$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft File: Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft (raw, json) Hash identifier: flk1NpHm69vBObtxRo8tW11YcfiVtYJHIZNJeeVmmH0= Subject key identifier: 9C:32:71:47:CC:A1:54:CC:ED:83:CA:2A:1D:97:FC:E0:9B:E1:2E:34 Authority key identifier: 37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 Certificate issuer: /CN=A91142EA/serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft Manifest number: 2067 Signing time: Mon 02 Mar 2026 01:43:11 +0000 Manifest this update: Mon 02 Mar 2026 01:43:09 +0000 Manifest next update: Mon 09 Mar 2026 01:43:09 +0000 Files and hashes: 1: Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl (hash: xe/yYFX4mR3v70dU/GC5U1vHLtoB4+kqWEnljzZ7I6s=) 2: 9FD12146ED7211ED8A92041CC4F9AE02.roa (hash: twO+avT1bwdOGN+sO1DTxPWxAD5/Gbl/GY9g75HuCDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91142EA, serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Validity Not Before: Mar 2 01:43:09 2026 GMT Not After : Mar 9 01:43:09 2026 GMT Subject: CN=69a4eb2f-4e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e1:32:63:f7:e8:7d:33:29:01:83:67:9b:ce: c6:db:57:0e:24:7f:61:2a:f7:b9:61:04:ca:cf:55: bd:8f:d7:c3:0c:42:54:25:a7:d8:1b:f1:48:a5:79: e7:35:12:58:09:52:b2:d0:44:0f:81:6c:c9:dd:93: d8:b6:88:18:5f:87:b5:71:96:c5:68:e7:51:1c:76: 6f:e6:3c:74:bc:49:8c:5d:f8:4c:d9:96:bb:a2:18: 7c:c7:4c:0c:23:ba:8c:33:c4:00:3d:6a:e6:9c:6d: 18:a2:f7:63:dd:e9:7f:24:4f:71:da:ef:a2:0d:ca: 3f:8b:c6:45:81:09:9a:87:9c:3f:e9:66:ee:d8:10: a5:5f:d7:8c:0a:29:92:bd:d4:b0:11:6e:3b:ae:d1: ee:3f:8c:64:1b:7e:43:99:4c:c0:1f:9b:bb:39:ff: 41:6a:ad:02:11:39:4b:a9:30:f3:23:ef:95:bd:32: 3a:fe:9e:82:a8:83:fa:0b:55:31:46:44:11:d1:d6: 71:43:9b:5f:be:c4:f7:4d:8c:2e:a3:57:84:57:a6: e9:49:22:2b:0a:55:51:76:34:ab:f0:09:61:f9:bc: 15:a2:a1:8b:41:e2:b1:8a:02:85:0e:48:3d:19:b7: 00:de:78:6e:5f:43:77:c8:cf:7b:88:15:38:69:c0: 69:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:32:71:47:CC:A1:54:CC:ED:83:CA:2A:1D:97:FC:E0:9B:E1:2E:34 X509v3 Authority Key Identifier: keyid:37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:96:df:4b:20:ab:6d:72:05:02:c1:dd:9d:bd:af:2e:3b:d1: 62:44:8c:42:9f:57:db:c0:3a:de:5f:79:9a:24:15:5f:08:3e: dd:d9:84:0e:90:1d:33:fc:7f:b6:db:b1:6e:51:29:0c:b0:29: 5d:d9:3e:a1:20:4b:3f:ef:8b:56:94:4a:76:c7:50:7d:2f:f6: 82:82:f4:25:16:c4:ed:b8:92:4f:73:a9:ed:f1:bd:80:a5:c1: de:46:f8:91:9a:1e:85:3f:ee:ae:35:8a:75:3e:9f:f7:8d:20: c2:0d:6a:ad:ba:6a:fc:5a:e8:b0:90:e6:d5:85:f8:45:6c:5f: 55:b9:8f:9f:2f:11:69:67:de:3d:0f:43:e0:c1:dd:8d:fb:bd: 31:51:05:84:0c:c2:1f:33:12:7c:9f:08:c7:f3:c3:39:87:d5: 7b:44:53:19:3c:1f:27:d9:7e:58:cc:01:ae:e2:43:f3:c1:d4: 80:76:b9:f8:22:6f:bb:b4:b3:d1:65:c8:88:4b:1f:61:a2:aa: 9c:3c:c8:65:ad:3a:ef:f3:5e:e7:a3:cb:ee:66:98:e0:06:2b: 12:b2:03:1e:c2:a2:b7:68:cb:1d:45:32:23:2d:6f:5c:38:f7: a9:c7:f1:8a:e8:76:05:7c:0f:19:43:c8:f3:e9:86:88:d5:2f: e2:67:c4:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQyRUExMTAvBgNVBAUTKDM3MkYxQzc3NjFCMUREQzgzMjhDNTBCQUQwRUVFRENE OTlGMkU0RjIwHhcNMjYwMzAyMDE0MzA5WhcNMjYwMzA5MDE0MzA5WjAYMRYwFAYD VQQDEw02OWE0ZWIyZi00ZTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8+EyY/fofTMpAYNnm87G21cOJH9hKve5YQTKz1W9j9fDDEJUJafYG/FIpXnn NRJYCVKy0EQPgWzJ3ZPYtogYX4e1cZbFaOdRHHZv5jx0vEmMXfhM2Za7ohh8x0wM I7qMM8QAPWrmnG0Yovdj3el/JE9x2u+iDco/i8ZFgQmah5w/6Wbu2BClX9eMCimS vdSwEW47rtHuP4xkG35DmUzAH5u7Of9Baq0CETlLqTDzI++VvTI6/p6CqIP6C1Ux RkQR0dZxQ5tfvsT3TYwuo1eEV6bpSSIrClVRdjSr8Alh+bwVoqGLQeKxigKFDkg9 GbcA3nhuX0N3yM97iBU4acBpDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJwycUfM oVTM7YPKKh2X/OCb4S40MB8GA1UdIwQYMBaAFDcvHHdhsd3IMoxQutDu7c2Z8uTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDJFQS9GNTMzMkQ3RTg0 QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9OeThjZDJHeDNjZ3lqRkM2ME83dHpabnk1 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055OGNkMkd4M2NneWpGQzYwTzd0elpueTVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDJFQS9GNTMzMkQ3RTg0QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9OeThjZDJHeDNj Z3lqRkM2ME83dHpabnk1UEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMpbfSyCrbXIFAsHdnb2vLjvRYkSMQp9X28A63l95miQVXwg+3dmEDpAdM/x/ ttuxblEpDLApXdk+oSBLP++LVpRKdsdQfS/2goL0JRbE7biST3Op7fG9gKXB3kb4 kZoehT/urjWKdT6f940gwg1qrbpq/FrosJDm1YX4RWxfVbmPny8RaWfePQ9D4MHd jfu9MVEFhAzCHzMSfJ8Ix/PDOYfVe0RTGTwfJ9l+WMwBruJD88HUgHa5+CJvu7Sz 0WXIiEsfYaKqnDzIZa067/Ne56PL7maY4AYrErIDHsKit2jLHUUyIy1vXDj3qcfx iuh2BXwPGUPI8+mGiNUv4mfEPg== -----END CERTIFICATE-----Generated at Mon Mar 2 09:48:37 2026 by rpki-client