$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft File: Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft (raw, json) Hash identifier: KrExr0xy4Wk2LPVwqqyPfBIgRSuigCbSAHrWnD351fs= Subject key identifier: D9:E4:3D:5F:9A:CA:8E:3C:30:BB:6A:05:F4:8B:01:73:28:5B:2D:83 Authority key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 Certificate issuer: /CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Certificate serial: 0CC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft Manifest number: 0CB6 Signing time: Mon 02 Mar 2026 02:16:02 +0000 Manifest this update: Mon 02 Mar 2026 02:15:59 +0000 Manifest next update: Mon 09 Mar 2026 02:15:59 +0000 Files and hashes: 1: Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl (hash: 3cang1kkMiqz+ytKx7rTmYKk3rli/51ewKQ3vNYPHNA=) 2: A0E062260A8C11EAB25FD253C4F9AE02.roa (hash: 5Ti6m1LIl0TQP6ix0VQfMwgNVX0N4OYoM9ENVwcx4C0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3265 (0xcc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D5D, serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Validity Not Before: Mar 2 02:15:59 2026 GMT Not After : Mar 9 02:15:59 2026 GMT Subject: CN=69a4f2e2-eb0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:97:22:e1:e2:69:b8:79:8b:30:13:e4:72:41: 62:0d:f0:ba:36:e5:70:95:23:7d:0e:c1:5c:24:3c: 2a:8d:23:ae:4d:1a:06:d8:fe:4a:4e:95:5f:3c:e4: 46:2e:9c:13:14:54:3e:3d:d4:d7:2a:4c:be:51:d0: 65:b9:b0:0e:29:e6:f6:8b:ab:a9:eb:97:ff:65:d5: 7a:df:9f:13:81:4b:93:5b:ff:e5:80:9a:21:e7:88: c3:7d:c0:e0:8c:ec:a4:c0:1a:f5:b6:90:c2:02:8c: 3e:ba:b6:e9:cf:1f:ab:f3:9a:e7:14:3d:a9:68:75: 28:ab:4a:8a:7f:1a:18:64:bc:5e:ba:e2:f4:82:30: de:3a:7f:b4:8d:52:07:8c:81:21:2a:ee:3b:bf:3a: 13:41:63:03:b6:43:bf:30:f4:ca:44:cd:d6:33:3e: 68:71:5c:a7:76:e3:14:a3:50:94:8b:78:a9:4a:f5: 20:c6:cb:a5:62:32:05:26:b0:7f:c9:a5:6c:f1:7d: 78:95:ee:1f:b2:27:be:13:99:d4:37:a5:e6:a0:08: ca:24:34:8c:6d:ef:13:29:b3:da:a9:48:d5:34:cd: b4:61:ce:ec:fb:3b:96:b7:97:b6:81:1f:00:c1:37: 6f:ee:2a:96:05:ee:74:9c:c1:86:82:80:e1:d2:d9: 33:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E4:3D:5F:9A:CA:8E:3C:30:BB:6A:05:F4:8B:01:73:28:5B:2D:83 X509v3 Authority Key Identifier: keyid:37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:ee:31:a3:a4:24:2f:d2:db:2b:a9:5c:50:31:9a:12:93:6f: 61:13:5c:62:55:65:08:7d:78:74:65:04:62:09:79:e4:89:dc: 23:37:f6:5f:e6:6b:49:2c:85:95:f1:e7:07:d6:4c:85:38:88: 1e:58:76:15:89:b5:43:b5:d8:da:3a:64:a4:f3:12:cb:91:11: 22:6f:bb:de:54:cf:fb:ec:0b:65:2c:a5:73:49:7d:c6:8c:d7: 21:94:f3:a3:b7:6f:66:ad:17:b0:cb:5c:9b:da:7d:8a:5d:6d: 0c:6e:34:2d:f4:51:c6:14:e5:fd:b5:2a:8f:6f:c7:1a:16:fb: 89:dd:af:ea:3e:f6:dc:24:08:77:8d:9c:00:22:86:46:74:bf: ab:a5:3d:6a:4e:c3:88:0b:83:48:02:80:b8:5e:25:5e:ba:ad: 1d:36:a5:17:fb:10:b9:38:ff:27:87:e4:dd:9a:2c:14:57:2d: 80:94:43:a8:2f:5e:e6:b2:e0:cb:56:fb:dc:0c:cb:45:c1:2b: fe:f1:db:c8:8a:70:b5:07:b4:1e:3d:1a:4e:56:b5:53:52:95: a9:03:42:44:55:22:f9:9e:79:f7:84:d6:57:cd:e0:6e:69:b8: c8:eb:b1:9b:ee:65:60:dd:18:05:74:35:c6:6a:bf:14:8f:0e: 25:64:d2:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlENUQxMTAvBgNVBAUTKDM3MkQ5MzZFMzhEOEI5Q0IxRjcwMTIyMTlGRjgyMTcy QjkwQkVFNTgwHhcNMjYwMzAyMDIxNTU5WhcNMjYwMzA5MDIxNTU5WjAYMRYwFAYD VQQDEw02OWE0ZjJlMi1lYjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZci4eJpuHmLMBPkckFiDfC6NuVwlSN9DsFcJDwqjSOuTRoG2P5KTpVfPORG LpwTFFQ+PdTXKky+UdBlubAOKeb2i6up65f/ZdV6358TgUuTW//lgJoh54jDfcDg jOykwBr1tpDCAow+urbpzx+r85rnFD2paHUoq0qKfxoYZLxeuuL0gjDeOn+0jVIH jIEhKu47vzoTQWMDtkO/MPTKRM3WMz5ocVynduMUo1CUi3ipSvUgxsulYjIFJrB/ yaVs8X14le4fsie+E5nUN6XmoAjKJDSMbe8TKbPaqUjVNM20Yc7s+zuWt5e2gR8A wTdv7iqWBe50nMGGgoDh0tkzOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNnkPV+a yo48MLtqBfSLAXMoWy2DMB8GA1UdIwQYMBaAFDctk2442LnLH3ASIZ/4IXK5C+5Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ1RC9ERDZGMjg3MjBB OEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVjc2ZjQklobl9naGNya0w3 bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055MlRiampZdWNzZmNCSWhuX2doY3JrTDdsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUQ1RC9ERDZGMjg3MjBBOEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVj c2ZjQklobl9naGNya0w3bGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAae4xo6QkL9LbK6lcUDGaEpNvYRNcYlVlCH14dGUEYgl55IncIzf2X+ZrSSyF lfHnB9ZMhTiIHlh2FYm1Q7XY2jpkpPMSy5ERIm+73lTP++wLZSylc0l9xozXIZTz o7dvZq0XsMtcm9p9il1tDG40LfRRxhTl/bUqj2/HGhb7id2v6j723CQId42cACKG RnS/q6U9ak7DiAuDSAKAuF4lXrqtHTalF/sQuTj/J4fk3ZosFFctgJRDqC9e5rLg y1b73AzLRcEr/vHbyIpwtQe0Hj0aTla1U1KVqQNCRFUi+Z5594TWV83gbmm4yOux m+5lYN0YBXQ1xmq/FI8OJWTSSQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:50:15 2026 by rpki-client