$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft File: F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft (raw, json) Hash identifier: PwMMFifY8y0OSt4cAk0eNzSLd6Cs96wU3VUktgyloXI= Subject key identifier: 2D:CC:05:2B:9B:EA:74:BD:6A:B1:84:AA:F8:31:23:F6:C6:34:C0:D0 Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 Certificate issuer: /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Certificate serial: 0684 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft Manifest number: 0649 Signing time: Tue 24 Mar 2026 22:27:04 +0000 Manifest this update: Tue 24 Mar 2026 22:27:04 +0000 Manifest next update: Tue 31 Mar 2026 22:27:04 +0000 Files and hashes: 1: F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl (hash: dfoLULzYyMUEAsbl2tOSn42rcm3hNdmF4se95H9/OBI=) 2: 73381ABCAB3611EF809A470EC4F9AE02.roa (hash: 6FEl/xTlrO6k23qkzsJZxZeQTOP267Pxj3B9BnAU7dI=) 3: 2B7B2500A62E11EF8FF03040C4F9AE02.roa (hash: 36EgBq1n4JNWcqkButdZG4sfZA3L8DsedoJF13m1uY8=) 4: 96B7F96CAB3611EFB500860EC4F9AE02.roa (hash: ASbKYUpnDT3fXeFEGq3R/psOLVXIzQFOM2/AijIzmKA=) 5: 695C5050C27D11EEB0AE466DC4F9AE02.roa (hash: rB30xmuASYWjmKcidZhlL3g3FgthN2+a8/JMg6RBy4A=) 6: 6D24010C300311F0995E874EC4F9AE02.roa (hash: v88X53jf1N+0e4ko5ebfMPBilUzf1Ikr3zZ6sHanDNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1668 (0x684) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB09E, serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Validity Not Before: Mar 24 22:27:04 2026 GMT Not After : Mar 31 22:27:04 2026 GMT Subject: CN=69c30fb8-0c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ba:87:12:e2:dd:cb:83:94:0d:e0:2d:2c:2a: da:aa:c9:72:dd:98:5f:f7:7a:57:02:a1:ed:e7:fc: f2:f9:72:49:9e:69:07:a8:ce:df:0b:2c:99:da:66: f0:10:6e:c5:b6:42:a1:a2:00:f6:bb:50:1f:9d:64: e8:6b:8b:11:8a:15:d0:4c:58:68:47:d5:e0:97:bb: 41:62:f7:cf:1e:1d:0b:2c:8b:32:7b:12:c0:fc:2a: dc:7d:70:72:19:dd:3e:65:e2:3f:fa:9c:73:72:27: 8e:41:af:27:d0:df:0d:de:28:40:1a:d2:39:2a:8c: 06:d9:f9:43:d7:3b:73:f3:60:ab:1b:28:7e:e7:59: 79:09:cf:c1:57:86:72:25:f5:8f:e3:fa:dc:a6:35: 23:88:fc:3a:3d:9b:50:51:29:77:fb:e3:52:7e:65: 6b:8a:b7:44:8d:ff:fc:f8:4a:8c:87:ba:3a:83:c3: ac:65:1d:77:03:97:5d:bc:91:55:31:58:52:9c:c8: 01:9a:33:4e:19:fd:96:a0:08:f7:13:a6:ee:c4:d4: 54:5e:78:8f:ec:68:64:b1:08:38:35:df:9a:b4:eb: 51:ec:1c:a9:60:80:e6:bc:3d:66:50:d7:b7:6f:d7: 06:3a:7c:92:57:36:c8:9b:0e:fc:cb:d9:48:56:a4: c2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CC:05:2B:9B:EA:74:BD:6A:B1:84:AA:F8:31:23:F6:C6:34:C0:D0 