$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft File: 2fwVW2_aEGxpmlabEgOEkJWKoy8.mft (raw, json) Hash identifier: MV92o4XkU+p5Lk6PuSkpDilZbOKVafbS3d8YcPFY5b4= Subject key identifier: BD:98:FD:3C:07:8C:97:21:0F:0D:66:87:5E:D1:8E:70:19:19:5E:E8 Authority key identifier: D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F Certificate issuer: /CN=A91B53A5/serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Certificate serial: 1AF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft Manifest number: 1AD2 Signing time: Thu 26 Mar 2026 16:17:19 +0000 Manifest this update: Thu 26 Mar 2026 16:17:18 +0000 Manifest next update: Thu 02 Apr 2026 16:17:18 +0000 Files and hashes: 1: 2fwVW2_aEGxpmlabEgOEkJWKoy8.crl (hash: yMUYqbfgmhQenU2FkHKjmefWddeVwtJJJxuK3mIkmqM=) 2: C443D86A55A311E7896BED09C4F9AE02.roa (hash: fUG/ZYYnzDR6Zz8MPXkWB3U7KRWzJ6ve4ty+0m9uSLY=) 3: A9286C0E6D4411E7AF539270C4F9AE02.roa (hash: 6XEd0uCxQtA9wBbV+Q7/BBTxLNihLCwNHh1QPcQVifo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6898 (0x1af2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B53A5, serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Validity Not Before: Mar 26 16:17:18 2026 GMT Not After : Apr 2 16:17:18 2026 GMT Subject: CN=69c55c0e-fed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f5:3f:6f:5c:59:de:0f:65:6f:63:04:f5:5e: 64:8e:d0:04:e2:03:ea:bc:b1:f7:98:ed:af:3c:dd: 06:54:a8:aa:dc:70:47:44:1e:69:64:97:88:04:52: 09:76:6b:be:75:ec:c0:8f:32:8c:c2:55:93:b5:75: 1f:c6:c6:a8:02:78:70:72:6b:e7:33:e4:b7:d2:69: c0:4f:4b:7e:00:bc:09:64:ef:58:29:af:ae:04:ed: 8b:24:70:c6:56:a4:fc:e2:cc:1c:7b:8b:79:16:e3: 67:52:93:82:9a:1c:4d:eb:a2:ec:6c:f4:96:54:b6: e7:4d:6a:09:8f:48:80:88:86:15:b4:35:a2:f6:83: 23:03:15:23:47:d8:96:76:4f:58:dd:22:cb:27:12: 5a:04:f0:87:19:5e:50:ed:c6:5d:a5:d6:fc:fa:37: 0f:bd:b4:1a:70:a3:61:ff:69:30:bd:1b:56:ed:8c: 53:05:50:bc:44:90:b6:2e:c4:c2:7f:5e:f7:e7:2d: 28:24:99:13:fe:cf:6f:7c:2d:2e:74:d1:74:ed:d4: 3d:c2:89:84:8c:58:ee:37:cf:d1:68:5a:ae:70:6f: 8a:f1:7d:1e:25:68:01:4d:62:7f:08:06:e0:01:ac: b0:10:02:5b:58:c0:16:a6:6c:d0:6a:7f:91:e0:bc: c9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:98:FD:3C:07:8C:97:21:0F:0D:66:87:5E:D1:8E:70:19:19:5E:E8 X509v3 Authority Key Identifier: keyid:D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:de:68:70:4d:29:e9:6a:9f:26:50:f9:cd:da:46:8e:54:04: 84:21:f4:d3:23:b4:17:0b:d9:ac:80:16:32:f9:92:8d:d3:f2: 6e:38:4f:de:a5:41:83:ed:42:e9:c1:32:09:6d:2e:b8:c8:68: 5d:77:96:2b:e6:00:b9:2a:03:38:ff:54:59:e9:08:41:b3:c6: 37:41:57:ea:47:c6:f1:c9:cf:6d:1d:18:28:b2:fa:c7:22:13: 7f:d1:37:1d:cc:7d:29:6d:7c:97:d9:dd:e7:c0:74:75:0e:b8: 30:41:ca:a6:23:bf:d4:20:85:0f:05:36:94:43:4e:50:dc:af: 0b:b4:20:8d:4f:ba:bc:ba:12:35:e8:58:42:18:3b:c9:6c:9c: 72:f7:94:e9:da:31:d1:a5:5a:16:37:36:42:42:62:fe:fb:ae: ef:58:2f:8b:a9:97:76:bc:80:0b:98:15:6c:e5:59:36:02:78: c8:75:64:6c:d6:c0:2a:c4:e0:13:b9:d1:5d:12:a0:a1:38:31: 87:c7:bb:52:69:ef:b0:43:d5:d6:4a:e6:af:e0:36:85:f5:fe: 58:40:12:7b:a7:d4:32:2e:9c:b1:32:53:2e:81:bb:23:46:68: 29:f2:15:09:5e:9c:58:97:7e:4a:e4:37:a3:78:16:85:cd:2f: a7:dd:e2:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzQTUxMTAvBgNVBAUTKEQ5RkMxNTVCNkZEQTEwNkM2OTlBNTY5QjEyMDM4NDkw OTU4QUEzMkYwHhcNMjYwMzI2MTYxNzE4WhcNMjYwNDAyMTYxNzE4WjAYMRYwFAYD VQQDEw02OWM1NWMwZS1mZWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4vU/b1xZ3g9lb2ME9V5kjtAE4gPqvLH3mO2vPN0GVKiq3HBHRB5pZJeIBFIJ dmu+dezAjzKMwlWTtXUfxsaoAnhwcmvnM+S30mnAT0t+ALwJZO9YKa+uBO2LJHDG VqT84swce4t5FuNnUpOCmhxN66LsbPSWVLbnTWoJj0iAiIYVtDWi9oMjAxUjR9iW dk9Y3SLLJxJaBPCHGV5Q7cZdpdb8+jcPvbQacKNh/2kwvRtW7YxTBVC8RJC2LsTC f1735y0oJJkT/s9vfC0udNF07dQ9womEjFjuN8/RaFqucG+K8X0eJWgBTWJ/CAbg AaywEAJbWMAWpmzQan+R4LzJiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL2Y/TwH jJchDw1mh17RjnAZGV7oMB8GA1UdIwQYMBaAFNn8FVtv2hBsaZpWmxIDhJCViqMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBNS8yNTgwQThENjRC NjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVHeHBtbGFiRWdPRWtKV0tv eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmd1ZXMl9hRUd4cG1sYWJFZ09Fa0pXS295OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTNBNS8yNTgwQThENjRCNjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVH eHBtbGFiRWdPRWtKV0tveTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlN5ocE0p6WqfJlD5zdpGjlQEhCH00yO0FwvZrIAWMvmSjdPybjhP3qVBg+1C 6cEyCW0uuMhoXXeWK+YAuSoDOP9UWekIQbPGN0FX6kfG8cnPbR0YKLL6xyITf9E3 Hcx9KW18l9nd58B0dQ64MEHKpiO/1CCFDwU2lENOUNyvC7QgjU+6vLoSNehYQhg7 yWyccveU6dox0aVaFjc2QkJi/vuu71gvi6mXdryAC5gVbOVZNgJ4yHVkbNbAKsTg E7nRXRKgoTgxh8e7UmnvsEPV1krmr+A2hfX+WEASe6fUMi6csTJTLoG7I0ZoKfIV CV6cWJd+SuQ3o3gWhc0vp93iNQ== -----END CERTIFICATE-----Generated at Thu Mar 26 19:05:37 2026 by rpki-client