$ rpki-client -vvf rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft File: 45B7SOaYfi_fztAe0B1As_Y9sRg.mft (raw, json) Hash identifier: i8t19hsbLECXzgOHiacU0dRY3yXUuzwqVzQWh9sXBO0= Subject key identifier: BC:63:E7:5A:BC:3F:54:38:69:00:80:C3:37:89:DA:FD:17:9A:A4:91 Authority key identifier: E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 Certificate issuer: /CN=A91297A2/serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft Manifest number: 01D2 Signing time: Wed 25 Mar 2026 03:00:50 +0000 Manifest this update: Wed 25 Mar 2026 03:00:49 +0000 Manifest next update: Wed 01 Apr 2026 03:00:49 +0000 Files and hashes: 1: 45B7SOaYfi_fztAe0B1As_Y9sRg.crl (hash: 4jUmFB+W9sMJVo1mCMdGAgCedQuVt0Q/wH6XYgRF6F4=) 2: B08503D8F8AA11EE91684140C4F9AE02.roa (hash: ViCudgIPygezvAtMJaZKmsZPceBqOw4Pvj8wkwoWduE=) 3: 624C3E865DB011F0875D570FC4F9AE02.roa (hash: a4BkoiItlms6YCqVC8v1i4qTu07pVSF2ZxL78g6dboE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91297A2, serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Validity Not Before: Mar 25 03:00:49 2026 GMT Not After : Apr 1 03:00:49 2026 GMT Subject: CN=69c34fe2-8edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:32:33:9d:e0:59:4c:1e:b7:8f:16:56:3b:d1: 61:7a:19:a2:cd:d8:d5:b0:3e:ec:3b:29:b1:28:29: 00:72:cb:cf:91:17:0a:68:74:3a:88:d1:7c:a7:9e: 47:82:2b:1c:08:04:73:8c:90:b8:41:73:d2:aa:88: 95:20:bb:a2:6b:89:79:0d:58:86:ad:e3:ac:8c:cf: 85:3e:45:a4:aa:78:7a:c3:d6:23:70:73:38:ae:72: 7c:ba:b3:01:3f:cb:a8:d4:e0:45:e0:6f:6f:2c:01: 66:f8:da:18:26:77:59:74:dc:03:58:19:28:0d:87: 1c:03:0b:d6:2c:56:49:79:68:1c:88:9f:c3:c2:14: 6b:37:1d:a8:ce:19:2c:e9:ac:1d:d0:5c:2c:7e:b9: 5c:8f:dc:80:ea:ad:50:5d:6f:cb:34:47:ce:ee:79: 31:17:0d:73:a7:44:c8:40:14:b6:b5:7d:ed:85:8b: fb:30:6b:8f:42:73:f8:b2:f2:16:5e:fd:25:43:21: 97:43:93:ce:22:f5:61:db:7c:a3:2c:f6:a2:24:6f: b2:5b:6b:3f:1e:6e:9f:75:c2:bd:6b:40:0d:70:a1: df:72:a6:96:86:c2:d8:65:bf:4f:bb:3f:de:dc:34: 9a:4e:c2:34:0c:2f:c7:d0:70:70:65:57:53:36:26: 9e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:63:E7:5A:BC:3F:54:38:69:00:80:C3:37:89:DA:FD:17:9A:A4:91 X509v3 Authority Key Identifier: keyid:E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:59:0c:4f:9d:45:9e:71:5e:c2:e9:0a:79:0a:cb:23:68:e2: 53:ac:d5:08:50:86:6a:02:e2:79:eb:62:5f:6e:b9:57:0c:14: 