$ rpki-client -vvf rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft File: -L04pMnwxPpzvw2Q_wzKgC2_1tw.mft (raw, json) Hash identifier: O2hRt2JvcoasxGONp+k39epsoltXE272cObLUd5CXNA= Subject key identifier: 7C:09:04:95:6F:28:99:AD:FA:D5:8F:F5:F2:1A:AB:DF:07:13:5F:C6 Authority key identifier: F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC Certificate issuer: /CN=A91407B7/serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Certificate serial: 088A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft Manifest number: 0875 Signing time: Thu 26 Mar 2026 20:31:16 +0000 Manifest this update: Thu 26 Mar 2026 20:31:15 +0000 Manifest next update: Thu 02 Apr 2026 20:31:15 +0000 Files and hashes: 1: -L04pMnwxPpzvw2Q_wzKgC2_1tw.crl (hash: 3UWCkvvNlQZ5Se3Srg36eqxQGZMTGOo76dVog7j5X7I=) 2: 26833348954511EFA5D9B90FC4F9AE02.roa (hash: h8w/oRabDFzHFUZZQz0f2z/FRWd7Jq2xtW0buGwOh1U=) 3: 4878EA2E954511EF87341210C4F9AE02.roa (hash: nPuGU4dIjV5NcDfw4+iA+iIUzRsqHity9f8+08+b7NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2186 (0x88a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91407B7, serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Validity Not Before: Mar 26 20:31:15 2026 GMT Not After : Apr 2 20:31:15 2026 GMT Subject: CN=69c59793-4e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9b:91:58:d8:88:77:bf:af:8c:30:66:1b:5c: 9a:b9:5f:12:6c:b1:a0:be:c9:36:96:68:25:7b:1e: 71:ae:b1:80:88:a8:f1:01:c2:a2:19:a7:11:dd:cd: 68:3a:3c:21:2c:42:68:f1:c9:f2:c3:1c:3d:6a:22: be:ec:0e:42:2f:da:f3:c7:c9:f1:aa:dd:93:df:75: 70:6d:66:78:d1:61:7e:d3:20:cc:94:2f:1d:48:5e: 31:79:9d:62:f9:e1:58:bf:91:3e:10:7b:02:06:a2: d7:bc:55:bb:f7:cf:66:63:5e:d0:59:71:d6:e5:b4: 72:9a:67:cb:f2:3d:17:61:de:14:3a:c1:fa:72:cf: 86:55:ff:02:bc:31:1b:7a:e5:20:45:8d:cf:72:66: 78:bb:fa:0a:e9:d2:09:41:d8:eb:33:e8:6c:e8:c1: 26:0e:96:08:d7:e2:c9:7a:d6:23:3c:cc:85:85:8c: d9:14:40:cd:f7:6e:64:e4:bb:5e:c7:cc:5b:a7:32: 9c:30:ca:46:55:49:98:d7:5e:33:46:d1:fd:1e:15: 4c:ea:94:2b:dc:db:ca:8e:75:b9:7a:e6:ca:06:b2: 4c:fb:02:39:de:26:da:82:58:25:e6:6b:65:2d:a4: 14:25:7f:df:a3:0b:e7:ff:20:98:2f:55:7f:22:0b: e0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:09:04:95:6F:28:99:AD:FA:D5:8F:F5:F2:1A:AB:DF:07:13:5F:C6 X509v3 Authority Key Identifier: keyid:F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:0c:0a:dd:04:86:58:2a:d3:9f:1e:c5:52:80:d9:3f:99:b2: 6b:3f:3d:60:fc:77:fa:2c:05:ad:3b:41:9c:f9:cc:74:f2:6f: 52:be:3c:f2:70:bf:24:24:85:ef:3f:b4:da:ef:d1:81:7e:79: d3:eb:5a:dc:f4:a3:5a:8c:76:73:7e:22:16:4f:1d:7f:04:7b: 5c:32:86:22:de:4a:88:e8:09:fa:6b:08:ba:4d:fd:74:83:ba: 86:b8:a4:a3:22:9d:02:d9:ed:b2:e5:09:cb:15:2d:90:a1:58: fc:64:a5:97:02:b0:8e:fa:6f:bc:da:9e:52:51:71:ef:ad:a0: 61:74:df:29:99:47:33:dd:4e:e4:bd:11:65:d3:12:42:14:96: 67:d4:1e:a6:73:0c:c0:34:44:93:bc:f4:f4:e5:02:14:25:f1: 7e:1e:ad:14:2c:c6:0e:04:2d:e4:46:8f:0f:6f:ea:3b:01:e8: ee:6a:ef:c5:2f:c9:20:94:de:d7:90:63:10:13:50:60:57:45: c6:fa:8a:0a:4e:28:cd:07:40:b1:ac:ee:b6:e3:e3:0d:41:c9: 05:d0:5e:0d:e1:b7:06:ba:09:1d:65:fd:1f:e6:c4:1e:49:bb: 7e:87:d1:3f:0a:e0:3d:a8:f9:2f:38:0c:60:56:98:7c:cb:6c: ba:67:f1:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA3QjcxMTAvBgNVBAUTKEY4QkQzOEE0QzlGMEM0RkE3M0JGMEQ5MEZGMENDQTgw MkRCRkQ2REMwHhcNMjYwMzI2MjAzMTE1WhcNMjYwNDAyMjAzMTE1WjAYMRYwFAYD VQQDEw02OWM1OTc5My00ZTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpuRWNiId7+vjDBmG1yauV8SbLGgvsk2lmglex5xrrGAiKjxAcKiGacR3c1o OjwhLEJo8cnywxw9aiK+7A5CL9rzx8nxqt2T33VwbWZ40WF+0yDMlC8dSF4xeZ1i +eFYv5E+EHsCBqLXvFW7989mY17QWXHW5bRymmfL8j0XYd4UOsH6cs+GVf8CvDEb euUgRY3PcmZ4u/oK6dIJQdjrM+hs6MEmDpYI1+LJetYjPMyFhYzZFEDN925k5Lte x8xbpzKcMMpGVUmY114zRtH9HhVM6pQr3NvKjnW5eubKBrJM+wI53ibaglgl5mtl LaQUJX/fowvn/yCYL1V/IgvgKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHwJBJVv KJmt+tWP9fIaq98HE1/GMB8GA1UdIwQYMBaAFPi9OKTJ8MT6c78NkP8MyoAtv9bc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDdCNy9CRDZGRTg1MEYx NzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQcHp2dzJRX3d6S2dDMl8x dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1MMDRwTW53eFBwenZ3MlFfd3pLZ0MyXzF0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDdCNy9CRDZGRTg1MEYxNzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQ cHp2dzJRX3d6S2dDMl8xdHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJAwK3QSGWCrTnx7FUoDZP5myaz89YPx3+iwFrTtBnPnMdPJvUr488nC/JCSF 7z+02u/RgX550+ta3PSjWox2c34iFk8dfwR7XDKGIt5KiOgJ+msIuk39dIO6hrik oyKdAtntsuUJyxUtkKFY/GSllwKwjvpvvNqeUlFx762gYXTfKZlHM91O5L0RZdMS QhSWZ9QepnMMwDREk7z09OUCFCXxfh6tFCzGDgQt5EaPD2/qOwHo7mrvxS/JIJTe 15BjEBNQYFdFxvqKCk4ozQdAsazutuPjDUHJBdBeDeG3BroJHWX9H+bEHkm7fofR PwrgPaj5LzgMYFaYfMtsumfxyA== -----END CERTIFICATE-----Generated at Fri Mar 27 01:17:34 2026 by rpki-client