$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft File: R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft (raw, json) Hash identifier: QevucKLGtXIL0vwctO1HfxenA3F/936dqfjYB062nU4= Subject key identifier: F8:78:2B:71:DE:09:92:76:BD:F0:E0:74:61:78:D9:8F:DA:14:C5:70 Authority key identifier: 47:63:AA:DF:0A:BA:78:E4:C0:22:4D:3E:DA:06:C4:40:0E:97:19:8C Certificate issuer: /CN=A91BE8A9/serialNumber=4763AADF0ABA78E4C0224D3EDA06C4400E97198C Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft Manifest number: 21 Signing time: Wed 25 Mar 2026 08:02:43 +0000 Manifest this update: Wed 25 Mar 2026 08:02:42 +0000 Manifest next update: Wed 01 Apr 2026 08:02:42 +0000 Files and hashes: 1: R2Oq3wq6eOTAIk0-2gbEQA6XGYw.crl (hash: vYKxH2Ekr70DGadMaJC2nx1g76c29QbbGNClTM8Vi/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.crl rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE8A9, serialNumber=4763AADF0ABA78E4C0224D3EDA06C4400E97198C Validity Not Before: Mar 25 08:02:42 2026 GMT Not After : Apr 1 08:02:42 2026 GMT Subject: CN=69c396a2-2bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:48:2f:3b:5a:81:75:ad:25:bd:d4:0e:84:20: da:27:c6:d5:d3:52:fd:5a:13:20:9c:03:da:ee:c3: 9a:ec:d6:cb:d6:7d:b3:7c:8d:73:b0:2a:31:d4:7f: 00:59:6f:55:d4:4d:09:ca:9f:b0:b0:f2:42:5a:b5: fb:20:a6:e9:50:8c:ca:1d:1e:4c:69:c5:65:88:a0: 13:c2:a6:99:7d:99:53:fe:f6:05:ad:0e:cd:1d:1f: 57:57:b6:84:cc:19:75:d5:4a:ab:6d:3f:aa:de:f9: 20:69:a3:c0:84:7c:c8:58:2d:f6:84:75:2c:e7:4b: 1a:15:b1:a7:d7:02:59:27:b8:aa:5b:9e:60:1e:fc: da:54:26:7c:ca:47:fd:95:f3:c4:b2:a0:f0:02:10: 72:a9:6c:af:ce:31:82:cc:30:d9:fb:dc:6e:e0:24: c1:b4:21:a5:21:8d:26:85:4f:83:1b:4c:6d:71:3d: 68:b5:aa:ba:35:4e:d4:dd:b2:88:31:6a:9f:05:c4: 1f:f0:e5:fa:eb:79:36:20:31:08:14:34:7d:d5:e8: 84:32:34:73:15:90:2f:eb:a7:cc:af:bc:30:52:e6: 23:03:5b:7f:90:76:f6:91:7d:d0:88:a6:35:6c:b3: fd:ef:b9:73:d6:bc:b2:d7:56:ee:10:39:1c:2f:e7: 3a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:78:2B:71:DE:09:92:76:BD:F0:E0:74:61:78:D9:8F:DA:14:C5:70 X509v3 Authority Key Identifier: keyid:47:63:AA:DF:0A:BA:78:E4:C0:22:4D:3E:DA:06:C4:40:0E:97:19:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:68:16:f2:77:01:80:5c:dc:16:60:1a:3c:e8:4d:22:6c:e2: 9c:c7:d1:6c:6c:73:d5:fd:38:64:2d:ac:ad:7a:bc:6a:fd:ab: