$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft File: 2IDvJluUDjHf7RxCrvUUS2RBNxc.mft (raw, json) Hash identifier: abRgGVdDEcGRke0GHevswwXGb45t7wW8mLbvlPiPenI= Subject key identifier: 56:AE:7F:85:96:66:B0:B7:7F:80:D5:19:68:62:43:56:65:71:D0:01 Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 Certificate issuer: /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Certificate serial: 0253 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft Manifest number: 023E Signing time: Wed 25 Mar 2026 02:14:30 +0000 Manifest this update: Wed 25 Mar 2026 02:14:29 +0000 Manifest next update: Wed 01 Apr 2026 02:14:29 +0000 Files and hashes: 1: 2IDvJluUDjHf7RxCrvUUS2RBNxc.crl (hash: rgeoIl89lTzyrQhleyQxM4nweNRpNsT5mJbdvI37yyk=) 2: 43E961E013E711EE8ECA2D3CC4F9AE02.roa (hash: m/7u6/cH3KIH4vE9NfTnYL7F2XJXhLpUKXKxJGJi1F4=) 3: 61663178F88311EDB1DF555DC4F9AE02.roa (hash: G33TYspXU2Fxzv5ILVfshRhaPdOVDek7NtRxACK31hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 595 (0x253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Validity Not Before: Mar 25 02:14:29 2026 GMT Not After : Apr 1 02:14:29 2026 GMT Subject: CN=69c34506-cb61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cc:1e:92:09:07:07:02:a4:87:4f:da:20:b9: fe:1f:5c:01:e1:eb:17:60:30:6a:3c:b6:d0:5d:e0: 34:ce:20:cf:fc:b3:25:ec:06:fc:a4:4e:d4:d8:c3: 74:65:36:5c:fc:8c:5b:1a:71:d5:df:f9:b3:1c:08: 5a:e3:fc:03:ed:70:a3:62:09:93:54:4d:69:a7:fa: cb:0e:50:d2:25:8a:60:6b:98:62:71:98:2f:04:5d: 3b:9a:f1:da:2f:6e:d8:0c:39:aa:06:ce:ba:67:93: 7d:be:ef:48:04:be:37:d3:d2:3c:ca:a8:e4:00:14: 04:31:8d:95:1a:29:fc:14:eb:2b:9e:08:78:34:a5: 52:92:8c:b2:dd:2c:0a:5f:99:2c:50:ac:f2:84:92: 9b:14:15:a3:23:bd:0c:a2:c7:02:b6:18:d5:05:20: f6:78:fa:73:e8:57:26:38:60:1d:2e:e0:40:e2:6e: 04:06:f9:51:4c:92:5b:81:17:b9:ab:57:01:df:f5: e3:95:31:a6:be:2d:f0:48:5f:43:85:3e:d4:a5:b4: 69:d9:0c:b9:bb:62:be:b4:63:ff:3f:93:26:7d:04: 50:05:8a:f7:ce:b3:c9:13:54:0d:de:56:f2:03:36: 0f:10:7e:73:5e:91:62:2a:25:af:dd:c3:b2:54:0e: 5b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AE:7F:85:96:66:B0:B7:7F:80:D5:19:68:62:43:56:65:71:D0:01 X509v3 Authority Key Identifier: keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:1e:45:23:a8:99:6f:9f:74:a7:5f:d5:0f:71:e8:ec:79:70: d3:0a:b5:1a:3d:5d:99:04:00:b3:3e:e7:79:30:94:de:26:d1: 97:f5:5d:31:37:75:21:19:92:63:1d:8b:ee:ff:c5:5e:0b:57: 35:f4:89:8e:80:fa:d8:f5:0a:fb:c3:2f:86:ea:cb:15:72:af: cf:25:f3:15:11:e2:b4:6d:68:27:f8:78:de:c2:ee:fd:1d:19: c5:36:99:90:75:50:73:00:3a:6a:83:df:87:62:ad:a4:76:f7: 1b:17:9c:9b:24:a9:3c:5e:2e:c7:49:7d:f3:fb:d8:cd:a0:01: 08:de:d1:f4:db:ee:fb:c1:f7:23:a9:5f:2d:3f:22:2b:44:07: c8:f6:b0:d1:f0:f7:c5:b5:18:9b:19:e9:9c:0f:85:e5:36:ea: f2:92:5f:2b:35:7c:84:dd:97:07:94:8b:44:9a:1a:84:88:d4: 79:12:c0:4c:e5:5f:ee:19:20:bc:ef:cc:04:50:f8:08:fc:d7: 37:99:07:69:d8:83:57:eb:7a:55:6d:67:c6:69:04:26:42:01: b7:f4:01:80:75:0e:52:5b:48:37:b9:bd:14:4c:bf:d8:d3:a6: 87:62:58:0d:83:94:8d:a2:a2:0b:f2:92:7c:73:aa:68:70:a8: a3:80:ba:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBOEUxMTAvBgNVBAUTKEQ4ODBFRjI2NUI5NDBFMzFERkVEMUM0MkFFRjUxNDRC NjQ0MTM3MTcwHhcNMjYwMzI1MDIxNDI5WhcNMjYwNDAxMDIxNDI5WjAYMRYwFAYD VQQDEw02OWMzNDUwNi1jYjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8wekgkHBwKkh0/aILn+H1wB4esXYDBqPLbQXeA0ziDP/LMl7Ab8pE7U2MN0 ZTZc/IxbGnHV3/mzHAha4/wD7XCjYgmTVE1pp/rLDlDSJYpga5hicZgvBF07mvHa L27YDDmqBs66Z5N9vu9IBL4309I8yqjkABQEMY2VGin8FOsrngh4NKVSkoyy3SwK X5ksUKzyhJKbFBWjI70MoscCthjVBSD2ePpz6FcmOGAdLuBA4m4EBvlRTJJbgRe5 q1cB3/XjlTGmvi3wSF9DhT7UpbRp2Qy5u2K+tGP/P5MmfQRQBYr3zrPJE1QN3lby AzYPEH5zXpFiKiWv3cOyVA5b+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFauf4WW ZrC3f4DVGWhiQ1ZlcdABMB8GA1UdIwQYMBaAFNiA7yZblA4x3+0cQq71FEtkQTcX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RS82MUJBRDhFMEY4 N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURqSGY3UnhDcnZVVVMyUkJO eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJJRHZKbHVVRGpIZjdSeENydlVVUzJSQk54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkE4RS82MUJBRDhFMEY4N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURq SGY3UnhDcnZVVVMyUkJOeGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhx5FI6iZb590p1/VD3Ho7Hlw0wq1Gj1dmQQAsz7neTCU3ibRl/VdMTd1IRmS Yx2L7v/FXgtXNfSJjoD62PUK+8MvhurLFXKvzyXzFRHitG1oJ/h43sLu/R0ZxTaZ kHVQcwA6aoPfh2KtpHb3GxecmySpPF4ux0l98/vYzaABCN7R9Nvu+8H3I6lfLT8i K0QHyPaw0fD3xbUYmxnpnA+F5Tbq8pJfKzV8hN2XB5SLRJoahIjUeRLATOVf7hkg vO/MBFD4CPzXN5kHadiDV+t6VW1nxmkEJkIBt/QBgHUOUltIN7m9FEy/2NOmh2JY DYOUjaKiC/KSfHOqaHCoo4C6Ag== -----END CERTIFICATE-----Generated at Thu Mar 26 04:20:20 2026 by rpki-client