$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft File: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft (raw, json) Hash identifier: QH4m1DXTi17mOJsdd73wVbeI1xosrDMfDsMVBrme2n4= Subject key identifier: 49:DC:62:52:D5:C6:67:C4:27:1F:36:43:FE:2E:F6:17:BF:EB:F5:6B Authority key identifier: A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D Certificate issuer: /CN=A91D1E4C/serialNumber=A59D836E1C31623CC586448AA752B746853B841D Certificate serial: 08AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft Manifest number: 0C2F Signing time: Tue 24 Mar 2026 20:13:12 +0000 Manifest this update: Tue 24 Mar 2026 20:13:11 +0000 Manifest next update: Tue 31 Mar 2026 20:13:11 +0000 Files and hashes: 1: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl (hash: KXh3KzeluQjnN3kdeZvyF8bDs7ZAl898zk7osOR/7s8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:13:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2222 (0x8ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=A59D836E1C31623CC586448AA752B746853B841D Validity Not Before: Mar 24 20:13:11 2026 GMT Not After : Mar 31 20:13:11 2026 GMT Subject: CN=69c2f058-8063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:19:e6:30:c0:c2:94:d6:91:8d:ec:73:c4:9e: 54:2c:b7:92:31:ef:bc:93:94:40:e1:40:a0:c3:ae: ab:78:ee:6a:d5:0a:41:58:db:f4:cc:75:ea:ee:4b: 2d:bd:d3:62:df:b4:31:fb:3b:5f:d7:29:b5:c3:a6: d7:a5:4a:fc:ce:69:0d:3e:88:fc:f3:b6:e9:76:99: 60:8a:09:02:72:a9:5c:ba:e7:2c:b4:22:81:46:a3: 85:6b:cb:f1:e5:9a:78:7b:ef:b4:5a:8d:dc:da:16: 8c:39:96:62:bb:df:dd:a6:b0:4e:90:28:f5:93:f2: c1:90:2b:ed:b6:77:a1:08:2b:9a:8c:43:f5:a4:bc: 89:55:36:26:99:df:e7:49:dd:e3:9d:3b:a5:2b:c4: e0:24:f7:cc:03:41:59:ad:0b:dd:d4:79:9c:8b:2f: b2:06:58:1d:9f:24:85:88:41:c1:05:6d:e8:5d:63: f7:64:29:60:2f:d1:8f:7d:7d:b7:f3:c2:4d:a7:11: 4c:51:b0:ca:c1:02:09:67:f6:3a:f8:2f:1e:33:e2: e5:ea:8a:a5:cb:44:6c:63:3d:dc:53:c0:ae:65:9b: 8f:32:7f:1b:1d:1a:a6:6f:83:81:7a:95:fe:33:7d: 18:c8:79:60:61:ac:9c:cf:6b:61:6b:8e:68:b4:62: 86:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DC:62:52:D5:C6:67:C4:27:1F:36:43:FE:2E:F6:17:BF:EB:F5:6B X509v3 Authority Key Identifier: keyid:A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:0d:fb:24:5a:65:15:5c:98:fb:ec:4b:9b:f3:78:36:ad:d9: e7:96:0f:19:11:34:5a:63:74:61:40:5d:23:68:28:d2:d3:84: d9:96:0a:d2:6e:4d:94:f4:66:b5:8c:d0:41:c9:76:96:ef:06: 7b:8c:3f:9f:d4:4f:98:91:58:d9:b6:d9:a8:d7:ae:27:11:5b: ae:77:ad:8a:27:47:ee:ad:c1:75:40:88:00:3d:86:1b:e4:e3: 10:a9:60:0f:44:36:75:02:35:5d:2e:8b:f0:a6:3b:b1:f6:49: a9:ab:6c:ec:8c:8f:d7:d5:45:3f:fd:0f:6e:7f:d1:b0:1f:ed: 72:0c:6a:a6:ff:06:be:a5:b5:be:b3:26:2c:85:9b:57:0c:0f: b6:02:9d:af:8e:22:12:8d:e3:49:ca:5d:e1:6c:38:07:31:97: 08:40:64:a4:41:8b:2b:e2:6c:05:22:e1:7b:89:2c:3f:ca:0b: 80:78:1c:8a:3d:65:96:bb:aa:8f:94:bc:63:86:a5:cc:c8:ee: 82:4a:eb:90:d6:4d:3b:35:08:f0:98:e9:f0:0c:40:fd:56:de: 3a:b7:67:c8:b3:52:03:48:4d:82:6e:22:1f:08:ea:68:18:7d: 86:fc:9c:83:44:a2:7e:c4:2c:8f:84:de:43:92:0f:18:a0:c6: 27:8a:f7:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEE1OUQ4MzZFMUMzMTYyM0NDNTg2NDQ4QUE3NTJCNzQ2 ODUzQjg0MUQwHhcNMjYwMzI0MjAxMzExWhcNMjYwMzMxMjAxMzExWjAYMRYwFAYD VQQDEw02OWMyZjA1OC04MDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRnmMMDClNaRjexzxJ5ULLeSMe+8k5RA4UCgw66reO5q1QpBWNv0zHXq7kst vdNi37Qx+ztf1ym1w6bXpUr8zmkNPoj887bpdplgigkCcqlcuucstCKBRqOFa8vx 5Zp4e++0Wo3c2haMOZZiu9/dprBOkCj1k/LBkCvttnehCCuajEP1pLyJVTYmmd/n Sd3jnTulK8TgJPfMA0FZrQvd1Hmciy+yBlgdnySFiEHBBW3oXWP3ZClgL9GPfX23 88JNpxFMUbDKwQIJZ/Y6+C8eM+Ll6oqly0RsYz3cU8CuZZuPMn8bHRqmb4OBepX+ M30YyHlgYaycz2tha45otGKGQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEncYlLV xmfEJx82Q/4u9he/6/VrMB8GA1UdIwQYMBaAFKWdg24cMWI8xYZEiqdSt0aFO4Qd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlqekZoa1NLcDFLM1JvVTdo QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BaMkRiaHd4WWp6RmhrU0twMUszUm9VN2hCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlq ekZoa1NLcDFLM1JvVTdoQjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbg37JFplFVyY++xLm/N4Nq3Z55YPGRE0WmN0YUBdI2go0tOE2ZYK0m5NlPRm tYzQQcl2lu8Ge4w/n9RPmJFY2bbZqNeuJxFbrnetiidH7q3BdUCIAD2GG+TjEKlg D0Q2dQI1XS6L8KY7sfZJqats7IyP19VFP/0Pbn/RsB/tcgxqpv8GvqW1vrMmLIWb VwwPtgKdr44iEo3jScpd4Ww4BzGXCEBkpEGLK+JsBSLhe4ksP8oLgHgcij1llruq j5S8Y4alzMjugkrrkNZNOzUI8Jjp8AxA/VbeOrdnyLNSA0hNgm4iHwjqaBh9hvyc g0SifsQsj4TeQ5IPGKDGJ4r3ZA== -----END CERTIFICATE-----Generated at Thu Mar 26 07:54:48 2026 by rpki-client