$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft File: 2j9P_11GRonTiYj1-yL2VVCz7_g.mft (raw, json) Hash identifier: cMgP/ifBHUPtIcj8jarIBD7Y8ydfym+j7VVmjb6ouak= Subject key identifier: B9:E4:1C:EF:16:D9:1B:DE:A3:82:64:F9:BA:ED:8A:C3:C4:05:46:89 Authority key identifier: DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 Certificate issuer: /CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Certificate serial: 0517 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft Manifest number: 04F6 Signing time: Mon 02 Mar 2026 01:37:14 +0000 Manifest this update: Mon 02 Mar 2026 01:37:12 +0000 Manifest next update: Mon 09 Mar 2026 01:37:12 +0000 Files and hashes: 1: 2j9P_11GRonTiYj1-yL2VVCz7_g.crl (hash: xZ/2bCGDI/ogu/KORKJ2LezejHEfmLfv7rmpvQVwldg=) 2: 75426BC6A8C511EC8F560C42C4F9AE02.roa (hash: lpBAV9IDwz08sBrEOEJtpXaNOLC2bcll/sSb3pJelkI=) 3: AC63C4A4A62E11ECBDD6843FC4F9AE02.roa (hash: ormMJPG1gPtLW2EAcQsDQkK5zcF+AGy43Ug4aJDV41E=) 4: 952AA4424DAF11EC86ED5273C4F9AE02.roa (hash: WtYZrAE+e3zK4y9KGKdGiWbVW7K/2w3q6znJvP2CBBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1303 (0x517) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FFF, serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Validity Not Before: Mar 2 01:37:12 2026 GMT Not After : Mar 9 01:37:12 2026 GMT Subject: CN=69a4e9c9-1902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:24:31:9d:0c:80:92:e1:d3:e4:7f:d5:a3:86: fa:2d:d3:fd:74:31:31:9f:ef:21:d9:6c:34:62:23: d9:29:d0:65:70:98:22:d3:31:8f:5c:b7:6d:5d:86: 86:13:61:dc:93:5f:85:3b:a1:1c:13:ab:31:cc:e0: df:ef:90:93:d1:5f:82:b8:8e:bc:a1:bf:bd:44:82: 43:1d:66:b2:80:dd:ed:e4:5a:7a:79:60:cd:a6:8e: 44:77:4a:cd:95:f2:6d:6a:3a:49:78:9f:9a:f1:40: 79:58:4d:77:7b:66:6a:bf:bf:12:f9:d6:a0:b3:bc: f9:5f:94:59:de:49:47:4f:8c:4c:1b:4e:43:5c:07: c7:63:bd:78:d6:00:69:f8:d7:8c:4e:c4:a3:e5:f1: 11:3b:d1:21:7f:6b:f8:b4:69:7b:38:27:3e:d9:1c: 71:0f:8b:f7:0c:c1:47:87:6d:b8:1a:90:1d:39:a4: 0e:87:4b:a6:50:2f:ef:15:06:52:19:49:70:9c:3d: 37:c4:51:72:16:c5:60:a3:bc:83:76:a1:6c:33:70: fd:e9:4c:2e:82:94:fb:ca:31:c0:7b:92:da:0a:4e: ce:81:00:4a:63:4a:e4:24:5b:c9:97:4e:10:12:c5: 56:09:ac:c7:03:20:f7:1f:d4:a0:68:9b:9d:42:5e: 3b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E4:1C:EF:16:D9:1B:DE:A3:82:64:F9:BA:ED:8A:C3:C4:05:46:89 X509v3 Authority Key Identifier: keyid:DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:b1:d5:7d:34:8c:58:f6:76:a4:6e:03:c5:da:f8:d4:fc:cb: