$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft File: n2xg5qKluzMFUknUcjhHf4nhOnA.mft (raw, json) Hash identifier: C8RXmDeZHJYjPMwn0DccsY+GQpv51bwI3hVyF3dMnGg= Subject key identifier: 92:12:56:5F:BD:BB:B2:E9:97:25:FD:B3:49:0F:32:FA:50:59:BD:4C Authority key identifier: 9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 Certificate issuer: /CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft Manifest number: 0226 Signing time: Sun 01 Mar 2026 03:28:51 +0000 Manifest this update: Sun 01 Mar 2026 03:28:51 +0000 Manifest next update: Sun 08 Mar 2026 03:28:51 +0000 Files and hashes: 1: n2xg5qKluzMFUknUcjhHf4nhOnA.crl (hash: d2fL5kR/8yWYKhXdCg65+dnOOVAtMdUQWM9bm6bXIvQ=) 2: 51C204DAEA9011EFB8B82081C4F9AE02.roa (hash: 6I8PqQR8bjnEE1h2utRw2t8yvCXGGw0VLp+kSZG7AG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E30, serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Validity Not Before: Mar 1 03:28:51 2026 GMT Not After : Mar 8 03:28:51 2026 GMT Subject: CN=69a3b273-d062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:49:13:69:23:59:83:bb:ed:e6:26:2c:20:20: 67:3b:0c:dd:b5:c1:df:44:6c:92:92:d8:a9:fe:05: 06:70:75:8c:37:ba:cf:15:8e:af:8b:ac:23:80:9a: b2:c9:9a:14:bd:2f:ec:46:b1:2d:ca:a3:42:6c:2b: 3c:6e:a4:3d:64:9a:3b:4d:8c:3a:6a:44:ad:28:09: 75:50:50:4c:28:ac:ac:a9:ca:fc:69:f6:d0:6e:11: a1:2d:5b:9e:80:e1:9f:50:f3:e3:02:14:6f:df:5b: fc:c4:c5:99:e6:8c:10:1a:b1:90:22:1d:c3:0e:b5: 46:65:73:e8:08:60:5d:37:50:82:cd:4f:a5:f2:f5: 7c:90:bb:c9:b7:9c:7b:bf:04:82:ac:2a:e1:f9:76: 6c:0d:83:39:4a:76:38:32:4b:f6:80:98:c9:91:ba: 96:99:a1:1c:e3:c0:10:e2:46:c4:d7:81:af:67:77: c5:83:82:93:15:b9:3a:ec:58:5a:1e:af:ea:96:16: 10:c2:01:1c:bd:47:53:31:3f:ff:dd:33:4f:24:c6: 91:bd:2f:3f:09:ed:7f:35:45:be:d3:81:d2:7c:a5: 29:63:5c:04:dc:78:57:91:5e:43:b5:be:09:b3:65: 46:2e:ca:31:e1:88:c9:1c:f6:b1:59:44:88:97:3c: ca:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:12:56:5F:BD:BB:B2:E9:97:25:FD:B3:49:0F:32:FA:50:59:BD:4C X509v3 Authority Key Identifier: keyid:9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:d2:fa:b6:e5:59:1e:86:78:53:7d:9c:ae:dc:d4:4c:d2:44: 03:52:ba:e7:c8:82:72:62:8d:21:60:59:be:bc:1c:15:61:82: b2:3a:e3:4f:91:e2:e4:69:c4:d2:1c:58:24:bf:52:58:16:2f: c4:47:65:2b:f2:2e:db:56:51:bc:c0:e6:25:90:be:2d:06:09: 60:d2:97:c8:f4:cd:9f:a1:b1:05:0a:8e:de:40:fa:70:22:cb: ee:6c:3a:b5:2e:31:9c:2b:4c:09:0f:28:2c:3a:fb:1c:a9:df: a6:85:10:21:93:9a:6c:1c:2c:19:c8:7f:f7:35:5f:3f:50:ff: e1:93:ff:21:03:85:73:3c:3f:87:3a:39:1d:13:1a:ce:6f:60: 38:3f:a8:04:bf:9c:ef:0d:4e:0a:33:f7:b6:15:9d:44:d3:76: 38:2a:18:c7:77:92:38:4b:2d:53:39:f5:4e:bb:82:94:e3:d4: a4:12:40:18:ed:36:3e:16:af:a7:fc:2f:93:05:3a:5e:41:80: 6d:b3:e2:89:3c:16:a4:26:d4:7a:f1:61:86:82:1c:57:c5:86: 28:67:bb:92:fe:5e:7a:b9:fa:26:94:1c:9f:49:d3:7a:4c:d3: 43:ff:04:2c:bd:b9:79:c1:e3:d8:58:4c:1e:38:1d:06:4a:54: 87:fb:1d:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFMzAxMTAvBgNVBAUTKDlGNkM2MEU2QTJBNUJCMzMwNTUyNDlENDcyMzg0NzdG ODlFMTNBNzAwHhcNMjYwMzAxMDMyODUxWhcNMjYwMzA4MDMyODUxWjAYMRYwFAYD VQQDDA02OWEzYjI3My1kMDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUkTaSNZg7vt5iYsICBnOwzdtcHfRGySktip/gUGcHWMN7rPFY6vi6wjgJqy yZoUvS/sRrEtyqNCbCs8bqQ9ZJo7TYw6akStKAl1UFBMKKysqcr8afbQbhGhLVue gOGfUPPjAhRv31v8xMWZ5owQGrGQIh3DDrVGZXPoCGBdN1CCzU+l8vV8kLvJt5x7 vwSCrCrh+XZsDYM5SnY4Mkv2gJjJkbqWmaEc48AQ4kbE14GvZ3fFg4KTFbk67Fha Hq/qlhYQwgEcvUdTMT//3TNPJMaRvS8/Ce1/NUW+04HSfKUpY1wE3HhXkV5Dtb4J s2VGLsox4YjJHPaxWUSIlzzKwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJISVl+9 u7LplyX9s0kPMvpQWb1MMB8GA1UdIwQYMBaAFJ9sYOaipbszBVJJ1HI4R3+J4Tpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUUzMC81Q0E1MDUyQ0M5 RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6TUZVa25VY2poSGY0bmhP bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24yeGc1cUtsdXpNRlVrblVjamhIZjRuaE9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUUzMC81Q0E1MDUyQ0M5RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6 TUZVa25VY2poSGY0bmhPbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdNL6tuVZHoZ4U32crtzUTNJEA1K658iCcmKNIWBZvrwcFWGCsjrjT5Hi5GnE 0hxYJL9SWBYvxEdlK/Iu21ZRvMDmJZC+LQYJYNKXyPTNn6GxBQqO3kD6cCLL7mw6 tS4xnCtMCQ8oLDr7HKnfpoUQIZOabBwsGch/9zVfP1D/4ZP/IQOFczw/hzo5HRMa zm9gOD+oBL+c7w1OCjP3thWdRNN2OCoYx3eSOEstUzn1TruClOPUpBJAGO02Phav p/wvkwU6XkGAbbPiiTwWpCbUevFhhoIcV8WGKGe7kv5eern6JpQcn0nTekzTQ/8E LL25ecHj2FhMHjgdBkpUh/sdjg== -----END CERTIFICATE-----Generated at Mon Mar 2 04:44:58 2026 by rpki-client