$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft File: 2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft (raw, json) Hash identifier: Uw+fWxgYvUlZZvP/0mJognPaueWD7EbuIhiucAxSxl0= Subject key identifier: 42:7A:30:C9:65:0D:68:B3:60:60:86:CE:CF:D9:39:B9:4D:75:DC:69 Authority key identifier: DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B Certificate issuer: /CN=A91D1C7F/serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B Certificate serial: 0410 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft Manifest number: 0401 Signing time: Wed 25 Mar 2026 00:07:16 +0000 Manifest this update: Wed 25 Mar 2026 00:07:16 +0000 Manifest next update: Wed 01 Apr 2026 00:07:16 +0000 Files and hashes: 1: 2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl (hash: SoBkFE6Jhukna6L4uny25iyGbXy8vrHjSmhfNVlcGKM=) 2: E5B25D84B0D211ECB7B1BA7DC4F9AE02.roa (hash: VgbuCbt2B5V4RwKAtDeC1bN0tj3w9fLDaipQp5XINf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1040 (0x410) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C7F, serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B Validity Not Before: Mar 25 00:07:16 2026 GMT Not After : Apr 1 00:07:16 2026 GMT Subject: CN=69c32734-4d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:54:2d:8f:57:62:82:c0:89:00:f5:23:47:18: c3:a2:7a:16:a0:a3:c4:0a:a5:dd:a9:9e:97:64:0b: 6f:26:4f:dc:3f:20:74:9a:60:4d:d4:29:29:a8:f3: 2c:58:62:9c:59:3b:c3:f5:76:6c:a4:1a:51:ab:a7: 3a:aa:44:cd:ec:89:cc:2d:fe:8e:cb:93:66:a1:90: 2f:7b:81:20:9e:c8:00:cd:73:0e:09:fe:63:5c:16: 30:3b:e2:af:bb:37:bc:d4:81:dc:36:6a:09:88:a4: 1d:a4:83:1a:8c:8c:b5:93:4d:a3:2f:0e:3e:2b:66: af:3d:44:4a:d2:72:88:54:50:81:23:3c:85:ee:57: 63:39:eb:78:21:59:7d:af:11:0f:6d:94:e8:67:21: 93:45:bf:17:91:0b:12:c0:e3:f9:d7:4a:b7:94:48: de:49:0c:45:85:29:d8:80:d8:b6:dd:e1:2e:62:12: 80:01:1f:bf:76:60:2b:bb:61:2a:0f:52:f7:0a:1a: 4e:8d:8a:ae:e5:4c:6d:22:1e:25:e5:52:9b:c9:a8: c6:ac:86:3c:0a:99:2d:6d:c1:01:11:4c:e5:c5:a3: 98:45:e5:f8:31:ab:2e:7e:79:e1:a7:e5:09:22:a2: 26:21:8c:de:d2:2b:7b:b5:36:33:56:46:42:84:88: b9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7A:30:C9:65:0D:68:B3:60:60:86:CE:CF:D9:39:B9:4D:75:DC:69 X509v3 Authority Key Identifier: keyid:DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6e:2c:8d:25:a3:47:ec:20:3f:06:6f:5a:16:cd:95:e8:b9: 7c:b6:05:7f:8d:ce:3a:ea:48:af:02:1d:10:d8:0d:4a:93:af: 00:4b:e6:c5:64:fc:e6:29:63:2f:f4:9b:70:32:db:2a:0c:bc: 2f:11:0e:b2:62:c4:ec:e3:c6:63:f6:51:95:e3:83:cb:4f:54: 50:4d:10:00:f9:d3:15:72:37:81:69:9c:5b:6c:d2:b0:e5:c6: 53:8d:56:41:1c:2f:a8:e3:63:c6:a7:53:5f:38:17:a8:0b:f6: 16:e2:7a:c2:33:7f:81:59:76:09:8e:41:71:a8:a7:4d:9f:1a: 49:8a:7d:d1:50:69:19:91:18:39:b8:2b:b9:26:39:e4:20:90: 08:5d:d8:3d:08:fc:91:8e:6c:c1:29:5f:51:01:03:c5:18:9e: d7:5b:80:68:db:a6:d2:27:d1:cd:f2:42:9a:e2:df:ad:5c:b5: 50:ae:6a:7e:b2:27:78:a7:8f:7c:5e:c6:07:68:b1:f1:cc:1b: ef:b8:3d:64:a5:6d:1f:2e:e2:bf:69:50:e6:31:00:0f:10:ae: 2a:15:df:ee:a2:d1:1c:d0:6a:5e:29:36:26:65:5d:21:54:12: a6:22:1f:c2:a5:17:91:88:7a:08:24:a5:cc:ff:7c:38:ba:30: 56:f9:ce:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDN0YxMTAvBgNVBAUTKERBQjRBNTJBOEVDMUFBRDZDOTI1MkVFQTRENUQxNTY5 RDI3QUY0NkIwHhcNMjYwMzI1MDAwNzE2WhcNMjYwNDAxMDAwNzE2WjAYMRYwFAYD VQQDEw02OWMzMjczNC00ZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA81Qtj1digsCJAPUjRxjDonoWoKPECqXdqZ6XZAtvJk/cPyB0mmBN1CkpqPMs WGKcWTvD9XZspBpRq6c6qkTN7InMLf6Oy5NmoZAve4EgnsgAzXMOCf5jXBYwO+Kv uze81IHcNmoJiKQdpIMajIy1k02jLw4+K2avPURK0nKIVFCBIzyF7ldjOet4IVl9 rxEPbZToZyGTRb8XkQsSwOP510q3lEjeSQxFhSnYgNi23eEuYhKAAR+/dmAru2Eq D1L3ChpOjYqu5UxtIh4l5VKbyajGrIY8CpktbcEBEUzlxaOYReX4Masufnnhp+UJ IqImIYze0it7tTYzVkZChIi5EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEJ6MMll DWizYGCGzs/ZOblNddxpMB8GA1UdIwQYMBaAFNq0pSqOwarWySUu6k1dFWnSevRr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUM3Ri8wOTFFMUVBQUIw RDAxMUVDQkIwNEEzNzhDNEY5QUUwMi8yclNsS283QnF0YkpKUzdxVFYwVmFkSjY5 R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyU2xLbzdCcXRiSkpTN3FUVjBWYWRKNjlHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUM3Ri8wOTFFMUVBQUIwRDAxMUVDQkIwNEEzNzhDNEY5QUUwMi8yclNsS283QnF0 YkpKUzdxVFYwVmFkSjY5R3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWm4sjSWjR+wgPwZvWhbNlei5fLYFf43OOupIrwIdENgNSpOvAEvmxWT85ilj L/SbcDLbKgy8LxEOsmLE7OPGY/ZRleODy09UUE0QAPnTFXI3gWmcW2zSsOXGU41W QRwvqONjxqdTXzgXqAv2FuJ6wjN/gVl2CY5BcainTZ8aSYp90VBpGZEYObgruSY5 5CCQCF3YPQj8kY5swSlfUQEDxRie11uAaNum0ifRzfJCmuLfrVy1UK5qfrIneKeP fF7GB2ix8cwb77g9ZKVtHy7iv2lQ5jEADxCuKhXf7qLRHNBqXik2JmVdIVQSpiIf wqUXkYh6CCSlzP98OLowVvnOXw== -----END CERTIFICATE-----Generated at Thu Mar 26 14:27:29 2026 by rpki-client