$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft File: 2j9P_11GRonTiYj1-yL2VVCz7_g.mft (raw, json) Hash identifier: 1jOg1ugTERYESqCDJiux2ioT9nY+k8q1MptVrktlulY= Subject key identifier: 32:06:32:D4:7E:1D:FE:C0:A5:2E:CF:C4:A0:19:CB:0F:C1:96:A5:71 Authority key identifier: DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 Certificate issuer: /CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Certificate serial: 053D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft Manifest number: 0504 Signing time: Thu 26 Mar 2026 23:27:41 +0000 Manifest this update: Thu 26 Mar 2026 23:27:40 +0000 Manifest next update: Thu 02 Apr 2026 23:27:40 +0000 Files and hashes: 1: 2j9P_11GRonTiYj1-yL2VVCz7_g.crl (hash: vdNRztHbmtSwmR43Z3C5+1Vo1QMHbyL8cOOZXnOZ+Oo=) 2: 75426BC6A8C511EC8F560C42C4F9AE02.roa (hash: 7xZPQJy4FlDqQRK4ZNxBOqn11xvYRCTnG5Hl+SBa0kA=) 3: 952AA4424DAF11EC86ED5273C4F9AE02.roa (hash: dY+BZEOINurtJjOA3yhjmWQ4kx2Zua1d5uXKZrya/Kk=) 4: AC63C4A4A62E11ECBDD6843FC4F9AE02.roa (hash: EOMIe0WcNYmNc20xtvF1NWvgi2RMO6+OBmsDK/hEYoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 23:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1341 (0x53d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FFF, serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Validity Not Before: Mar 26 23:27:40 2026 GMT Not After : Apr 2 23:27:40 2026 GMT Subject: CN=69c5c0ed-88bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a0:b5:06:09:28:fe:bf:e3:bd:35:03:82:75: 91:42:60:7c:25:13:9f:dc:fd:cb:f3:be:83:1b:eb: 4b:c3:40:26:08:5d:2b:b5:f4:28:45:76:24:47:0b: ab:56:56:84:e8:d8:d1:48:d0:08:cc:92:a5:bd:68: 1f:3b:3a:35:96:0c:50:dd:c3:b2:ba:39:ef:d9:7c: f9:59:79:ca:27:38:38:4c:0b:b4:c9:49:6e:48:ae: 12:a4:d2:e2:a4:3a:84:91:d3:2a:ae:8a:ed:78:c9: 1d:1a:ec:9a:fe:89:8d:be:94:97:65:1e:1e:a4:1f: 14:6f:65:84:0b:02:50:1e:49:7b:c4:b9:9e:3e:d3: f8:bf:4b:6b:af:69:40:69:03:9b:82:ab:84:6e:99: be:5e:92:24:44:60:19:5f:ee:e0:ae:46:02:dc:17: 29:ba:9b:15:3f:e4:3b:35:43:49:b7:50:af:b5:30: c6:11:28:03:9e:5b:e3:f9:6b:ef:25:de:60:6d:61: 80:fe:9f:4e:94:06:ce:86:7a:a0:a0:a3:06:f1:6f: 31:46:32:1a:42:3f:0c:aa:92:28:75:d3:ed:59:63: ea:3b:47:ff:bc:7a:c4:95:0f:2a:03:a4:92:ae:76: f9:3b:02:b7:a5:6e:bd:89:7a:6e:41:f6:15:31:ab: 55:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:06:32:D4:7E:1D:FE:C0:A5:2E:CF:C4:A0:19:CB:0F:C1:96:A5:71 X509v3 Authority Key Identifier: