$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft File: 2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft (raw, json) Hash identifier: O+6qS3eNFLbsnVBnPgZlopQ3qYVQj2WepqipskVJrog= Subject key identifier: 62:E5:13:36:47:85:C8:E2:BD:25:60:59:75:C1:C8:9D:06:04:39:3B Authority key identifier: D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5 Certificate issuer: /CN=A91C08C0/serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft Manifest number: 09 Signing time: Sat 21 Mar 2026 08:46:55 +0000 Manifest this update: Sat 21 Mar 2026 08:46:54 +0000 Manifest next update: Sat 28 Mar 2026 08:46:54 +0000 Files and hashes: 1: 2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl (hash: NmE/I3yjAlOJIZj91U2bHR9KyD6gD4rDh1PdFkW+44M=) 2: EA9A11EA214C11F1A100880B383D8C67.roa (hash: eeD6uCbIvlHKsgpeKIC0IXAVj8jY3ITgO5O6p0iRhic=) 3: 7E0A2AD822E611F1A3C138F6CC833773.roa (hash: z0RXPVTLkvsIzF0pOhO2UmlkU0gKTzJ6WJ2WACgPdDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C08C0, serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5 Validity Not Before: Mar 21 08:46:54 2026 GMT Not After : Mar 28 08:46:54 2026 GMT Subject: CN=69be5aff-15c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4a:2b:dc:c4:d3:42:c0:ff:bd:f8:f2:d3:93: ca:35:0a:b6:a8:e1:d0:ed:13:f8:1a:e0:c0:c8:30: 5d:c9:fb:ec:df:c7:83:d1:b8:17:65:6a:f3:ce:9c: 93:3b:0d:bd:52:88:be:33:ff:d9:f8:d8:20:c2:cd: 96:c3:82:55:eb:e1:02:c9:60:c9:ef:de:4e:0b:9d: 5a:69:c5:03:14:91:ef:2c:09:ad:38:ad:62:6f:13: 7f:d2:fe:96:5f:cd:47:ab:48:57:38:aa:54:81:52: e4:c0:5b:6f:38:33:de:f5:36:23:c2:b3:3b:87:6a: 7d:94:0f:4d:f5:b2:c6:8e:10:40:69:b7:c5:c2:d3: b4:ab:f5:92:af:c2:4a:6b:26:74:15:db:fb:32:51: 76:90:15:fe:03:a1:9b:d7:01:e4:9d:8e:0b:0a:61: 85:68:6d:aa:f2:61:57:26:31:20:1f:6a:f9:e2:1e: 57:0d:10:21:f7:87:d8:45:8c:a9:f8:f5:86:bd:68: 26:06:b0:41:6e:0f:bd:0f:f6:4b:db:d1:35:bf:9d: 9c:79:71:0f:53:25:8b:f6:80:f5:b5:87:55:d5:22: f9:84:c8:c3:54:25:91:e9:91:ea:8e:c0:6f:8c:9d: 00:eb:fd:68:93:c4:81:38:57:e2:95:8d:bb:cf:21: ca:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E5:13:36:47:85:C8:E2:BD:25:60:59:75:C1:C8:9D:06:04:39:3B X509v3 Authority Key Identifier: keyid:D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a9:40:98:d3:49:fa:89:c7:67:a1:f6:90:ff:50:f2:b2:4c: 32:dc:0a:1f:c8:ca:c0:95:98:41:99:bb:b7:3d:d8:0e:05:73: 9f:57:20:ee:29:bc:b0:e8:1a:40:34:c7:43:c9:75:cb:74:99: 2f:3a:8e:6b:14:c9:c1:5c:3b:9d:43:b8:f3:25:ab:8f:a4:0d: 37:a0:bd:94:16:23:32:28:d8:19:15:14:87:40:2e:0a:4e:61: 5d:b6:e4:0c:0a:4b:9c:e7:82:bb:0a:0e:6c:fc:69:b4:af:a5: a6:97:13:c5:08:d3:8e:e0:a7:af:f0:ef:02:2c:d6:6a:9f:e1: 1a:67:5c:83:64:e7:7b:7b:67:6e:87:af:9b:ad:47:c8:e0:70: a2:58:a9:85:23:8f:7f:13:70:6f:eb:40:c8:35:a6:e6:51:bd: 3b:a9:dd:9a:08:75:69:31:70:84:55:53:b2:c0:3e:7e:34:df: 26:50:8d:77:02:5a:67:0b:97:c6:67:73:11:09:98:f6:21:b6: 20:c7:dd:12:9f:39:ec:b8:eb:62:78:ae:83:f6:79:aa:ac:aa: 13:ad:fd:ee:35:c8:b0:d8:22:f6:12:dd:95:2b:d1:a5:b9:2a: 78:02:27:26:b9:d7:1d:24:d0:d0:93:86:b4:f4:38:e8:86:42: 3f:eb:1b:37 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDhDMDExMC8GA1UEBRMoRDgwNzM4MDNFRUNGRjRGMTlFRkY5OTU3QzcxNDdBRkND QUEwMTlGNTAeFw0yNjAzMjEwODQ2NTRaFw0yNjAzMjgwODQ2NTRaMBgxFjAUBgNV BAMTDTY5YmU1YWZmLTE1YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuSivcxNNCwP+9+PLTk8o1Crao4dDtE/ga4MDIMF3J++zfx4PRuBdlavPOnJM7 Db1SiL4z/9n42CDCzZbDglXr4QLJYMnv3k4LnVppxQMUke8sCa04rWJvE3/S/pZf zUerSFc4qlSBUuTAW284M971NiPCszuHan2UD031ssaOEEBpt8XC07Sr9ZKvwkpr JnQV2/syUXaQFf4DoZvXAeSdjgsKYYVobaryYVcmMSAfavniHlcNECH3h9hFjKn4 9Ya9aCYGsEFuD70P9kvb0TW/nZx5cQ9TJYv2gPW1h1XVIvmEyMNUJZHpkeqOwG+M nQDr/WiTxIE4V+KVjbvPIcqDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYuUTNkeF yOK9JWBZdcHInQYEOTswHwYDVR0jBBgwFoAU2Ac4A+7P9PGe/5lXxxR6/MqgGfUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwOEMwLzc5NkFBMTQyMjE0 QzExRjFBMzZDQTFBNTM3M0Q4QzY3LzJBYzRBLTdQOVBHZV81bFh4eFI2X01xZ0dm VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMkFjNEEtN1A5UEdlXzVsWHh4UjZfTXFnR2ZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw OEMwLzc5NkFBMTQyMjE0QzExRjFBMzZDQTFBNTM3M0Q4QzY3LzJBYzRBLTdQOVBH ZV81bFh4eFI2X01xZ0dmVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBtqUCY00n6icdnofaQ/1Dyskwy3AofyMrAlZhBmbu3PdgOBXOfVyDuKbyw6BpA NMdDyXXLdJkvOo5rFMnBXDudQ7jzJauPpA03oL2UFiMyKNgZFRSHQC4KTmFdtuQM Ckuc54K7Cg5s/Gm0r6WmlxPFCNOO4Kev8O8CLNZqn+EaZ1yDZOd7e2duh6+brUfI 4HCiWKmFI49/E3Bv60DINabmUb07qd2aCHVpMXCEVVOywD5+NN8mUI13AlpnC5fG Z3MRCZj2IbYgx90SnznsuOtieK6D9nmqrKoTrf3uNciw2CL2Et2VK9GluSp4Aicm udcdJNDQk4a09DjohkI/6xs3 -----END CERTIFICATE-----Generated at Sat Mar 21 18:40:05 2026 by rpki-client