$ rpki-client -vvf rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft File: GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft (raw, json) Hash identifier: I0sl0nMXQdn/gvV2cRovXLAaB4pWleFvCz6u4jVqa6Y= Subject key identifier: 9A:E2:93:DF:A7:85:BE:7F:30:AE:0F:A4:65:61:87:83:0A:A2:E6:6B Authority key identifier: 1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D Certificate issuer: /CN=A91519CC/serialNumber=1B3683525944774388853090D1005BB51552246D Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft Manifest number: 3B Signing time: Wed 25 Mar 2026 07:46:56 +0000 Manifest this update: Wed 25 Mar 2026 07:46:56 +0000 Manifest next update: Wed 01 Apr 2026 07:46:56 +0000 Files and hashes: 1: GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl (hash: eiUk6lU6HglRLiJ38zVKRlPF6yiMlnpV4dh5D+j9ZQE=) 2: 9C9F0DC6DA5A11F08EBD209195D3641D.roa (hash: JgdmWI3k7cOqCcItbOe6xRBhm/7mwOzKG5iBpPWBzvY=) 3: 9D232386DA5A11F08EBD209195D3641D.roa (hash: QOzthGopxBzd3k4toAQMU4imXtsyINBxu6ucmSP2zFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91519CC, serialNumber=1B3683525944774388853090D1005BB51552246D Validity Not Before: Mar 25 07:46:56 2026 GMT Not After : Apr 1 07:46:56 2026 GMT Subject: CN=69c392f0-ab27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:69:66:8d:fa:d0:fb:ca:a9:15:b2:f7:37:c9: 20:bd:49:18:e8:ee:e2:c6:36:11:34:e7:dd:7c:27: 19:6e:d7:66:0b:d9:8e:0d:9d:f9:b8:b8:cf:57:8f: 8e:e7:10:a6:8d:aa:85:0f:36:3c:f6:31:f2:bb:e2: b3:bf:d3:ac:ce:15:77:3d:52:0b:a8:9d:41:b9:20: 68:80:c3:ab:1c:d3:58:10:df:d9:c0:88:59:b5:35: e0:23:25:c0:bb:d7:f3:f2:bd:65:30:ca:d1:7d:20: 7b:d7:24:0f:9b:71:e7:39:da:f3:96:68:a3:af:06: c5:6f:a0:5c:40:eb:38:37:31:21:39:d2:5b:12:18: a4:78:af:ba:c0:3c:51:52:6b:cc:ef:3b:0d:92:50: 35:b2:e2:45:fe:90:12:e8:9d:b5:fb:40:eb:b6:00: 8e:cc:03:ec:32:0f:30:74:25:0e:69:17:c4:3e:f0: ca:df:05:13:bc:78:95:e6:71:03:35:d1:db:08:66: 61:b4:94:df:c6:85:75:75:72:15:2f:61:b2:59:51: 95:5c:23:93:b6:bd:87:03:91:b1:1d:03:eb:f5:d0: 21:19:48:95:7e:65:5a:28:11:d6:42:70:34:52:2a: bd:cb:f4:9d:f4:bf:fb:d7:d9:d0:1d:fe:0a:80:45: 3e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E2:93:DF:A7:85:BE:7F:30:AE:0F:A4:65:61:87:83:0A:A2:E6:6B X509v3 Authority Key Identifier: keyid:1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:54:91:5b:cd:4a:21:a8:61:b0:29:85:1d:01:3a:c9:13:c3: