$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft File: 2rx4_BTzDLhy7ADtak_0dtlMsng.mft (raw, json) Hash identifier: UBU2Kuq7Pswk6ldOMoBxQ8PhSWVsVPz06gY8UmV6I6A= Subject key identifier: D4:95:B7:15:C6:8D:A3:9E:C4:57:52:01:2B:D4:58:87:2F:BB:27:64 Authority key identifier: DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 Certificate issuer: /CN=A91CE1E6/serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Certificate serial: 0370 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft Manifest number: 036A Signing time: Fri 27 Mar 2026 00:38:08 +0000 Manifest this update: Fri 27 Mar 2026 00:38:08 +0000 Manifest next update: Fri 03 Apr 2026 00:38:08 +0000 Files and hashes: 1: 2rx4_BTzDLhy7ADtak_0dtlMsng.crl (hash: 5N5ia9DBElmjGeqW/FPfo6EJvCG96XSfXQ7PgRL5n6M=) 2: F585ED70EBB511ECA410BF6DC4F9AE02.roa (hash: eh2olN6asVC4zjOV+kS987T4rETGl4oNwPTcTkaLCEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 00:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 880 (0x370) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE1E6, serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Validity Not Before: Mar 27 00:38:08 2026 GMT Not After : Apr 3 00:38:08 2026 GMT Subject: CN=69c5d170-3798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:11:53:47:a0:10:60:94:ac:38:e4:ce:c4:15: fc:be:33:01:c5:fa:76:f9:29:91:d0:cc:78:4b:56: 18:a5:44:f9:68:22:bb:23:2a:fa:c6:b2:02:06:f5: ea:29:15:c3:19:e2:5c:94:79:f2:b4:80:2c:51:5c: ca:72:24:3a:02:d5:3f:a4:1a:78:0c:a8:08:cb:0c: 88:64:07:3d:36:67:7e:6b:05:a3:54:e3:1e:fd:ee: 4d:97:44:9c:5e:5f:a4:25:fa:e5:20:76:06:bf:21: ed:28:b7:50:c2:fb:75:fd:8f:89:8b:61:ed:ea:76: 6a:4b:00:d2:f1:d6:88:d2:f3:43:62:99:62:e8:0e: 19:60:39:41:d4:af:0d:1e:48:ed:24:5f:df:85:e1: 44:65:3e:be:d3:fd:39:a3:2a:66:eb:d2:1d:0c:9a: fe:fc:ab:58:70:41:70:30:ca:27:33:02:45:c6:27: d3:5e:d4:cd:c8:64:cb:72:fc:17:96:96:92:fe:cd: e0:2a:63:7a:11:1e:cd:f5:63:d2:8c:cf:24:fd:c5: 4d:37:13:e8:68:48:49:e3:82:03:11:f3:d3:54:11: 40:fc:5b:91:70:c0:45:31:03:74:20:56:75:89:ec: cb:0e:c7:dc:7b:2a:1f:d4:80:06:ff:a6:ec:cf:b9: 57:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:95:B7:15:C6:8D:A3:9E:C4:57:52:01:2B:D4:58:87:2F:BB:27:64 X509v3 Authority Key Identifier: keyid:DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:5f:6a:18:8b:1d:5f:29:df:ad:51:6c:eb:a1:aa:da:88:0c: c8:8d:29:02:f4:55:9d:93:37:c0:f6:a2:18:92:bc:2a:bd:f5: 51:30:e5:f8:ba:f7:8f:49:a1:5c:8e:24:8c:59:8c:40:f1:59: 3f:13:e5:1c:00:32:99:71:a1:f0:b8:9e:67:57:d3:6f:71:3f: 38:b4:a2:e1:7c:23:45:3e:b1:9c:00:9d:fd:6d:bd:4f:d7:76: 16:b5:02:ce:12:30:81:44:47:f7:f0:d3:15:18:cc:7d:fc:16: 37:b1:41:67:14:a5:10:c8:46:11:08:73:8a:06:83:2f:df:c1: 1e:3d:52:9e:92:99:b8:ec:1b:1d:86:dc:de:84:7a:1e:dd:37: 2f:b9:92:57:76:fc:49:19:4c:9c:ca:13:1f:8b:b9:b2:41:0a: b7:70:30:90:a9:55:d4:20:7b:a2:0f:ff:62:74:f4:3b:10:59: c9:1f:39:c3:e1:36:2c:c8:d4:fd:cb:2d:c0:41:3d:0f:fb:d0: 59:d0:ed:07:8c:75:f0:6e:a7:f6:f1:6a:e5:91:65:6b:ac:98: c4:cd:dc:9c:b2:e6:1d:6e:96:c2:a9:60:c0:3e:a3:55:16:3f: c5:75:ff:35:3a:3e:e5:a5:b6:e2:09:4c:ca:b5:c3:b2:af:0b: dc:c1:fe:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UxRTYxMTAvBgNVBAUTKERBQkM3OEZDMTRGMzBDQjg3MkVDMDBFRDZBNEZGNDc2 RDk0Q0IyNzgwHhcNMjYwMzI3MDAzODA4WhcNMjYwNDAzMDAzODA4WjAYMRYwFAYD VQQDEw02OWM1ZDE3MC0zNzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5RFTR6AQYJSsOOTOxBX8vjMBxfp2+SmR0Mx4S1YYpUT5aCK7Iyr6xrICBvXq KRXDGeJclHnytIAsUVzKciQ6AtU/pBp4DKgIywyIZAc9Nmd+awWjVOMe/e5Nl0Sc Xl+kJfrlIHYGvyHtKLdQwvt1/Y+Ji2Ht6nZqSwDS8daI0vNDYpli6A4ZYDlB1K8N HkjtJF/fheFEZT6+0/05oypm69IdDJr+/KtYcEFwMMonMwJFxifTXtTNyGTLcvwX lpaS/s3gKmN6ER7N9WPSjM8k/cVNNxPoaEhJ44IDEfPTVBFA/FuRcMBFMQN0IFZ1 iezLDsfceyof1IAG/6bsz7lXXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNSVtxXG jaOexFdSASvUWIcvuydkMB8GA1UdIwQYMBaAFNq8ePwU8wy4cuwA7WpP9HbZTLJ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTFFNi9DRDk0QjhCOEVC QjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRMaHk3QUR0YWtfMGR0bE1z bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyeDRfQlR6RExoeTdBRHRha18wZHRsTXNuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTFFNi9DRDk0QjhCOEVCQjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRM aHk3QUR0YWtfMGR0bE1zbmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArF9qGIsdXynfrVFs66Gq2ogMyI0pAvRVnZM3wPaiGJK8Kr31UTDl+Lr3j0mh XI4kjFmMQPFZPxPlHAAymXGh8LieZ1fTb3E/OLSi4XwjRT6xnACd/W29T9d2FrUC zhIwgURH9/DTFRjMffwWN7FBZxSlEMhGEQhzigaDL9/BHj1SnpKZuOwbHYbc3oR6 Ht03L7mSV3b8SRlMnMoTH4u5skEKt3AwkKlV1CB7og//YnT0OxBZyR85w+E2LMjU /cstwEE9D/vQWdDtB4x18G6n9vFq5ZFla6yYxM3cnLLmHW6WwqlgwD6jVRY/xXX/ NTo+5aW24glMyrXDsq8L3MH+sw== -----END CERTIFICATE-----Generated at Sat Mar 28 12:20:14 2026 by rpki-client