$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.mft File: 2cZrDkILkTQXPVU9FqoLFGt3R3M.mft (raw, json) Hash identifier: sots4msQKj6VMngWHb449cymqZnxslnBxJ5PU5FI/ow= Subject key identifier: 6E:3E:0F:AE:E7:ED:B7:AA:EC:D0:7A:D0:E0:DE:70:CD:26:4C:E6:E4 Authority key identifier: D9:C6:6B:0E:42:0B:91:34:17:3D:55:3D:16:AA:0B:14:6B:77:47:73 Certificate issuer: /CN=A91B9B0D/serialNumber=D9C66B0E420B9134173D553D16AA0B146B774773 Certificate serial: 06F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cZrDkILkTQXPVU9FqoLFGt3R3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.mft Manifest number: 06EA Signing time: Tue 24 Mar 2026 21:49:49 +0000 Manifest this update: Tue 24 Mar 2026 21:49:49 +0000 Manifest next update: Tue 31 Mar 2026 21:49:49 +0000 Files and hashes: 1: 2cZrDkILkTQXPVU9FqoLFGt3R3M.crl (hash: res8WFCUeUSq+TuMRlx0Kzunl3669VkdwC8bxIANaKg=) 2: E0147FC48AB811EB92252D18C4F9AE02.roa (hash: 8HuI6yxWa1nS2qzAi58P3BL+IKSitnw2yYjxmsq1lXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.crl rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cZrDkILkTQXPVU9FqoLFGt3R3M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1779 (0x6f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9B0D, serialNumber=D9C66B0E420B9134173D553D16AA0B146B774773 Validity Not Before: Mar 24 21:49:49 2026 GMT Not After : Mar 31 21:49:49 2026 GMT Subject: CN=69c306fd-0847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:69:94:fb:30:7f:11:d1:a4:f8:8b:4e:0c:ef: e8:e7:c2:ec:8f:ab:36:64:08:63:f8:4c:d7:b2:46: 99:43:76:34:f8:8f:53:8c:1f:e6:3a:35:13:37:5d: 50:e1:e6:0e:07:ca:98:2a:ff:8b:1a:20:7f:ce:cb: 91:be:e5:62:53:60:38:91:87:5b:53:b6:5b:f8:ec: e7:a1:e0:73:73:05:09:3e:2b:be:8f:42:22:ff:ab: af:9a:c2:35:cc:f7:bf:c6:f0:d2:34:c0:15:54:7f: 27:0d:dc:81:0d:04:1b:b6:23:db:c8:03:5e:4e:43: 06:87:3a:e1:9b:b2:ba:60:e8:ea:17:ae:0d:c2:11: f1:21:30:68:b2:fb:64:88:9e:a5:8e:43:05:8f:de: 2b:7a:28:8f:ea:69:6b:47:73:5e:93:e4:20:a9:4b: 58:a7:8a:74:d5:76:ec:78:e9:e2:ab:92:e7:f7:e4: 06:1b:d5:00:94:70:4c:15:e3:17:ef:13:db:23:87: e1:48:76:fb:87:f9:20:3f:cb:3c:8f:3a:df:fa:3b: c3:cb:8a:58:10:ad:0f:ce:10:16:0b:9c:38:02:de: 77:36:c0:af:72:e6:f2:da:02:0e:35:8a:8e:1a:98: d4:2a:d3:0f:35:e5:df:94:d7:ee:32:74:40:6e:c6: 12:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:3E:0F:AE:E7:ED:B7:AA:EC:D0:7A:D0:E0:DE:70:CD:26:4C:E6:E4 X509v3 Authority Key Identifier: