$ rpki-client -vvf rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft File: M2YXmy18l7gmb5tDGASoxtLQkOs.mft (raw, json) Hash identifier: 5vAZEIbFNVfDb0XaHq55d8kOwRkhhJ84VfdjS8KZGpQ= Subject key identifier: 5F:49:C7:12:DF:FF:CF:C9:31:AE:BF:A7:FB:5E:21:DF:48:0D:DE:5C Authority key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB Certificate issuer: /CN=A91852AB/serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft Manifest number: 0235 Signing time: Sun 01 Mar 2026 03:19:57 +0000 Manifest this update: Sun 01 Mar 2026 03:19:57 +0000 Manifest next update: Sun 08 Mar 2026 03:19:57 +0000 Files and hashes: 1: M2YXmy18l7gmb5tDGASoxtLQkOs.crl (hash: XSzvitxKABi7at2p00iNCLAqVPYyEXXbFQUX+lK+QG8=) 2: E90A311AB8BE11ED83994B4AC4F9AE02.roa (hash: I8QRLy7bWP4fbAGVj59B+J8khscdNsGKDUZD21ickSM=) 3: B6522520CA6311F09583DE23C4F9AE02.roa (hash: 1YhygoOSmbNE2xaBfUv9pbWbrWh51R4fOwDAgWkQlyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852AB, serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Validity Not Before: Mar 1 03:19:57 2026 GMT Not After : Mar 8 03:19:57 2026 GMT Subject: CN=69a3b05d-864b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:58:44:be:08:1d:5d:eb:02:18:0a:19:30:18: 1a:d6:27:0b:06:25:50:85:c2:89:05:65:1f:29:c2: 6d:21:6a:8d:78:8e:ec:6e:06:f8:b9:41:89:c8:88: b6:b3:23:20:80:13:d8:fe:04:4e:c8:4d:d0:11:94: 1e:9c:ce:9a:ab:7b:d5:58:1b:00:a7:aa:11:3a:98: e7:a0:e6:67:f8:1f:51:30:5c:f5:84:b2:2a:de:0f: db:85:65:f5:28:a1:4d:b0:dd:68:c9:de:2a:05:ab: e1:0d:f9:ee:7f:01:a1:b0:fc:43:4d:c1:8d:ae:70: dc:bf:f6:e3:dd:c4:8f:f3:87:c9:3d:d6:4b:32:1b: a4:f5:8a:9d:b6:56:c1:f1:68:f6:8f:e5:10:3e:eb: 0b:5d:a0:da:a5:bd:b9:9c:89:c1:60:92:b5:79:75: 11:3a:ed:da:f1:29:51:41:a9:f2:20:a4:00:ca:d1: c0:ee:1e:44:58:b7:6b:3c:86:f6:97:18:a2:49:da: f3:6a:cf:5e:d5:21:a0:28:40:74:75:6c:05:26:9c: cd:1d:11:09:f9:ce:36:ee:e3:ca:c6:b3:da:31:63: c4:f8:99:a1:c9:3d:37:b6:d5:f0:2b:df:f3:3a:90: bf:a4:a1:44:1b:7e:5c:a7:ad:99:3f:cf:f7:7e:dc: cb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:49:C7:12:DF:FF:CF:C9:31:AE:BF:A7:FB:5E:21:DF:48:0D:DE:5C X509v3 Authority Key Identifier: keyid:33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:3a:2f:db:cf:0a:37:b0:32:63:21:68:0e:26:aa:fa:d2:0b: 34:3f:6d:15:f5:61:59:ac:46:8e:04:62:0a:2d:57:9f:ea:a2: 02:af:87:c4:85:e4:7f:9d:76:3b:82:4c:c6:53:02:99:92:12: f1:73:1a:13:cc:5d:b2:30:ef:1e:47:7b:03:ad:21:ff:28:5d: c5:76:72:87:30:94:1e:44:c8:8a:48:6d:9d:e3:75:96:75:12: c7:f6:a9:e5:be:50:d9:36:36:a8:7d:45:ca:09:8c:12:d1:52: 2b:fa:8f:0b:85:77:e4:59:13:37:7f:2c:3b:b8:1d:45:fd:a1: 8f:6a:03:22:4a:64:5a:b5:40:66:f1:79:f7:08:5c:62:d8:55: 1e:3f:21:15:0c:8a:be:f9:b9:38:de:35:df:3a:33:76:08:3f: 6a:90:4c:ef:26:76:e2:4a:d1:79:7c:58:6b:dd:57:de:24:8f: ec:a6:e0:ec:cb:6c:d5:f0:88:69:08:7c:b1:28:08:85:9c:33: a4:f3:63:45:9c:c4:34:e8:09:1f:0c:1a:c0:68:1c:9f:66:e6: 14:dd:41:2f:b7:58:0a:a8:52:ea:bf:6a:3e:3c:67:52:f7:dd: 33:cf:d1:5b:42:eb:d3:6f:af:80:7c:47:e7:53:fa:b4:0f:d3: 5f:a3:78:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQUIxMTAvBgNVBAUTKDMzNjYxNzlCMkQ3Qzk3QjgyNjZGOUI0MzE4MDRBOEM2 RDJEMDkwRUIwHhcNMjYwMzAxMDMxOTU3WhcNMjYwMzA4MDMxOTU3WjAYMRYwFAYD VQQDDA02OWEzYjA1ZC04NjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFhEvggdXesCGAoZMBga1icLBiVQhcKJBWUfKcJtIWqNeI7sbgb4uUGJyIi2 syMggBPY/gROyE3QEZQenM6aq3vVWBsAp6oROpjnoOZn+B9RMFz1hLIq3g/bhWX1 KKFNsN1oyd4qBavhDfnufwGhsPxDTcGNrnDcv/bj3cSP84fJPdZLMhuk9YqdtlbB 8Wj2j+UQPusLXaDapb25nInBYJK1eXUROu3a8SlRQanyIKQAytHA7h5EWLdrPIb2 lxiiSdrzas9e1SGgKEB0dWwFJpzNHREJ+c427uPKxrPaMWPE+JmhyT03ttXwK9/z OpC/pKFEG35cp62ZP8/3ftzLgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF9JxxLf /8/JMa6/p/teId9IDd5cMB8GA1UdIwQYMBaAFDNmF5stfJe4Jm+bQxgEqMbS0JDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJBQi8yQjk5ODU0RUI4 QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3Z21iNXRER0FTb3h0TFFr T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yWVhteTE4bDdnbWI1dERHQVNveHRMUWtPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTJBQi8yQjk5ODU0RUI4QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3 Z21iNXRER0FTb3h0TFFrT3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArzov288KN7AyYyFoDiaq+tILND9tFfVhWaxGjgRiCi1Xn+qiAq+HxIXkf512 O4JMxlMCmZIS8XMaE8xdsjDvHkd7A60h/yhdxXZyhzCUHkTIikhtneN1lnUSx/ap 5b5Q2TY2qH1FygmMEtFSK/qPC4V35FkTN38sO7gdRf2hj2oDIkpkWrVAZvF59whc YthVHj8hFQyKvvm5ON413zozdgg/apBM7yZ24krReXxYa91X3iSP7Kbg7Mts1fCI aQh8sSgIhZwzpPNjRZzENOgJHwwawGgcn2bmFN1BL7dYCqhS6r9qPjxnUvfdM8/R W0Lr02+vgHxH51P6tA/TX6N4JQ== -----END CERTIFICATE-----Generated at Sun Mar 1 20:29:34 2026 by rpki-client