$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft File: 2m3rP2XMI2eEg6drt445Hy-cZCE.mft (raw, json) Hash identifier: dGgyW/RCJH1h1bIsnqOJeWQNRNl6UBRh8rYQmCGhuSM= Subject key identifier: 22:94:D3:34:B3:43:FC:5B:E0:0A:A0:74:F1:AF:D8:BD:D9:36:87:4B Authority key identifier: DA:6D:EB:3F:65:CC:23:67:84:83:A7:6B:B7:8E:39:1F:2F:9C:64:21 Certificate issuer: /CN=A91CE959/serialNumber=DA6DEB3F65CC23678483A76BB78E391F2F9C6421 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2m3rP2XMI2eEg6drt445Hy-cZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft Manifest number: 08 Signing time: Wed 25 Mar 2026 03:58:03 +0000 Manifest this update: Wed 25 Mar 2026 03:58:02 +0000 Manifest next update: Wed 01 Apr 2026 03:58:02 +0000 Files and hashes: 1: 2m3rP2XMI2eEg6drt445Hy-cZCE.crl (hash: iHd2DbQNkRb3R4UjfeZZHWVxcqznTj5hgIvPEvlsEvo=) 2: E302E312268811F185CD3CFFB4833773.roa (hash: 1Tn0eJ0bGdKPh/87544Mu+NSKKv9zP/9QDVNwO5GdQc=) 3: DD10EC4221D311F1A9814A2D233D8C67.roa (hash: /yzAJPiNJxpo9+q64etk5otNPKwR6uKsst/Nxwyi5gg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.crl rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2m3rP2XMI2eEg6drt445Hy-cZCE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE959, serialNumber=DA6DEB3F65CC23678483A76BB78E391F2F9C6421 Validity Not Before: Mar 25 03:58:02 2026 GMT Not After : Apr 1 03:58:02 2026 GMT Subject: CN=69c35d4b-9b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4b:b7:a2:d3:c2:93:63:76:ab:4b:ee:a2:f8: e5:aa:e0:bc:a1:47:bb:6b:de:02:4a:cd:3d:dd:ac: 0a:8c:62:11:eb:2a:f3:48:89:ed:b1:13:ed:31:59: b9:b6:39:d9:53:f4:98:55:4a:1a:1c:49:1b:f7:fc: 5d:d0:3c:bf:b9:52:77:10:4a:0c:17:fa:f1:94:ea: c6:b2:3b:12:c6:7c:46:24:58:a8:e3:7d:9b:c5:5e: 5c:e3:be:d5:78:9b:85:e8:fe:fd:81:3c:27:29:da: 01:c9:d3:e5:b3:a0:b8:68:c5:df:0d:4a:af:1b:72: e4:4b:56:db:e3:5d:37:af:fb:39:89:81:9f:81:11: e6:4c:5e:35:fc:19:50:a8:88:7e:57:a6:35:bf:f2: 01:04:4f:b3:67:6b:9b:a6:8f:1d:db:98:f7:9c:ab: 1e:50:cf:a4:f4:ac:96:9c:7a:de:55:aa:8b:07:5e: 4c:08:c8:1d:8a:93:b8:bb:80:65:20:d2:ba:68:3c: ff:6f:27:21:91:33:e7:f8:30:32:a7:be:58:90:71: 5d:fb:29:a5:27:60:d7:db:c2:29:c2:8b:39:03:58: 7e:29:be:90:e7:08:54:f0:5b:1b:3c:aa:47:da:68: b5:1e:7c:3d:2b:b3:ce:c6:49:ae:d4:36:a6:52:07: dd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:94:D3:34:B3:43:FC:5B:E0:0A:A0:74:F1:AF:D8:BD:D9:36:87:4B X509v3 Authority Key Identifier: