$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft File: 2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft (raw, json) Hash identifier: XdkwHp55cVPmpf7ypxM/i5GBLD8km86ktXR7ZP/ZrHo= Subject key identifier: 2E:81:25:2E:9F:4B:AF:25:AB:5D:CD:EC:06:EF:D1:86:1B:0E:B6:C3 Authority key identifier: D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5 Certificate issuer: /CN=A91C08C0/serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft Manifest number: 0B Signing time: Wed 25 Mar 2026 08:21:44 +0000 Manifest this update: Wed 25 Mar 2026 08:21:44 +0000 Manifest next update: Wed 01 Apr 2026 08:21:44 +0000 Files and hashes: 1: 2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl (hash: uh9SdZSkduV5k7VKx+CUbnv7gzjbuoz/n475+tM6SLw=) 2: 7E0A2AD822E611F1A3C138F6CC833773.roa (hash: z0RXPVTLkvsIzF0pOhO2UmlkU0gKTzJ6WJ2WACgPdDM=) 3: EA9A11EA214C11F1A100880B383D8C67.roa (hash: eeD6uCbIvlHKsgpeKIC0IXAVj8jY3ITgO5O6p0iRhic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C08C0, serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5 Validity Not Before: Mar 25 08:21:44 2026 GMT Not After : Apr 1 08:21:44 2026 GMT Subject: CN=69c39b18-e157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:72:5d:b8:45:1f:f8:cd:c5:2f:48:37:38:e2: e1:69:04:eb:c1:9e:24:a7:fb:4b:43:56:b2:97:88: ad:8c:6d:dd:5c:b6:b6:42:e5:9a:c6:ce:38:42:d5: d1:cc:e7:5f:39:85:55:9a:9d:94:b5:3f:9a:40:4a: 35:e5:03:06:eb:a0:f5:76:8c:c6:6d:40:77:16:5b: a0:1b:38:ae:6e:d1:30:4f:e5:1b:51:6b:68:68:f2: c6:5b:97:0f:50:ad:af:e2:8a:98:32:4c:6f:dc:19: ba:5f:08:64:df:ae:f3:bd:0c:3d:51:d4:ba:fd:54: e7:63:a9:8a:6b:79:84:f5:02:15:58:ea:4d:09:ee: 70:55:e3:f3:8f:96:60:89:2b:0b:dc:d3:e8:18:77: 40:d0:c0:0f:6f:2a:b7:3b:9d:1b:77:47:ca:01:fb: 90:2a:f5:65:c1:0f:df:01:f5:4e:9a:e9:53:b5:e3: de:dc:e5:c4:ba:5d:91:b1:3c:f9:e8:88:3f:f0:56: 23:82:40:e5:4b:22:08:7a:50:27:ce:ff:65:aa:15: 0d:39:ff:8f:9c:4a:68:a2:aa:61:96:b8:ef:0a:ef: ae:ee:df:e0:16:6c:71:b6:32:e6:68:52:39:f0:2a: a5:68:01:18:b4:4c:dd:ad:0c:13:37:c9:be:76:ad: 2d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:81:25:2E:9F:4B:AF:25:AB:5D:CD:EC:06:EF:D1:86:1B:0E:B6:C3 X509v3 Authority Key Identifier: keyid:D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:4b:f2:8a:a0:17:62:ca:87:3d:a9:b9:d0:09:d4:6b:95:fb: