$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft File: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft (raw, json) Hash identifier: kd0o8h3K2WjD8JId6BeVo8RAZG2XaRkrqoI14+3T/6w= Subject key identifier: 2B:95:AB:06:59:9A:8C:F8:97:55:6B:EB:9E:C2:0F:F5:93:20:40:83 Authority key identifier: BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34 Certificate issuer: /CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134 Certificate serial: 05E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft Manifest number: 05D9 Signing time: Tue 24 Mar 2026 22:41:46 +0000 Manifest this update: Tue 24 Mar 2026 22:41:46 +0000 Manifest next update: Tue 31 Mar 2026 22:41:46 +0000 Files and hashes: 1: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl (hash: h76VhhBe4ir140ONbSExF4Ps8HUcc1bm018i/T53jH0=) 2: 0EF4DA3A38D011EC936A8C4FC4F9AE02.roa (hash: 5AtvjYv/5JBxLgDIDbG/ZJKbMg4yztkVNaeXKIlbHXg=) 3: 7FBF284EF5B211EB8419A23AC4F9AE02.roa (hash: H+/gL9GOC5rLy94c2j0ly4aLXYfukKwRD5D8FRI8cvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1513 (0x5e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7C21, serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134 Validity Not Before: Mar 24 22:41:46 2026 GMT Not After : Mar 31 22:41:46 2026 GMT Subject: CN=69c3132a-eebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3a:71:2e:41:9d:50:77:de:06:d4:17:66:0b: 4a:e7:4d:4f:72:ee:85:ff:5e:43:81:36:12:2b:eb: ec:b8:f2:f6:68:a7:0f:ff:ca:ec:c0:e3:c3:0b:cf: 43:16:16:4a:2a:44:db:11:f1:5c:41:9c:2a:b4:f4: bf:4d:33:42:c2:a4:0f:7b:24:60:f9:8a:24:a8:d2: 15:21:ec:29:db:4c:28:ed:d7:ed:f4:e4:98:38:ed: ae:0a:5e:bf:94:fc:ef:b3:4b:ba:fb:4a:8b:ae:96: 4d:91:0a:23:81:c3:85:04:33:f1:b5:cf:14:78:5e: 51:1b:dd:54:39:dc:49:d5:cd:97:b9:6f:dd:21:49: 98:26:76:d5:27:d5:b6:8f:af:9b:c1:f0:0e:c8:7c: d4:6c:21:7e:e5:96:21:03:8d:c7:94:98:53:98:d3: 33:4e:79:c3:30:ab:8b:8a:29:2a:1e:f8:4b:8b:5a: 77:a0:5b:11:b6:97:cc:7d:e6:40:4b:47:dd:d4:51: bd:d3:6c:46:4f:aa:ce:31:a4:ea:17:48:e6:b1:87: f7:af:fe:a2:58:f8:2f:11:06:11:1c:6d:ea:50:b9: fe:98:09:7c:36:95:28:25:61:cc:4c:dc:a9:48:55: 6f:3c:82:4a:98:3c:bd:6c:26:5d:cd:26:c5:57:d1: fd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:95:AB:06:59:9A:8C:F8:97:55:6B:EB:9E:C2:0F:F5:93:20:40:83 X509v3 Authority Key Identifier: keyid:BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:c4:3d:86:68:c5:a4:7c:35:87:2a:b3:d2:ed:03:d6:2e:f7: 