdvbSN5j Rq7WfdYZAbF3EHWNX/ye/UlhzjFyaPJGogRdqnF664s/vWya8NESJ8QH4ATJcBhx J08Rr8YoKM2yIspCTlhqY2L1kgUjILcP/OVfiP9R3JpXyHw1AayxiPz8H5SfD7GY 1Mu9F8zJZncu1QMj3Xq0bX5WbkM+2WnKV3h8kqSO28fk20dZZ+sroLBZQ/kAuHi1 z7GEqUTsw0aJr/wpyn+oXBx93Q== -----END CERTIFICATE-----Generated at Thu Mar 26 23:22:09 2026 by rpki-client