$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft File: n2xg5qKluzMFUknUcjhHf4nhOnA.mft (raw, json) Hash identifier: q0feA7skWYBTDqMnSzRugkr7uO7y+lmGywQGYunFzUI= Subject key identifier: B6:DC:DA:44:A0:C0:7B:7A:1E:4F:F1:69:BB:D5:CB:5E:33:DE:2A:70 Authority key identifier: 9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 Certificate issuer: /CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Certificate serial: 023E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft Manifest number: 023A Signing time: Sun 05 Apr 2026 02:05:49 +0000 Manifest this update: Sun 05 Apr 2026 02:05:49 +0000 Manifest next update: Sun 12 Apr 2026 02:05:49 +0000 Files and hashes: 1: n2xg5qKluzMFUknUcjhHf4nhOnA.crl (hash: vrFwwIQu24HTRVpw9pyN5mFZ9wno+hpemokRdGAfP1I=) 2: 51C204DAEA9011EFB8B82081C4F9AE02.roa (hash: z68jUM3pwDuhNvw5K6zmL6nh/8X6Z+78EEQu+Tv6QwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 574 (0x23e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E30, serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Validity Not Before: Apr 5 02:05:49 2026 GMT Not After : Apr 12 02:05:49 2026 GMT Subject: CN=69d1c37d-c15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4e:07:62:0b:a8:e5:76:21:16:80:ae:c0:64: 42:93:74:03:b2:78:ba:24:44:86:24:22:f3:b5:42: 9c:97:cd:3c:cb:40:38:84:a4:a8:f6:ab:25:5b:0f: 2c:5b:85:d0:d0:64:5d:98:d9:b1:9c:49:bd:9b:ac: d0:ed:09:3f:b9:fd:e9:65:09:3a:02:01:d2:81:4e: a8:b2:4c:73:f3:0d:42:a2:89:ce:d7:fc:13:23:42: 86:03:63:59:4e:ce:64:11:b1:10:03:68:d4:9e:ba: f5:95:ae:b6:df:0e:cc:82:48:be:9a:be:de:67:36: 81:a7:17:34:fc:65:72:ad:84:00:94:4c:79:55:be: 67:2e:40:32:38:8d:c7:85:4c:9d:21:cb:91:c6:a6: 54:c7:c9:2d:0b:5d:bc:4e:b8:cb:b3:a0:c1:6f:7e: 2d:21:40:f0:13:d2:46:ec:16:c2:29:fb:1d:b2:29: bf:6e:81:c8:97:30:a2:bd:fb:d3:36:78:4a:e7:3d: 0a:ab:ba:89:a8:88:94:cc:85:62:cd:b3:ef:60:66: b4:78:eb:06:96:b3:06:bc:bb:37:8c:09:a4:08:2d: 5a:36:d0:87:54:32:3a:82:01:99:f1:ec:21:fb:0a: 68:20:74:1d:0b:8b:53:25:c2:ec:b3:23:c6:59:42: 12:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DC:DA:44:A0:C0:7B:7A:1E:4F:F1:69:BB:D5:CB:5E:33:DE:2A:70 X509v3 Authority Key Identifier: keyid:9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:0b:91:37:87:1e:0d:75:83:35:f5:7b:13:a2:ea:d0:ea:c0: 53:fc:c7:1d:33:ef:d3:4c:c8:ba:9d:4f:a7:7a:21:67:2d:27: 6d:15:e9:82:33:b9:18:e8:df:23:b3:8f:49:f2:3f:f3:ab:6e: 6e:bb:03:4a:d3:79:9f:c9:92:49:d3:f5:e0:b7:bd:92:af:bc: a6:fa:a4:f0:a6:d6:4d:c0:e5:df:bd:58:f7:00:63:b4:d0:2e: 91:1a:66:da:6b:a0:46:8e:95:d8:29:d6:17:93:0b:d2:82:9b: 41:23:f3:2f:58:b6:77:e6:87:0f:5c:e2:e9:7a:cc:2f:0a:c7: 38:ba:e1:2a:6e:49:10:a4:93:66:95:8f:7c:a7:ef:f9:6b:51: aa:36:25:28:ed:ad:bb:2a:67:d2:10:f1:f4:8c:32:d5:dc:e5: 6e:49:1e:57:3b:19:b2:65:12:da:c4:d8:bc:0d:fb:99:c4:ad: d7:0d:64:b0:48:a1:67:e2:79:52:0c:85:ff:b8:1f:33:be:b7: 42:cf:d2:3d:df:1d:99:43:9c:ab:ff:67:bb:40:28:ec:6f:28: cc:8a:c1:f8:22:71:6d:f9:6f:d4:8b:6d:b9:fb:55:03:75:cd: 83:84:41:4d:2a:e9:0e:1b:b2:98:f0:6d:0c:29:f2:b5:1c:2c: 6e:8c:e6:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFMzAxMTAvBgNVBAUTKDlGNkM2MEU2QTJBNUJCMzMwNTUyNDlENDcyMzg0NzdG ODlFMTNBNzAwHhcNMjYwNDA1MDIwNTQ5WhcNMjYwNDEyMDIwNTQ5WjAYMRYwFAYD VQQDEw02OWQxYzM3ZC1jMTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyU4HYguo5XYhFoCuwGRCk3QDsni6JESGJCLztUKcl808y0A4hKSo9qslWw8s W4XQ0GRdmNmxnEm9m6zQ7Qk/uf3pZQk6AgHSgU6oskxz8w1CoonO1/wTI0KGA2NZ Ts5kEbEQA2jUnrr1la623w7Mgki+mr7eZzaBpxc0/GVyrYQAlEx5Vb5nLkAyOI3H hUydIcuRxqZUx8ktC128TrjLs6DBb34tIUDwE9JG7BbCKfsdsim/boHIlzCivfvT NnhK5z0Kq7qJqIiUzIVizbPvYGa0eOsGlrMGvLs3jAmkCC1aNtCHVDI6ggGZ8ewh +wpoIHQdC4tTJcLssyPGWUISKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLbc2kSg wHt6Hk/xabvVy14z3ipwMB8GA1UdIwQYMBaAFJ9sYOaipbszBVJJ1HI4R3+J4Tpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUUzMC81Q0E1MDUyQ0M5 RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6TUZVa25VY2poSGY0bmhP bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24yeGc1cUtsdXpNRlVrblVjamhIZjRuaE9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUUzMC81Q0E1MDUyQ0M5RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6 TUZVa25VY2poSGY0bmhPbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPguRN4ceDXWDNfV7E6Lq0OrAU/zHHTPv00zIup1Pp3ohZy0nbRXpgjO5GOjf I7OPSfI/86tubrsDStN5n8mSSdP14Le9kq+8pvqk8KbWTcDl371Y9wBjtNAukRpm 2mugRo6V2CnWF5ML0oKbQSPzL1i2d+aHD1zi6XrMLwrHOLrhKm5JEKSTZpWPfKfv +WtRqjYlKO2tuypn0hDx9Iwy1dzlbkkeVzsZsmUS2sTYvA37mcSt1w1ksEihZ+J5 UgyF/7gfM763Qs/SPd8dmUOcq/9nu0Ao7G8ozIrB+CJxbflv1IttuftVA3XNg4RB TSrpDhuymPBtDCnytRwsbozmaQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:35 2026 by rpki-client