ca:03:a2:4c:bb:2a:98:7e:36:5e:51:2b:f8:5e:8c:b1:19:2d: 95:c5:12:a4:84:fc:00:a4:73:5f:3d:7c:76:a8:b3:31:32:58: 72:a5:0d:ae:05:b7:c0:ce:d2:26:a9:a6:2d:53:3a:1a:59:07: 32:01:45:c8:c9:97:e5:de:8f:51:2f:d6:e5:59:5a:a4:e8:c9: ae:6a:14:29:e3:17:2e:8d:d0:fb:5d:16:ec:6c:ba:2f:d9:83: 06:04:be:9e:73:a2:d3:7b:cd:52:c3:a5:ba:27:ef:bf:c7:b3: 8a:6a:0f:d4:28:7f:ae:91:7c:9f:62:0b:3c:2e:1d:d6:aa:d0: 4b:c0:d1:ea:69:de:97:fd:2c:a5:d6:d0:c3:1a:d8:fd:b8:82: da:8b:7a:1c:3b:b0:ef:28:fa:86:ba:07:66:f7:7a:94:ff:cc: b0:57:a4:6c:78:19:74:b0:ab:bc:fc:7a:05:ff:d8:24:06:cf: 5a:75:57:86:db:7a:5b:61:2f:af:18:3b:77:53:07:c0:7c:b6: 5e:ef:04:e6:e9:2c:d7:45:4a:8a:25:9b:62:18:ee:4c:82:fe: 0e:ac:d6:6a:2f:3a:bf:2c:4e:20:07:08:4a:de:2e:53:ea:0a: 3a:9f:65:ae -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTlDQzExMC8GA1UEBRMoMUIzNjgzNTI1OTQ0Nzc0Mzg4ODUzMDkwRDEwMDVCQjUx NTUyMjQ2RDAeFw0yNjAzMjUwNzQ2NTZaFw0yNjA0MDEwNzQ2NTZaMBgxFjAUBgNV BAMTDTY5YzM5MmYwLWFiMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7aWaN+tD7yqkVsvc3ySC9SRjo7uLGNhE05918Jxlu12YL2Y4Nnfm4uM9Xj47n EKaNqoUPNjz2MfK74rO/06zOFXc9UguonUG5IGiAw6sc01gQ39nAiFm1NeAjJcC7 1/PyvWUwytF9IHvXJA+bcec52vOWaKOvBsVvoFxA6zg3MSE50lsSGKR4r7rAPFFS a8zvOw2SUDWy4kX+kBLonbX7QOu2AI7MA+wyDzB0JQ5pF8Q+8MrfBRO8eJXmcQM1 0dsIZmG0lN/GhXV1chUvYbJZUZVcI5O2vYcDkbEdA+v10CEZSJV+ZVooEdZCcDRS Kr3L9J30v/vX2dAd/gqART5rAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmuKT36eF vn8wrg+kZWGHgwqi5mswHwYDVR0jBBgwFoAUGzaDUllEd0OIhTCQ0QBbtRVSJG0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxOUNDLzk5MTRCOEU0REEx RjExRjBBQjgyMEZGNzg0RDM2NDFEL0d6YURVbGxFZDBPSWhUQ1EwUUJidFJWU0pH MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR3phRFVsbEVkME9JaFRDUTBRQmJ0UlZTSkcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx OUNDLzk5MTRCOEU0REExRjExRjBBQjgyMEZGNzg0RDM2NDFEL0d6YURVbGxFZDBP SWhUQ1EwUUJidFJWU0pHMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBcVJFbzUohqGGwKYUdATrJE8PKA6JMuyqYfjZeUSv4XoyxGS2VxRKkhPwApHNf PXx2qLMxMlhypQ2uBbfAztImqaYtUzoaWQcyAUXIyZfl3o9RL9blWVqk6MmuahQp 4xcujdD7XRbsbLov2YMGBL6ec6LTe81Sw6W6J++/x7OKag/UKH+ukXyfYgs8Lh3W qtBLwNHqad6X/Syl1tDDGtj9uILai3ocO7DvKPqGugdm93qU/8ywV6RseBl0sKu8 /HoF/9gkBs9adVeG23pbYS+vGDt3UwfAfLZe7wTm6SzXRUqKJZtiGO5Mgv4OrNZq Lzq/LE4gBwhK3i5T6go6n2Wu -----END CERTIFICATE-----Generated at Thu Mar 26 20:26:58 2026 by rpki-client