$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft File: N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json) Hash identifier: tQaq9Zo+cb1is6b8dnrOBWKQBvso4kkwDg/v9+u2adA= Subject key identifier: 81:9C:BC:0A:DC:D5:AA:D5:15:22:E9:95:8F:66:7F:C0:7F:AD:27:AB Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Certificate serial: 02D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft Manifest number: 02BF Signing time: Fri 27 Mar 2026 01:12:41 +0000 Manifest this update: Fri 27 Mar 2026 01:12:40 +0000 Manifest next update: Fri 03 Apr 2026 01:12:40 +0000 Files and hashes: 1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: hPu0bVeL/pX+wlHDJz76kozl9Dblp3qr4bxzeJprboc=) 2: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: yGk/vqcwYlqrGgMj3fbRLifOH/23m2bl0HS4VWGoMYs=) 3: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: N8hOIX9lBnkWNR17KITPRqZldmiFlqdcpwwzsFLdg0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 01:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 728 (0x2d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Validity Not Before: Mar 27 01:12:40 2026 GMT Not After : Apr 3 01:12:40 2026 GMT Subject: CN=69c5d989-4695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:78:38:ce:ec:ca:16:d8:8b:9f:48:89:70:f0: d2:08:15:bb:e9:5d:d3:46:54:a2:a2:d8:78:80:70: de:7f:e8:f2:c0:c0:8e:75:0f:c6:06:c9:f5:d7:9a: 29:dc:bd:82:b3:31:82:b0:cc:b1:68:22:e3:3c:9d: ea:51:61:0f:5a:9d:3a:2c:60:74:b8:4e:be:b1:5d: 75:dd:b4:c1:bd:5a:ac:a1:fb:16:bf:dc:7c:4c:4f: aa:89:b6:1f:4c:ae:15:4b:fe:84:9d:5b:b5:48:78: 60:d5:fd:0f:9d:e3:92:8d:0c:58:cc:a8:cd:2d:43: 81:fd:07:13:90:a0:85:3b:4c:08:54:3b:08:47:d0: 0a:3b:82:38:29:2e:2f:0a:fa:fa:1d:2e:85:e7:e8: 87:c7:35:59:de:0c:f2:be:46:55:4b:ac:bd:c8:d3: db:c9:3d:b8:ac:d5:16:ae:cf:56:ec:4d:d2:07:b5: 38:55:85:c7:cf:87:60:08:1c:2d:06:37:b1:15:34: e4:b4:a8:a7:5e:72:40:ee:cf:f4:c7:13:e7:04:17: 97:0a:b1:0a:de:e1:38:8f:67:ad:e3:78:3c:4f:14: 7e:26:0b:d3:bc:54:fd:01:8a:06:c9:e9:63:7c:00: 4e:b2:ab:13:22:b8:f3:38:83:38:89:ec:52:c0:00: 1f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9C:BC:0A:DC:D5:AA:D5:15:22:E9:95:8F:66:7F:C0:7F:AD:27:AB X509v3 Authority Key Identifier: keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:19:60:d6:3a:4f:47:77:19:dc:56:ae:0f:ab:41:b9:8e:74: 4a:6e:8e:61:a1:c2:92:25:e7:e8:b9:a6:65:5c:e6:6c:15:9f: 16:67:7c:dd:0f:d8:6a:31:76:9b:69:52:7a:b7:8a:9d:75:52: 06:da:ec:72:4b:bd:dd:ee:4f:d0:f0:03:02:6d:82:46:2c:87: 93:e8:34:24:db:96:30:09:62:d5:11:71:58:2f:77:d5:f2:4e: e3:bd:31:31:9d:a1:98:3b:de:b8:16:eb:84:b5:55:fe:45:7b: d5:13:8d:70:a7:c4:af:97:42:c2:9b:d8:ed:c9:b1:bf:d2:41: 61:2a:58:85:49:25:48:42:44:36:6e:a2:ce:21:f7:e5:04:46: fa:dd:27:ef:f8:b5:53:8c:94:e9:88:37:c2:3f:3d:ee:e5:7c: b5:3d:88:50:a0:1d:a0:0c:88:f1:32:bf:33:ca:99:c7:c6:ee: bb:91:57:ce:93:aa:89:c0:a7:75:b9:0e:ca:90:f5:26:11:c1: 0d:01:e8:c1:82:90:76:da:ed:6e:f6:60:cb:82:15:e0:93:98: 11:54:c9:bf:35:20:e1:5d:99:f9:8a:28:dc:f1:be:dd:74:cd: 2d:fb:30:8f:14:ca:a4:d1:ae:04:e1:7a:33:1d:d3:c1:dd:44: f7:f4:c1:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0N0YxMTAvBgNVBAUTKDM3NjAzREIyRTA3MkMwQThGRDcxMTM4RTI1NDA5OUY0 Q0FEOEMxNkYwHhcNMjYwMzI3MDExMjQwWhcNMjYwNDAzMDExMjQwWjAYMRYwFAYD VQQDEw02OWM1ZDk4OS00Njk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13g4zuzKFtiLn0iJcPDSCBW76V3TRlSioth4gHDef+jywMCOdQ/GBsn115op 3L2CszGCsMyxaCLjPJ3qUWEPWp06LGB0uE6+sV113bTBvVqsofsWv9x8TE+qibYf TK4VS/6EnVu1SHhg1f0PneOSjQxYzKjNLUOB/QcTkKCFO0wIVDsIR9AKO4I4KS4v Cvr6HS6F5+iHxzVZ3gzyvkZVS6y9yNPbyT24rNUWrs9W7E3SB7U4VYXHz4dgCBwt BjexFTTktKinXnJA7s/0xxPnBBeXCrEK3uE4j2et43g8TxR+JgvTvFT9AYoGyelj fABOsqsTIrjzOIM4iexSwAAfUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIGcvArc 1arVFSLplY9mf8B/rSerMB8GA1UdIwQYMBaAFDdgPbLgcsCo/XETjiVAmfTK2MFv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDQ3Ri9ENUNFNjI2QTM0 NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdLajljUk9PSlVDWjlNcll3 VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yQTlzdUJ5d0tqOWNST09KVUNaOU1yWXdXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDQ3Ri9ENUNFNjI2QTM0NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdL ajljUk9PSlVDWjlNcll3VzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyhlg1jpPR3cZ3FauD6tBuY50Sm6OYaHCkiXn6LmmZVzmbBWfFmd83Q/YajF2 m2lSereKnXVSBtrscku93e5P0PADAm2CRiyHk+g0JNuWMAli1RFxWC931fJO470x MZ2hmDveuBbrhLVV/kV71RONcKfEr5dCwpvY7cmxv9JBYSpYhUklSEJENm6iziH3 5QRG+t0n7/i1U4yU6Yg3wj897uV8tT2IUKAdoAyI8TK/M8qZx8buu5FXzpOqicCn dbkOypD1JhHBDQHowYKQdtrtbvZgy4IV4JOYEVTJvzUg4V2Z+Yoo3PG+3XTNLfsw jxTKpNGuBOF6Mx3Twd1E9/TBJQ== -----END CERTIFICATE-----Generated at Sat Mar 28 10:42:14 2026 by rpki-client