$ rpki-client -vvf rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft File: TS0NULyRom4hHzg_UCqz1w0C3HA.mft (raw, json) Hash identifier: O6sPx5aIrrhSK9eRXFGLr1D2pOeECgLFbT/UAAgSdmY= Subject key identifier: D8:28:21:23:25:16:59:ED:5F:22:1F:AE:ED:4A:B5:BE:2E:3B:47:B5 Authority key identifier: 4D:2D:0D:50:BC:91:A2:6E:21:1F:38:3F:50:2A:B3:D7:0D:02:DC:70 Certificate issuer: /CN=A91406FF/serialNumber=4D2D0D50BC91A26E211F383F502AB3D70D02DC70 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TS0NULyRom4hHzg_UCqz1w0C3HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft Manifest number: 11 Signing time: Wed 25 Mar 2026 08:14:45 +0000 Manifest this update: Wed 25 Mar 2026 08:14:45 +0000 Manifest next update: Wed 01 Apr 2026 08:14:45 +0000 Files and hashes: 1: TS0NULyRom4hHzg_UCqz1w0C3HA.crl (hash: s2fhXa5fqslvLapFI32CTD6DXTiIa4+rpAgzcr+90Fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.crl rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TS0NULyRom4hHzg_UCqz1w0C3HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:14:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406FF, serialNumber=4D2D0D50BC91A26E211F383F502AB3D70D02DC70 Validity Not Before: Mar 25 08:14:45 2026 GMT Not After : Apr 1 08:14:45 2026 GMT Subject: CN=69c39975-2f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:ee:a2:43:fd:ea:da:16:5b:99:c2:20:fe: 8b:06:04:c4:3a:a0:bd:28:bf:fe:80:a0:e0:a3:65: 09:99:17:a4:b2:d2:3f:53:14:07:8a:0e:86:68:b6: 60:26:14:de:6c:9a:d4:27:04:ed:4b:ad:3b:42:8a: 48:4f:09:3c:2e:d4:56:bd:5a:54:91:12:9a:94:30: 7a:c3:4d:06:23:d4:e7:5b:27:51:aa:3b:cb:88:fa: 88:b1:8b:a8:9d:54:32:e4:40:f4:99:ac:69:51:20: b4:ee:8f:65:b5:0a:45:b9:15:4c:03:f2:c5:b1:80: af:b0:8c:8e:07:9c:65:d7:e0:00:77:2a:c6:39:75: 35:df:5e:be:75:b9:76:57:6e:3c:ae:14:43:4d:28: 7d:1c:6d:69:a6:c2:67:91:a6:5f:f4:35:eb:de:fe: e0:a2:d2:60:75:73:40:d3:63:09:de:63:7c:7a:5b: ad:76:34:38:c5:a4:00:39:36:13:26:25:51:e3:1d: 61:b8:97:f6:51:f9:be:bf:26:70:76:fa:2f:16:76: 90:72:27:9d:72:83:c2:53:c4:2a:ca:05:56:7d:d0: 60:c6:da:e5:9d:96:24:cd:f3:55:3c:01:d6:04:d2: 52:1f:28:38:ce:97:b0:00:e6:a3:af:0e:08:9e:4e: 2d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:28:21:23:25:16:59:ED:5F:22:1F:AE:ED:4A:B5:BE:2E:3B:47:B5 X509v3 Authority Key Identifier: keyid:4D:2D:0D:50:BC:91:A2:6E:21:1F:38:3F:50:2A:B3:D7:0D:02:DC:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TS0NULyRom4hHzg_UCqz1w0C3HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:c6:40:0b:ef:05:b2:90:3f:49:63:bf:b7:12:f1:73:cd:66: 