$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft File: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft (raw, json) Hash identifier: xNdLwpN5+UkmQNZ/pqXYLMxdpxfNI2klGMIPk1vnu5g= Subject key identifier: 43:1E:C1:99:D4:56:DE:64:7C:C7:4A:05:05:D2:B8:23:DD:9C:B7:05 Authority key identifier: D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1 Certificate issuer: /CN=A91A5ED2/serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft Manifest number: 98 Signing time: Mon 02 Mar 2026 02:43:23 +0000 Manifest this update: Mon 02 Mar 2026 02:43:22 +0000 Manifest next update: Mon 09 Mar 2026 02:43:22 +0000 Files and hashes: 1: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl (hash: ujGC1Q3+kiNkZ38CUyawyyo+hOMujJj/0fpjVTsZ+KQ=) 2: 5A9C0D58311C11F0B91A2E64C4F9AE02.roa (hash: EOyR31nb50n9WnNlb3rcrt1TfJ23uFl543E7Owa7HQI=) 3: 7C0B5320D61411F0877B8D3FC4F9AE02.roa (hash: KpQfxiJyvIICVPsdtuLBwSdbonk+CBS6pnKnS4H/dIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5ED2, serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1 Validity Not Before: Mar 2 02:43:22 2026 GMT Not After : Mar 9 02:43:22 2026 GMT Subject: CN=69a4f94b-6668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:88:43:63:0e:c5:4d:a4:f9:b5:1a:50:c4:90: d6:bf:6e:30:6a:77:3f:ac:47:05:05:25:1a:b2:8c: 66:f6:d8:25:7e:0d:7f:2f:9f:b5:25:79:39:a0:b9: 9d:73:59:65:b2:b9:16:9e:07:1e:af:99:ed:f7:a8: a4:9c:65:57:69:a6:9d:fa:58:99:5f:e4:68:97:ca: 76:99:5e:36:60:99:3b:e1:9e:38:fc:98:a8:4f:ab: 1c:74:8b:71:dc:81:50:29:db:dc:aa:e6:de:a8:25: 38:19:2b:c0:1c:4b:d2:5e:8d:48:f6:ca:ba:19:09: 5b:55:44:16:e7:c1:b0:ef:07:df:99:d0:93:65:2c: 79:27:ee:f6:c2:f4:46:71:b9:93:d8:31:32:22:69: 18:11:8b:05:42:98:75:82:49:c2:56:35:03:0c:a2: f1:3d:47:26:4c:2f:86:f5:c4:e1:e3:ca:4f:77:30: 5d:a1:d8:a1:dd:5e:77:31:90:f1:19:51:fd:17:1f: 4c:98:06:80:e7:b6:f0:7d:87:d3:cc:cd:c3:54:27: 5d:c0:d0:a0:4e:0d:25:44:88:e1:61:58:37:29:5f: 68:62:32:25:fd:b0:17:7c:bf:7e:b5:ae:59:25:95: 5f:c5:24:2b:4c:61:22:48:cf:84:87:e2:2e:d0:33: 1d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1E:C1:99:D4:56:DE:64:7C:C7:4A:05:05:D2:B8:23:DD:9C:B7:05 X509v3 Authority Key Identifier: keyid:D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:e1:16:c2:f3:36:6e:de:0a:7a:f1:cc:c6:7a:8b:e3:86:b7: 3e:45:9b:92:b2:b1:c0:8d:25:f0:65:7e:81:90:db:4e:98:c9: 3e:2a:5d:a5:25:d6:d4:93:50:c9:c3:96:fe:f5:db:0a:bc:eb: a7:01:cc:db:26:05:3e:99:8b:4b:5d:5b:f9:2b:a5:0a:6b:83: 80:22:42:3c:93:ae:fc:40:41:43:b4:ce:ac:74:fd:1a:68:ca: 55:ca:6f:4f:ac:f1:32:93:43:b7:ef:e6:58:3f:d7:ca:00:b5: 96:e7:23:a9:11:37:1e:5c:70:55:a5:ff:d5:3b:24:04:ec:dd: c9:3c:cd:32:8a:f8:3e:80:5a:e0:9d:28:f0:8a:96:53:06:a4: 82:de:a5:82:76:fc:f6:95:7e:84:de:87:56:12:64:29:aa:71: 6c:08:b5:88:05:73:3b:4d:f0:ea:ea:52:f1:0e:09:dc:0a:35: 6e:84:1b:0f:26:91:bf:ec:8a:ee:da:aa:9d:32:9f:b6:20:aa: 0d:03:9d:3d:5e:dc:32:07:50:26:3d:a8:64:8e:15:9f:ea:49: 40:4f:70:56:cc:5e:5d:6f:26:f6:01:e0:b6:0e:f8:07:30:4e: d8:65:77:a4:9f:0b:68:50:ea:c6:9a:6b:1f:78:0d:06:5f:87: e2:a0:2d:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFRDIxMTAvBgNVBAUTKEQ5MDRENTUyQzBFRjMyRjI0OUFCQTQ1OTdCRDg0QTE1 RUU1NTU1QzEwHhcNMjYwMzAyMDI0MzIyWhcNMjYwMzA5MDI0MzIyWjAYMRYwFAYD VQQDEw02OWE0Zjk0Yi02NjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IhDYw7FTaT5tRpQxJDWv24wanc/rEcFBSUasoxm9tglfg1/L5+1JXk5oLmd c1llsrkWngcer5nt96iknGVXaaad+liZX+Rol8p2mV42YJk74Z44/JioT6scdItx 3IFQKdvcqubeqCU4GSvAHEvSXo1I9sq6GQlbVUQW58Gw7wffmdCTZSx5J+72wvRG cbmT2DEyImkYEYsFQph1gknCVjUDDKLxPUcmTC+G9cTh48pPdzBdodih3V53MZDx GVH9Fx9MmAaA57bwfYfTzM3DVCddwNCgTg0lRIjhYVg3KV9oYjIl/bAXfL9+ta5Z JZVfxSQrTGEiSM+Eh+Iu0DMdiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEMewZnU Vt5kfMdKBQXSuCPdnLcFMB8GA1UdIwQYMBaAFNkE1VLA7zLySaukWXvYShXuVVXB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUVEMi9GMjQ1QjJENjMx MUIxMUYwQTJGNTExNjBDNEY5QUUwMi8yUVRWVXNEdk12SkpxNlJaZTloS0ZlNVZW Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJRVFZVc0R2TXZKSnE2UlplOWhLRmU1VlZjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUVEMi9GMjQ1QjJENjMxMUIxMUYwQTJGNTExNjBDNEY5QUUwMi8yUVRWVXNEdk12 SkpxNlJaZTloS0ZlNVZWY0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIeEWwvM2bt4KevHMxnqL44a3PkWbkrKxwI0l8GV+gZDbTpjJPipdpSXW1JNQ ycOW/vXbCrzrpwHM2yYFPpmLS11b+SulCmuDgCJCPJOu/EBBQ7TOrHT9GmjKVcpv T6zxMpNDt+/mWD/XygC1lucjqRE3HlxwVaX/1TskBOzdyTzNMor4PoBa4J0o8IqW Uwakgt6lgnb89pV+hN6HVhJkKapxbAi1iAVzO03w6upS8Q4J3Ao1boQbDyaRv+yK 7tqqnTKftiCqDQOdPV7cMgdQJj2oZI4Vn+pJQE9wVsxeXW8m9gHgtg74BzBO2GV3 pJ8LaFDqxpprH3gNBl+H4qAtbw== -----END CERTIFICATE-----Generated at Mon Mar 2 09:14:59 2026 by rpki-client