$ rpki-client -vvf rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft File: M_vQn8uwMstkN8-6pg9cH6xVob8.mft (raw, json) Hash identifier: XrID3+IYXuiQfkn2hV7CIrZWCmzFJhrlwdh2evLtIcQ= Subject key identifier: 87:87:1E:9C:AF:2D:AB:A8:AE:21:4C:50:C4:0D:0D:F3:E0:36:BC:B1 Authority key identifier: 33:FB:D0:9F:CB:B0:32:CB:64:37:CF:BA:A6:0F:5C:1F:AC:55:A1:BF Certificate issuer: /CN=A91201EE/serialNumber=33FBD09FCBB032CB6437CFBAA60F5C1FAC55A1BF Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft Manifest number: 3C Signing time: Wed 25 Mar 2026 07:45:46 +0000 Manifest this update: Wed 25 Mar 2026 07:45:45 +0000 Manifest next update: Wed 01 Apr 2026 07:45:45 +0000 Files and hashes: 1: M_vQn8uwMstkN8-6pg9cH6xVob8.crl (hash: 16SmJuRmTqU/RbzTxGZgT4hNS62MQs/ww/om9M8tVOs=) 2: 5922C8E2DA7011F095E8A22F9BD3641D.roa (hash: XJ8M9A8mI6SrwXUmjGLeL6tg84g5T3IN8OttgBdZuFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.crl rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91201EE, serialNumber=33FBD09FCBB032CB6437CFBAA60F5C1FAC55A1BF Validity Not Before: Mar 25 07:45:45 2026 GMT Not After : Apr 1 07:45:45 2026 GMT Subject: CN=69c392aa-3f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:92:2f:50:f3:5d:75:d0:73:af:0d:c5:3c:a2: 20:6e:26:4e:b8:fd:90:2d:69:87:dc:a8:5f:83:43: 1e:08:7b:c4:32:91:37:d3:cf:86:92:db:93:40:1e: b9:7f:54:b5:94:97:de:c0:5c:19:a3:d8:81:5d:e2: 38:2d:16:04:d8:f7:fc:ac:2a:30:79:d8:ab:9f:0b: 1a:58:33:31:cd:54:e2:a1:9d:e8:7c:0b:f2:7e:ef: e9:d8:23:80:ba:d1:b6:bf:d2:5d:d2:96:97:14:9d: 16:50:ac:5d:28:2c:f4:7a:01:30:98:15:3a:c5:5e: f1:d6:3b:39:90:33:fa:7b:a5:3a:07:cf:66:c2:27: 77:85:dd:d8:93:51:21:68:e2:6f:b4:f4:84:e2:20: e9:71:00:07:93:9f:ff:2d:0d:fc:c1:8b:09:32:9f: eb:cf:bd:bd:8b:6b:1d:35:af:41:66:ba:d8:9e:af: 28:fc:30:72:15:9d:a8:d3:23:eb:1f:d1:8c:a6:85: df:4b:45:40:70:18:82:8b:0c:8a:79:ca:0e:f2:ab: ba:4b:ae:3e:18:51:d0:2a:1d:b9:03:d1:ae:56:21: 68:cd:c3:f0:53:0e:59:db:b8:e6:1c:46:9c:67:f4: a7:c0:5e:76:78:a4:2a:8a:bb:9b:88:16:e1:6c:b3: 3a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:87:1E:9C:AF:2D:AB:A8:AE:21:4C:50:C4:0D:0D:F3:E0:36:BC:B1 X509v3 Authority Key Identifier: keyid:33:FB:D0:9F:CB:B0:32:CB:64:37:CF:BA:A6:0F:5C:1F:AC:55:A1:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:70:20:7a:ed:5c:80:3a:30:c6:9d:9c:ca:52:fe:4f:d9:5b: 