$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft File: 2DkrDZFbmsH00jv5hBlxQG-2GsY.mft (raw, json) Hash identifier: 3tfUlRAEIhZZrByqqmC5yHI4JtgXufl+8wIeFUsHWkg= Subject key identifier: E7:BD:F2:B6:3B:65:04:A6:C9:6E:CB:7E:71:39:0C:9F:4F:46:C8:10 Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Certificate serial: 0A45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft Manifest number: 0A20 Signing time: Tue 24 Mar 2026 19:37:05 +0000 Manifest this update: Tue 24 Mar 2026 19:37:04 +0000 Manifest next update: Tue 31 Mar 2026 19:37:04 +0000 Files and hashes: 1: 2DkrDZFbmsH00jv5hBlxQG-2GsY.crl (hash: mV0IwPnGgrw6uVW5T0i4IA3a0VARo6rzO9g7jrj63po=) 2: 41622F82F82E11F0BC7D9928396F56BC.roa (hash: BOsXgTgRuoFK1Abqu9y4jRVX+t+6P8y+y8+yHdVIkmA=) 3: 92B2469A90D411F09BC0A564C4F9AE02.roa (hash: BkbQUsKXIX52vzOm2/vANASw4HXX+/0xUFcUl5+7lq8=) 4: 013B99DA986011F08FA4AB86C4F9AE02.roa (hash: SGPYvzHeLCeVexbh9lAx6+ESCRM1l3c2pzV/QopMYDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2629 (0xa45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Validity Not Before: Mar 24 19:37:04 2026 GMT Not After : Mar 31 19:37:04 2026 GMT Subject: CN=69c2e7e1-db91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1c:83:85:dc:e5:c7:38:cb:3a:dd:19:6a:06: e3:ab:f1:95:2f:89:39:58:28:93:6b:c7:41:8b:cf: 33:cd:5e:32:db:13:4c:b4:26:07:a6:5b:89:43:60: f2:ec:89:a5:ae:95:f1:30:a3:5a:76:0f:54:f3:72: a1:58:f5:1c:c5:6b:e5:7e:dd:ff:7e:d4:b2:09:c1: 60:98:40:ae:5f:6c:70:3e:10:d5:0f:b7:d3:26:02: 95:e5:4d:8c:e0:91:bc:ba:d7:f8:47:93:b7:7f:d2: 94:54:4f:93:af:64:89:ec:8d:f1:bf:35:df:c0:4b: c3:f8:ed:d9:da:fa:2e:42:44:e4:fa:d4:68:f1:7b: ee:e2:15:51:f7:0b:a3:e8:56:38:0a:56:14:50:6f: 4a:14:ca:77:cd:c5:df:86:87:35:e2:84:11:99:d0: 35:84:f5:ef:ac:44:0a:60:89:19:bb:9e:92:ad:05: 7b:7e:8a:df:26:75:08:e4:15:23:3c:81:ef:8f:af: d8:90:c2:bb:77:fb:95:59:1d:ea:80:fa:ea:f5:66: 86:ec:11:99:9c:42:ca:09:4e:ef:32:44:5a:5d:e4: da:06:10:77:b1:ba:f7:ab:21:4c:ce:cc:e1:e7:0d: 44:8f:c6:ba:c5:9d:4b:ce:fb:06:44:dd:e9:07:fd: 38:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BD:F2:B6:3B:65:04:A6:C9:6E:CB:7E:71:39:0C:9F:4F:46:C8:10 X509v3 Authority Key Identifier: keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:67:65:12:e2:e3:6f:de:e2:4c:cf:77:e8:6f:69:60:da:de: dd:ea:20:80:6a:21:b4:6e:7e:73:5a:0f:41:86:90:ee:da:7a: