$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft File: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft (raw, json) Hash identifier: Zt9E2rUkvQuOjhKjOm8m58He5ScOwEhXZH2lgNuvUoA= Subject key identifier: 4A:49:6D:3A:E2:BA:28:CA:6E:44:1B:52:72:32:BF:5C:31:4C:2E:C3 Authority key identifier: D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D Certificate issuer: /CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft Manifest number: 015B Signing time: Sun 01 Mar 2026 05:59:35 +0000 Manifest this update: Sun 01 Mar 2026 05:59:34 +0000 Manifest next update: Sun 08 Mar 2026 05:59:34 +0000 Files and hashes: 1: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl (hash: 2iI8lsxpnJ2OvhiBe1mZ2i9RULyqnzkVWdsOQE8Z8+o=) 2: B00A68E6014A11EFA8F03B5BC4F9AE02.roa (hash: F6IB2oLxhpfXXQwj/Kl3IJNncyOBKEOTP7G3C5XwQrk=) 3: B0BE3042014A11EFA8F03B5BC4F9AE02.roa (hash: kGlkPBXGhK2HbK8wICTx12rG9bb9NpN/Iy7FI3DGEGY=) 4: E2037F8C019911EFAFFEEC5DC4F9AE02.roa (hash: yyKQJp3Cor943Y25Ya+6ME8Xl4xDZuaYL1jQZ9UiIZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 05:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2B93, serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D Validity Not Before: Mar 1 05:59:34 2026 GMT Not After : Mar 8 05:59:34 2026 GMT Subject: CN=69a3d5c6-0019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9d:fa:0b:33:ec:74:6d:90:51:5c:49:9e:0f: 7c:45:68:e8:05:0c:cd:be:1b:8d:75:6e:4f:77:10: 6a:de:29:28:74:46:86:9b:10:40:48:e6:96:7a:32: be:ed:b2:db:4e:92:ce:cb:0b:c3:04:c3:10:f5:78: a9:66:49:5c:57:9f:a2:44:a8:31:c4:c0:e4:8a:7d: 43:c3:14:cf:0a:1c:fd:81:53:b8:16:85:ac:bc:39: ee:ed:99:7b:15:47:0a:0a:43:d0:c9:f3:c1:36:42: b6:1d:39:1b:57:f6:2c:6f:dc:ae:6a:ec:b8:e8:5e: 50:c1:d0:42:94:c5:c9:2d:19:08:df:9b:eb:fb:a2: 1f:ec:35:72:ea:73:de:c1:10:8b:85:38:7d:6a:ba: 4c:85:e5:29:18:0c:5f:4b:4e:9e:cb:e2:8c:20:91: e0:dd:81:9e:76:3b:92:f9:71:d6:51:8b:65:ef:d2: a0:3a:25:ae:43:d6:45:c9:08:12:8f:83:c8:97:54: 56:b4:63:8c:c3:9d:2a:b8:27:24:68:f1:1f:28:df: ce:59:e0:c2:a3:50:b3:52:ce:c2:4e:bb:99:6b:cd: 35:d8:1c:15:40:b9:39:70:74:a3:91:c1:0e:e2:2d: ef:27:48:cd:95:e4:18:3b:8a:30:63:e4:55:ad:54: 01:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:49:6D:3A:E2:BA:28:CA:6E:44:1B:52:72:32:BF:5C:31:4C:2E:C3 X509v3 Authority Key Identifier: keyid:D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:4c:92:a0:fa:99:df:0a:ea:41:6d:29:bd:7a:75:9d:69:de: 3d:b3:e2:8e:78:94:ee:37:db:83:3d:5d:ea:94:c1:71:6b:b2: 45:a1:45:89:b8:a0:de:17:98:df:cf:d1:a7:d1:65:a6:98:23: 9c:8a:bb:97:05:bf:69:7e:c7:d6:97:4f:d9:99:9c:b1:d4:73: d1:31:1d:4c:82:c4:8e:c8:6c:4d:18:6b:c4:ed:54:16:11:74: 80:3e:a1:88:9d:02:1d:09:bb:4a:41:63:34:08:4d:94:2b:51: d6:47:a6:72:b3:22:2a:33:dd:58:b4:88:2f:9a:70:e9:54:48: 7e:17:47:61:a7:11:df:a5:a8:cc:94:d7:54:af:7a:a7:3c:9f: 9d:ee:f4:66:7e:14:89:7e:cb:d1:6e:d7:01:8a:69:23:e6:14: 04:cc:30:ae:f1:6d:f7:ca:9c:db:26:fc:c9:99:47:3e:4d:2f: cb:b8:e5:e7:9e:ad:39:6e:79:79:78:fc:88:65:ed:98:88:6e: 21:a7:63:c8:3c:2e:ac:af:b1:85:8b:17:55:00:61:9c:5d:23: d9:1c:09:b9:eb:26:66:76:1c:37:59:ca:d0:8b:6d:61:67:fd: 57:76:54:2b:ba:08:da:2c:2e:2f:00:be:ec:a9:19:0d:3a:fd: 05:0a:49:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJCOTMxMTAvBgNVBAUTKEQ5RDY1RjdGMzYwOTBDNDAxQkNGMjBENEJDODBDNDNG MERDNTkzM0QwHhcNMjYwMzAxMDU1OTM0WhcNMjYwMzA4MDU1OTM0WjAYMRYwFAYD VQQDEw02OWEzZDVjNi0wMDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvp36CzPsdG2QUVxJng98RWjoBQzNvhuNdW5PdxBq3ikodEaGmxBASOaWejK+ 7bLbTpLOywvDBMMQ9XipZklcV5+iRKgxxMDkin1DwxTPChz9gVO4FoWsvDnu7Zl7 FUcKCkPQyfPBNkK2HTkbV/Ysb9yuauy46F5QwdBClMXJLRkI35vr+6If7DVy6nPe wRCLhTh9arpMheUpGAxfS06ey+KMIJHg3YGedjuS+XHWUYtl79KgOiWuQ9ZFyQgS j4PIl1RWtGOMw50quCckaPEfKN/OWeDCo1CzUs7CTruZa8012BwVQLk5cHSjkcEO 4i3vJ0jNleQYO4owY+RVrVQBZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEpJbTri uijKbkQbUnIyv1wxTC7DMB8GA1UdIwQYMBaAFNnWX382CQxAG88g1LyAxD8NxZM9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkI5My8zQUM4NzRFRTAx NDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRFQWJ6eURVdklERVB3M0Zr ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkWmZmellKREVBYnp5RFV2SURFUHczRmt6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkI5My8zQUM4NzRFRTAxNDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRF QWJ6eURVdklERVB3M0ZrejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf0ySoPqZ3wrqQW0pvXp1nWnePbPijniU7jfbgz1d6pTBcWuyRaFFibig3heY 38/Rp9FlppgjnIq7lwW/aX7H1pdP2ZmcsdRz0TEdTILEjshsTRhrxO1UFhF0gD6h iJ0CHQm7SkFjNAhNlCtR1kemcrMiKjPdWLSIL5pw6VRIfhdHYacR36WozJTXVK96 pzyfne70Zn4UiX7L0W7XAYppI+YUBMwwrvFt98qc2yb8yZlHPk0vy7jl556tOW55 eXj8iGXtmIhuIadjyDwurK+xhYsXVQBhnF0j2RwJuesmZnYcN1nK0IttYWf9V3ZU K7oI2iwuLwC+7KkZDTr9BQpJ1Q== -----END CERTIFICATE-----Generated at Mon Mar 2 07:51:12 2026 by rpki-client