$ rpki-client -vvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft File: 2jyR-PFV2QuZh8kTskxPnlRF6cw.mft (raw, json) Hash identifier: 1p9m99De0Eew21L2t3Vhtr2wv4EWMaCd8UDTO/fFM38= Subject key identifier: 11:5C:FE:B2:BC:E7:16:87:E5:39:23:D1:29:3E:26:2F:50:46:0F:D4 Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC Certificate issuer: /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Certificate serial: 0D9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft Manifest number: 0D76 Signing time: Tue 24 Mar 2026 17:50:09 +0000 Manifest this update: Tue 24 Mar 2026 17:50:09 +0000 Manifest next update: Tue 31 Mar 2026 17:50:09 +0000 Files and hashes: 1: 2jyR-PFV2QuZh8kTskxPnlRF6cw.crl (hash: 4YDR4JUnBig+4vEVLtiWsR+L+mRRiDF4rUJnic9Wmt4=) 2: 8E4647E6EB2911EB9891D01DC4F9AE02.roa (hash: AsxJJe7AQfPpeTieWhSPJw58k738mrKqvlACAyMZyn0=) 3: FEB624F6B94911EE897F7947C4F9AE02.roa (hash: ZqgPOrVGAVhmIWvwXmsHVZQruBjCO1WrYjc/KjSm8/Q=) 4: 8D9FFB3EEB2911EB9891D01DC4F9AE02.roa (hash: QT3QM4Ca91XVmmXNZAyaNX0ZIAsny+fn6mttdm0kFjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3486 (0xd9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E70ED, serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Validity Not Before: Mar 24 17:50:09 2026 GMT Not After : Mar 31 17:50:09 2026 GMT Subject: CN=69c2ced1-456f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:31:f1:b6:1a:14:22:22:e5:b4:f2:ad:81:27: 88:04:b9:f5:d7:c4:8d:ab:e4:ab:de:32:3a:ad:24: f8:55:eb:df:bb:36:cc:59:09:55:50:0f:87:a0:f8: f4:c6:68:0c:a9:9a:18:ff:ef:2b:7a:32:c1:da:67: e1:1e:28:fb:f0:96:7b:5f:f7:2a:c7:40:99:ad:82: cc:6f:bd:e1:7e:d9:57:d3:00:10:36:8c:46:f4:8a: de:28:1e:96:a1:f3:ad:8a:00:cc:b9:5b:33:a2:15: 10:2f:51:0f:c6:48:07:eb:5a:d2:54:ef:08:ac:5c: 29:57:77:e4:73:94:f6:a5:fc:7b:04:d6:6b:8c:f3: 6a:81:f1:30:32:e9:89:1f:26:54:f6:ce:66:be:17: a0:1d:9b:6d:4b:20:90:7b:cc:0a:ca:c6:b5:c2:e6: 83:fe:80:03:c1:a4:4a:c6:ef:c7:5a:fc:44:8a:c9: ea:73:10:93:60:52:aa:e1:ca:72:cd:57:f2:fc:19: 4b:4e:26:3d:6b:55:56:2d:20:60:2e:76:01:5d:3d: 0b:cc:ce:77:95:43:45:fa:99:b4:03:94:85:ac:eb: 7f:c8:70:27:63:9d:92:15:ea:3d:d6:59:15:c6:2a: e7:a9:2d:27:e0:38:6e:c8:30:09:97:0f:53:70:51: 57:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5C:FE:B2:BC:E7:16:87:E5:39:23:D1:29:3E:26:2F:50:46:0F:D4 X509v3 Authority Key Identifier: keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:6f:18:2f:d3:cc:55:de:59:e2:e7:3a:44:e1:b2:5c:fb:7f: