$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft File: 2gNU-zgfRSHBCxY-y9IqCD-3omw.mft (raw, json) Hash identifier: LwUg+paN34sU1q0ZkOgAVWescCY0ga9u+MoOcIU6+xE= Subject key identifier: 3B:91:EE:DB:8F:8E:3B:6A:AE:89:C4:4D:B3:05:3C:31:EA:66:E6:2D Authority key identifier: DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C Certificate issuer: /CN=A91B2CDA/serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Certificate serial: 1685 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft Manifest number: 1673 Signing time: Tue 24 Mar 2026 16:36:57 +0000 Manifest this update: Tue 24 Mar 2026 16:36:57 +0000 Manifest next update: Tue 31 Mar 2026 16:36:57 +0000 Files and hashes: 1: 2gNU-zgfRSHBCxY-y9IqCD-3omw.crl (hash: 7jJaOj/jn/9vwVemlmY0+nmc+kW5J2cZm15lWliJPWo=) 2: 7F3ED5DE9C4411ECBD85CE4FC4F9AE02.roa (hash: R5LqOdOqksS9vnhA2t5gWvk4nnnpRsAdMKKtSSAeL3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5765 (0x1685) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2CDA, serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Validity Not Before: Mar 24 16:36:57 2026 GMT Not After : Mar 31 16:36:57 2026 GMT Subject: CN=69c2bda9-0228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f2:71:49:07:44:8d:f9:39:71:88:9d:73:93: 2b:17:bf:75:a9:6d:6e:05:ef:eb:cf:70:1b:98:5f: ce:dc:d9:ba:66:1a:f8:8b:1a:9a:f6:3f:ff:e9:0f: 1b:66:84:5c:a1:f9:2c:28:c7:07:7c:c3:a6:5b:c5: 34:e8:2e:29:9f:59:aa:b6:fc:7f:eb:f8:70:73:7a: 23:7b:00:6d:99:bb:3f:eb:c7:94:22:95:9a:c6:ea: 1a:81:12:a2:3d:52:90:58:c6:4e:de:a1:c1:94:f7: ff:9f:65:c3:8a:c0:94:cf:f5:27:a6:e7:77:f7:cd: b5:44:57:4b:69:46:c9:8d:ec:4d:3c:e8:83:4f:35: 01:2f:ff:b5:17:32:6b:0f:71:9c:74:3c:c3:25:72: 87:74:3c:e2:b3:ce:f1:16:f1:28:09:12:a0:5c:bf: c3:ca:95:16:01:7f:bf:76:56:1b:5b:84:d9:13:f4: ee:65:c2:62:81:24:71:52:88:2a:57:f1:ce:32:85: 4b:88:4f:1c:2e:d2:16:ee:c6:f5:ef:36:6a:64:31: 2e:cb:f7:e1:d2:d2:bd:5d:8f:3c:e8:99:41:24:0f: a1:15:38:36:20:73:53:05:1c:33:d5:f4:ed:cf:43: 3b:ee:f8:ae:55:da:41:9e:bc:62:7f:23:31:b2:9d: de:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:91:EE:DB:8F:8E:3B:6A:AE:89:C4:4D:B3:05:3C:31:EA:66:E6:2D X509v3 Authority Key Identifier: keyid:DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:69:c8:d6:1a:9d:54:fd:fe:54:f7:0a:3c:41:4b:1b:1d:ad: 3e:f5:1b:85:94:fb:2a:e2:2b:a3:d1:15:a4:5d:bd:b5:49:6a: ff:6f:5f:70:de:3c:ce:b1:6b:32:69:c8:90:6f:ab:0f:5a:c4: cd:94:0c:f1:88:26:df:5e:7d:5b:10:8d:fe:a8:eb:4c:4b:0c: a1:43:68:9b:ab:e2:24:69:9b:ba:bb:fa:1f:d3:20:d7:68:42: 7a:76:60:9e:67:ca:8e:6c:34:5f:1d:50:b3:7a:59:ed:ac:14: 9c:ca:6d:f2:df:d4:bf:97:3a:1e:66:55:32:c9:ff:4e:f0:54: 2f:53:87:5b:11:94:70:e1:46:cd:25:04:16:d3:e0:30:05:84: 33:b0:b0:ba:29:5e:ef:83:81:0c:16:ea:5e:d5:2c:aa:58:25: e6:56:1f:27:a5:ae:df:cf:c2:25:0c:53:aa:b8:43:37:c7:65: 2c:a0:38:b8:a1:a8:0f:e3:0e:05:6b:21:50:e6:fb:5d:24:5e: e2:d4:af:11:e7:78:3f:d6:02:e9:72:df:00:00:3a:1d:1b:62: b0:c7:f4:2a:f3:8b:c6:d2:3f:b4:23:8f:5f:5e:df:4b:bb:2d: 28:1e:54:0b:37:69:71:1f:f2:df:d0:71:49:50:df:03:a2:13: 17:50:f4:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDREExMTAvBgNVBAUTKERBMDM1NEZCMzgxRjQ1MjFDMTBCMTYzRUNCRDIyQTA4 M0ZCN0EyNkMwHhcNMjYwMzI0MTYzNjU3WhcNMjYwMzMxMTYzNjU3WjAYMRYwFAYD VQQDEw02OWMyYmRhOS0wMjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vJxSQdEjfk5cYidc5MrF791qW1uBe/rz3AbmF/O3Nm6Zhr4ixqa9j//6Q8b ZoRcofksKMcHfMOmW8U06C4pn1mqtvx/6/hwc3ojewBtmbs/68eUIpWaxuoagRKi PVKQWMZO3qHBlPf/n2XDisCUz/Unpud39821RFdLaUbJjexNPOiDTzUBL/+1FzJr D3GcdDzDJXKHdDzis87xFvEoCRKgXL/DypUWAX+/dlYbW4TZE/TuZcJigSRxUogq V/HOMoVLiE8cLtIW7sb17zZqZDEuy/fh0tK9XY886JlBJA+hFTg2IHNTBRwz1fTt z0M77viuVdpBnrxifyMxsp3elQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDuR7tuP jjtqronETbMFPDHqZuYtMB8GA1UdIwQYMBaAFNoDVPs4H0UhwQsWPsvSKgg/t6Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkNEQS9GNEUyQkFCODI1 QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJTSEJDeFkteTlJcUNELTNv bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnTlUtemdmUlNIQkN4WS15OUlxQ0QtM29tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkNEQS9GNEUyQkFCODI1QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJT SEJDeFkteTlJcUNELTNvbXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABmnI1hqdVP3+VPcKPEFLGx2tPvUbhZT7KuIro9EVpF29tUlq/29fcN48zrFr MmnIkG+rD1rEzZQM8Ygm3159WxCN/qjrTEsMoUNom6viJGmburv6H9Mg12hCenZg nmfKjmw0Xx1Qs3pZ7awUnMpt8t/Uv5c6HmZVMsn/TvBUL1OHWxGUcOFGzSUEFtPg MAWEM7Cwuile74OBDBbqXtUsqlgl5lYfJ6Wu38/CJQxTqrhDN8dlLKA4uKGoD+MO BWshUOb7XSRe4tSvEed4P9YC6XLfAAA6HRtisMf0KvOLxtI/tCOPX17fS7stKB5U CzdpcR/y39BxSVDfA6ITF1D0PQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:35:51 2026 by rpki-client