84:56:ec:bf:24:96:e4:7b:6e:c7:3f:04:a1:20:8d:c8:48:75: fd:c6:6d:45:2a:a1:62:93:57:bf:99:68:3a:77:23:fb:40:6f: 41:20:ef:de:09:1b:92:7c:82:e5:62:bd:4a:71:76:5e:ca:5e: cf:5b:08:bb:51:96:ca:29:b6:54:15:c0:e5:9d:52:7b:df:15: 96:01:5e:e3:e9:e5:02:bb:f7:4e:be:ce:c7:a1:b3:a4:24:d1: aa:7b:c8:22:63:68:68:b0:df:79:e3:c9:07:c3:7c:c9:ab:5b: cc:e8:ea:47:44:1f:23:d6:fa:5f:42:9e:99:5d:ee:a9:ac:20: 80:18:ee:12:c8:73:24:2e:9a:eb:87:ec:be:76:9a:cb:d9:a8: 1e:ee:1a:f3:4f:30:f2:df:f4:86:3e:fa:26:67:4e:b5:5d:82: b1:54:03:e1:9e:cd:b9:9a:ed:da:67:ae:b9:5f:9b:ad:a3:6a: 96:06:72:4c:df:71:fd:6e:e0:cb:2e:30:6f:1a:35:28:47:06: 50:89:6f:f3:77:89:6b:9e:ea:d4:0c:27:ee:90:56:29:5c:6d: a8:b8:8f:3a:26:4e:20:2d:72:c9:f6:17:0c:ce:d7:93:07:38: 8b:be:af:81 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDFFRTExMC8GA1UEBRMoMzNGQkQwOUZDQkIwMzJDQjY0MzdDRkJBQTYwRjVDMUZB QzU1QTFCRjAeFw0yNjAzMjUwNzQ1NDVaFw0yNjA0MDEwNzQ1NDVaMBgxFjAUBgNV BAMTDTY5YzM5MmFhLTNmNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpki9Q81110HOvDcU8oiBuJk64/ZAtaYfcqF+DQx4Ie8QykTfTz4aS25NAHrl/ VLWUl97AXBmj2IFd4jgtFgTY9/ysKjB52KufCxpYMzHNVOKhneh8C/J+7+nYI4C6 0ba/0l3SlpcUnRZQrF0oLPR6ATCYFTrFXvHWOzmQM/p7pToHz2bCJ3eF3diTUSFo 4m+09ITiIOlxAAeTn/8tDfzBiwkyn+vPvb2Lax01r0Fmutieryj8MHIVnajTI+sf 0Yymhd9LRUBwGIKLDIp5yg7yq7pLrj4YUdAqHbkD0a5WIWjNw/BTDlnbuOYcRpxn 9KfAXnZ4pCqKu5uIFuFsszqlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUh4cenK8t q6iuIUxQxA0N8+A2vLEwHwYDVR0jBBgwFoAUM/vQn8uwMstkN8+6pg9cH6xVob8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwMUVFL0NDQjg1MTQyRDc0 RjExRjA4Q0RGMTRCQzZERDM2NDFEL01fdlFuOHV3TXN0a044LTZwZzljSDZ4Vm9i OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTV92UW44dXdNc3RrTjgtNnBnOWNINnhWb2I4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw MUVFL0NDQjg1MTQyRDc0RjExRjA4Q0RGMTRCQzZERDM2NDFEL01fdlFuOHV3TXN0 a044LTZwZzljSDZ4Vm9iOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB6cCB67VyAOjDGnZzKUv5P2VuEVuy/JJbke27HPwShII3ISHX9xm1FKqFik1e/ mWg6dyP7QG9BIO/eCRuSfILlYr1KcXZeyl7PWwi7UZbKKbZUFcDlnVJ73xWWAV7j 6eUCu/dOvs7HobOkJNGqe8giY2hosN9548kHw3zJq1vM6OpHRB8j1vpfQp6ZXe6p rCCAGO4SyHMkLprrh+y+dprL2age7hrzTzDy3/SGPvomZ061XYKxVAPhns25mu3a Z665X5uto2qWBnJM33H9buDLLjBvGjUoRwZQiW/zd4lrnurUDCfukFYpXG2ouI86 Jk4gLXLJ9hcMzteTBziLvq+B -----END CERTIFICATE-----Generated at Fri Mar 27 04:59:20 2026 by rpki-client