keyid:D9:C6:6B:0E:42:0B:91:34:17:3D:55:3D:16:AA:0B:14:6B:77:47:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cZrDkILkTQXPVU9FqoLFGt3R3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:d5:3e:21:7f:c3:e8:50:8b:91:04:3f:71:e3:97:94:3d:44: 62:79:c1:89:ab:78:a9:1b:7d:91:e1:1f:a8:b0:2c:d0:b4:46: 22:cc:c8:bb:a6:e4:f6:dc:73:7f:60:d2:1e:a6:54:a6:48:e0: a0:9e:12:57:c9:16:d4:b9:70:3a:44:39:8a:f4:60:bb:08:37: e2:c8:bc:7f:0a:55:88:82:4e:1d:22:23:86:fc:52:c3:60:69: be:37:e6:60:c9:82:66:7b:31:a3:76:46:d1:78:c8:ca:f0:ff: 55:c3:f1:24:cb:c8:ef:a0:08:a8:0f:2a:ea:02:32:e5:32:36: 75:96:bb:f0:2a:71:de:f3:84:94:28:95:e9:85:89:1d:90:25: 5f:6b:9b:bb:8c:91:58:34:8f:49:13:c0:65:9f:c1:fd:c7:fa: 6a:23:00:cf:e5:42:40:84:fc:68:08:7a:4b:43:5a:0b:21:c3: b4:4c:df:09:fb:ab:81:bc:4a:ab:06:f5:88:1d:a2:c0:dc:b3: 8b:dc:5f:d3:10:1a:80:c5:82:76:79:b2:bd:7b:b9:e9:d5:ea: 04:a0:ff:63:2d:d5:eb:26:76:23:ef:84:c2:25:b9:6e:78:f4: 96:13:09:b4:5c:c5:d3:5d:00:a5:b1:e3:2e:6e:3f:51:8c:7c: 2f:1e:34:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlCMEQxMTAvBgNVBAUTKEQ5QzY2QjBFNDIwQjkxMzQxNzNENTUzRDE2QUEwQjE0 NkI3NzQ3NzMwHhcNMjYwMzI0MjE0OTQ5WhcNMjYwMzMxMjE0OTQ5WjAYMRYwFAYD VQQDEw02OWMzMDZmZC0wODQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGmU+zB/EdGk+ItODO/o58Lsj6s2ZAhj+EzXskaZQ3Y0+I9TjB/mOjUTN11Q 4eYOB8qYKv+LGiB/zsuRvuViU2A4kYdbU7Zb+OznoeBzcwUJPiu+j0Ii/6uvmsI1 zPe/xvDSNMAVVH8nDdyBDQQbtiPbyANeTkMGhzrhm7K6YOjqF64NwhHxITBosvtk iJ6ljkMFj94reiiP6mlrR3Nek+QgqUtYp4p01XbseOniq5Ln9+QGG9UAlHBMFeMX 7xPbI4fhSHb7h/kgP8s8jzrf+jvDy4pYEK0PzhAWC5w4At53NsCvcuby2gIONYqO GpjUKtMPNeXflNfuMnRAbsYSDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG4+D67n 7beq7NB60ODecM0mTObkMB8GA1UdIwQYMBaAFNnGaw5CC5E0Fz1VPRaqCxRrd0dz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUIwRC85OEI3MjgwRThB QjYxMUVCODIzN0Q0MTRDNEY5QUUwMi8yY1pyRGtJTGtUUVhQVlU5RnFvTEZHdDNS M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJjWnJEa0lMa1RRWFBWVTlGcW9MRkd0M1IzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUIwRC85OEI3MjgwRThBQjYxMUVCODIzN0Q0MTRDNEY5QUUwMi8yY1pyRGtJTGtU UVhQVlU5RnFvTEZHdDNSM00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo9U+IX/D6FCLkQQ/ceOXlD1EYnnBiat4qRt9keEfqLAs0LRGIszIu6bk9txz f2DSHqZUpkjgoJ4SV8kW1LlwOkQ5ivRguwg34si8fwpViIJOHSIjhvxSw2Bpvjfm YMmCZnsxo3ZG0XjIyvD/VcPxJMvI76AIqA8q6gIy5TI2dZa78Cpx3vOElCiV6YWJ HZAlX2ubu4yRWDSPSRPAZZ/B/cf6aiMAz+VCQIT8aAh6S0NaCyHDtEzfCfurgbxK qwb1iB2iwNyzi9xf0xAagMWCdnmyvXu56dXqBKD/Yy3V6yZ2I++EwiW5bnj0lhMJ tFzF010ApbHjLm4/UYx8Lx409Q== -----END CERTIFICATE-----Generated at Thu Mar 26 19:04:39 2026 by rpki-client