$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft File: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft (raw, json) Hash identifier: 3OrTE39bLZcwRrkn0YhR49UlcT0mkYolGTLdUbcnMT0= Subject key identifier: 81:9C:94:4E:C0:E9:FB:11:7F:A0:AC:56:17:04:7C:3D:9A:F6:26:07 Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B Certificate issuer: /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft Manifest number: 0125 Signing time: Sun 01 Mar 2026 06:38:42 +0000 Manifest this update: Sun 01 Mar 2026 06:38:41 +0000 Manifest next update: Sun 08 Mar 2026 06:38:41 +0000 Files and hashes: 1: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl (hash: jfEHTw9csRp4mey6+S5ZY8x9rABz3id0kplKNupNf98=) 2: F6382C7A56EC11EF85879C50C4F9AE02.roa (hash: yG8pJzZvCKmicDw0dwhTP12v3DvDJugGeiv6wIDOe9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Validity Not Before: Mar 1 06:38:41 2026 GMT Not After : Mar 8 06:38:41 2026 GMT Subject: CN=69a3def2-ac1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:76:6d:c8:ac:49:df:ef:b8:a7:72:53:0f:05: 3a:70:40:c3:f8:d1:77:f9:95:8d:98:92:d0:9b:fd: d9:2d:e2:da:cc:58:a6:16:41:ad:64:05:3d:f7:c0: 2a:09:4e:c7:3f:65:78:75:77:2b:77:d9:b0:59:12: 9c:9a:87:bc:6b:90:94:57:7c:bd:52:9e:93:02:cb: 85:bf:f6:0b:53:65:bf:1f:97:f6:a8:94:06:ac:45: d1:f8:0d:de:dc:04:a1:5d:24:c9:90:26:77:bc:36: 0f:98:15:37:ed:72:ae:61:bf:f9:bd:25:da:b8:b7: ac:35:f8:64:ba:10:dd:33:ba:a1:48:fb:37:df:e6: a1:cd:c7:ff:b4:d5:03:22:6f:f3:2e:68:b7:dc:1a: 2c:52:63:3c:c5:e9:d4:9f:27:0e:ad:3b:28:6b:e7: 4a:1d:f1:49:a7:1c:e4:02:45:e2:a8:3c:7f:b8:04: 2e:e1:06:40:07:e0:9b:f3:21:b6:1a:98:b0:80:c7: cb:05:12:6e:f1:b5:02:5f:d3:90:0a:3b:37:67:2c: ec:04:ed:61:73:cc:fd:19:3f:cf:11:97:a8:86:f7: 3a:37:04:58:1f:ed:ee:3e:23:1a:7f:eb:d3:cd:e8: 25:7d:18:8b:5b:ec:92:e7:9b:06:56:8b:87:a3:75: 19:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9C:94:4E:C0:E9:FB:11:7F:A0:AC:56:17:04:7C:3D:9A:F6:26:07 X509v3 Authority Key Identifier: keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:ba:35:94:ac:4a:3a:4d:53:72:c6:7e:40:03:c6:3a:26:9f: e8:11:ff:45:2d:a8:a4:51:c1:bd:ca:ab:3d:99:2b:38:90:d0: 3d:7e:8b:bc:0b:70:bf:c7:c4:e1:ac:e5:df:1d:fe:94:6f:34: d1:77:09:76:76:8d:ea:c0:e2:ed:af:65:0d:d1:26:ec:8f:0b: c6:ce:23:01:ee:9d:65:8e:65:da:1e:65:bc:bf:3c:e5:61:aa: e4:b5:1d:d0:03:16:8e:0e:0f:91:7c:ed:eb:97:bf:08:78:dd: 63:e9:bb:c0:11:45:2c:0d:92:21:ec:4e:fd:5b:49:4d:ad:46: 26:45:2d:52:a0:38:2c:04:60:57:88:da:23:7e:8f:5b:72:86: 58:43:d5:4b:0b:b3:99:33:20:1d:4b:f5:2b:a5:dc:e2:c0:34: db:d8:a6:27:a0:72:79:df:03:bb:f9:58:90:3d:67:39:82:0b: 79:29:32:54:8b:d2:51:14:77:e0:46:d0:cc:a0:35:d5:30:b0: 95:8e:b1:92:09:21:64:2f:f8:47:d0:96:c0:2b:99:0e:65:ee: 35:d7:57:f5:ab:3f:6e:ab:42:7a:ee:68:ab:7b:b2:0b:6f:23: 92:aa:02:15:e3:33:02:45:ec:e3:13:e6:5d:67:8b:59:22:d8: 73:93:1b:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVBNTcxMTAvBgNVBAUTKEQ5QzVEODJBQkQzMEZERDIwRkE5Q0FGM0QxRUQ4NjdE QjA3Njk1NkIwHhcNMjYwMzAxMDYzODQxWhcNMjYwMzA4MDYzODQxWjAYMRYwFAYD VQQDEw02OWEzZGVmMi1hYzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHZtyKxJ3++4p3JTDwU6cEDD+NF3+ZWNmJLQm/3ZLeLazFimFkGtZAU998Aq CU7HP2V4dXcrd9mwWRKcmoe8a5CUV3y9Up6TAsuFv/YLU2W/H5f2qJQGrEXR+A3e 3AShXSTJkCZ3vDYPmBU37XKuYb/5vSXauLesNfhkuhDdM7qhSPs33+ahzcf/tNUD Im/zLmi33BosUmM8xenUnycOrTsoa+dKHfFJpxzkAkXiqDx/uAQu4QZAB+Cb8yG2 GpiwgMfLBRJu8bUCX9OQCjs3ZyzsBO1hc8z9GT/PEZeohvc6NwRYH+3uPiMaf+vT zeglfRiLW+yS55sGVouHo3UZiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIGclE7A 6fsRf6CsVhcEfD2a9iYHMB8GA1UdIwQYMBaAFNnF2Cq9MP3SD6nK89Hthn2wdpVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE1Ny82RTc0ODMxMDU2 RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19kSVBxY3J6MGUyR2ZiQjJs V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJjWFlLcjB3X2RJUHFjcnowZTJHZmJCMmxXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUE1Ny82RTc0ODMxMDU2RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19k SVBxY3J6MGUyR2ZiQjJsV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOLo1lKxKOk1TcsZ+QAPGOiaf6BH/RS2opFHBvcqrPZkrOJDQPX6LvAtwv8fE 4azl3x3+lG800XcJdnaN6sDi7a9lDdEm7I8Lxs4jAe6dZY5l2h5lvL885WGq5LUd 0AMWjg4PkXzt65e/CHjdY+m7wBFFLA2SIexO/VtJTa1GJkUtUqA4LARgV4jaI36P W3KGWEPVSwuzmTMgHUv1K6Xc4sA029imJ6Byed8Du/lYkD1nOYILeSkyVIvSURR3 4EbQzKA11TCwlY6xkgkhZC/4R9CWwCuZDmXuNddX9as/bqtCeu5oq3uyC28jkqoC FeMzAkXs4xPmXWeLWSLYc5Mb+g== -----END CERTIFICATE-----Generated at Mon Mar 2 04:05:38 2026 by rpki-client