$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft File: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft (raw, json) Hash identifier: /UxP8pF9gTGSepAUj1xcKL7kS0JroGCluJ1DIH9DKmc= Subject key identifier: 17:B2:90:EF:E9:24:68:48:D6:DF:6E:E5:13:AA:80:BF:22:2D:60:08 Authority key identifier: D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D Certificate issuer: /CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft Manifest number: 0162 Signing time: Fri 13 Mar 2026 03:55:21 +0000 Manifest this update: Fri 13 Mar 2026 03:55:21 +0000 Manifest next update: Fri 20 Mar 2026 03:55:21 +0000 Files and hashes: 1: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl (hash: eP7+2GwZ/wn7Oggb3o8gBQYWZQcWugGupizuOlJQk8o=) 2: E2037F8C019911EFAFFEEC5DC4F9AE02.roa (hash: MyKXaMqltZFXiixTNcH59rzs6UiHqOhJV/ggBk4xR00=) 3: B0BE3042014A11EFA8F03B5BC4F9AE02.roa (hash: lKWlhkDzF9OVoFvxt7VRR1SGwqDcOQ0oVF6cpYeoRqg=) 4: B00A68E6014A11EFA8F03B5BC4F9AE02.roa (hash: C1YgA2mgyvjCutK+smCWFY6hevh0ShUwDKL03UM7rbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 03:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2B93, serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D Validity Not Before: Mar 13 03:55:21 2026 GMT Not After : Mar 20 03:55:21 2026 GMT Subject: CN=69b38aa9-5779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:95:cf:97:b7:d7:8b:7e:21:8f:9f:7a:e0:af: bd:ee:3b:0a:76:dc:3c:95:b6:7f:eb:18:1a:25:37: 28:80:53:1c:9c:00:9e:82:01:e6:b5:c4:39:4f:c2: 06:83:f5:8b:92:e2:2d:63:22:8f:e7:4d:3d:c9:15: e3:2c:44:15:84:1e:d7:70:fe:b2:cd:23:24:bd:d1: 64:ee:5d:cd:45:21:ed:9e:a0:be:52:33:b3:84:a1: 94:47:a5:2d:01:c3:a9:97:94:9b:dd:55:82:22:16: 98:8a:7f:ca:32:67:ca:dc:37:7e:8f:18:f4:25:fc: 27:ad:ed:13:c6:6e:2a:1f:44:97:01:f9:7d:d5:13: f8:db:2e:de:b9:9d:b7:e2:7c:85:72:f6:07:38:ef: 57:6f:68:e2:3d:06:51:60:0b:6b:4f:32:02:09:b0: 3d:ca:6f:4e:04:34:0c:48:13:e3:30:a7:f9:f1:bf: 6e:16:54:04:60:28:76:ac:41:6e:c1:da:38:fa:8f: a0:dd:d4:35:29:70:19:b7:d1:63:84:c5:4c:e5:55: 41:5a:09:b2:53:3a:00:07:df:b2:f7:8e:01:09:82: 98:35:92:97:ad:e6:ef:fd:f0:99:14:ff:bb:6b:a8: db:fc:77:d6:b3:8c:19:85:1f:47:cb:5f:63:dd:48: df:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B2:90:EF:E9:24:68:48:D6:DF:6E:E5:13:AA:80:BF:22:2D:60:08 X509v3 Authority Key Identifier: keyid:D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:0e:83:eb:79:13:53:9f:cb:79:ea:40:fd:2c:eb:bf:83:ae: 23:e4:7d:50:ba:f3:aa:14:cd:40:24:20:d0:ff:ea:4d:d0:79: 6c:88:11:22:eb:e4:db:70:6a:97:f6:b7:a4:d2:0e:ff:69:d6: d3:1f:16:49:6f:d0:e6:40:de:a2:6c:12:6c:47:75:ff:9d:e5: b4:17:1b:0c:49:7b:40:ee:a9:55:3c:e1:c7:d0:57:b0:6f:9f: 57:5d:ca:c0:b5:af:41:22:65:1a:76:35:04:20:d3:a9:df:43: c9:65:12:3f:2e:11:12:5f:a7:5f:59:d0:b9:b4:fe:21:73:3a: d1:b9:1b:e9:11:df:dc:5a:cd:dc:ed:8b:d2:03:3c:e4:4d:89: 2c:36:55:18:0d:1d:f2:db:12:eb:15:02:00:0a:da:3c:dc:a4: ec:c5:c7:ee:6b:1b:e0:08:04:f5:2a:21:b7:aa:97:6b:d3:50: ea:fc:e3:c0:8b:ec:e1:30:1f:14:27:51:e2:16:41:97:ca:4c: e4:2b:39:3d:1d:3e:cc:ca:e1:72:3d:eb:99:0c:1e:fd:49:89: af:5a:80:e3:17:02:12:b8:ee:79:98:37:29:ed:90:7e:7f:85: 94:dc:92:33:be:e9:6f:48:26:e4:21:9d:f7:d3:6b:02:b4:8d: ca:28:e2:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJCOTMxMTAvBgNVBAUTKEQ5RDY1RjdGMzYwOTBDNDAxQkNGMjBENEJDODBDNDNG MERDNTkzM0QwHhcNMjYwMzEzMDM1NTIxWhcNMjYwMzIwMDM1NTIxWjAYMRYwFAYD VQQDEw02OWIzOGFhOS01Nzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAipXPl7fXi34hj5964K+97jsKdtw8lbZ/6xgaJTcogFMcnACeggHmtcQ5T8IG g/WLkuItYyKP5009yRXjLEQVhB7XcP6yzSMkvdFk7l3NRSHtnqC+UjOzhKGUR6Ut AcOpl5Sb3VWCIhaYin/KMmfK3Dd+jxj0Jfwnre0Txm4qH0SXAfl91RP42y7euZ23 4nyFcvYHOO9Xb2jiPQZRYAtrTzICCbA9ym9OBDQMSBPjMKf58b9uFlQEYCh2rEFu wdo4+o+g3dQ1KXAZt9FjhMVM5VVBWgmyUzoAB9+y944BCYKYNZKXrebv/fCZFP+7 a6jb/HfWs4wZhR9Hy19j3UjfLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBeykO/p JGhI1t9u5ROqgL8iLWAIMB8GA1UdIwQYMBaAFNnWX382CQxAG88g1LyAxD8NxZM9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkI5My8zQUM4NzRFRTAx NDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRFQWJ6eURVdklERVB3M0Zr ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkWmZmellKREVBYnp5RFV2SURFUHczRmt6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkI5My8zQUM4NzRFRTAxNDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRF QWJ6eURVdklERVB3M0ZrejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQg6D63kTU5/LeepA/Szrv4OuI+R9ULrzqhTNQCQg0P/qTdB5bIgRIuvk23Bq l/a3pNIO/2nW0x8WSW/Q5kDeomwSbEd1/53ltBcbDEl7QO6pVTzhx9BXsG+fV13K wLWvQSJlGnY1BCDTqd9DyWUSPy4REl+nX1nQubT+IXM60bkb6RHf3FrN3O2L0gM8 5E2JLDZVGA0d8tsS6xUCAAraPNyk7MXH7msb4AgE9Soht6qXa9NQ6vzjwIvs4TAf FCdR4hZBl8pM5Cs5PR0+zMrhcj3rmQwe/UmJr1qA4xcCErjueZg3Ke2Qfn+FlNyS M77pb0gm5CGd99NrArSNyijiMQ== -----END CERTIFICATE-----Generated at Fri Mar 13 11:18:07 2026 by rpki-client