f1:c3:f7:e0:c9:91:0a:25:1c:09:22:40:e3:61:00:ec:e6:a7: 94:38:27:70:69:21:5d:b5:7d:09:90:37:82:43:0e:d3:c7:ab: ba:fd:ff:a0:12:f8:9c:b7:96:a2:ee:34:78:c0:2d:95:7b:4d: aa:44:17:66:4b:7f:4e:7b:2a:55:95:ef:dc:ff:39:05:10:c1: e8:80:9f:e9:98:55:87:ea:cc:56:68:85:96:c3:61:55:1b:ba: 30:e0:7e:57:58:c3:80:92:4c:a7:1b:41:ad:46:4b:7f:df:d4: 09:2b:47:a9:0a:72:68:d4:63:bb:d1:64:40:cd:0e:0b:a0:12: 4f:bd:c3:f8:4b:98:6e:63:44:c2:1d:97:c7:6b:a6:ff:55:44: b9:75:35:06:a5:ff:dc:39:a4:a4:64:bb:71:e5:34:16:2c:8d: 17:bf:57:7f:09:56:c6:ea:37:52:e9:ff:55:87:b0:3c:9b:72: 77:87:3b:aa:77:58:ac:7a:66:5a:de:bc:fa:4b:83:0d:7f:b2: 18:cd:ad:11:8e:bc:b6:de:18:d6:c3:57:eb:98:a6:f6:4a:60: 3c:9b:0d:90:c4:6a:cc:05:21:ac:99:4f:67:c9:cb:84:fe:8d: 40:2e:be:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcwRUQxMTAvBgNVBAUTKERBM0M5MUY4RjE1NUQ5MEI5OTg3QzkxM0IyNEM0RjlF NTQ0NUU5Q0MwHhcNMjYwMzI0MTc1MDA5WhcNMjYwMzMxMTc1MDA5WjAYMRYwFAYD VQQDEw02OWMyY2VkMS00NTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2DHxthoUIiLltPKtgSeIBLn118SNq+Sr3jI6rST4VevfuzbMWQlVUA+HoPj0 xmgMqZoY/+8rejLB2mfhHij78JZ7X/cqx0CZrYLMb73hftlX0wAQNoxG9IreKB6W ofOtigDMuVszohUQL1EPxkgH61rSVO8IrFwpV3fkc5T2pfx7BNZrjPNqgfEwMumJ HyZU9s5mvhegHZttSyCQe8wKysa1wuaD/oADwaRKxu/HWvxEisnqcxCTYFKq4cpy zVfy/BlLTiY9a1VWLSBgLnYBXT0LzM53lUNF+pm0A5SFrOt/yHAnY52SFeo91lkV xirnqS0n4DhuyDAJlw9TcFFXOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBFc/rK8 5xaH5Tkj0Sk+Ji9QRg/UMB8GA1UdIwQYMBaAFNo8kfjxVdkLmYfJE7JMT55URenM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzBFRC9FNjI3N0EzRUU5 RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJRdVpoOGtUc2t4UG5sUkY2 Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqeVItUEZWMlF1Wmg4a1Rza3hQbmxSRjZjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzBFRC9FNjI3N0EzRUU5RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJR dVpoOGtUc2t4UG5sUkY2Y3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABW8YL9PMVd5Z4uc6ROGyXPt/8cP34MmRCiUcCSJA42EA7OanlDgncGkhXbV9 CZA3gkMO08eruv3/oBL4nLeWou40eMAtlXtNqkQXZkt/TnsqVZXv3P85BRDB6ICf 6ZhVh+rMVmiFlsNhVRu6MOB+V1jDgJJMpxtBrUZLf9/UCStHqQpyaNRju9FkQM0O C6AST73D+EuYbmNEwh2Xx2um/1VEuXU1BqX/3DmkpGS7ceU0FiyNF79XfwlWxuo3 Uun/VYewPJtyd4c7qndYrHpmWt68+kuDDX+yGM2tEY68tt4Y1sNX65im9kpgPJsN kMRqzAUhrJlPZ8nLhP6NQC6+rQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:52:43 2026 by rpki-client