44:de:85:82:ee:95:91:ac:25:fc:25:9d:7e:40:1a:7b:d4:e7: 61:ea:16:87:4d:f8:d8:67:ab:0c:57:e3:95:c1:d1:69:c6:04: 65:ae:20:e6:b0:de:b8:eb:20:05:91:c7:77:88:af:c8:c3:75: 89:e4:22:e3:cb:48:2c:cc:0e:b0:07:ed:a5:70:d5:3b:0a:5b: 35:79:af:49:78:2e:37:a3:fe:87:7c:9c:52:c0:2d:f3:ca:44: bc:7e:8e:2b:5c:91:4e:05:4b:f6:04:5b:1d:97:eb:1c:e9:7c: c2:3c:f5:b8:c8:d5:ed:fa:0f:c9:1a:fd:ff:eb:79:e8:e9:ab: 10:dc:5c:c2:60:bf:cd:9a:a8:a8:c4:6d:36:d0:52:b5:5e:07: 20:8d:ae:e8:65:d7:a7:a3:4d:1b:95:6f:41:42:b8:65:82:3b: 65:aa:ac:bc:e4:65:fb:ef:be:ee:bd:42:bb:26:b1:be:7f:9d: 19:67:ae:2c:72:a0:fe:48:95:ce:cc:0a:d1:f5:cf:6f:56:a0: 31:6c:d1:72:51:a8:da:7d:18:71:4a:84:62:da:85:f7:03:b5: 92:ad:e4:c4:ce:75:6c:7b:5d:3f:9e:c2:ac:d5:83:e8:82:f7: 13:df:d8:7d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDZGRjExMC8GA1UEBRMoNEQyRDBENTBCQzkxQTI2RTIxMUYzODNGNTAyQUIzRDcw RDAyREM3MDAeFw0yNjAzMjUwODE0NDVaFw0yNjA0MDEwODE0NDVaMBgxFjAUBgNV BAMTDTY5YzM5OTc1LTJmNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtuO6iQ/3q2hZbmcIg/osGBMQ6oL0ov/6AoOCjZQmZF6Sy0j9TFAeKDoZotmAm FN5smtQnBO1LrTtCikhPCTwu1Fa9WlSREpqUMHrDTQYj1OdbJ1GqO8uI+oixi6id VDLkQPSZrGlRILTuj2W1CkW5FUwD8sWxgK+wjI4HnGXX4AB3KsY5dTXfXr51uXZX bjyuFENNKH0cbWmmwmeRpl/0Neve/uCi0mB1c0DTYwneY3x6W612NDjFpAA5NhMm JVHjHWG4l/ZR+b6/JnB2+i8WdpByJ51yg8JTxCrKBVZ90GDG2uWdliTN81U8AdYE 0lIfKDjOl7AA5qOvDgieTi2DAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2CghIyUW We1fIh+u7Uq1vi47R7UwHwYDVR0jBBgwFoAUTS0NULyRom4hHzg/UCqz1w0C3HAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwNkZGLzFENzEwNjBBMTFG RDExRjFBNDY2MzYzQzEzM0Q4QzY3L1RTME5VTHlSb200aEh6Z19VQ3F6MXcwQzNI QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFMwTlVMeVJvbTRoSHpnX1VDcXoxdzBDM0hBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw NkZGLzFENzEwNjBBMTFGRDExRjFBNDY2MzYzQzEzM0Q4QzY3L1RTME5VTHlSb200 aEh6Z19VQ3F6MXcwQzNIQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB0xkAL7wWykD9JY7+3EvFzzWZE3oWC7pWRrCX8JZ1+QBp71Odh6haHTfjYZ6sM V+OVwdFpxgRlriDmsN646yAFkcd3iK/Iw3WJ5CLjy0gszA6wB+2lcNU7Cls1ea9J eC43o/6HfJxSwC3zykS8fo4rXJFOBUv2BFsdl+sc6XzCPPW4yNXt+g/JGv3/63no 6asQ3FzCYL/NmqioxG020FK1Xgcgja7oZdeno00blW9BQrhlgjtlqqy85GX7777u vUK7JrG+f50ZZ64scqD+SJXOzArR9c9vVqAxbNFyUajafRhxSoRi2oX3A7WSreTE znVse10/nsKs1YPogvcT39h9 -----END CERTIFICATE-----Generated at Thu Mar 26 00:28:34 2026 by rpki-client