$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft File: 2itDzBg8qOD2qPbapUzdcwb4Yig.mft (raw, json) Hash identifier: Mm9Isx6jGAhnZhMbhHXREx6l4YuOfipKhGGp+ZoZ6lE= Subject key identifier: 48:8C:22:4D:9F:6D:F1:C2:73:98:CA:70:89:A1:34:CC:CE:43:83:1E Authority key identifier: DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 Certificate issuer: /CN=A91DF0EC/serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Certificate serial: 0AB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft Manifest number: 0A9D Signing time: Sat 04 Apr 2026 19:21:10 +0000 Manifest this update: Sat 04 Apr 2026 19:21:09 +0000 Manifest next update: Sat 11 Apr 2026 19:21:09 +0000 Files and hashes: 1: 2itDzBg8qOD2qPbapUzdcwb4Yig.crl (hash: 9mFrqKDC70+taVIiyjEc9fqMsTnjUJHgaI2f7gpLfFM=) 2: C8A0E422831611EA95762453C4F9AE02.roa (hash: zy8s2JOSWvYwBrRrmYSE0kwJEPoK1AaNF1yfDHC6Css=) 3: 0D6FFE56BA3511ECA20A3817C4F9AE02.roa (hash: T6idJL8aHggzjv6s1JmSSpHwZuTbLSQAyDk/XLJrS3o=) 4: FD114232912711EFBCB4ED6EC4F9AE02.roa (hash: m31d9LY6Fb+rpx0iPU2nTzyFxPrcr/nSM8utNGuQQUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2743 (0xab7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF0EC, serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Validity Not Before: Apr 4 19:21:09 2026 GMT Not After : Apr 11 19:21:09 2026 GMT Subject: CN=69d164a6-f00b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2e:b9:82:64:f5:07:76:db:d5:0b:d9:e4:17: 4f:43:89:5b:2b:ce:06:cd:cc:fe:5f:e9:44:f3:c9: 9a:e4:3d:76:50:cb:98:a5:d4:e3:cb:8a:ae:97:ea: fe:54:d2:e2:3a:89:8d:46:4b:e8:e5:7e:94:0d:68: 71:11:73:4d:d1:ba:c7:b4:23:00:6a:da:a6:93:48: 13:26:e1:a3:38:f0:76:a2:2e:c2:03:07:69:22:cf: 88:08:f6:e0:8a:52:b6:9b:a8:93:38:59:96:19:ac: d0:8b:b5:f3:0a:7c:5d:55:62:55:26:6e:51:9f:c0: 6e:71:ac:ce:65:ec:9a:f6:fd:6a:16:e3:55:d1:1e: d6:0a:82:e8:8c:83:33:9c:23:d8:25:8b:69:38:71: d3:d2:d7:ee:b3:5b:7f:60:c2:4d:7d:3c:f7:7f:69: c8:95:65:7b:96:7f:57:f6:37:18:ed:15:11:7c:48: ea:3b:16:18:cc:71:b9:cc:bc:cf:e9:be:fb:27:6c: 00:26:5f:b1:50:a1:11:dd:24:3c:d3:b9:ff:ed:4d: 01:ba:5f:01:2e:14:d5:a4:44:33:1a:32:48:1e:18: 25:33:4c:db:10:c4:50:0a:90:e6:cf:b4:70:dd:e1: 70:bd:04:de:a4:b5:d5:77:0d:f4:2a:02:c9:d6:7b: 59:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8C:22:4D:9F:6D:F1:C2:73:98:CA:70:89:A1:34:CC:CE:43:83:1E X509v3 Authority Key Identifier: