$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft File: 2gNU-zgfRSHBCxY-y9IqCD-3omw.mft (raw, json) Hash identifier: unkve++zG84GejTUdV6GuFB8KKYPRKmu7Zq1fDRFT3c= Subject key identifier: 9A:4F:1B:64:25:55:DD:3D:BF:1E:EE:AA:EB:C3:F7:01:6C:61:27:D2 Authority key identifier: DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C Certificate issuer: /CN=A91B2CDA/serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Certificate serial: 1679 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft Manifest number: 1667 Signing time: Mon 02 Mar 2026 01:15:11 +0000 Manifest this update: Mon 02 Mar 2026 01:15:10 +0000 Manifest next update: Mon 09 Mar 2026 01:15:10 +0000 Files and hashes: 1: 2gNU-zgfRSHBCxY-y9IqCD-3omw.crl (hash: 9GZVKj0LchX9qzpk2HftR+BENeKEhfSMCIvoZi4mbGQ=) 2: 7F3ED5DE9C4411ECBD85CE4FC4F9AE02.roa (hash: R5LqOdOqksS9vnhA2t5gWvk4nnnpRsAdMKKtSSAeL3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5753 (0x1679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2CDA, serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Validity Not Before: Mar 2 01:15:10 2026 GMT Not After : Mar 9 01:15:10 2026 GMT Subject: CN=69a4e49f-75bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d3:1b:00:9d:f7:96:12:34:92:6a:45:d7:c8: 26:5d:68:dd:93:91:ab:69:e2:53:89:55:66:49:4a: 72:1a:c1:8e:85:f0:c3:15:80:6b:43:63:fc:ee:d4: c3:3d:81:03:ca:e2:26:b5:d5:87:dc:fd:3d:e3:77: 5d:6c:f1:81:da:00:e6:68:53:62:5e:02:62:de:6d: ce:06:53:b7:c2:75:23:87:93:c5:8d:25:a1:52:c3: da:62:06:dc:ce:52:15:e6:df:ab:28:a2:3b:92:c7: d4:29:d9:84:d0:74:80:87:0f:a6:89:91:08:30:cb: 20:e3:96:b4:c5:4c:01:40:40:09:b4:49:92:5c:c4: bf:c9:7d:08:95:e5:68:03:ba:1f:c2:a7:2f:36:ee: a4:6a:82:90:a3:4b:8c:35:78:34:81:11:4b:f5:f4: 61:6a:43:a0:1a:5d:c3:45:2c:2a:a8:5f:d4:81:06: be:86:29:b5:78:82:33:78:b6:94:b2:13:c2:a8:36: 4f:27:a8:cb:6e:2c:97:60:bc:1d:22:8a:29:19:b5: 68:82:b8:e9:2c:99:8b:d1:21:f9:62:b6:d8:85:ba: 28:3d:1d:7f:99:8a:b0:af:80:79:44:6a:99:a2:0c: 32:07:00:16:94:36:b4:7a:1a:e5:b9:ec:59:e1:a7: f6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4F:1B:64:25:55:DD:3D:BF:1E:EE:AA:EB:C3:F7:01:6C:61:27:D2 X509v3 Authority Key Identifier: keyid:DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:99:f2:ef:9c:6b:61:64:f4:81:a3:67:89:a3:96:f1:7e:29: 9c:fb:72:ef:ac:58:e7:f0:f0:6a:c8:43:b1:97:6b:df:b2:04: 7f:6f:b5:dd:98:f0:a1:c2:73:cd:a6:f1:40:84:fe:36:61:54: 3a:f3:22:8d:7b:18:f5:40:5d:48:b0:5a:9d:1a:be:af:cf:1b: d5:a6:9a:04:4f:de:67:6f:25:1c:c4:7f:8d:61:ae:27:5e:dd: 69:c9:0b:2a:80:f3:32:1c:c9:78:f9:74:98:ea:f3:b0:91:07: f4:b9:51:bd:0f:29:c6:7c:28:4c:41:d7:fa:7e:c5:3f:89:cc: 5c:cb:ec:ae:32:80:af:46:5d:76:75:9a:6b:18:8e:2f:66:07: 7c:e5:1c:27:33:dc:83:3e:67:af:eb:d8:91:41:9f:db:4b:49: 82:d9:2a:db:da:4d:29:9e:4b:55:a4:5b:41:71:cf:67:db:1a: 87:82:39:84:0e:f8:3f:92:c8:d3:74:93:a7:b3:0a:69:f3:38: 8f:da:74:d7:b1:97:fe:af:4c:80:12:83:45:27:47:b7:a6:c9: 32:fc:6f:30:2f:aa:03:4a:3f:2e:8d:9f:60:4b:35:f0:00:da: a4:95:e7:ff:a6:d0:f8:4f:36:b7:71:7e:ea:1c:50:5c:2c:1e: f0:3b:7f:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDREExMTAvBgNVBAUTKERBMDM1NEZCMzgxRjQ1MjFDMTBCMTYzRUNCRDIyQTA4 M0ZCN0EyNkMwHhcNMjYwMzAyMDExNTEwWhcNMjYwMzA5MDExNTEwWjAYMRYwFAYD VQQDEw02OWE0ZTQ5Zi03NWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9MbAJ33lhI0kmpF18gmXWjdk5GraeJTiVVmSUpyGsGOhfDDFYBrQ2P87tTD PYEDyuImtdWH3P0943ddbPGB2gDmaFNiXgJi3m3OBlO3wnUjh5PFjSWhUsPaYgbc zlIV5t+rKKI7ksfUKdmE0HSAhw+miZEIMMsg45a0xUwBQEAJtEmSXMS/yX0IleVo A7ofwqcvNu6kaoKQo0uMNXg0gRFL9fRhakOgGl3DRSwqqF/UgQa+him1eIIzeLaU shPCqDZPJ6jLbiyXYLwdIoopGbVogrjpLJmL0SH5YrbYhbooPR1/mYqwr4B5RGqZ ogwyBwAWlDa0ehrluexZ4af2LwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJpPG2Ql Vd09vx7uquvD9wFsYSfSMB8GA1UdIwQYMBaAFNoDVPs4H0UhwQsWPsvSKgg/t6Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkNEQS9GNEUyQkFCODI1 QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJTSEJDeFkteTlJcUNELTNv bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnTlUtemdmUlNIQkN4WS15OUlxQ0QtM29tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkNEQS9GNEUyQkFCODI1QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJT SEJDeFkteTlJcUNELTNvbXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALZny75xrYWT0gaNniaOW8X4pnPty76xY5/DwashDsZdr37IEf2+13ZjwocJz zabxQIT+NmFUOvMijXsY9UBdSLBanRq+r88b1aaaBE/eZ28lHMR/jWGuJ17dackL KoDzMhzJePl0mOrzsJEH9LlRvQ8pxnwoTEHX+n7FP4nMXMvsrjKAr0ZddnWaaxiO L2YHfOUcJzPcgz5nr+vYkUGf20tJgtkq29pNKZ5LVaRbQXHPZ9sah4I5hA74P5LI 03STp7MKafM4j9p017GX/q9MgBKDRSdHt6bJMvxvMC+qA0o/Lo2fYEs18ADapJXn /6bQ+E82t3F+6hxQXCwe8Dt/wA== -----END CERTIFICATE-----Generated at Mon Mar 2 08:19:38 2026 by rpki-client