$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft File: h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json) Hash identifier: DfFpMvFk5e0mL/sVbihLKVBl6xCI5jQWjL81QL/8dQI= Subject key identifier: CE:08:00:9D:32:2B:6E:47:FD:97:AE:3E:48:78:1A:5D:52:AC:7B:89 Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Certificate serial: 0433 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft Manifest number: 0422 Signing time: Wed 25 Mar 2026 00:03:11 +0000 Manifest this update: Wed 25 Mar 2026 00:03:10 +0000 Manifest next update: Wed 01 Apr 2026 00:03:10 +0000 Files and hashes: 1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: 1hY7mlag9+/iIFpYX6MjxoAGNeVzTwVrPsywx2+X8sY=) 2: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: R1p0DVRofqdeH6QxATqgcU+e98QOUDyy8PCaiyWmtec=) 3: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: MkD1AGDtNdRBgvMZkblNYtTFfJr5iiAw0iD+SH5TK3U=) 4: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: ZhvQJvrJhz5hPHtUfFRkmrF3mN5JAQ6j3AqMP+9IiGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1075 (0x433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Validity Not Before: Mar 25 00:03:10 2026 GMT Not After : Apr 1 00:03:10 2026 GMT Subject: CN=69c3263f-efc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:59:cd:97:eb:39:a7:cc:45:62:99:49:d0:ef: ae:eb:d3:1f:1d:06:14:71:b2:1f:f4:d4:8a:fb:53: 3c:b3:52:a6:61:64:9f:6b:f7:47:54:27:32:b3:fd: 67:9f:1a:e3:92:55:a0:71:e4:05:06:36:16:9f:37: 1d:7a:4c:97:83:08:b4:0c:fa:8f:e2:68:6e:8c:63: bb:ad:2f:4a:bd:23:aa:8f:b5:6b:ac:39:e4:da:d2: 29:80:b9:ad:f9:09:4e:a4:41:c3:b3:da:24:c2:09: ed:18:bc:e9:02:4f:ef:ea:9b:b1:3c:43:f9:b6:1f: 85:ca:e9:ab:55:70:b5:d1:68:fe:bc:05:cd:a6:9a: 15:c3:9d:5b:29:fb:fb:98:3f:db:17:4d:c8:68:35: b4:57:52:d4:5b:ac:52:f0:e6:1e:53:8d:0e:b7:ce: ce:04:af:90:fa:bc:eb:94:b1:df:8f:77:99:a1:6c: d6:a9:5b:47:3f:fc:12:d6:84:f8:9a:9b:18:19:53: 95:55:5c:16:9a:b3:21:6d:8d:9e:41:1b:46:0a:1b: 4f:01:fc:5e:43:ea:1c:8c:1e:a7:53:f2:e1:e1:74: 3a:99:be:6c:70:bd:7b:69:15:e5:29:69:65:c1:fe: 3a:51:ce:80:f3:fe:1d:e4:76:32:52:7f:66:1c:12: e9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:08:00:9D:32:2B:6E:47:FD:97:AE:3E:48:78:1A:5D:52:AC:7B:89 X509v3 Authority Key Identifier: keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:da:1b:2d:0b:0f:f4:9e:d2:68:da:09:07:eb:3c:d7:7d:bf: 07:38:05:84:a7:38:30:ed:16:19:11:86:2c:37:c8:2a:0d:c1: 77:6d:68:4a:55:37:23:b4:69:66:9f:bb:c4:3b:3b:ae:52:04: 84:90:f4:7f:ef:98:2b:8c:4e:82:38:ff:b1:fc:71:de:7b:c5: 87:22:44:c4:f6:01:68:7e:23:c7:90:07:39:b0:33:de:7d:4f: 74:5e:f3:11:5c:80:92:c4:99:2b:16:06:b7:55:87:9c:0a:47: c2:af:93:e1:ba:8c:29:b5:40:aa:5c:21:8b:47:fb:71:0d:39: 84:45:be:67:a1:03:d8:8f:cf:18:f7:c9:3c:99:27:91:5a:e9: 4d:1b:f1:1f:d9:89:c5:ac:68:a9:73:a3:35:0f:7f:9e:af:a8: d4:f0:c1:a6:ef:dd:bb:5d:35:0c:73:bb:9a:0d:75:22:9c:1e: fc:2c:c2:63:9f:45:23:36:36:75:7b:4b:e2:36:82:45:db:2d: 92:f5:68:2a:19:55:76:98:99:6d:db:39:d8:fc:1a:a8:5f:0b: 5d:14:86:93:0c:15:85:39:91:fb:d0:59:e5:c8:a1:59:ea:f1: 71:fc:00:7a:bf:a8:03:2b:06:6b:8a:ff:c1:8f:e4:5b:cc:a1: d7:4b:3e:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU0QUUxMTAvBgNVBAUTKDg3Rjk1OERBRjQ5ODY1OUE5RUVFMEZGMTQ0MjI2QjE3 MTA0ODlERTAwHhcNMjYwMzI1MDAwMzEwWhcNMjYwNDAxMDAwMzEwWjAYMRYwFAYD VQQDEw02OWMzMjYzZi1lZmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFnNl+s5p8xFYplJ0O+u69MfHQYUcbIf9NSK+1M8s1KmYWSfa/dHVCcys/1n nxrjklWgceQFBjYWnzcdekyXgwi0DPqP4mhujGO7rS9KvSOqj7VrrDnk2tIpgLmt +QlOpEHDs9okwgntGLzpAk/v6puxPEP5th+FyumrVXC10Wj+vAXNppoVw51bKfv7 mD/bF03IaDW0V1LUW6xS8OYeU40Ot87OBK+Q+rzrlLHfj3eZoWzWqVtHP/wS1oT4 mpsYGVOVVVwWmrMhbY2eQRtGChtPAfxeQ+ocjB6nU/Lh4XQ6mb5scL17aRXlKWll wf46Uc6A8/4d5HYyUn9mHBLpDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4IAJ0y K25H/ZeuPkh4Gl1SrHuJMB8GA1UdIwQYMBaAFIf5WNr0mGWanu4P8UQiaxcQSJ3g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTRBRS82QzlGMkRGQUE1 MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpacWU3Z194UkNKckZ4Qklu ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfbFkydlNZWlpxZTdnX3hSQ0pyRnhCSW5lQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTRBRS82QzlGMkRGQUE1MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpa cWU3Z194UkNKckZ4QkluZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmdobLQsP9J7SaNoJB+s8132/BzgFhKc4MO0WGRGGLDfIKg3Bd21oSlU3I7Rp Zp+7xDs7rlIEhJD0f++YK4xOgjj/sfxx3nvFhyJExPYBaH4jx5AHObAz3n1PdF7z EVyAksSZKxYGt1WHnApHwq+T4bqMKbVAqlwhi0f7cQ05hEW+Z6ED2I/PGPfJPJkn kVrpTRvxH9mJxaxoqXOjNQ9/nq+o1PDBpu/du101DHO7mg11Ipwe/CzCY59FIzY2 dXtL4jaCRdstkvVoKhlVdpiZbds52PwaqF8LXRSGkwwVhTmR+9BZ5cihWerxcfwA er+oAysGa4r/wY/kW8yh10s+eA== -----END CERTIFICATE-----Generated at Thu Mar 26 11:28:52 2026 by rpki-client