$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft File: n2xg5qKluzMFUknUcjhHf4nhOnA.mft (raw, json) Hash identifier: 8tP3M5il8l5WsYHlJfJBCHXjYaHvlZBnirhmOcp9zAY= Subject key identifier: 15:B7:3B:5B:52:7A:B1:0C:87:A2:C8:E3:46:AF:E9:94:2B:FD:A7:45 Authority key identifier: 9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 Certificate issuer: /CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Certificate serial: 0238 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft Manifest number: 0234 Signing time: Wed 25 Mar 2026 01:58:28 +0000 Manifest this update: Wed 25 Mar 2026 01:58:28 +0000 Manifest next update: Wed 01 Apr 2026 01:58:28 +0000 Files and hashes: 1: n2xg5qKluzMFUknUcjhHf4nhOnA.crl (hash: WNOwIgCUv68c5EtvtCuNTx1DPMre4hvEANPLz5R+gq8=) 2: 51C204DAEA9011EFB8B82081C4F9AE02.roa (hash: z68jUM3pwDuhNvw5K6zmL6nh/8X6Z+78EEQu+Tv6QwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 568 (0x238) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E30, serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Validity Not Before: Mar 25 01:58:28 2026 GMT Not After : Apr 1 01:58:28 2026 GMT Subject: CN=69c34144-b069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:77:83:c6:a3:47:f4:9b:c0:cf:a3:ae:80:cc: f6:43:23:91:b1:b9:e7:9b:de:fb:da:43:3d:0b:55: fe:f8:7b:e7:af:24:ff:1f:92:fa:bc:79:8f:56:49: aa:4a:16:a4:8d:fd:3e:f1:10:90:cd:32:14:29:9c: db:33:de:5f:5d:3e:e2:54:d9:25:a6:fc:c7:89:c7: a9:6d:5f:74:50:bd:22:d9:9a:11:99:cb:ab:31:d7: 38:34:24:41:c3:aa:03:21:05:d0:09:1b:0d:f5:27: e5:c5:84:87:8b:0e:50:c5:29:59:71:8a:aa:cd:fa: 71:b2:fb:b5:c8:9e:fe:54:d4:3d:ce:53:74:9b:14: 71:48:7c:28:35:7e:46:d6:ac:f3:74:e4:84:c9:5a: b4:bc:03:7b:7b:2c:ab:f3:91:0f:ce:b7:34:a8:1b: 30:35:5e:56:70:af:8d:91:b0:b5:7e:fd:ca:f3:5d: 6b:10:e1:f0:59:3a:84:69:76:55:0b:2a:30:6f:a7: 1c:46:cd:27:08:4e:15:f5:08:42:02:10:05:4d:aa: 34:bc:db:a1:36:b2:fa:38:ea:d8:d5:a4:56:ff:30: 5e:67:2b:1c:62:90:eb:5f:84:13:3a:f2:27:0b:1d: d1:1d:2b:55:83:b8:a3:5e:b9:e8:44:8c:69:d7:b0: de:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B7:3B:5B:52:7A:B1:0C:87:A2:C8:E3:46:AF:E9:94:2B:FD:A7:45 X509v3 Authority Key Identifier: keyid:9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4a:ce:4f:b0:22:2f:0c:21:bf:c9:7d:dc:a6:23:df:f6:83: 52:81:25:0f:ca:cc:52:d6:ce:79:32:12:37:a8:c0:11:f4:71: d9:03:27:96:b8:6a:34:fe:2d:3b:93:ae:e6:40:4b:c7:c9:80: b0:7c:37:ef:e4:f4:51:95:6c:40:65:02:c4:4b:7e:14:20:b4: da:33:ee:7f:19:ec:12:e7:c6:0b:ce:47:bd:96:da:02:64:46: dc:80:71:82:cd:35:98:37:84:14:b0:8b:60:c5:0d:05:e6:6b: 3b:43:61:85:d2:df:fe:d2:e4:d5:e7:89:70:bd:89:cb:4c:1f: 0c:7d:a8:2b:f6:69:c2:98:88:c6:19:08:f5:de:7f:98:2b:31: 0e:f2:6a:c5:71:e4:98:c5:f6:0b:f6:31:a3:4e:54:06:fa:78: 06:ed:1e:23:5d:c0:26:42:ec:ee:e0:32:7f:a2:28:f5:8a:c9: 5e:bc:95:c5:d0:f7:86:65:8e:36:79:2b:1f:0f:fc:8a:c0:45: 6a:af:7a:b4:3d:2e:1e:2b:bb:96:37:f0:57:a0:a2:4a:d3:59: 88:26:f3:d3:4d:60:d4:07:84:b3:13:82:dc:c8:95:93:52:07: 0f:23:91:06:52:b5:ad:4b:f7:bf:c2:44:8b:ff:a4:39:6c:08: 8b:00:81:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFMzAxMTAvBgNVBAUTKDlGNkM2MEU2QTJBNUJCMzMwNTUyNDlENDcyMzg0NzdG ODlFMTNBNzAwHhcNMjYwMzI1MDE1ODI4WhcNMjYwNDAxMDE1ODI4WjAYMRYwFAYD VQQDEw02OWMzNDE0NC1iMDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XeDxqNH9JvAz6OugMz2QyORsbnnm9772kM9C1X++HvnryT/H5L6vHmPVkmq Shakjf0+8RCQzTIUKZzbM95fXT7iVNklpvzHicepbV90UL0i2ZoRmcurMdc4NCRB w6oDIQXQCRsN9SflxYSHiw5QxSlZcYqqzfpxsvu1yJ7+VNQ9zlN0mxRxSHwoNX5G 1qzzdOSEyVq0vAN7eyyr85EPzrc0qBswNV5WcK+NkbC1fv3K811rEOHwWTqEaXZV Cyowb6ccRs0nCE4V9QhCAhAFTao0vNuhNrL6OOrY1aRW/zBeZyscYpDrX4QTOvIn Cx3RHStVg7ijXrnoRIxp17DedQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBW3O1tS erEMh6LI40av6ZQr/adFMB8GA1UdIwQYMBaAFJ9sYOaipbszBVJJ1HI4R3+J4Tpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUUzMC81Q0E1MDUyQ0M5 RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6TUZVa25VY2poSGY0bmhP bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24yeGc1cUtsdXpNRlVrblVjamhIZjRuaE9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUUzMC81Q0E1MDUyQ0M5RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6 TUZVa25VY2poSGY0bmhPbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOkrOT7AiLwwhv8l93KYj3/aDUoElD8rMUtbOeTISN6jAEfRx2QMnlrhqNP4t O5Ou5kBLx8mAsHw37+T0UZVsQGUCxEt+FCC02jPufxnsEufGC85HvZbaAmRG3IBx gs01mDeEFLCLYMUNBeZrO0NhhdLf/tLk1eeJcL2Jy0wfDH2oK/ZpwpiIxhkI9d5/ mCsxDvJqxXHkmMX2C/Yxo05UBvp4Bu0eI13AJkLs7uAyf6Io9YrJXryVxdD3hmWO NnkrHw/8isBFaq96tD0uHiu7ljfwV6CiStNZiCbz001g1AeEsxOC3MiVk1IHDyOR BlK1rUv3v8JEi/+kOWwIiwCB3Q== -----END CERTIFICATE-----Generated at Thu Mar 26 04:25:20 2026 by rpki-client