keyid:DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:3e:d2:82:e9:9c:26:a9:7c:a5:5c:f4:f7:ac:1a:1a:37:85: 3a:63:e5:81:63:44:a7:46:1c:ad:0a:07:7f:a6:a5:0e:95:a4: 8e:44:32:8e:fc:6e:39:f5:72:d0:f7:e3:77:d6:6f:a6:7f:c9: a9:1a:49:b0:3a:73:95:f8:2e:f2:31:67:b6:55:60:b1:cc:f8: f9:e9:3e:82:91:4f:6a:17:5f:df:66:a9:08:c1:58:8d:76:ed: 6b:02:21:2d:6a:d7:30:28:d1:ef:56:b4:10:36:fb:d4:54:ad: b6:c4:37:ab:26:d8:46:fe:d6:18:31:ef:0c:f1:1b:e2:ee:55: 05:89:42:22:8d:e0:6b:7d:0a:b4:85:be:af:89:e8:87:bd:61: cd:50:1e:ea:1c:fe:04:a5:92:75:6a:79:3b:23:4b:0a:2f:84: 3f:f2:6d:a7:57:23:36:53:a7:53:02:8e:69:8e:42:56:7d:5c: 2f:2f:56:fb:08:8f:b1:2e:39:56:6a:32:c5:13:9c:e8:b6:ec: 4d:87:0f:17:a7:0c:ee:af:47:aa:6a:44:80:6a:0f:43:0e:51: a9:de:6a:1e:98:99:42:4c:94:de:a2:f5:a9:84:91:d2:99:b1: e6:df:4f:48:10:db:9b:e1:f9:f6:bc:f8:76:1a:49:71:e6:d9: 76:b7:8d:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYwRUMxMTAvBgNVBAUTKERBMkI0M0NDMTgzQ0E4RTBGNkE4RjZEQUE1NENERDcz MDZGODYyMjgwHhcNMjYwNDA0MTkyMTA5WhcNMjYwNDExMTkyMTA5WjAYMRYwFAYD VQQDEw02OWQxNjRhNi1mMDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoi65gmT1B3bb1QvZ5BdPQ4lbK84Gzcz+X+lE88ma5D12UMuYpdTjy4qul+r+ VNLiOomNRkvo5X6UDWhxEXNN0brHtCMAatqmk0gTJuGjOPB2oi7CAwdpIs+ICPbg ilK2m6iTOFmWGazQi7XzCnxdVWJVJm5Rn8BucazOZeya9v1qFuNV0R7WCoLojIMz nCPYJYtpOHHT0tfus1t/YMJNfTz3f2nIlWV7ln9X9jcY7RURfEjqOxYYzHG5zLzP 6b77J2wAJl+xUKER3SQ807n/7U0Bul8BLhTVpEQzGjJIHhglM0zbEMRQCpDmz7Rw 3eFwvQTepLXVdw30KgLJ1ntZ3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEiMIk2f bfHCc5jKcImhNMzOQ4MeMB8GA1UdIwQYMBaAFNorQ8wYPKjg9qj22qVM3XMG+GIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjBFQy85OTFDRUY3RTc5 NTgxMUVBOTNBRTk2NDZDNEY5QUUwMi8yaXREekJnOHFPRDJxUGJhcFV6ZGN3YjRZ aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJpdER6Qmc4cU9EMnFQYmFwVXpkY3diNFlpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjBFQy85OTFDRUY3RTc5NTgxMUVBOTNBRTk2NDZDNEY5QUUwMi8yaXREekJnOHFP RDJxUGJhcFV6ZGN3YjRZaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnT7SgumcJql8pVz096waGjeFOmPlgWNEp0YcrQoHf6alDpWkjkQyjvxuOfVy 0Pfjd9Zvpn/JqRpJsDpzlfgu8jFntlVgscz4+ek+gpFPahdf32apCMFYjXbtawIh LWrXMCjR71a0EDb71FSttsQ3qybYRv7WGDHvDPEb4u5VBYlCIo3ga30KtIW+r4no h71hzVAe6hz+BKWSdWp5OyNLCi+EP/Jtp1cjNlOnUwKOaY5CVn1cLy9W+wiPsS45 VmoyxROc6LbsTYcPF6cM7q9HqmpEgGoPQw5Rqd5qHpiZQkyU3qL1qYSR0pmx5t9P SBDbm+H59rz4dhpJcebZdreN/A== -----END CERTIFICATE-----Generated at Mon Apr 6 08:29:36 2026 by rpki-client