c4:a5:94:04:bd:c0:a1:22:40:2d:48:32:71:c8:02:bb:5a:bf: 25:53:08:01:20:c5:22:68:58:0d:dc:f6:50:ae:68:0d:e6:5d: e2:5e:ef:b4:2a:a8:d6:dd:bf:a9:5d:d5:57:bc:0b:18:4b:d2: 8c:61:ac:95:e1:99:91:8d:bd:eb:e7:3d:7f:b3:df:ef:4e:c5: 59:25:45:ba:e8:39:73:7f:c6:54:0c:ea:88:0a:73:75:af:61: 24:cf:d0:53:4a:d4:d0:f7:2c:90:bf:69:05:4b:70:e3:cf:52: 18:38:a6:b7:3b:95:1d:5a:e0:49:49:5c:ed:dd:b5:d7:03:c0: 59:47:a9:b0:aa:6e:ed:fb:08:4c:20:6a:af:37:aa:0b:06:91: fd:2e:ae:60:f2:fa:04:ea:cd:10:41:1b:67:b5:44:f7:14:82: aa:01:eb:3b:4e:a9:c7:d8:fc:bc:7d:be:b7:a6:55:eb:e3:68: 30:94:f8:2d:0e:f0:57:e2:cb:74:82:be:49:6e:ad:33:e8:90: 69:75:21:66:b4:e2:82:9b:56:18:94:84:22:eb:41:33:59:ce: be:f8:81:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZERTUxMTAvBgNVBAUTKEQ4MzkyQjBEOTE1QjlBQzFGNEQyM0JGOTg0MTk3MTQw NkZCNjFBQzYwHhcNMjYwMzI0MTkzNzA0WhcNMjYwMzMxMTkzNzA0WjAYMRYwFAYD VQQDEw02OWMyZTdlMS1kYjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRyDhdzlxzjLOt0Zagbjq/GVL4k5WCiTa8dBi88zzV4y2xNMtCYHpluJQ2Dy 7ImlrpXxMKNadg9U83KhWPUcxWvlft3/ftSyCcFgmECuX2xwPhDVD7fTJgKV5U2M 4JG8utf4R5O3f9KUVE+Tr2SJ7I3xvzXfwEvD+O3Z2vouQkTk+tRo8Xvu4hVR9wuj 6FY4ClYUUG9KFMp3zcXfhoc14oQRmdA1hPXvrEQKYIkZu56SrQV7forfJnUI5BUj PIHvj6/YkMK7d/uVWR3qgPrq9WaG7BGZnELKCU7vMkRaXeTaBhB3sbr3qyFMzszh 5w1Ej8a6xZ1LzvsGRN3pB/04sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOe98rY7 ZQSmyW7LfnE5DJ9PRsgQMB8GA1UdIwQYMBaAFNg5Kw2RW5rB9NI7+YQZcUBvthrG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRFNS83MkM1QTlDQzk0 MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1zSDAwanY1aEJseFFHLTJH c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEa3JEWkZibXNIMDBqdjVoQmx4UUctMkdzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRFNS83MkM1QTlDQzk0MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1z SDAwanY1aEJseFFHLTJHc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZWdlEuLjb97iTM936G9pYNre3eoggGohtG5+c1oPQYaQ7tp6xKWUBL3AoSJA LUgyccgCu1q/JVMIASDFImhYDdz2UK5oDeZd4l7vtCqo1t2/qV3VV7wLGEvSjGGs leGZkY296+c9f7Pf707FWSVFuug5c3/GVAzqiApzda9hJM/QU0rU0PcskL9pBUtw 489SGDimtzuVHVrgSUlc7d211wPAWUepsKpu7fsITCBqrzeqCwaR/S6uYPL6BOrN EEEbZ7VE9xSCqgHrO06px9j8vH2+t6ZV6+NoMJT4LQ7wV+LLdIK+SW6tM+iQaXUh ZrTigptWGJSEIutBM1nOvviBng== -----END CERTIFICATE-----Generated at Thu Mar 26 07:16:27 2026 by rpki-client