keyid:DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:01:cf:b5:de:8d:54:2c:d0:84:77:32:86:d0:1c:5f:c5:6c: 3c:aa:5b:f5:32:3a:8a:5a:06:dd:a1:27:56:40:7b:2c:6a:68: 17:56:96:a4:9c:5e:ed:ed:5c:c4:96:7d:5f:ae:0f:bb:25:54: 9a:7f:83:d5:b8:7e:a9:da:34:8c:e5:f9:53:f4:fd:f7:6f:07: f4:cb:6c:2a:16:86:32:9e:9b:1c:5c:6a:c8:aa:0a:b7:4f:a3: fe:03:05:9c:a1:df:74:29:27:66:35:1c:73:d4:e5:49:13:c3: fc:84:6f:0a:15:4b:bd:a7:44:12:fd:ec:66:6d:79:ac:78:9c: f1:a6:aa:d8:5c:f4:02:87:3f:fb:9e:c0:72:80:e7:86:00:cc: 71:ac:46:c0:41:c6:4b:1c:83:13:6d:92:e2:6e:c5:06:ab:10: b6:d0:dd:ed:cb:23:d7:d0:4d:31:d7:69:c9:61:ba:dc:13:b3: 0c:26:a5:01:51:f7:2b:92:8f:10:0b:c6:42:5a:df:65:ae:61: 1e:37:0d:c4:7a:6b:6f:8f:49:96:c1:e7:20:fa:2f:30:49:44: 8e:52:5d:b4:59:fa:0c:62:d1:82:bd:d9:60:3c:20:a8:75:ea: 4d:65:66:66:16:29:05:3b:86:b4:9f:22:f0:90:24:da:cc:6f: c6:7b:44:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGRkYxMTAvBgNVBAUTKERBM0Y0RkZGNUQ0NjQ2ODlEMzg5ODhGNUZCMjJGNjU1 NTBCM0VGRjgwHhcNMjYwMzI2MjMyNzQwWhcNMjYwNDAyMjMyNzQwWjAYMRYwFAYD VQQDEw02OWM1YzBlZC04OGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4KC1Bgko/r/jvTUDgnWRQmB8JROf3P3L876DG+tLw0AmCF0rtfQoRXYkRwur VlaE6NjRSNAIzJKlvWgfOzo1lgxQ3cOyujnv2Xz5WXnKJzg4TAu0yUluSK4SpNLi pDqEkdMqrorteMkdGuya/omNvpSXZR4epB8Ub2WECwJQHkl7xLmePtP4v0trr2lA aQObgquEbpm+XpIkRGAZX+7grkYC3BcpupsVP+Q7NUNJt1CvtTDGESgDnlvj+Wvv Jd5gbWGA/p9OlAbOhnqgoKMG8W8xRjIaQj8MqpIoddPtWWPqO0f/vHrElQ8qA6SS rnb5OwK3pW69iXpuQfYVMatVtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDIGMtR+ Hf7ApS7PxKAZyw/BlqVxMB8GA1UdIwQYMBaAFNo/T/9dRkaJ04mI9fsi9lVQs+/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZGRi84MkFEMzc3QTRE QUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1JvblRpWWoxLXlMMlZWQ3o3 X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqOVBfMTFHUm9uVGlZajEteUwyVlZDejdfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZGRi84MkFEMzc3QTREQUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1Jv blRpWWoxLXlMMlZWQ3o3X2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArwHPtd6NVCzQhHcyhtAcX8VsPKpb9TI6iloG3aEnVkB7LGpoF1aWpJxe7e1c xJZ9X64PuyVUmn+D1bh+qdo0jOX5U/T9928H9MtsKhaGMp6bHFxqyKoKt0+j/gMF nKHfdCknZjUcc9TlSRPD/IRvChVLvadEEv3sZm15rHic8aaq2Fz0Aoc/+57AcoDn hgDMcaxGwEHGSxyDE22S4m7FBqsQttDd7csj19BNMddpyWG63BOzDCalAVH3K5KP EAvGQlrfZa5hHjcNxHprb49JlsHnIPovMElEjlJdtFn6DGLRgr3ZYDwgqHXqTWVm ZhYpBTuGtJ8i8JAk2sxvxntEeg== -----END CERTIFICATE-----Generated at Fri Mar 27 04:45:49 2026 by rpki-client