$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft File: 2spjaZboGaoflR3Gb_Ka0JecBcg.mft (raw, json) Hash identifier: D6E0uCI5eNgtA9U5mNhxUljQaBkowspHEdsURsDtPOY= Subject key identifier: E8:C6:FD:2D:64:45:3F:2D:C4:74:FB:66:EF:BF:6E:3D:2F:26:6F:E1 Authority key identifier: DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 Certificate issuer: /CN=A91A9E0E/serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Certificate serial: 0CBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft Manifest number: 0CA7 Signing time: Mon 02 Mar 2026 02:17:39 +0000 Manifest this update: Mon 02 Mar 2026 02:17:36 +0000 Manifest next update: Mon 09 Mar 2026 02:17:36 +0000 Files and hashes: 1: 2spjaZboGaoflR3Gb_Ka0JecBcg.crl (hash: 0ndg1Z/FP9SisvxxSa5WYEv5etvUmR8XpJ/NLVg2ZNs=) 2: 15FB452EE46E11EABA2FD316C4F9AE02.roa (hash: FkqjDfVUmQMN96zXrlCTi6buAdC6XkNUVbHR27Lovec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3261 (0xcbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E0E, serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Validity Not Before: Mar 2 02:17:36 2026 GMT Not After : Mar 9 02:17:36 2026 GMT Subject: CN=69a4f342-7dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:17:5d:00:d6:dc:0c:e8:02:c1:bf:2b:af:c2: 4e:92:74:f0:32:ee:1f:f1:f3:ce:a1:69:e7:e0:e1: 7e:93:b3:c4:b0:11:e6:86:cf:84:b5:9b:b7:b8:f5: c5:45:51:5c:20:7a:53:09:6d:0e:dd:c8:d5:d4:a7: e0:ec:00:15:1a:a3:39:8f:63:b7:dd:1c:d0:ff:2d: 64:73:d1:76:ae:1f:06:9d:67:28:5b:ff:d0:aa:40: a2:57:fe:b6:45:86:7e:f1:7a:38:9f:03:e9:ce:ca: e8:69:6f:2d:05:df:bc:d4:92:7d:82:57:2b:66:b4: 6c:dd:41:31:08:6b:d9:46:9f:ee:0a:05:ff:4c:f2: 71:33:df:42:9c:8c:ec:90:98:b2:69:ca:95:b9:19: e3:31:f3:4b:89:aa:8d:8e:70:61:44:e8:3b:8f:72: 14:38:61:28:eb:68:bd:77:0b:0e:c2:46:79:42:e1: f0:29:7f:39:96:d8:91:81:71:fa:4f:2c:8e:3b:39: b9:8a:2e:a7:98:f5:3e:29:38:0e:e7:35:d0:dd:eb: b6:5e:11:e6:a1:84:a6:4d:bb:d5:e2:25:28:fe:c9: db:42:e0:be:6e:1c:fd:c9:7a:54:1d:dc:b9:b5:98: b3:0d:a8:10:fd:88:73:5d:59:ae:38:f2:4a:cd:0d: 1e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C6:FD:2D:64:45:3F:2D:C4:74:FB:66:EF:BF:6E:3D:2F:26:6F:E1 X509v3 Authority Key Identifier: keyid:DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:22:fb:b5:77:69:17:ff:b1:a2:b3:c5:ee:d3:cb:cb:e5:34: d0:dc:c3:11:49:8a:8a:2a:2f:09:1d:ae:15:1f:43:77:6e:63: 0a:05:83:26:21:db:46:2a:43:ca:5d:7f:71:24:4f:0e:ca:3b: 27:7b:81:13:06:df:db:56:ea:99:e3:1b:ff:b1:86:0b:0f:dc: 01:39:7a:62:e4:42:0f:0f:02:64:ef:80:e3:82:85:51:6c:e7: 1a:d1:4d:af:f6:eb:80:b5:f3:8d:e8:c9:a0:23:e6:f3:2b:f0: 20:a7:87:9b:d6:f2:dd:a5:c6:29:51:5b:dc:ba:20:48:14:0a: 8d:36:d6:a0:6f:d0:b6:b3:e9:99:55:0e:9a:ce:86:aa:a4:5e: 9d:29:a4:da:8a:c4:be:5e:75:98:a0:c0:17:c3:39:f5:9f:9f: c2:cc:f9:2f:d1:a2:1c:8f:b2:1e:8a:30:31:c5:4f:fd:ac:70: cf:ee:f1:9d:1b:e2:16:94:1d:1e:91:4d:a1:16:83:81:5c:7d: e3:a0:20:33:27:2b:52:d0:42:0f:e0:82:f7:88:fa:10:49:8c: 0a:db:79:3d:ac:84:bf:b7:64:ee:f0:9a:62:a3:51:dd:33:30: b4:07:eb:79:0f:ef:80:e0:a5:14:76:9d:2d:40:96:88:61:83: ef:83:a2:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFMEUxMTAvBgNVBAUTKERBQ0E2MzY5OTZFODE5QUExRjk1MURDNjZGRjI5QUQw OTc5QzA1QzgwHhcNMjYwMzAyMDIxNzM2WhcNMjYwMzA5MDIxNzM2WjAYMRYwFAYD VQQDEw02OWE0ZjM0Mi03ZGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xddANbcDOgCwb8rr8JOknTwMu4f8fPOoWnn4OF+k7PEsBHmhs+EtZu3uPXF RVFcIHpTCW0O3cjV1Kfg7AAVGqM5j2O33RzQ/y1kc9F2rh8GnWcoW//QqkCiV/62 RYZ+8Xo4nwPpzsroaW8tBd+81JJ9glcrZrRs3UExCGvZRp/uCgX/TPJxM99CnIzs kJiyacqVuRnjMfNLiaqNjnBhROg7j3IUOGEo62i9dwsOwkZ5QuHwKX85ltiRgXH6 TyyOOzm5ii6nmPU+KTgO5zXQ3eu2XhHmoYSmTbvV4iUo/snbQuC+bhz9yXpUHdy5 tZizDagQ/YhzXVmuOPJKzQ0eEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOjG/S1k RT8txHT7Zu+/bj0vJm/hMB8GA1UdIwQYMBaAFNrKY2mW6BmqH5Udxm/ymtCXnAXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUUwRS80NzJDMzkyMjEw RUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dhb2ZsUjNHYl9LYTBKZWNC Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzcGphWmJvR2FvZmxSM0diX0thMEplY0JjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUUwRS80NzJDMzkyMjEwRUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dh b2ZsUjNHYl9LYTBKZWNCY2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAciL7tXdpF/+xorPF7tPLy+U00NzDEUmKiiovCR2uFR9Dd25jCgWDJiHbRipD yl1/cSRPDso7J3uBEwbf21bqmeMb/7GGCw/cATl6YuRCDw8CZO+A44KFUWznGtFN r/brgLXzjejJoCPm8yvwIKeHm9by3aXGKVFb3LogSBQKjTbWoG/QtrPpmVUOms6G qqRenSmk2orEvl51mKDAF8M59Z+fwsz5L9GiHI+yHoowMcVP/axwz+7xnRviFpQd HpFNoRaDgVx946AgMycrUtBCD+CC94j6EEmMCtt5PayEv7dk7vCaYqNR3TMwtAfr eQ/vgOClFHadLUCWiGGD74OiqQ== -----END CERTIFICATE-----Generated at Mon Mar 2 15:17:23 2026 by rpki-client