$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.mft (raw, json) Hash identifier: DIkvKEewnbiyusMF0XlomKlmSsEOmXQH/riDeA7gN0c= Subject key identifier: 20:44:BF:5E:F5:90:EA:0F:FE:27:9B:E3:0E:E1:08:41:5F:5C:E6:0A Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 Certificate issuer: /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Certificate serial: 071B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft Manifest number: 0709 Signing time: Thu 26 Mar 2026 21:50:00 +0000 Manifest this update: Thu 26 Mar 2026 21:49:59 +0000 Manifest next update: Thu 02 Apr 2026 21:49:59 +0000 Files and hashes: 1: 2MHMikY6MVDL7AhlTmF4ANZuU-k.crl (hash: 1qXtCppqs2m1pFpUbe/7ktg9zesSgKkhzDBqk4PRiHQ=) 2: 88A31320809211EB938F4016C4F9AE02.roa (hash: hQTt0AFzBYtxdeGsE5h3TYl3htX01dC5soXQmdrd9Fo=) 3: F00A66308A9C11EB9B2E044BC4F9AE02.roa (hash: rQHi52MocQB/prtSJtGO8uedEqwHLU7/+mRUSwiw+1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 21:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1819 (0x71b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Validity Not Before: Mar 26 21:49:59 2026 GMT Not After : Apr 2 21:49:59 2026 GMT Subject: CN=69c5aa07-c479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a6:90:14:50:0d:d7:e6:87:3b:25:04:26:bb: dd:86:51:56:a8:b2:51:b5:36:21:f7:8a:0f:ed:f7: 1f:11:bb:2d:fe:05:60:18:82:4b:2d:7b:eb:90:f6: 38:7b:c2:55:a0:b6:ca:cc:ba:50:60:c3:fe:d0:6b: 99:5a:3a:02:df:9e:52:e1:7a:78:9d:37:b4:05:a3: 26:92:f4:47:24:a4:37:bf:d4:88:f0:87:5b:c4:28: 52:32:cf:15:5d:1f:dc:6f:88:b7:51:37:90:8c:87: 6a:0d:09:31:5d:03:20:e5:7c:57:6f:fe:1d:ff:21: ca:9c:86:f2:d9:42:26:0a:3d:95:c7:2a:b1:b6:69: 83:c3:82:5e:2f:76:9b:23:12:60:70:58:51:6e:73: d4:5d:d9:c2:9a:b2:54:55:06:42:cb:c2:68:7f:67: eb:97:6e:38:59:f4:a9:c6:ed:b5:07:d8:7b:40:de: fc:f9:cc:6a:6c:09:10:d7:8d:17:0a:0b:a8:de:0b: da:80:a3:e3:60:44:d9:6e:db:ed:b4:c2:6b:66:28: 8c:bd:9c:32:6d:fb:bb:69:52:a4:88:a9:0a:28:c8: 5b:79:ed:04:e8:95:4e:cc:f8:f8:6e:ce:b9:1d:41: 56:84:5a:0e:cb:77:7b:4d:da:1e:e9:f1:49:96:d3: 8b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:44:BF:5E:F5:90:EA:0F:FE:27:9B:E3:0E:E1:08:41:5F:5C:E6:0A X509v3 Authority Key Identifier: keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a5:f0:fd:ca:4b:2b:bc:ce:44:e5:3e:f8:84:18:bc:e7:12: 7f:b3:fe:e6:b6:50:20:38:bc:b5:55:98:a4:bd:57:21:dc:9a: 85:a7:74:c0:bf:bf:db:cc:96:e9:de:df:78:d3:71:ee:9d:ff: 17:6f:bc:14:f9:1d:0d:6a:a4:07:d8:9d:4b:f5:95:6d:e9:3d: c3:20:b0:98:11:bb:97:22:f8:e3:5a:8e:17:20:28:46:66:d4: d6:b3:21:e5:2f:02:ba:dc:57:4e:73:b7:a1:01:7e:8d:b4:a3: ca:fe:64:e8:b1:b8:85:41:d9:bf:79:87:0f:f9:bd:c3:37:30: 13:f3:87:14:af:fb:5d:63:7b:bd:72:a9:f9:b6:d1:67:7b:0b: f3:5f:96:fd:fa:b6:4b:26:7d:67:5c:2b:0d:85:1b:6f:32:64: f7:11:4b:9b:43:a5:16:39:99:9c:7e:79:ae:e6:41:3c:6a:f8: c6:4d:2e:aa:e6:e0:6a:4e:1a:8f:3a:7d:27:49:3e:65:5e:d6: db:90:9f:d2:b1:1f:cd:7d:27:c3:42:9d:e0:65:26:e5:be:84: 75:1b:c8:52:92:b0:16:c9:06:ed:c2:4d:49:c0:87:3e:88:62: 49:66:f3:cf:ef:3a:99:1b:0b:d9:c2:d2:4b:d3:1e:f3:df:d4: fa:c3:3d:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QzExMTAvBgNVBAUTKEQ4QzFDQzhBNDYzQTMxNTBDQkVDMDg2NTRFNjE3ODAw RDY2RTUzRTkwHhcNMjYwMzI2MjE0OTU5WhcNMjYwNDAyMjE0OTU5WjAYMRYwFAYD VQQDEw02OWM1YWEwNy1jNDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KaQFFAN1+aHOyUEJrvdhlFWqLJRtTYh94oP7fcfEbst/gVgGIJLLXvrkPY4 e8JVoLbKzLpQYMP+0GuZWjoC355S4Xp4nTe0BaMmkvRHJKQ3v9SI8IdbxChSMs8V XR/cb4i3UTeQjIdqDQkxXQMg5XxXb/4d/yHKnIby2UImCj2VxyqxtmmDw4JeL3ab IxJgcFhRbnPUXdnCmrJUVQZCy8Jof2frl244WfSpxu21B9h7QN78+cxqbAkQ140X Cguo3gvagKPjYETZbtvttMJrZiiMvZwybfu7aVKkiKkKKMhbee0E6JVOzPj4bs65 HUFWhFoOy3d7Tdoe6fFJltOLGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCBEv171 kOoP/ieb4w7hCEFfXOYKMB8GA1UdIwQYMBaAFNjBzIpGOjFQy+wIZU5heADWblPp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlDMS8wQTNGMjY5Qzgw ODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1WREw3QWhsVG1GNEFOWnVV LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJNSE1pa1k2TVZETDdBaGxUbUY0QU5adVUtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlDMS8wQTNGMjY5QzgwODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1W REw3QWhsVG1GNEFOWnVVLWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb6Xw/cpLK7zOROU++IQYvOcSf7P+5rZQIDi8tVWYpL1XIdyahad0wL+/28yW 6d7feNNx7p3/F2+8FPkdDWqkB9idS/WVbek9wyCwmBG7lyL441qOFyAoRmbU1rMh 5S8CutxXTnO3oQF+jbSjyv5k6LG4hUHZv3mHD/m9wzcwE/OHFK/7XWN7vXKp+bbR Z3sL81+W/fq2SyZ9Z1wrDYUbbzJk9xFLm0OlFjmZnH55ruZBPGr4xk0uqubgak4a jzp9J0k+ZV7W25Cf0rEfzX0nw0Kd4GUm5b6EdRvIUpKwFskG7cJNScCHPohiSWbz z+86mRsL2cLSS9Me89/U+sM90g== -----END CERTIFICATE-----Generated at Fri Mar 27 06:25:57 2026 by rpki-client