$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft File: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft (raw, json) Hash identifier: DQAY796PJ6G+Q+2hM0Yu/r/LBnJt4d/l1peF/EZhzbQ= Subject key identifier: 58:87:F1:75:7F:AA:EB:AB:0F:F0:8B:98:39:26:0E:2E:D0:48:E7:70 Authority key identifier: DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA Certificate issuer: /CN=A91AEAE7/serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA Certificate serial: 0709 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft Manifest number: 06E1 Signing time: Tue 24 Mar 2026 21:54:36 +0000 Manifest this update: Tue 24 Mar 2026 21:54:35 +0000 Manifest next update: Tue 31 Mar 2026 21:54:35 +0000 Files and hashes: 1: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl (hash: Ol/OXEj+LNpvyGgtUH2fz17XBe2/qwjBj5bfBowvKvw=) 2: 8A345D2891A111EB87E23C38C4F9AE02.roa (hash: mIm/bbZcQkFrDlz9RJ874pUYBEB1ADCrlxMEBQ9UkoE=) 3: 08DCE5BC913611EBBD9B811AC4F9AE02.roa (hash: kK1XQ5Qi/71Yzi7I23BLNly3sjDmgPxSxXxrn5KrS+k=) 4: 09A1853E913611EBBD9B811AC4F9AE02.roa (hash: EIzNMKDFWXT+xpDDB3WLdazu32oeLTAqnJXbS3MPXsE=) 5: 0A7BC528913611EBBD9B811AC4F9AE02.roa (hash: Axv4ofsSe90yP+Tj74eBTq7TDNPSfa7eV4MAl8BctRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1801 (0x709) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEAE7, serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA Validity Not Before: Mar 24 21:54:35 2026 GMT Not After : Mar 31 21:54:35 2026 GMT Subject: CN=69c3081c-529b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6b:2d:6b:ca:06:c8:ec:0e:7b:6c:bc:c1:50: 7f:c9:b7:24:6a:41:35:03:79:e2:0d:d7:48:25:14: 5c:bc:de:82:7b:37:0e:74:20:a9:5d:4c:0d:03:ce: 1b:e3:47:85:65:09:c8:2a:97:16:87:ea:c4:0b:49: 21:fb:f1:1b:03:d2:3f:96:37:61:27:c0:cb:ea:c3: c1:34:51:44:37:fc:30:19:d0:fb:60:ce:9a:5e:dd: 21:83:d0:46:00:a3:91:d9:69:35:94:c2:a9:09:5a: 8d:ab:70:91:41:29:02:20:a0:50:0d:bd:2f:fe:cb: 82:79:b6:94:11:29:16:39:a9:d7:4f:78:ec:87:9f: 4f:6a:af:d1:3e:97:19:37:17:30:43:19:5b:04:b5: 88:03:43:4a:72:bd:41:71:f9:e9:20:a4:e8:e6:28: 01:f3:6c:58:f9:20:1b:2e:d5:12:2a:4b:26:bc:46: 4c:ee:41:3b:90:c2:88:9d:57:09:75:97:9c:bd:17: a7:b4:ec:d8:d7:1d:e3:7f:c3:c4:77:f9:38:59:f9: c1:ec:84:6c:51:3b:f7:27:b6:1c:db:1e:b4:27:c1: b3:1c:36:2c:8c:c4:4d:e3:a3:6a:29:cb:e6:df:29: d0:98:ca:46:51:b2:b2:54:ef:65:b8:1c:2e:5e:79: b0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:87:F1:75:7F:AA:EB:AB:0F:F0:8B:98:39:26:0E:2E:D0:48:E7:70 X509v3 