$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft File: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft (raw, json) Hash identifier: Qo/Gce5w04S9VF+UV2+CylRlp1FWdVarC2jJtsTMXic= Subject key identifier: F8:24:2E:53:AC:99:69:21:D3:09:D1:8E:AB:78:6D:E6:58:94:F8:01 Authority key identifier: DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 Certificate issuer: /CN=A91CF848/serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Certificate serial: 02C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft Manifest number: 02BF Signing time: Wed 25 Mar 2026 01:03:22 +0000 Manifest this update: Wed 25 Mar 2026 01:03:21 +0000 Manifest next update: Wed 01 Apr 2026 01:03:21 +0000 Files and hashes: 1: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl (hash: imVyqarJRX2VIRK/CZfL/jLOq529R4Kjoksqo0kPiU8=) 2: E9399E722E7211EDAE100C3DC4F9AE02.roa (hash: 41XnV0Dfd97uGyPbDbqHHH2dJuzZIdcHH6ek0SjFVbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 713 (0x2c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF848, serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Validity Not Before: Mar 25 01:03:21 2026 GMT Not After : Apr 1 01:03:21 2026 GMT Subject: CN=69c3345a-9e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:27:6a:45:26:cf:84:c3:89:c2:a3:c2:2d:94: 25:1a:92:bd:bc:eb:95:c7:5e:66:65:7d:a0:6e:9d: a1:98:c7:50:b9:cd:7e:d1:5b:b8:f4:45:e2:fb:d8: 27:28:7e:96:19:d1:ce:4c:8e:d3:82:cd:2a:12:a3: 9f:d0:51:8b:fa:b0:0f:d2:f8:a1:0f:61:59:74:97: 9f:1a:f6:a7:3f:2f:78:8a:94:bb:33:54:a7:8c:e8: e6:45:27:41:bf:dc:9a:d2:de:c2:76:43:5d:b6:fd: fe:07:74:58:4e:14:57:19:49:60:9b:bc:69:43:a3: f1:cb:98:28:26:51:83:50:ae:55:69:61:c3:15:c4: aa:e2:44:fa:20:22:87:65:6f:03:25:42:cb:64:26: 35:10:1f:07:c2:41:3d:a4:0a:4c:bd:df:45:3b:7e: 9a:ee:d4:d5:2e:4a:dd:78:45:0c:d0:e4:c7:4b:cf: 23:8a:35:69:22:0d:5e:46:89:c2:5e:8c:7c:9b:a7: 64:a2:d8:f2:dc:3c:21:b3:84:5e:d7:77:6e:9b:84: 49:24:2a:c0:b3:b4:51:50:fc:97:af:ff:3c:b8:dd: 56:9d:24:7d:86:98:74:60:0b:56:06:00:31:2e:26: 27:0f:49:b7:6e:62:55:db:07:32:1a:41:fe:25:5c: ad:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:24:2E:53:AC:99:69:21:D3:09:D1:8E:AB:78:6D:E6:58:94:F8:01 X509v3 Authority Key Identifier: keyid:DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d7:0a:58:7d:a6:37:d8:47:36:80:01:22:3b:04:fc:99:ee: a5:29:26:1f:9b:53:b4:d2:38:6a:a4:d7:3b:f4:b6:39:b8:c9: a4:52:7e:b7:38:a7:1a:d6:7b:59:90:4d:65:43:4a:ab:7a:2b: d5:b7:1c:fb:63:04:2a:6a:b9:0c:14:2a:6c:d0:e1:1a:84:91: 15:d9:9b:8d:63:b8:fd:53:9a:2e:e9:44:1a:f9:b9:7b:a7:32: 83:2d:e7:a0:39:b3:38:00:6f:06:6a:ea:90:21:27:87:9f:99: 03:78:82:6c:32:cf:e9:31:e0:b8:6a:7c:7d:2d:74:f7:15:5d: 0d:43:47:6f:55:09:44:e0:2e:48:b9:85:7c:bd:c7:c1:d4:fa: 60:1d:bd:4c:f5:83:84:90:9c:08:04:55:46:7f:71:71:4f:94: 08:ff:3f:2e:10:10:e6:58:f6:48:12:5b:e5:f7:ac:c2:44:fc: 6d:c8:65:c3:62:6e:cf:70:b0:f0:3f:a0:87:a9:74:ef:ba:9d: a5:10:73:58:c1:ab:b2:5f:5a:0f:be:b5:95:59:9b:da:f9:dd: 10:2d:44:3e:e8:e9:df:be:b2:0e:1e:39:47:40:51:6c:90:93: 1d:ea:ef:89:1c:08:87:aa:7c:ca:6e:74:00:ef:40:1a:73:69: ed:1d:5b:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4NDgxMTAvBgNVBAUTKERCMzUzRjk2QzBEMDJDREQ0QzFGMDhEQTFCQzE2OUZF RTU4RDczMjEwHhcNMjYwMzI1MDEwMzIxWhcNMjYwNDAxMDEwMzIxWjAYMRYwFAYD VQQDEw02OWMzMzQ1YS05ZTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkidqRSbPhMOJwqPCLZQlGpK9vOuVx15mZX2gbp2hmMdQuc1+0Vu49EXi+9gn KH6WGdHOTI7Tgs0qEqOf0FGL+rAP0vihD2FZdJefGvanPy94ipS7M1SnjOjmRSdB v9ya0t7CdkNdtv3+B3RYThRXGUlgm7xpQ6Pxy5goJlGDUK5VaWHDFcSq4kT6ICKH ZW8DJULLZCY1EB8HwkE9pApMvd9FO36a7tTVLkrdeEUM0OTHS88jijVpIg1eRonC Xox8m6dkotjy3Dwhs4Re13dum4RJJCrAs7RRUPyXr/88uN1WnSR9hph0YAtWBgAx LiYnD0m3bmJV2wcyGkH+JVytpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPgkLlOs mWkh0wnRjqt4beZYlPgBMB8GA1UdIwQYMBaAFNs1P5bA0CzdTB8I2hvBaf7ljXMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjg0OC9DQURBQjdCMjJF NkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxOMU1Id2phRzhGcF91V05j eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6VV9sc0RRTE4xTUh3amFHOEZwX3VXTmN5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Rjg0OC9DQURBQjdCMjJFNkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxO MU1Id2phRzhGcF91V05jeUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAndcKWH2mN9hHNoABIjsE/JnupSkmH5tTtNI4aqTXO/S2ObjJpFJ+tzinGtZ7 WZBNZUNKq3or1bcc+2MEKmq5DBQqbNDhGoSRFdmbjWO4/VOaLulEGvm5e6cygy3n oDmzOABvBmrqkCEnh5+ZA3iCbDLP6THguGp8fS109xVdDUNHb1UJROAuSLmFfL3H wdT6YB29TPWDhJCcCARVRn9xcU+UCP8/LhAQ5lj2SBJb5feswkT8bchlw2Juz3Cw 8D+gh6l077qdpRBzWMGrsl9aD761lVmb2vndEC1EPujp376yDh45R0BRbJCTHerv iRwIh6p8ym50AO9AGnNp7R1bOQ== -----END CERTIFICATE-----Generated at Thu Mar 26 08:51:31 2026 by rpki-client