b1:1c:ef:6f:ff:46:4c:ba:9e:88:3d:14:c7:4a:99:84:66:13: 04:ac:e6:aa:ab:58:22:44:1d:a4:43:c0:85:d3:de:6f:ff:63: 7d:3b:7b:45:e6:6b:f3:b1:c5:0b:29:f2:38:82:7a:85:d7:7e: af:2e:ca:4a:c3:c5:e7:0b:d7:0d:ad:a2:4c:79:5a:1d:15:3d: eb:a4:e5:f7:5f:46:d8:85:2d:9f:8b:50:2e:77:c9:2b:12:f6: 9c:af:48:12:8a:a1:25:18:66:32:e3:8e:7a:cb:ce:32:75:56: 62:51:cf:6d:b3:8f:cf:51:3d:ed:09:da:71:31:6a:59:a7:4c: 3f:cd:f5:0b:2b:2b:d7:da:89:cc:bb:f8:58:3a:e2:06:1f:a6: 0f:d4:00:97:9f:8d:8a:76:0d:88:7c:06:65:63:50:40:12:e1: 64:b0:52:63:91:e4:6a:5e:88:74:8a:f5:09:b9:e8:28:28:5a: 11:d0:70:2f:44:d5:0e:3a:d7:4e:41:0e:45:38:21:b9:e3:40: 4d:6d:d9:79:0e:4b:7d:54:ea:56:30:06:b4:cf:aa:4d:95:6a: 58:bf:08:0e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RThBOTExMC8GA1UEBRMoNDc2M0FBREYwQUJBNzhFNEMwMjI0RDNFREEwNkM0NDAw RTk3MTk4QzAeFw0yNjAzMjUwODAyNDJaFw0yNjA0MDEwODAyNDJaMBgxFjAUBgNV BAMTDTY5YzM5NmEyLTJiYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeSC87WoF1rSW91A6EINonxtXTUv1aEyCcA9ruw5rs1svWfbN8jXOwKjHUfwBZ b1XUTQnKn7Cw8kJatfsgpulQjModHkxpxWWIoBPCppl9mVP+9gWtDs0dH1dXtoTM GXXVSqttP6re+SBpo8CEfMhYLfaEdSznSxoVsafXAlknuKpbnmAe/NpUJnzKR/2V 88SyoPACEHKpbK/OMYLMMNn73G7gJMG0IaUhjSaFT4MbTG1xPWi1qro1TtTdsogx ap8FxB/w5frreTYgMQgUNH3V6IQyNHMVkC/rp8yvvDBS5iMDW3+QdvaRfdCIpjVs s/3vuXPWvLLXVu4QORwv5zoVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+Hgrcd4J kna98OB0YXjZj9oUxXAwHwYDVR0jBBgwFoAUR2Oq3wq6eOTAIk0+2gbEQA6XGYww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFOEE5L0NFREZGNTE2RkJG NzExRjA4REMxRDgxODcxNkY1NkJDL1IyT3Ezd3E2ZU9UQUlrMC0yZ2JFUUE2WEdZ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvUjJPcTN3cTZlT1RBSWswLTJnYkVRQTZYR1l3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF OEE5L0NFREZGNTE2RkJGNzExRjA4REMxRDgxODcxNkY1NkJDL1IyT3Ezd3E2ZU9U QUlrMC0yZ2JFUUE2WEdZdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCNaBbydwGAXNwWYBo86E0ibOKcx9FsbHPV/ThkLayterxq/auxHO9v/0ZMup6I PRTHSpmEZhMErOaqq1giRB2kQ8CF095v/2N9O3tF5mvzscULKfI4gnqF136vLspK w8XnC9cNraJMeVodFT3rpOX3X0bYhS2fi1Aud8krEvacr0gSiqElGGYy4456y84y dVZiUc9ts4/PUT3tCdpxMWpZp0w/zfULKyvX2onMu/hYOuIGH6YP1ACXn42Kdg2I fAZlY1BAEuFksFJjkeRqXoh0ivUJuegoKFoR0HAvRNUOOtdOQQ5FOCG540BNbdl5 Dkt9VOpWMAa0z6pNlWpYvwgO -----END CERTIFICATE-----Generated at Thu Mar 26 10:42:15 2026 by rpki-client