9a:27:5a:98:04:98:de:b6:82:01:33:68:3d:bf:d8:e8:91:06: 48:81:f9:39:e9:7c:ed:52:73:4a:52:e7:7b:ac:6e:23:08:ce: 93:75:37:e0:b0:79:9a:28:97:11:bc:2b:95:f4:1a:c5:37:b1: 95:ca:df:36:cf:79:65:fa:b6:63:a9:72:fa:c2:0d:4b:d4:5f: c8:58:37:5b:79:11:10:46:22:17:15:93:a0:a9:e6:4c:82:fc: 7d:9b:53:28:a1:dc:d8:d6:45:38:9a:07:c5:d7:64:15:1e:b1: e9:ce:aa:cd:77:06:0e:e0:a3:6e:10:ca:b5:a6:a0:cb:2d:0c: 6f:aa:1e:d0:96:ce:ab:6c:c4:e9:79:ba:91:84:0b:8a:0b:0f: 65:6b:29:6e:8e:6e:7e:8e:07:86:6e:1c:7d:90:34:b0:28:ca: 34:54:87:d4:c4:33:fa:a9:10:2e:6e:6a:98:f9:96:03:87:57: 05:d9:d1:93:b8:93:20:0a:f1:f8:04:20:79:1a:6f:29:1d:2f: 05:dd:db:ab:89:30:53:df:0d:e3:fc:88:75:5b:c6:3a:9b:5a: 40:c7:12:47:c9:d4:f1:ba:43:aa:22:c1:38:54:9a:8a:c7:ea: f4:52:4c:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdDMjExMTAvBgNVBAUTKEJDMkRBMzVDQjU2NTEzQTk0QTY4QjU5MUREMkM3NkM1 MUQ4MTExMzQwHhcNMjYwMzI0MjI0MTQ2WhcNMjYwMzMxMjI0MTQ2WjAYMRYwFAYD VQQDEw02OWMzMTMyYS1lZWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzpxLkGdUHfeBtQXZgtK501Pcu6F/15DgTYSK+vsuPL2aKcP/8rswOPDC89D FhZKKkTbEfFcQZwqtPS/TTNCwqQPeyRg+YokqNIVIewp20wo7dft9OSYOO2uCl6/ lPzvs0u6+0qLrpZNkQojgcOFBDPxtc8UeF5RG91UOdxJ1c2XuW/dIUmYJnbVJ9W2 j6+bwfAOyHzUbCF+5ZYhA43HlJhTmNMzTnnDMKuLiikqHvhLi1p3oFsRtpfMfeZA S0fd1FG902xGT6rOMaTqF0jmsYf3r/6iWPgvEQYRHG3qULn+mAl8NpUoJWHMTNyp SFVvPIJKmDy9bCZdzSbFV9H9BwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCuVqwZZ moz4l1Vr657CD/WTIECDMB8GA1UdIwQYMBaAFLwto1y1ZROpSmi1kd0sdsUdgRE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0MyMS8zQkNEMDA3NEY1 QUUxMUVCOEUzRUZCMzNDNEY5QUUwMi92QzJqWExWbEU2bEthTFdSM1N4MnhSMkJF VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZDMmpYTFZsRTZsS2FMV1IzU3gyeFIyQkVUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0MyMS8zQkNEMDA3NEY1QUUxMUVCOEUzRUZCMzNDNEY5QUUwMi92QzJqWExWbEU2 bEthTFdSM1N4MnhSMkJFVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhMQ9hmjFpHw1hyqz0u0D1i73midamASY3raCATNoPb/Y6JEGSIH5Oel87VJz SlLne6xuIwjOk3U34LB5miiXEbwrlfQaxTexlcrfNs95Zfq2Y6ly+sINS9RfyFg3 W3kREEYiFxWToKnmTIL8fZtTKKHc2NZFOJoHxddkFR6x6c6qzXcGDuCjbhDKtaag yy0Mb6oe0JbOq2zE6Xm6kYQLigsPZWspbo5ufo4Hhm4cfZA0sCjKNFSH1MQz+qkQ Lm5qmPmWA4dXBdnRk7iTIArx+AQgeRpvKR0vBd3bq4kwU98N4/yIdVvGOptaQMcS R8nU8bpDqiLBOFSaisfq9FJM8w== -----END CERTIFICATE-----Generated at Thu Mar 26 07:18:03 2026 by rpki-client