$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft File: 2S2tTXbh9aAmwn8tuRxE-62OSHw.mft (raw, json) Hash identifier: YxQcr7S/cE1wMUjEFH2Efnxj/K8jxRSswHgmJLp6ZWw= Subject key identifier: 0C:5C:FC:5F:90:F0:AF:11:AB:9A:8D:FF:8B:D0:0F:05:05:C0:D8:2B Authority key identifier: D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C Certificate issuer: /CN=A91F5143/serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C Certificate serial: 0EB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft Manifest number: 0EAC Signing time: Mon 02 Mar 2026 00:29:38 +0000 Manifest this update: Mon 02 Mar 2026 00:29:36 +0000 Manifest next update: Mon 09 Mar 2026 00:29:36 +0000 Files and hashes: 1: 2S2tTXbh9aAmwn8tuRxE-62OSHw.crl (hash: 5liWOn3+68W96hwlWkKDtsaZ7S2/n5CXl4tCSHroiFE=) 2: FBBFC6D8A86B11E9A1385758C4F9AE02.roa (hash: uK9y+gPM8Frp0brfv/3gjohOY8wSZFPP3WtdADUyL4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3767 (0xeb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5143, serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C Validity Not Before: Mar 2 00:29:36 2026 GMT Not After : Mar 9 00:29:36 2026 GMT Subject: CN=69a4d9f1-99eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:19:52:68:39:0e:39:33:91:2e:6f:77:b0:8c: 43:5f:1f:09:88:ac:d1:c5:91:b2:e1:ce:9c:d1:34: d6:a0:04:be:19:ba:91:44:0a:8e:d5:de:4f:19:6a: 9a:59:6e:9b:58:7b:ee:67:93:d1:20:f2:d2:f1:20: 79:6d:e4:7b:a7:9b:cb:24:9a:e7:1c:7c:9e:d2:ec: 04:47:15:50:e2:7e:c0:b0:95:b7:bb:f2:f7:27:53: 88:c9:4f:00:57:be:3c:ca:77:b4:b0:6c:f1:c7:91: 20:29:ce:65:ed:78:f3:0a:a9:49:93:82:4d:57:4a: ba:e5:0a:71:62:c8:e3:f1:e1:3a:4d:31:99:f3:c0: 45:75:80:0f:33:73:05:99:7e:49:87:3b:ac:aa:07: 4a:8b:72:2a:65:a5:08:85:a5:1d:63:d6:9c:c4:5d: c0:95:38:c8:3b:88:88:50:bf:71:ba:44:ac:94:cd: 18:c6:5d:f2:14:51:61:41:2a:3a:52:1a:a2:c2:e6: 4b:d2:cb:cd:c8:50:77:89:20:f6:c6:ca:47:6d:3e: f9:11:34:66:60:c2:83:ba:ed:ad:9d:bf:d0:89:bd: 81:ee:30:b4:cb:cc:fe:54:f0:19:20:b4:2c:eb:0c: ef:60:2e:18:d8:4d:c2:36:0c:03:0e:ac:e8:e9:37: 2f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5C:FC:5F:90:F0:AF:11:AB:9A:8D:FF:8B:D0:0F:05:05:C0:D8:2B X509v3 Authority Key Identifier: keyid:D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:22:9d:f5:65:94:e1:4e:a4:dc:09:a0:37:74:2f:20:3e:65: b6:a6:68:a2:e7:8d:1d:b7:7d:a8:3b:d2:7a:14:91:ce:02:eb: 0d:8b:e2:77:ab:63:e0:e4:28:13:c7:15:02:13:fc:b3:68:46: ed:5e:f6:d4:75:e5:43:e7:6a:63:45:d4:c6:07:d4:d8:0f:4e: 14:8a:aa:27:93:cf:16:8e:32:2e:e6:ef:03:51:69:de:1e:bb: 9a:f3:e5:8d:93:14:25:e8:2c:07:b5:3c:2d:97:90:3e:46:a7: cc:e8:48:cb:1b:12:a2:b3:69:1a:97:25:05:5c:fe:f1:54:21: 1e:f7:9e:62:b1:6a:c8:af:63:6a:8c:72:3d:93:2a:ce:60:e0: e7:e5:d3:07:52:e4:0e:cc:6d:48:16:1a:26:99:1c:cd:74:e2: 80:95:4c:ef:73:2b:bc:83:89:df:ae:88:dd:72:28:a5:06:26: 90:71:60:d8:f2:89:fc:c0:74:80:d0:50:11:35:5e:c5:64:81: 2b:82:a5:78:00:26:81:27:ac:1a:0a:21:38:fa:18:d9:5b:cd: e8:6c:c6:84:6c:a6:98:eb:19:90:f2:1c:09:e7:2c:3f:22:2b: 0b:15:66:4e:cc:8b:cb:74:b1:49:2e:3b:a0:d8:d1:6b:c8:68: c1:4b:74:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUxNDMxMTAvBgNVBAUTKEQ5MkRBRDRENzZFMUY1QTAyNkMyN0YyREI5MUM0NEZC QUQ4RTQ4N0MwHhcNMjYwMzAyMDAyOTM2WhcNMjYwMzA5MDAyOTM2WjAYMRYwFAYD VQQDEw02OWE0ZDlmMS05OWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRlSaDkOOTORLm93sIxDXx8JiKzRxZGy4c6c0TTWoAS+GbqRRAqO1d5PGWqa WW6bWHvuZ5PRIPLS8SB5beR7p5vLJJrnHHye0uwERxVQ4n7AsJW3u/L3J1OIyU8A V748yne0sGzxx5EgKc5l7XjzCqlJk4JNV0q65QpxYsjj8eE6TTGZ88BFdYAPM3MF mX5JhzusqgdKi3IqZaUIhaUdY9acxF3AlTjIO4iIUL9xukSslM0Yxl3yFFFhQSo6 UhqiwuZL0svNyFB3iSD2xspHbT75ETRmYMKDuu2tnb/Qib2B7jC0y8z+VPAZILQs 6wzvYC4Y2E3CNgwDDqzo6TcvEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAxc/F+Q 8K8Rq5qN/4vQDwUFwNgrMB8GA1UdIwQYMBaAFNktrU124fWgJsJ/LbkcRPutjkh8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTE0My8wREU5Rjc3NkE4 NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlhQW13bjh0dVJ4RS02Mk9T SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJTMnRUWGJoOWFBbXduOHR1UnhFLTYyT1NIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTE0My8wREU5Rjc3NkE4NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlh QW13bjh0dVJ4RS02Mk9TSHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1CKd9WWU4U6k3AmgN3QvID5ltqZooueNHbd9qDvSehSRzgLrDYvid6tj4OQo E8cVAhP8s2hG7V721HXlQ+dqY0XUxgfU2A9OFIqqJ5PPFo4yLubvA1Fp3h67mvPl jZMUJegsB7U8LZeQPkanzOhIyxsSorNpGpclBVz+8VQhHveeYrFqyK9jaoxyPZMq zmDg5+XTB1LkDsxtSBYaJpkczXTigJVM73MrvIOJ366I3XIopQYmkHFg2PKJ/MB0 gNBQETVexWSBK4KleAAmgSesGgohOPoY2VvN6GzGhGymmOsZkPIcCecsPyIrCxVm TsyLy3SxSS47oNjRa8howUt0dA== -----END CERTIFICATE-----Generated at Mon Mar 2 10:42:37 2026 by rpki-client