c1:c2:37:e1:24:15:88:11:ee:56:c5:ec:fd:33:b4:ed:03:6c: de:3d:8b:56:21:5d:41:db:05:7b:30:74:ff:4d:0c:59:f3:4f: ad:0a:bb:0f:1e:74:cd:95:40:a6:62:40:7d:b0:24:8b:62:15: 49:16:a6:8b:f2:cf:2f:ae:36:b4:44:63:ee:32:8e:c4:55:5e: 91:4d:d7:a1:e2:81:6c:fb:93:87:7c:29:13:59:3c:6c:9f:2b: d7:b0:28:72:33:5e:ec:f3:33:eb:da:2d:c3:8d:33:ad:e7:36: 16:cc:3c:f8:25:a5:6c:49:03:7c:50:e0:89:47:65:69:1f:64: 7b:ba:46:ce:b7:96:6e:af:a9:e9:b0:1c:6c:a2:66:65:fb:dd: a8:05:39:65:67:c1:4e:29:41:75:e4:4c:17:6a:c0:d4:63:46: 36:0b:98:8f:35:66:ef:53:36:7f:99:49:02:cd:cf:f5:3a:a4: 34:07:06:ec:b4:d7:35:5d:81:bb:c2:f9:d9:b7:eb:26:a3:27: c8:9a:85:53:19:8b:05:21:7a:ed:b4:76:9e:e3:f2:b1:a1:13: 68:92:23:40:e1:bc:5e:d8:88:22:40:91:f3:1f:8f:2f:6e:4c: af:fe:12:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGRkYxMTAvBgNVBAUTKERBM0Y0RkZGNUQ0NjQ2ODlEMzg5ODhGNUZCMjJGNjU1 NTBCM0VGRjgwHhcNMjYwMzAyMDEzNzEyWhcNMjYwMzA5MDEzNzEyWjAYMRYwFAYD VQQDEw02OWE0ZTljOS0xOTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryQxnQyAkuHT5H/Vo4b6LdP9dDExn+8h2Ww0YiPZKdBlcJgi0zGPXLdtXYaG E2Hck1+FO6EcE6sxzODf75CT0V+CuI68ob+9RIJDHWaygN3t5Fp6eWDNpo5Ed0rN lfJtajpJeJ+a8UB5WE13e2Zqv78S+dags7z5X5RZ3klHT4xMG05DXAfHY7141gBp +NeMTsSj5fERO9Ehf2v4tGl7OCc+2RxxD4v3DMFHh224GpAdOaQOh0umUC/vFQZS GUlwnD03xFFyFsVgo7yDdqFsM3D96UwugpT7yjHAe5LaCk7OgQBKY0rkJFvJl04Q EsVWCazHAyD3H9SgaJudQl47fwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLnkHO8W 2Rveo4Jk+brtisPEBUaJMB8GA1UdIwQYMBaAFNo/T/9dRkaJ04mI9fsi9lVQs+/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZGRi84MkFEMzc3QTRE QUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1JvblRpWWoxLXlMMlZWQ3o3 X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqOVBfMTFHUm9uVGlZajEteUwyVlZDejdfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZGRi84MkFEMzc3QTREQUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1Jv blRpWWoxLXlMMlZWQ3o3X2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkbHVfTSMWPZ2pG4Dxdr41PzLwcI34SQViBHuVsXs/TO07QNs3j2LViFdQdsF ezB0/00MWfNPrQq7Dx50zZVApmJAfbAki2IVSRami/LPL642tERj7jKOxFVekU3X oeKBbPuTh3wpE1k8bJ8r17AocjNe7PMz69otw40zrec2Fsw8+CWlbEkDfFDgiUdl aR9ke7pGzreWbq+p6bAcbKJmZfvdqAU5ZWfBTilBdeRMF2rA1GNGNguYjzVm71M2 f5lJAs3P9TqkNAcG7LTXNV2Bu8L52bfrJqMnyJqFUxmLBSF67bR2nuPysaETaJIj QOG8XtiIIkCR8x+PL25Mr/4SIA== -----END CERTIFICATE-----Generated at Mon Mar 2 03:41:40 2026 by rpki-client