c2:e7:64:ac:83:69:ab:26:db:bd:6f:f3:da:31:82:ab:d3:3e: ec:ef:59:66:f4:6e:82:68:b1:8c:a2:b5:31:de:53:08:bd:58: bd:76:a6:cb:b4:03:31:ea:7e:ad:36:f6:a0:da:03:86:64:6a: 8d:e7:4f:44:36:4f:54:cf:59:e3:40:2d:20:6e:c4:83:1c:0e: 80:5a:f5:d0:e6:2e:88:b4:91:13:b6:e0:be:14:d7:7c:e2:af: 3d:e4:9d:27:15:4c:45:7e:00:7b:e8:0a:da:53:5d:e6:91:48: 24:f3:da:41:cc:89:ac:b6:71:48:18:f7:0b:1c:2d:e7:da:92: a5:0b:14:b9:f3:1f:ee:cd:8c:93:45:fd:22:6f:06:f0:44:8b: e6:02:17:04:45:2e:f5:8a:04:f9:64:68:97:da:72:98:44:ff: f7:50:70:37:36:af:68:30:93:2a:db:b8:77:6b:d9:73:4d:ff: 8f:ff:bc:e2:54:b8:07:73:61:4d:93:1c:69:0e:f5:b6:54:58: 92:c0:3b:58:44:16:12:a9:65:69:0d:77:1a:ee:87:72:47:f0: 60:69:e7:0c:19:e3:4d:06:4f:14:3b:37:13:4d:63:fe:f7:66: 68:a9:b7:f6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDhDMDExMC8GA1UEBRMoRDgwNzM4MDNFRUNGRjRGMTlFRkY5OTU3QzcxNDdBRkND QUEwMTlGNTAeFw0yNjAzMjUwODIxNDRaFw0yNjA0MDEwODIxNDRaMBgxFjAUBgNV BAMTDTY5YzM5YjE4LWUxNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDacl24RR/4zcUvSDc44uFpBOvBniSn+0tDVrKXiK2Mbd1ctrZC5ZrGzjhC1dHM 5185hVWanZS1P5pASjXlAwbroPV2jMZtQHcWW6AbOK5u0TBP5RtRa2ho8sZblw9Q ra/iipgyTG/cGbpfCGTfrvO9DD1R1Lr9VOdjqYpreYT1AhVY6k0J7nBV4/OPlmCJ Kwvc0+gYd0DQwA9vKrc7nRt3R8oB+5Aq9WXBD98B9U6a6VO1497c5cS6XZGxPPno iD/wViOCQOVLIgh6UCfO/2WqFQ05/4+cSmiiqmGWuO8K767u3+AWbHG2MuZoUjnw KqVoARi0TN2tDBM3yb52rS0nAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULoElLp9L ryWrXc3sBu/RhhsOtsMwHwYDVR0jBBgwFoAU2Ac4A+7P9PGe/5lXxxR6/MqgGfUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwOEMwLzc5NkFBMTQyMjE0 QzExRjFBMzZDQTFBNTM3M0Q4QzY3LzJBYzRBLTdQOVBHZV81bFh4eFI2X01xZ0dm VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMkFjNEEtN1A5UEdlXzVsWHh4UjZfTXFnR2ZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw OEMwLzc5NkFBMTQyMjE0QzExRjFBMzZDQTFBNTM3M0Q4QzY3LzJBYzRBLTdQOVBH ZV81bFh4eFI2X01xZ0dmVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBHS/KKoBdiyoc9qbnQCdRrlfvC52Ssg2mrJtu9b/PaMYKr0z7s71lm9G6CaLGM orUx3lMIvVi9dqbLtAMx6n6tNvag2gOGZGqN509ENk9Uz1njQC0gbsSDHA6AWvXQ 5i6ItJETtuC+FNd84q895J0nFUxFfgB76AraU13mkUgk89pBzImstnFIGPcLHC3n 2pKlCxS58x/uzYyTRf0ibwbwRIvmAhcERS71igT5ZGiX2nKYRP/3UHA3Nq9oMJMq 27h3a9lzTf+P/7ziVLgHc2FNkxxpDvW2VFiSwDtYRBYSqWVpDXca7odyR/BgaecM GeNNBk8UOzcTTWP+92Zoqbf2 -----END CERTIFICATE-----Generated at Thu Mar 26 05:03:01 2026 by rpki-client