$ rpki-client -vvf rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft File: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft (raw, json) Hash identifier: 6ymJYHERSn6l7ArS4vLWSUZE85TXzF1uLSnLQLsDfYE= Subject key identifier: 87:29:41:BB:E1:E5:9F:A3:90:D2:2B:E5:0F:7E:3D:5D:E1:43:07:7C Authority key identifier: D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 Certificate issuer: /CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft Manifest number: 013A Signing time: Sun 01 Mar 2026 06:25:15 +0000 Manifest this update: Sun 01 Mar 2026 06:25:15 +0000 Manifest next update: Sun 08 Mar 2026 06:25:15 +0000 Files and hashes: 1: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl (hash: 61nksIELRAd2ul/l4uUttzb9pGYe+sdTj0PTjeZjw+I=) 2: 40BC278038EB11EF9AD66E7FC4F9AE02.roa (hash: r+E4tv3uimhBOzrNZaN5fn8Ync8wrwOD2GgwaX3Fu0A=) 3: 5E9461285DB711EF8AB66F0EC4F9AE02.roa (hash: CBgoWvrmHvyFdXC0BLyQHHm9awpAM5FPWyknUbzVkgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91610DD, serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Validity Not Before: Mar 1 06:25:15 2026 GMT Not After : Mar 8 06:25:15 2026 GMT Subject: CN=69a3dbcb-ae73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e4:7b:6f:dd:ca:c2:51:4a:a5:5a:e6:54:a8: 2a:d3:ee:8e:9a:8b:c3:99:2a:ce:f0:69:62:88:e9: 76:3b:b7:92:3a:90:f3:af:3f:ba:25:67:75:c8:dd: 6d:39:06:9f:74:43:a1:9c:e3:83:7e:0b:27:6a:19: f7:b8:04:eb:88:01:df:58:ed:09:73:a5:c9:3c:69: a2:d0:95:07:c1:69:d4:65:65:f1:44:e2:95:f7:37: ff:79:e2:6c:6f:85:7c:cf:f3:c7:92:68:e5:08:c8: 3a:a6:3c:c8:5e:79:64:29:33:83:cf:b1:d9:6d:c0: f5:e6:fa:44:aa:12:1a:34:19:2a:17:57:b2:88:7b: fb:04:a9:9a:8c:31:94:2f:f8:24:c0:1c:1c:e2:44: 02:20:90:ce:49:6f:d5:eb:c5:9b:f3:51:df:1f:c9: 6f:0f:8c:d9:4f:3a:2a:96:5d:11:fa:eb:5c:06:e5: ee:23:b4:3f:a5:53:d2:21:71:23:ae:9b:fe:de:84: 16:aa:72:4a:a1:9f:79:28:8a:31:d2:f2:40:b3:3f: 29:d5:61:bf:4d:6e:40:90:f0:46:6f:ad:4f:cb:d9: be:ff:8e:8d:d2:2d:18:e7:91:6e:1e:52:84:20:a1: 4b:67:6c:22:99:8c:a7:43:5f:31:95:6d:35:11:ae: bc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:29:41:BB:E1:E5:9F:A3:90:D2:2B:E5:0F:7E:3D:5D:E1:43:07:7C X509v3 Authority Key Identifier: keyid:D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:fc:d7:65:90:59:88:65:25:3d:f9:f2:31:36:07:63:eb:cc: b3:26:f5:28:8f:34:e1:96:68:65:50:74:45:2e:3d:93:24:46: 57:aa:04:c9:de:83:d7:c6:20:a7:60:68:c3:b3:c2:38:d0:c8: ad:d1:09:24:b9:3e:1a:05:c0:5c:1f:e7:d7:f0:9f:64:92:cf: 7c:f5:d2:28:68:5a:4d:84:f9:8b:2d:54:8a:0d:2b:45:a9:1a: 48:41:d1:26:2b:fe:a2:03:b4:20:c3:b5:99:1d:33:31:dd:c6: 03:21:42:62:12:90:42:82:38:b6:21:e5:f8:4f:5f:3f:e0:f0: f7:dd:11:1e:4e:e0:4a:bc:08:53:5f:11:b1:8d:ca:4a:57:20: 8b:fa:2e:8c:a2:c5:53:68:99:05:04:14:f3:9d:51:0e:22:06: 27:74:40:e0:b2:2b:3c:7c:04:92:9b:f4:a0:d2:98:cf:b4:82: f0:85:c9:4e:e7:b5:48:57:b7:fb:1a:e7:78:50:dd:e9:eb:38: f0:d5:52:2e:0e:9e:ca:62:26:11:d6:54:18:60:69:22:cf:4f: bc:c1:ff:73:91:1f:15:73:94:b9:de:4d:20:4e:97:66:53:be: 22:8b:bc:c9:1e:d0:bd:a7:c4:9b:65:2c:9d:b7:d2:b8:7a:7b: c2:5e:ab:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwREQxMTAvBgNVBAUTKEQ4QkQ2NzY1MTgzNjYwMzRCODg4ODQ4QjNCNTcxOEZB OTA3MEUxOTIwHhcNMjYwMzAxMDYyNTE1WhcNMjYwMzA4MDYyNTE1WjAYMRYwFAYD VQQDEw02OWEzZGJjYi1hZTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoOR7b93KwlFKpVrmVKgq0+6OmovDmSrO8GliiOl2O7eSOpDzrz+6JWd1yN1t OQafdEOhnOODfgsnahn3uATriAHfWO0Jc6XJPGmi0JUHwWnUZWXxROKV9zf/eeJs b4V8z/PHkmjlCMg6pjzIXnlkKTODz7HZbcD15vpEqhIaNBkqF1eyiHv7BKmajDGU L/gkwBwc4kQCIJDOSW/V68Wb81HfH8lvD4zZTzoqll0R+utcBuXuI7Q/pVPSIXEj rpv+3oQWqnJKoZ95KIox0vJAsz8p1WG/TW5AkPBGb61Py9m+/46N0i0Y55FuHlKE IKFLZ2wimYynQ18xlW01Ea68WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIcpQbvh 5Z+jkNIr5Q9+PV3hQwd8MB8GA1UdIwQYMBaAFNi9Z2UYNmA0uIiEiztXGPqQcOGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTBERC82NTYzMjRGNDM4 RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllEUzRpSVNMTzFjWS1wQnc0 WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMMW5aUmcyWURTNGlJU0xPMWNZLXBCdzRaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTBERC82NTYzMjRGNDM4RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllE UzRpSVNMTzFjWS1wQnc0WkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUvzXZZBZiGUlPfnyMTYHY+vMsyb1KI804ZZoZVB0RS49kyRGV6oEyd6D18Yg p2Bow7PCONDIrdEJJLk+GgXAXB/n1/CfZJLPfPXSKGhaTYT5iy1Uig0rRakaSEHR Jiv+ogO0IMO1mR0zMd3GAyFCYhKQQoI4tiHl+E9fP+Dw990RHk7gSrwIU18RsY3K Slcgi/oujKLFU2iZBQQU851RDiIGJ3RA4LIrPHwEkpv0oNKYz7SC8IXJTue1SFe3 +xrneFDd6es48NVSLg6eymImEdZUGGBpIs9PvMH/c5EfFXOUud5NIE6XZlO+Iou8 yR7QvafEm2UsnbfSuHp7wl6rIg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:35:18 2026 by rpki-client