$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft File: h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft (raw, json) Hash identifier: gAZAS3Fx8q9/MUGxLwYIMFaguzCh6ToDzpDTmgWbdgM= Subject key identifier: 19:E3:A1:B8:E7:C3:15:F4:0C:60:3E:5F:4E:2B:6F:31:E5:F0:99:61 Authority key identifier: 87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14 Certificate issuer: /CN=A91A5030/serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14 Certificate serial: 26AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft Manifest number: 2696 Signing time: Tue 24 Mar 2026 15:37:52 +0000 Manifest this update: Tue 24 Mar 2026 15:37:52 +0000 Manifest next update: Tue 31 Mar 2026 15:37:52 +0000 Files and hashes: 1: h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl (hash: 3gjBhSoEccUX7OUIyUmJ9SQgDpUlpp3jhpzUxjbBSJU=) 2: 764601EE6A7A11EFAF10EC37C4F9AE02.roa (hash: CJtNext5PGiHGHfRvis01icRrUClz7gxR8gb7K0FV7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9900 (0x26ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5030, serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14 Validity Not Before: Mar 24 15:37:52 2026 GMT Not After : Mar 31 15:37:52 2026 GMT Subject: CN=69c2afd0-d511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:40:d6:a5:aa:ec:e8:ac:81:3e:84:6c:c3:0d: 9a:65:ac:f1:10:fa:f8:df:22:a2:eb:ae:6e:5a:fe: 6c:94:86:7c:d5:56:9d:e1:cb:21:8a:2f:f8:fe:4e: 37:78:32:aa:d4:30:68:c3:b7:e8:b6:c5:82:7b:a2: a5:3b:3c:e4:6b:a4:eb:58:cd:91:f5:4c:0d:2f:05: 56:73:fb:6c:fe:87:48:d2:a1:4d:53:3c:9b:db:08: 22:27:9e:a9:8f:a1:24:6b:d0:f6:6b:16:41:b8:b9: 47:1d:49:1c:10:61:28:61:87:c0:05:46:b7:71:6b: fd:69:fb:1f:27:3b:fb:92:5f:d0:49:44:81:5d:c7: e6:da:47:52:14:94:4c:1d:3b:e7:c6:ca:df:51:f1: b2:eb:24:2c:a1:f5:d5:13:c8:f4:30:b5:e7:0f:7b: 7c:bc:1c:3d:81:f4:72:20:c7:e0:c5:87:ab:37:1d: cb:c3:36:3b:dc:d6:6e:44:3d:db:c9:6b:9d:2f:22: d8:75:d2:ff:3c:e3:41:da:8c:3f:13:7e:f3:5f:c6: 79:09:0f:cc:0d:72:c7:8b:90:ce:a7:8f:75:f2:d9: 04:3c:cd:29:e8:70:de:db:06:59:a1:e4:3a:4a:ea: 3c:13:73:41:5b:7d:8c:88:26:3d:be:fa:a4:39:b9: ca:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E3:A1:B8:E7:C3:15:F4:0C:60:3E:5F:4E:2B:6F:31:E5:F0:99:61 X509v3 Authority Key Identifier: keyid:87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:96:db:3b:06:b6:1e:21:22:2c:44:d1:77:90:64:5e:dd:1f: 44:da:42:2c:3b:65:b6:72:e3:8d:b7:fc:7a:44:36:1f:99:d9: c6:98:69:eb:fa:76:0b:36:bf:cf:97:eb:2d:0e:a7:0a:88:bb: 10:4c:3a:dd:23:3f:14:15:28:98:7e:0e:33:d6:3b:69:ef:69: 33:21:91:a0:9b:46:a1:c2:e5:89:e7:74:73:9c:a3:e9:6f:62: 98:46:b9:8d:00:17:58:a8:6e:15:e6:3c:b2:cd:1e:d2:2e:47: 17:80:03:49:02:6b:e3:9e:0a:94:ac:57:28:01:f9:e9:13:76: da:10:dc:7b:7e:29:e3:ce:c5:81:42:7b:91:62:37:61:e7:16: c4:07:cf:b6:9e:02:70:ba:ab:c4:be:81:f2:5f:a8:d0:1c:a4: 43:25:02:2f:2a:ee:a1:f3:fe:27:70:97:6f:d3:60:dc:24:67: e0:a7:06:92:bc:60:e4:2f:c3:67:98:32:57:e7:13:61:c7:a5: 90:e4:d5:6d:b1:47:2a:4d:15:9a:6f:4d:3a:45:6d:39:f8:61: 84:e8:64:dc:6e:e3:3d:a9:f3:fc:d1:49:b6:93:bc:8d:71:16: 42:eb:48:ef:da:3a:6e:41:fb:41:1e:ba:e6:c0:80:59:4d:ec: 01:b3:cd:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUwMzAxMTAvBgNVBAUTKDg3NjlCOTUyRjlDODAwNjc1NzkyOUYwNjk5N0NERTVC MUU0NDhGMTQwHhcNMjYwMzI0MTUzNzUyWhcNMjYwMzMxMTUzNzUyWjAYMRYwFAYD VQQDEw02OWMyYWZkMC1kNTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUDWpars6KyBPoRsww2aZazxEPr43yKi665uWv5slIZ81Vad4cshii/4/k43 eDKq1DBow7fotsWCe6KlOzzka6TrWM2R9UwNLwVWc/ts/odI0qFNUzyb2wgiJ56p j6Eka9D2axZBuLlHHUkcEGEoYYfABUa3cWv9afsfJzv7kl/QSUSBXcfm2kdSFJRM HTvnxsrfUfGy6yQsofXVE8j0MLXnD3t8vBw9gfRyIMfgxYerNx3LwzY73NZuRD3b yWudLyLYddL/PONB2ow/E37zX8Z5CQ/MDXLHi5DOp4918tkEPM0p6HDe2wZZoeQ6 Suo8E3NBW32MiCY9vvqkObnK7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBnjobjn wxX0DGA+X04rbzHl8JlhMB8GA1UdIwQYMBaAFIdpuVL5yABnV5KfBpl83lseRI8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTAzMC9DRTZBM0YxMEZE MkExMUU0Qjc0RkVBNDJDNEY5QUUwMi9oMm01VXZuSUFHZFhrcDhHbVh6ZVd4NUVq eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gybTVVdm5JQUdkWGtwOEdtWHplV3g1RWp4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTAzMC9DRTZBM0YxMEZEMkExMUU0Qjc0RkVBNDJDNEY5QUUwMi9oMm01VXZuSUFH ZFhrcDhHbVh6ZVd4NUVqeFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQpbbOwa2HiEiLETRd5BkXt0fRNpCLDtltnLjjbf8ekQ2H5nZxphp6/p2Cza/ z5frLQ6nCoi7EEw63SM/FBUomH4OM9Y7ae9pMyGRoJtGocLlied0c5yj6W9imEa5 jQAXWKhuFeY8ss0e0i5HF4ADSQJr454KlKxXKAH56RN22hDce34p487FgUJ7kWI3 YecWxAfPtp4CcLqrxL6B8l+o0BykQyUCLyruofP+J3CXb9Ng3CRn4KcGkrxg5C/D Z5gyV+cTYcelkOTVbbFHKk0Vmm9NOkVtOfhhhOhk3G7jPanz/NFJtpO8jXEWQutI 79o6bkH7QR665sCAWU3sAbPNMQ== -----END CERTIFICATE-----Generated at Thu Mar 26 12:42:52 2026 by rpki-client