X509v3 Authority Key Identifier: keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:74:f4:65:df:48:66:a1:f1:ec:05:96:4a:26:3a:dd:0e:35: 52:a8:6a:38:d7:69:ff:68:56:3a:d0:ac:a6:3e:78:0f:f7:d7: 75:4d:b1:19:48:a6:d0:f8:2c:ee:24:79:9e:e5:e0:1f:03:05: a3:67:31:f8:66:4a:ea:46:a1:31:dd:ae:64:98:86:9c:dd:38: de:f1:6b:c1:8a:19:53:75:52:5b:8b:ef:1c:24:b6:36:df:e4: 6a:63:38:74:69:42:98:55:16:20:30:57:0a:05:78:fa:5f:b2: db:31:79:83:fb:c7:88:d5:c7:90:04:08:67:0c:eb:b2:f4:ba: 5a:9e:17:1f:56:4c:65:1d:5a:e1:e6:b6:1b:08:e0:cc:12:e9: 8b:92:e1:1c:5c:49:e1:3f:a3:bc:7c:32:16:76:a9:83:94:27: e9:69:d4:6e:20:4a:35:47:41:86:46:4b:95:8e:aa:3d:97:30: a7:24:10:af:6a:42:19:8c:79:35:0a:b1:0c:6e:20:09:de:19: d1:56:e7:dd:1d:98:90:1c:43:ce:d6:e4:4e:96:59:f9:67:11: a4:82:5e:92:c0:41:f3:7f:46:d5:90:8d:93:b6:15:04:c5:84: 7e:1d:f5:fc:f2:d5:a3:12:53:4b:2d:21:61:6f:3a:ee:29:e6: 87:f2:92:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwOUUxMTAvBgNVBAUTKDE3NjBGRjcxRTE2QkNGRUVFN0I4RDY3MTBENjM2MDY3 OTlBRUY3NjcwHhcNMjYwMzI0MjIyNzA0WhcNMjYwMzMxMjIyNzA0WjAYMRYwFAYD VQQDEw02OWMzMGZiOC0wYzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlLqHEuLdy4OUDeAtLCraqsly3Zhf93pXAqHt5/zy+XJJnmkHqM7fCyyZ2mbw EG7FtkKhogD2u1AfnWToa4sRihXQTFhoR9Xgl7tBYvfPHh0LLIsyexLA/CrcfXBy Gd0+ZeI/+pxzcieOQa8n0N8N3ihAGtI5KowG2flD1ztz82CrGyh+51l5Cc/BV4Zy JfWP4/rcpjUjiPw6PZtQUSl3++NSfmVrirdEjf/8+EqMh7o6g8OsZR13A5ddvJFV MVhSnMgBmjNOGf2WoAj3E6buxNRUXniP7GhksQg4Nd+atOtR7BypYIDmvD1mUNe3 b9cGOnySVzbImw78y9lIVqTCqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC3MBSub 6nS9arGEqvgxI/bGNMDQMB8GA1UdIwQYMBaAFBdg/3Hha8/u57jWcQ1jYGeZrvdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA5RS80NzExOUQwMEQw MEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnotN251Tlp4RFdOZ1o1bXU5 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YyRF9jZUZyei03bnVOWnhEV05nWjVtdTkyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA5RS80NzExOUQwMEQwMEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnot N251Tlp4RFdOZ1o1bXU5MmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfXT0Zd9IZqHx7AWWSiY63Q41UqhqONdp/2hWOtCspj54D/fXdU2xGUim0Pgs 7iR5nuXgHwMFo2cx+GZK6kahMd2uZJiGnN043vFrwYoZU3VSW4vvHCS2Nt/kamM4 dGlCmFUWIDBXCgV4+l+y2zF5g/vHiNXHkAQIZwzrsvS6Wp4XH1ZMZR1a4ea2Gwjg zBLpi5LhHFxJ4T+jvHwyFnapg5Qn6WnUbiBKNUdBhkZLlY6qPZcwpyQQr2pCGYx5 NQqxDG4gCd4Z0Vbn3R2YkBxDztbkTpZZ+WcRpIJeksBB839G1ZCNk7YVBMWEfh31 /PLVoxJTSy0hYW867inmh/KSxQ== -----END CERTIFICATE-----Generated at Thu Mar 26 04:37:47 2026 by rpki-client