$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft File: 2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft (raw, json) Hash identifier: ongE2Enemq7RrdykC1b0KZMoFSXkFGpggA+5ekIgSJY= Subject key identifier: 8C:38:E2:76:2B:D3:82:E4:2A:95:5E:F5:2B:2C:65:CC:91:BA:86:5D Authority key identifier: DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE Certificate issuer: /CN=A91E6CCA/serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft Manifest number: B9 Signing time: Wed 25 Mar 2026 06:15:06 +0000 Manifest this update: Wed 25 Mar 2026 06:15:05 +0000 Manifest next update: Wed 01 Apr 2026 06:15:05 +0000 Files and hashes: 1: 2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl (hash: V1RPnrFztdmqq/6kL4c2nuQ4znv4PXlnOATQXKn4uQE=) 2: E9CF18DE0F7111F096BBCF24C4F9AE02.roa (hash: tWtaLRbtDVtWiOlLn3BiRHdz2Yx30phG2bPvS2Dv5GU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6CCA, serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE Validity Not Before: Mar 25 06:15:05 2026 GMT Not After : Apr 1 06:15:05 2026 GMT Subject: CN=69c37d6a-fc4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f0:d4:23:5c:91:1a:c5:d0:9f:db:75:bc:18: 99:16:9b:4d:41:c9:02:70:08:af:30:af:8e:7c:ec: 40:fb:a2:17:86:be:1c:b0:2f:15:07:cf:d0:f2:0f: b5:ef:eb:63:a6:a0:5f:a4:0a:1a:21:9c:f3:53:57: df:a4:c3:fa:ad:bc:8e:92:4c:2d:9b:2c:5c:38:71: 11:b2:31:6e:6f:76:fd:f0:75:0f:bb:39:50:b7:bd: 3a:94:2c:29:0c:b4:26:c6:41:91:3b:3b:20:c5:23: ea:32:de:8a:ca:e6:7b:52:c5:23:f5:06:b0:7e:3e: 72:71:24:0d:15:86:ad:07:91:15:12:99:f6:ab:1d: 67:ab:4c:de:d5:35:5c:07:5b:36:ff:21:97:0a:b7: 40:6c:27:74:28:c6:b8:82:cc:5f:8f:a6:53:70:71: 96:13:b7:5a:85:83:72:d5:b1:6d:79:93:31:81:90: df:4a:d1:8b:4f:f3:5d:04:5a:28:21:fa:4c:c6:0d: e9:dd:36:c6:35:d0:8e:57:63:bc:69:61:a5:47:b1: ed:e4:a7:50:25:30:da:61:22:78:d9:7c:06:22:27: 00:9d:f8:8a:36:67:b7:4d:9a:71:6a:81:6a:7d:e0: ce:30:b8:9d:4a:41:28:56:89:54:d9:96:f8:ce:7a: 9c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:38:E2:76:2B:D3:82:E4:2A:95:5E:F5:2B:2C:65:CC:91:BA:86:5D X509v3 Authority Key Identifier: keyid:DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:4a:28:fd:9b:9f:3c:e0:37:ac:1a:f0:47:26:23:8d:03:da: 94:b9:17:2c:ed:29:38:b2:03:64:03:aa:e6:00:99:a6:a4:1f: b1:88:db:3a:ce:68:ae:26:70:5e:65:cd:45:97:01:a5:7b:8e: b0:d5:b3:04:63:b1:31:66:bd:67:c5:57:38:01:3a:8f:1d:c6: 4e:04:7d:2a:1d:e9:97:0d:97:c7:76:86:4d:be:34:1d:6e:b9: 32:bf:25:a5:b8:fc:01:52:06:2c:03:a3:78:10:b0:c2:43:af: 20:51:0f:5d:e3:37:ef:4b:01:7d:bd:c7:48:87:f8:de:45:44: a0:58:50:d7:c9:8f:57:01:29:ea:79:50:d1:96:d1:30:c2:29: 45:b8:af:21:8c:20:f4:15:1d:68:b2:d1:3e:43:98:0e:17:0d: 7e:d1:aa:99:9f:9b:d1:59:c6:49:87:09:7f:0a:2f:81:7b:c8: 61:46:2b:50:e9:0a:41:fc:fa:9a:76:0f:79:62:86:e2:39:79: d8:12:e7:db:0e:07:6e:0c:fc:41:a8:8f:71:e7:dc:cb:bc:df: 45:04:a9:49:6a:02:c7:35:e6:6f:dc:49:02:46:ec:6e:69:b7: 4f:b7:d9:eb:91:27:77:96:d4:9b:69:e5:86:37:f9:cf:3c:5f: 1c:71:2d:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDQ0ExMTAvBgNVBAUTKERCMTNGQkFGN0IzQjM4REI3NjMwREIwQjk3Mzc0REFB RDAzMTVBREUwHhcNMjYwMzI1MDYxNTA1WhcNMjYwNDAxMDYxNTA1WjAYMRYwFAYD VQQDEw02OWMzN2Q2YS1mYzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PDUI1yRGsXQn9t1vBiZFptNQckCcAivMK+OfOxA+6IXhr4csC8VB8/Q8g+1 7+tjpqBfpAoaIZzzU1ffpMP6rbyOkkwtmyxcOHERsjFub3b98HUPuzlQt706lCwp DLQmxkGROzsgxSPqMt6KyuZ7UsUj9Qawfj5ycSQNFYatB5EVEpn2qx1nq0ze1TVc B1s2/yGXCrdAbCd0KMa4gsxfj6ZTcHGWE7dahYNy1bFteZMxgZDfStGLT/NdBFoo IfpMxg3p3TbGNdCOV2O8aWGlR7Ht5KdQJTDaYSJ42XwGIicAnfiKNme3TZpxaoFq feDOMLidSkEoVolU2Zb4znqcqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIw44nYr 04LkKpVe9SssZcyRuoZdMB8GA1UdIwQYMBaAFNsT+697OzjbdjDbC5c3TarQMVre MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkNDQS8yNDAxMEQ1MjBG NzAxMUYwOUUyRjdEMUZDNEY5QUUwMi8yeFA3cjNzN09OdDJNTnNMbHpkTnF0QXhX dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4UDdyM3M3T050Mk1Oc0xsemROcXRBeFd0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkNDQS8yNDAxMEQ1MjBGNzAxMUYwOUUyRjdEMUZDNEY5QUUwMi8yeFA3cjNzN09O dDJNTnNMbHpkTnF0QXhXdDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUUoo/ZufPOA3rBrwRyYjjQPalLkXLO0pOLIDZAOq5gCZpqQfsYjbOs5oriZw XmXNRZcBpXuOsNWzBGOxMWa9Z8VXOAE6jx3GTgR9Kh3plw2Xx3aGTb40HW65Mr8l pbj8AVIGLAOjeBCwwkOvIFEPXeM370sBfb3HSIf43kVEoFhQ18mPVwEp6nlQ0ZbR MMIpRbivIYwg9BUdaLLRPkOYDhcNftGqmZ+b0VnGSYcJfwovgXvIYUYrUOkKQfz6 mnYPeWKG4jl52BLn2w4Hbgz8QaiPcefcy7zfRQSpSWoCxzXmb9xJAkbsbmm3T7fZ 65End5bUm2nlhjf5zzxfHHEt8Q== -----END CERTIFICATE-----Generated at Thu Mar 26 07:13:36 2026 by rpki-client