$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft File: 2spjaZboGaoflR3Gb_Ka0JecBcg.mft (raw, json) Hash identifier: aogtA5WGjukre/+hshpSAEcLZhoNutWpOqF8MpmEPZA= Subject key identifier: 6D:20:68:11:BF:E5:FB:61:88:66:DC:20:9F:CB:08:A1:25:37:3F:F8 Authority key identifier: DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 Certificate issuer: /CN=A91A9E0E/serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Certificate serial: 0CCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft Manifest number: 0CB5 Signing time: Tue 24 Mar 2026 18:20:09 +0000 Manifest this update: Tue 24 Mar 2026 18:20:08 +0000 Manifest next update: Tue 31 Mar 2026 18:20:08 +0000 Files and hashes: 1: 2spjaZboGaoflR3Gb_Ka0JecBcg.crl (hash: EOwZRFiefRXYOUQMFI7Bi0PPJuucXn7dKGENkfHYhQg=) 2: 15FB452EE46E11EABA2FD316C4F9AE02.roa (hash: DDz9ughOCNkxK48b2+kTl6B6v6gBnr7afj8fRQjJsr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3276 (0xccc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E0E, serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Validity Not Before: Mar 24 18:20:08 2026 GMT Not After : Mar 31 18:20:08 2026 GMT Subject: CN=69c2d5d9-ad56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fc:46:2d:8a:a9:11:63:49:af:73:ad:cf:5d: b8:cc:d6:5c:d6:2f:17:0f:af:ad:b6:33:e1:6e:c7: 22:b1:bf:c6:85:b9:5d:45:b7:c6:55:68:71:09:10: fd:56:c2:7b:5b:4f:8e:dc:db:bb:0b:26:f3:16:a6: 4b:9e:4b:73:69:51:eb:c9:b5:78:0a:4a:d9:e4:bb: 33:ad:a9:dd:30:07:86:92:db:fc:84:71:a6:6b:51: c0:4b:40:a4:07:a5:25:03:1b:37:46:b1:20:06:b9: 0e:eb:58:a1:06:41:d0:de:43:2e:ec:66:8b:4b:d5: db:40:f0:d8:22:3f:c4:53:8b:38:04:20:65:88:cd: e6:0f:ee:f2:0e:31:00:a5:c7:58:c9:1b:ba:72:a7: 71:5b:e4:ae:b6:c9:4e:73:27:97:71:2b:b2:05:02: ea:ff:24:31:38:a8:ac:aa:83:91:d1:dd:ed:e9:5b: 80:50:6c:f8:5c:df:74:aa:33:2d:f8:aa:11:a7:36: 3e:e1:5f:f2:5e:91:bf:9f:5a:fe:a7:83:e1:27:6e: ea:4d:e1:33:ca:be:d6:75:91:f5:7f:8b:87:1d:aa: 60:34:64:0b:09:f4:9f:af:96:6d:12:91:44:2f:15: 28:83:cb:dd:65:a4:bf:37:b6:ed:f1:41:22:e9:b2: 63:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:20:68:11:BF:E5:FB:61:88:66:DC:20:9F:CB:08:A1:25:37:3F:F8 X509v3 Authority Key Identifier: keyid:DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:d5:e1:db:a9:2a:e8:d3:8f:f8:b6:41:6e:46:91:be:43:c7: 32:c1:bf:0c:43:af:3e:ef:be:da:22:13:6d:74:43:97:ca:38: 9b:be:d3:98:52:dd:11:15:c3:05:cf:d0:28:da:f1:72:54:85: 78:8b:0d:76:5b:b8:d8:1c:03:74:94:25:4a:9e:bc:0b:d7:fc: 26:f1:d8:89:8d:72:27:c2:ae:d6:9d:f6:8a:fa:fb:1e:db:03: f3:95:46:ae:76:53:93:8a:a9:bc:e1:58:18:b3:ce:dc:ef:59: f2:e3:e4:53:54:dc:a8:a2:3a:90:71:1b:d2:fb:2b:31:9d:62: 83:a3:f5:aa:3a:38:09:07:f4:bb:55:46:b2:fb:10:d5:1f:27: e6:ec:17:e0:7a:04:25:77:d4:ff:54:91:76:41:2f:61:6e:45: 69:32:74:8b:be:58:0b:da:b6:77:a5:00:4d:5d:a0:56:6c:8d: 4e:c8:c0:df:63:b8:c8:c6:35:ad:70:ee:31:ec:dc:84:2d:5f: c9:56:43:0e:70:d0:37:f7:4c:c6:98:96:fd:76:b4:ba:31:c5: 74:14:4b:70:d9:56:a4:79:c9:5d:2e:0d:3d:06:00:6b:a5:df: 85:1f:dd:a9:2f:c5:cc:d9:40:b8:60:38:a5:14:99:3f:63:fb: 68:34:fe:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFMEUxMTAvBgNVBAUTKERBQ0E2MzY5OTZFODE5QUExRjk1MURDNjZGRjI5QUQw OTc5QzA1QzgwHhcNMjYwMzI0MTgyMDA4WhcNMjYwMzMxMTgyMDA4WjAYMRYwFAYD VQQDEw02OWMyZDVkOS1hZDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPxGLYqpEWNJr3Otz124zNZc1i8XD6+ttjPhbscisb/GhbldRbfGVWhxCRD9 VsJ7W0+O3Nu7CybzFqZLnktzaVHrybV4CkrZ5LszrandMAeGktv8hHGma1HAS0Ck B6UlAxs3RrEgBrkO61ihBkHQ3kMu7GaLS9XbQPDYIj/EU4s4BCBliM3mD+7yDjEA pcdYyRu6cqdxW+SutslOcyeXcSuyBQLq/yQxOKisqoOR0d3t6VuAUGz4XN90qjMt +KoRpzY+4V/yXpG/n1r+p4PhJ27qTeEzyr7WdZH1f4uHHapgNGQLCfSfr5ZtEpFE LxUog8vdZaS/N7bt8UEi6bJjvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG0gaBG/ 5fthiGbcIJ/LCKElNz/4MB8GA1UdIwQYMBaAFNrKY2mW6BmqH5Udxm/ymtCXnAXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUUwRS80NzJDMzkyMjEw RUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dhb2ZsUjNHYl9LYTBKZWNC Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzcGphWmJvR2FvZmxSM0diX0thMEplY0JjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUUwRS80NzJDMzkyMjEwRUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dh b2ZsUjNHYl9LYTBKZWNCY2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARNXh26kq6NOP+LZBbkaRvkPHMsG/DEOvPu++2iITbXRDl8o4m77TmFLdERXD Bc/QKNrxclSFeIsNdlu42BwDdJQlSp68C9f8JvHYiY1yJ8Ku1p32ivr7HtsD85VG rnZTk4qpvOFYGLPO3O9Z8uPkU1TcqKI6kHEb0vsrMZ1ig6P1qjo4CQf0u1VGsvsQ 1R8n5uwX4HoEJXfU/1SRdkEvYW5FaTJ0i75YC9q2d6UATV2gVmyNTsjA32O4yMY1 rXDuMezchC1fyVZDDnDQN/dMxpiW/Xa0ujHFdBRLcNlWpHnJXS4NPQYAa6XfhR/d qS/FzNlAuGA4pRSZP2P7aDT+kg== -----END CERTIFICATE-----Generated at Thu Mar 26 00:58:26 2026 by rpki-client