1d:7c:17:92:78:8a:c8:fc:ab:2b:28:85:2a:85:68:99:27:47: f1:79:05:90:43:1e:88:84:6b:b6:14:79:8e:cc:b5:2b:cd:54: 1a:02:1d:c4:1b:89:e6:8d:ce:52:72:b0:24:26:99:fe:bb:9a: 4c:f0:57:46:5a:da:5f:d1:d1:f8:15:c3:ed:eb:a1:0d:19:5e: 00:ce:38:35:d1:11:36:3a:dc:6d:14:85:09:e5:34:b5:94:19: d4:b5:99:be:7a:79:1b:02:d4:14:18:79:3e:f6:92:90:df:d1: d6:18:d0:ec:1d:93:24:bc:06:28:05:b4:3c:cc:44:63:7d:a6: 0d:79:ab:49:44:04:1d:27:52:ea:37:07:07:ca:cc:bc:2c:da: 11:86:8d:1a:92:57:fd:06:7b:ec:50:90:4f:7a:87:34:0f:5b: 96:21:d5:b7:d6:2d:4c:0d:20:b6:dd:d9:01:18:62:0c:9a:05: b7:6a:d1:e8:35:de:42:a8:85:54:db:7c:42:3c:54:21:0a:a1: d2:91:b1:5a:96:7d:dc:49:e7:e6:82:cb:1c:6e:cc:54:44:6a: 49:45:ea:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3QTIxMTAvBgNVBAUTKEUzOTA3QjQ4RTY5ODdFMkZERkNFRDAxRUQwMUQ0MEIz RjYzREIxMTgwHhcNMjYwMzI1MDMwMDQ5WhcNMjYwNDAxMDMwMDQ5WjAYMRYwFAYD VQQDEw02OWMzNGZlMi04ZWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTIzneBZTB63jxZWO9FhehmizdjVsD7sOymxKCkAcsvPkRcKaHQ6iNF8p55H giscCARzjJC4QXPSqoiVILuia4l5DViGreOsjM+FPkWkqnh6w9YjcHM4rnJ8urMB P8uo1OBF4G9vLAFm+NoYJndZdNwDWBkoDYccAwvWLFZJeWgciJ/DwhRrNx2ozhks 6awd0Fwsfrlcj9yA6q1QXW/LNEfO7nkxFw1zp0TIQBS2tX3thYv7MGuPQnP4svIW Xv0lQyGXQ5POIvVh23yjLPaiJG+yW2s/Hm6fdcK9a0ANcKHfcqaWhsLYZb9Puz/e 3DSaTsI0DC/H0HBwZVdTNiaeHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLxj51q8 P1Q4aQCAwzeJ2v0XmqSRMB8GA1UdIwQYMBaAFOOQe0jmmH4v387QHtAdQLP2PbEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTdBMi9CM0RGQzg4NDZE NjIxMUVFQjMwN0NFMTlDNEY5QUUwMi80NUI3U09hWWZpX2Z6dEFlMEIxQXNfWTlz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1QjdTT2FZZmlfZnp0QWUwQjFBc19ZOXNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTdBMi9CM0RGQzg4NDZENjIxMUVFQjMwN0NFMTlDNEY5QUUwMi80NUI3U09hWWZp X2Z6dEFlMEIxQXNfWTlzUmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQVkMT51FnnFewukKeQrLI2jiU6zVCFCGagLieetiX265VwwUHXwXkniKyPyr KyiFKoVomSdH8XkFkEMeiIRrthR5jsy1K81UGgIdxBuJ5o3OUnKwJCaZ/ruaTPBX RlraX9HR+BXD7euhDRleAM44NdERNjrcbRSFCeU0tZQZ1LWZvnp5GwLUFBh5PvaS kN/R1hjQ7B2TJLwGKAW0PMxEY32mDXmrSUQEHSdS6jcHB8rMvCzaEYaNGpJX/QZ7 7FCQT3qHNA9bliHVt9YtTA0gtt3ZARhiDJoFt2rR6DXeQqiFVNt8QjxUIQqh0pGx WpZ93Enn5oLLHG7MVERqSUXq5Q== -----END CERTIFICATE-----Generated at Thu Mar 26 02:28:28 2026 by rpki-client