$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft File: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft (raw, json) Hash identifier: yWO19gO4eVTWzAHiLp9k0BBI9ypRa/N5jI0e4LeTGKE= Subject key identifier: B9:05:A8:86:39:25:5A:CD:F0:DA:67:3A:69:27:B2:48:D5:F4:55:8A Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B Certificate issuer: /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft Manifest number: 0133 Signing time: Wed 25 Mar 2026 04:40:55 +0000 Manifest this update: Wed 25 Mar 2026 04:40:55 +0000 Manifest next update: Wed 01 Apr 2026 04:40:55 +0000 Files and hashes: 1: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl (hash: PX0Tj8keZeLKMAPtVzHko+U6rw5F7+14PGgMiCNrFpc=) 2: F6382C7A56EC11EF85879C50C4F9AE02.roa (hash: shtxP/SBAQ2iT3UezvldJfibekIWgVIPJ+ZajU+8AuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Validity Not Before: Mar 25 04:40:55 2026 GMT Not After : Apr 1 04:40:55 2026 GMT Subject: CN=69c36757-3983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:48:f6:34:a7:b0:ef:a5:d8:4c:6a:d6:16:31: e3:bc:23:d0:08:20:2f:b5:da:c0:e2:e2:ba:0e:73: b0:dc:48:b9:70:03:0c:df:d2:5c:b2:22:b1:da:8a: ab:39:76:83:12:35:c7:f7:6b:03:ae:3b:7c:36:20: ee:27:c0:0c:ec:7b:1a:e7:ec:f0:e6:9a:84:2c:dc: 42:a4:36:31:cd:07:11:cf:90:58:33:34:4d:f4:cd: 29:31:ee:f1:3f:ab:e5:e7:96:27:03:88:3f:2d:c0: b8:28:bf:87:05:4c:9d:5f:df:b1:1d:b7:9e:fe:50: e7:98:fb:d5:d0:f1:b3:b9:49:d9:c4:64:ac:d2:9a: 78:a0:b3:e8:13:2e:17:32:c6:34:d7:99:27:4c:36: 2f:6f:d2:f5:0a:19:b5:d5:0c:41:89:e8:47:f8:59: 31:51:f1:11:e1:76:22:03:e7:bc:27:f3:92:e9:6f: 68:01:4e:9a:7a:43:58:a1:03:ae:ed:08:b3:d1:17: 9e:49:87:52:d0:ba:d7:4b:f9:1d:37:5d:7d:f2:49: 49:42:88:1c:92:5c:f6:03:ec:d8:a2:65:7a:18:68: 04:8d:4a:76:35:f2:b3:48:be:78:10:07:72:7c:0e: 6b:d3:7b:d4:32:ed:c9:52:e3:33:90:ff:97:27:c7: 99:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:05:A8:86:39:25:5A:CD:F0:DA:67:3A:69:27:B2:48:D5:F4:55:8A X509v3 Authority Key Identifier: keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:27:62:c4:fd:4b:e2:9f:35:91:96:35:0f:41:10:58:a7:f7: 40:22:6b:25:86:a0:dd:66:30:1d:3f:7d:fd:d1:5f:26:01:45: e8:eb:4f:e7:8a:2e:16:6a:38:ad:c6:4b:4f:6b:3e:c0:a5:2d: ab:15:8d:5d:39:d7:a0:e3:44:b7:fa:51:36:06:93:b7:01:be: 6a:e0:1d:b3:9e:3d:9b:7f:ae:87:7b:05:cc:a6:55:46:24:28: 97:ef:a4:77:70:ea:36:8e:52:3c:cc:fd:f2:3b:7b:fe:13:ab: 16:37:45:a1:b9:98:e2:d4:46:d9:7b:88:a1:bf:f7:bf:bb:79: 4c:2e:f4:39:05:60:45:01:1b:96:6e:ec:e3:ca:63:cd:fe:27: 48:75:79:2d:51:9e:63:ed:56:5a:ba:97:6e:86:f4:48:47:c8: 85:2c:37:af:e7:fa:04:05:6d:c4:b4:31:1b:d8:68:68:78:8f: da:d7:ab:d6:fc:c3:2e:7d:0c:80:28:b5:76:4c:a2:dd:f8:d6: 59:08:0c:6c:36:19:74:ca:f7:09:2e:e1:fe:61:92:56:96:c8: 50:65:b3:96:06:63:75:5e:24:1a:2d:1d:f0:f4:66:7a:72:5b: 13:74:a9:8f:28:fa:86:76:9d:91:f9:dd:89:73:e8:53:f9:7d: 9d:a2:a0:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVBNTcxMTAvBgNVBAUTKEQ5QzVEODJBQkQzMEZERDIwRkE5Q0FGM0QxRUQ4NjdE QjA3Njk1NkIwHhcNMjYwMzI1MDQ0MDU1WhcNMjYwNDAxMDQ0MDU1WjAYMRYwFAYD VQQDEw02OWMzNjc1Ny0zOTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUj2NKew76XYTGrWFjHjvCPQCCAvtdrA4uK6DnOw3Ei5cAMM39JcsiKx2oqr OXaDEjXH92sDrjt8NiDuJ8AM7Hsa5+zw5pqELNxCpDYxzQcRz5BYMzRN9M0pMe7x P6vl55YnA4g/LcC4KL+HBUydX9+xHbee/lDnmPvV0PGzuUnZxGSs0pp4oLPoEy4X MsY015knTDYvb9L1Chm11QxBiehH+FkxUfER4XYiA+e8J/OS6W9oAU6aekNYoQOu 7Qiz0ReeSYdS0LrXS/kdN1198klJQogcklz2A+zYomV6GGgEjUp2NfKzSL54EAdy fA5r03vUMu3JUuMzkP+XJ8eZ5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLkFqIY5 JVrN8NpnOmknskjV9FWKMB8GA1UdIwQYMBaAFNnF2Cq9MP3SD6nK89Hthn2wdpVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE1Ny82RTc0ODMxMDU2 RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19kSVBxY3J6MGUyR2ZiQjJs V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJjWFlLcjB3X2RJUHFjcnowZTJHZmJCMmxXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUE1Ny82RTc0ODMxMDU2RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19k SVBxY3J6MGUyR2ZiQjJsV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApSdixP1L4p81kZY1D0EQWKf3QCJrJYag3WYwHT99/dFfJgFF6OtP54ouFmo4 rcZLT2s+wKUtqxWNXTnXoONEt/pRNgaTtwG+auAds549m3+uh3sFzKZVRiQol++k d3DqNo5SPMz98jt7/hOrFjdFobmY4tRG2XuIob/3v7t5TC70OQVgRQEblm7s48pj zf4nSHV5LVGeY+1WWrqXbob0SEfIhSw3r+f6BAVtxLQxG9hoaHiP2ter1vzDLn0M gCi1dkyi3fjWWQgMbDYZdMr3CS7h/mGSVpbIUGWzlgZjdV4kGi0d8PRmenJbE3Sp jyj6hnadkfndiXPoU/l9naKgJg== -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:12 2026 by rpki-client