$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft File: N2LeNhaqS6BLeurLVIuGpi5vFw4.mft (raw, json) Hash identifier: Nfurc02w6EjvO6omYJjNg10+ofae8xJQhlbaLgBOQt4= Subject key identifier: DB:2D:2F:42:55:7B:13:70:3E:A6:F3:77:EB:7D:E1:21:FF:3A:8B:6C Authority key identifier: 37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E Certificate issuer: /CN=A91A3660/serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft Manifest number: 14 Signing time: Sun 01 Mar 2026 10:34:15 +0000 Manifest this update: Sun 01 Mar 2026 10:34:15 +0000 Manifest next update: Sun 08 Mar 2026 10:34:15 +0000 Files and hashes: 1: N2LeNhaqS6BLeurLVIuGpi5vFw4.crl (hash: c2z8IKmeS/FUO8/DcfWYVZXBAfeW4TFBpRz0IR/E2XA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3660, serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E Validity Not Before: Mar 1 10:34:15 2026 GMT Not After : Mar 8 10:34:15 2026 GMT Subject: CN=69a41627-7177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:86:4a:c2:61:f4:d8:cc:51:06:cd:3f:34:b8: cf:dc:97:03:00:c2:1a:4b:eb:15:d6:21:89:81:fd: cc:3a:5a:df:2e:07:59:cb:e6:88:9f:58:ea:fb:9f: 9d:2a:9f:b2:ef:7f:cc:62:b8:0b:9b:6f:c7:75:22: 36:40:6c:3b:9a:9f:1a:85:ed:e9:3b:c5:2b:98:eb: 92:e4:0d:bf:91:c1:8c:5a:44:06:10:6f:c0:fb:75: 49:2e:21:39:8c:7b:52:62:79:64:ab:ca:26:fa:91: c5:b4:a1:fd:ea:dc:23:ec:e7:3d:8c:d2:fd:32:65: 90:55:fe:36:66:de:6b:0a:ec:1b:ba:3f:12:6c:62: 50:cc:9a:58:3c:9e:41:d4:81:85:6a:a5:85:7f:02: ab:2f:0a:8f:c1:d6:f3:c2:93:e8:70:ec:b5:20:ff: f0:99:55:f4:06:00:fe:12:a5:ea:2a:44:7f:31:73: 0d:d1:69:37:2d:ef:d8:c7:23:9d:74:ea:cb:3a:f5: 3f:db:12:7d:1f:2e:d7:c6:f0:fb:50:7d:c0:2d:61: 68:68:ad:bc:5f:34:98:44:34:04:0e:42:27:0b:30: f1:2e:05:da:da:6d:03:58:e2:f4:dc:81:79:17:dd: 5b:f8:80:aa:33:62:42:ec:3c:7d:99:0b:20:30:bb: 20:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2D:2F:42:55:7B:13:70:3E:A6:F3:77:EB:7D:E1:21:FF:3A:8B:6C X509v3 Authority Key Identifier: keyid:37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:25:9a:20:cd:11:94:0f:ff:af:24:6b:a5:47:79:bb:a7:49: f3:4e:dc:b8:99:bb:4c:58:85:f6:33:0d:c9:0a:c4:89:46:cf: 02:de:81:8c:67:fb:93:9e:7a:e7:51:ae:70:cc:82:4e:06:c1: ff:9e:09:94:f6:4e:bc:92:bb:f5:8c:e2:70:e6:8b:8f:4f:bb: 87:8e:79:ca:d5:d6:cf:26:15:e2:cb:69:88:e1:8f:fe:44:c2: 6d:ae:a3:85:a2:aa:e5:1d:b5:92:12:11:d4:06:08:b3:e0:23: bf:8a:3d:71:59:7b:82:b5:88:10:6f:44:71:37:60:f1:22:e2: 9b:eb:8c:49:5f:af:c2:fe:85:9b:8e:10:42:1c:4a:6e:ca:0e: 1f:85:74:f6:1d:1b:b7:0a:b3:f7:6e:9e:b3:94:c4:e1:a8:c1: 1c:7a:b1:c8:66:76:a0:9d:6e:75:7b:c0:5f:1f:da:fe:71:0f: 92:f8:74:2b:ba:60:e9:22:dd:7d:cf:2f:21:b5:73:06:d7:2e: 32:2f:c5:0c:13:58:ea:1a:8f:9d:fc:3d:1c:dc:c1:20:06:9f: de:d1:21:72:8a:12:8f:1a:09:7f:a9:4e:cc:a3:fb:97:3f:3d: d0:0c:98:b7:82:12:0e:44:a9:1f:6f:09:d8:db:26:b3:3b:c4: 68:53:3f:60 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MzY2MDExMC8GA1UEBRMoMzc2MkRFMzYxNkFBNEJBMDRCN0FFQUNCNTQ4Qjg2QTYy RTZGMTcwRTAeFw0yNjAzMDExMDM0MTVaFw0yNjAzMDgxMDM0MTVaMBgxFjAUBgNV BAMTDTY5YTQxNjI3LTcxNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD4hkrCYfTYzFEGzT80uM/clwMAwhpL6xXWIYmB/cw6Wt8uB1nL5oifWOr7n50q n7Lvf8xiuAubb8d1IjZAbDuanxqF7ek7xSuY65LkDb+RwYxaRAYQb8D7dUkuITmM e1JieWSryib6kcW0of3q3CPs5z2M0v0yZZBV/jZm3msK7Bu6PxJsYlDMmlg8nkHU gYVqpYV/AqsvCo/B1vPCk+hw7LUg//CZVfQGAP4SpeoqRH8xcw3RaTct79jHI510 6ss69T/bEn0fLtfG8PtQfcAtYWhorbxfNJhENAQOQicLMPEuBdrabQNY4vTcgXkX 3Vv4gKozYkLsPH2ZCyAwuyAHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2y0vQlV7 E3A+pvN3633hIf86i2wwHwYDVR0jBBgwFoAUN2LeNhaqS6BLeurLVIuGpi5vFw4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzNjYwL0RFRTlDNjgwMDAx NjExRjE4QTRDRDk5QTQxNkY1NkJDL04yTGVOaGFxUzZCTGV1ckxWSXVHcGk1dkZ3 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjJMZU5oYXFTNkJMZXVyTFZJdUdwaTV2Rnc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz NjYwL0RFRTlDNjgwMDAxNjExRjE4QTRDRDk5QTQxNkY1NkJDL04yTGVOaGFxUzZC TGV1ckxWSXVHcGk1dkZ3NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCGJZogzRGUD/+vJGulR3m7p0nzTty4mbtMWIX2Mw3JCsSJRs8C3oGMZ/uTnnrn Ua5wzIJOBsH/ngmU9k68krv1jOJw5ouPT7uHjnnK1dbPJhXiy2mI4Y/+RMJtrqOF oqrlHbWSEhHUBgiz4CO/ij1xWXuCtYgQb0RxN2DxIuKb64xJX6/C/oWbjhBCHEpu yg4fhXT2HRu3CrP3bp6zlMThqMEcerHIZnagnW51e8BfH9r+cQ+S+HQrumDpIt19 zy8htXMG1y4yL8UME1jqGo+d/D0c3MEgBp/e0SFyihKPGgl/qU7Mo/uXPz3QDJi3 ghIORKkfbwnY2yazO8RoUz9g -----END CERTIFICATE-----Generated at Mon Mar 2 14:54:27 2026 by rpki-client