keyid:DA:6D:EB:3F:65:CC:23:67:84:83:A7:6B:B7:8E:39:1F:2F:9C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2m3rP2XMI2eEg6drt445Hy-cZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:5b:ea:79:fc:1d:bd:bd:9c:a7:7b:cd:6a:0e:51:c8:01:f2: c7:d6:8f:74:96:2f:0d:46:d6:d7:e1:7e:0d:a4:3c:26:ff:73: 61:15:fa:35:0b:7d:0e:98:62:44:35:01:a5:b1:bf:34:20:32: 1a:90:18:04:82:aa:82:01:e3:49:f5:2a:57:61:f9:24:66:fe: 31:0c:a9:7a:93:1a:a2:f5:6a:d9:23:46:f5:ba:a6:c7:1a:c9: 46:c6:d7:c3:a8:48:d1:6f:42:b1:cd:c5:2e:4b:3f:cb:d0:f9: f0:cc:a7:32:68:4b:93:d6:8f:30:ce:2e:b6:ce:4c:d7:44:47: 11:76:aa:d4:68:78:40:c4:e8:02:85:d8:87:b6:84:85:65:e4: c5:f5:09:d8:2a:14:b2:bb:d2:46:0a:c1:c5:83:f5:c7:0a:62: 85:b8:17:fb:f8:f9:cf:f0:10:91:c3:3c:32:f0:77:90:fe:01: 37:3b:85:67:ea:15:93:19:41:75:a9:5e:7f:22:32:15:b4:e3: 1f:d6:08:6d:46:6c:54:64:36:2f:28:e3:61:d6:64:24:19:2c: c3:bc:92:ac:1e:3a:1d:02:ab:76:46:fd:1d:68:25:55:87:36: ea:29:09:80:5f:13:b4:31:f2:43:9a:0b:29:b4:1a:c5:d1:11: 80:59:c1:e6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTk1OTExMC8GA1UEBRMoREE2REVCM0Y2NUNDMjM2Nzg0ODNBNzZCQjc4RTM5MUYy RjlDNjQyMTAeFw0yNjAzMjUwMzU4MDJaFw0yNjA0MDEwMzU4MDJaMBgxFjAUBgNV BAMTDTY5YzM1ZDRiLTliMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5S7ei08KTY3arS+6i+OWq4LyhR7tr3gJKzT3drAqMYhHrKvNIie2xE+0xWbm2 OdlT9JhVShocSRv3/F3QPL+5UncQSgwX+vGU6sayOxLGfEYkWKjjfZvFXlzjvtV4 m4Xo/v2BPCcp2gHJ0+WzoLhoxd8NSq8bcuRLVtvjXTev+zmJgZ+BEeZMXjX8GVCo iH5XpjW/8gEET7Nna5umjx3bmPecqx5Qz6T0rJacet5VqosHXkwIyB2Kk7i7gGUg 0rpoPP9vJyGRM+f4MDKnvliQcV37KaUnYNfbwinCizkDWH4pvpDnCFTwWxs8qkfa aLUefD0rs87GSa7UNqZSB92DAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIpTTNLND /FvgCqB08a/Yvdk2h0swHwYDVR0jBBgwFoAU2m3rP2XMI2eEg6drt445Hy+cZCEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFOTU5L0Y0Nzc1NUI4MjFC MjExRjE5NTlERjk3N0FBRUU1MjhFLzJtM3JQMlhNSTJlRWc2ZHJ0NDQ1SHktY1pD RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMm0zclAyWE1JMmVFZzZkcnQ0NDVIeS1jWkNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF OTU5L0Y0Nzc1NUI4MjFCMjExRjE5NTlERjk3N0FBRUU1MjhFLzJtM3JQMlhNSTJl RWc2ZHJ0NDQ1SHktY1pDRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBIW+p5/B29vZyne81qDlHIAfLH1o90li8NRtbX4X4NpDwm/3NhFfo1C30OmGJE NQGlsb80IDIakBgEgqqCAeNJ9SpXYfkkZv4xDKl6kxqi9WrZI0b1uqbHGslGxtfD qEjRb0KxzcUuSz/L0PnwzKcyaEuT1o8wzi62zkzXREcRdqrUaHhAxOgChdiHtoSF ZeTF9QnYKhSyu9JGCsHFg/XHCmKFuBf7+PnP8BCRwzwy8HeQ/gE3O4Vn6hWTGUF1 qV5/IjIVtOMf1ghtRmxUZDYvKONh1mQkGSzDvJKsHjodAqt2Rv0daCVVhzbqKQmA XxO0MfJDmgsptBrF0RGAWcHm -----END CERTIFICATE-----Generated at Thu Mar 26 03:13:48 2026 by rpki-client