$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft File: N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json) Hash identifier: e1Ozu2Lls2W3DqxwBeiKeJUkJXPVQSuHQu9rOHSqGmE= Subject key identifier: 7D:9A:4C:6D:6C:BB:45:04:08:E9:99:8C:4F:85:2F:83:0A:D5:BA:7D Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Certificate serial: 02D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft Manifest number: 02BD Signing time: Mon 23 Mar 2026 00:58:08 +0000 Manifest this update: Mon 23 Mar 2026 00:58:08 +0000 Manifest next update: Mon 30 Mar 2026 00:58:08 +0000 Files and hashes: 1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: TPR5UG5MXlq/19Kc8JahH8tLGpWOb44tZrtkWaPKwbU=) 2: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: N8hOIX9lBnkWNR17KITPRqZldmiFlqdcpwwzsFLdg0U=) 3: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: yGk/vqcwYlqrGgMj3fbRLifOH/23m2bl0HS4VWGoMYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Mar 2026 00:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 726 (0x2d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Validity Not Before: Mar 23 00:58:08 2026 GMT Not After : Mar 30 00:58:08 2026 GMT Subject: CN=69c09020-af4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f9:55:35:c4:6a:5b:da:f7:27:fd:7e:7f:be: 92:5b:40:a1:8f:ba:8f:71:4e:52:18:17:d3:ab:d6: 95:14:a9:0e:e8:27:73:4d:0d:0b:ed:59:57:99:bf: 9a:d0:e0:5e:91:ea:47:6d:21:1f:3b:65:a9:43:10: 14:83:f2:59:0e:44:a3:53:0b:d2:fa:51:63:e4:04: b4:03:93:ac:43:12:7f:52:a5:ff:b9:91:c1:76:a3: 4e:e6:3a:4e:8a:17:2f:d3:d9:ba:69:74:20:13:17: c1:77:61:b0:f1:dd:c4:f7:e3:ff:e5:bb:f6:a2:45: 49:27:49:55:1d:c8:0f:a7:f4:0e:63:31:dc:0e:db: 81:d0:5c:13:16:60:e2:cd:ec:c2:d2:c3:14:87:b9: 38:80:f8:68:05:f8:89:68:f7:7b:d8:4e:40:dc:d8: c1:73:e3:a4:bf:8e:2e:56:32:df:1c:cc:77:20:52: 3d:13:8a:02:47:4b:27:6c:e9:20:78:e0:02:fe:15: 93:e9:00:e2:b6:ee:db:84:68:07:5f:c1:70:5e:62: cb:02:e3:eb:48:2d:2c:f5:31:45:eb:65:ac:c5:99: 8c:71:5e:00:ab:16:b9:71:8b:90:96:ad:e4:da:a6: 13:1c:e6:08:19:cd:bb:e4:3b:ab:26:47:12:af:d2: 64:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9A:4C:6D:6C:BB:45:04:08:E9:99:8C:4F:85:2F:83:0A:D5:BA:7D X509v3 Authority Key Identifier: keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f5:b2:b6:9f:72:35:95:fd:fc:05:52:d2:88:db:db:99:84: 02:c8:f9:af:e1:dc:1a:9c:c7:16:99:c1:58:31:41:af:30:38: 9b:f6:ac:ca:e0:8a:41:5e:1c:5c:41:77:b5:92:ab:ea:d8:21: 53:3a:84:60:f1:93:4f:91:30:0e:ff:f1:6a:ff:c2:ea:1e:db: a9:30:7f:7e:c8:91:0b:02:5b:03:16:0b:ac:59:1c:1a:19:06: d4:23:3b:5c:f7:91:c3:65:ce:81:55:3c:fa:51:18:91:e3:d2: 03:b4:92:89:a2:b5:72:19:1e:01:be:ec:8a:be:ce:5e:64:a8: da:3c:22:e1:fd:fc:7d:6c:a4:31:6c:48:da:70:f1:ab:29:56: 7d:1b:b3:f0:b1:f5:52:ac:c0:f5:24:88:76:3e:78:31:30:2d: 6d:53:fe:ec:5e:69:01:cc:be:ea:0a:0e:1b:c3:13:8b:57:a0: d3:f1:92:38:3e:f9:a7:eb:40:bf:b9:5c:f9:66:8c:95:62:b9: 98:9d:3f:05:e0:c4:4b:11:4e:ca:98:b9:c7:0b:66:2b:be:eb: b9:79:88:6c:f9:66:07:3c:4e:55:0d:4e:5b:55:7c:dc:9f:89: a6:77:bb:89:5d:82:64:8d:13:92:2c:d9:a7:70:f1:71:40:04: 9b:94:71:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0N0YxMTAvBgNVBAUTKDM3NjAzREIyRTA3MkMwQThGRDcxMTM4RTI1NDA5OUY0 Q0FEOEMxNkYwHhcNMjYwMzIzMDA1ODA4WhcNMjYwMzMwMDA1ODA4WjAYMRYwFAYD VQQDEw02OWMwOTAyMC1hZjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkvlVNcRqW9r3J/1+f76SW0Chj7qPcU5SGBfTq9aVFKkO6CdzTQ0L7VlXmb+a 0OBekepHbSEfO2WpQxAUg/JZDkSjUwvS+lFj5AS0A5OsQxJ/UqX/uZHBdqNO5jpO ihcv09m6aXQgExfBd2Gw8d3E9+P/5bv2okVJJ0lVHcgPp/QOYzHcDtuB0FwTFmDi zezC0sMUh7k4gPhoBfiJaPd72E5A3NjBc+Okv44uVjLfHMx3IFI9E4oCR0snbOkg eOAC/hWT6QDitu7bhGgHX8FwXmLLAuPrSC0s9TFF62WsxZmMcV4Aqxa5cYuQlq3k 2qYTHOYIGc275DurJkcSr9JkjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH2aTG1s u0UECOmZjE+FL4MK1bp9MB8GA1UdIwQYMBaAFDdgPbLgcsCo/XETjiVAmfTK2MFv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDQ3Ri9ENUNFNjI2QTM0 NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdLajljUk9PSlVDWjlNcll3 VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yQTlzdUJ5d0tqOWNST09KVUNaOU1yWXdXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDQ3Ri9ENUNFNjI2QTM0NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdL ajljUk9PSlVDWjlNcll3VzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe/Wytp9yNZX9/AVS0ojb25mEAsj5r+HcGpzHFpnBWDFBrzA4m/asyuCKQV4c XEF3tZKr6tghUzqEYPGTT5EwDv/xav/C6h7bqTB/fsiRCwJbAxYLrFkcGhkG1CM7 XPeRw2XOgVU8+lEYkePSA7SSiaK1chkeAb7sir7OXmSo2jwi4f38fWykMWxI2nDx qylWfRuz8LH1UqzA9SSIdj54MTAtbVP+7F5pAcy+6goOG8MTi1eg0/GSOD75p+tA v7lc+WaMlWK5mJ0/BeDESxFOypi5xwtmK77ruXmIbPlmBzxOVQ1OW1V83J+Jpne7 iV2CZI0TkizZp3DxcUAEm5RxPw== -----END CERTIFICATE-----Generated at Mon Mar 23 18:05:03 2026 by rpki-client