Authority Key Identifier: keyid:DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:50:ea:e8:08:6b:cd:32:ab:e2:f3:7f:85:0f:9f:3e:5c:c0: 98:82:17:cb:89:ba:6d:92:da:33:fa:ea:2c:87:bc:6d:2e:2c: 78:ce:c0:be:06:ff:22:51:6a:29:24:a0:c0:6c:fe:b3:3a:f1: f9:c6:f4:86:6a:49:98:91:eb:e4:0b:d7:88:b1:0a:4a:4d:b7: a7:02:e9:a6:c2:7f:30:ea:b7:24:bb:83:0f:bb:ae:3b:b4:cd: 59:9e:b4:f0:4b:ed:7c:f8:f3:d4:17:39:99:c9:87:37:a1:93: e4:19:74:38:b8:11:03:c0:79:89:c4:01:b3:cc:0c:09:31:eb: 97:d0:1a:96:d1:0c:1d:46:8a:be:7d:6f:3e:04:88:69:3e:f5: 86:6f:aa:e8:d5:ba:27:ac:19:2b:99:9c:b3:3d:7c:f5:21:3a: 8c:58:30:92:4c:77:b0:7a:8b:c7:7d:41:9e:29:35:66:4f:0b: 2e:58:17:bc:13:9b:59:9e:74:de:fc:b6:52:77:ba:fb:3d:5f: a0:fc:ae:65:29:ae:b4:41:e0:96:39:db:c4:03:6a:6a:33:11: cc:2c:e8:d9:33:cc:96:52:b3:8b:c4:78:18:02:7b:24:d3:f5: 53:58:79:14:d9:c4:cc:55:83:7d:ec:a2:1d:64:d9:8d:5e:92: b5:a8:a9:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVBRTcxMTAvBgNVBAUTKERBQkZCM0I1OUY3RDcxNkZENTJENDVBNzQxQUYxNTlB RjdFQUY3QkEwHhcNMjYwMzI0MjE1NDM1WhcNMjYwMzMxMjE1NDM1WjAYMRYwFAYD VQQDEw02OWMzMDgxYy01MjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGsta8oGyOwOe2y8wVB/ybckakE1A3niDddIJRRcvN6CezcOdCCpXUwNA84b 40eFZQnIKpcWh+rEC0kh+/EbA9I/ljdhJ8DL6sPBNFFEN/wwGdD7YM6aXt0hg9BG AKOR2Wk1lMKpCVqNq3CRQSkCIKBQDb0v/suCebaUESkWOanXT3jsh59Paq/RPpcZ NxcwQxlbBLWIA0NKcr1BcfnpIKTo5igB82xY+SAbLtUSKksmvEZM7kE7kMKInVcJ dZecvRentOzY1x3jf8PEd/k4WfnB7IRsUTv3J7Yc2x60J8GzHDYsjMRN46NqKcvm 3ynQmMpGUbKyVO9luBwuXnmwIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFiH8XV/ quurD/CLmDkmDi7QSOdwMB8GA1UdIwQYMBaAFNq/s7WffXFv1S1Fp0GvFZr36ve6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUFFNy9FMTgyNTc5Njkw RjMxMUVCOUQyRTBFNEZDNEY5QUUwMi8yci16dFo5OWNXX1ZMVVduUWE4Vm12ZnE5 N28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyLXp0Wjk5Y1dfVkxVV25RYThWbXZmcTk3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUFFNy9FMTgyNTc5NjkwRjMxMUVCOUQyRTBFNEZDNEY5QUUwMi8yci16dFo5OWNX X1ZMVVduUWE4Vm12ZnE5N28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmlDq6AhrzTKr4vN/hQ+fPlzAmIIXy4m6bZLaM/rqLIe8bS4seM7Avgb/IlFq KSSgwGz+szrx+cb0hmpJmJHr5AvXiLEKSk23pwLppsJ/MOq3JLuDD7uuO7TNWZ60 8EvtfPjz1Bc5mcmHN6GT5Bl0OLgRA8B5icQBs8wMCTHrl9AaltEMHUaKvn1vPgSI aT71hm+q6NW6J6wZK5mcsz189SE6jFgwkkx3sHqLx31Bnik1Zk8LLlgXvBObWZ50 3vy2Une6+z1foPyuZSmutEHgljnbxANqajMRzCzo2TPMllKzi8R4GAJ7JNP1U1h5 FNnEzFWDfeyiHWTZjV6StaipMQ== -----END CERTIFICATE-----Generated at Thu Mar 26 17:23:38 2026 by rpki-client