$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.mft File: V2i_S72Luw3lwVz_jwqRSKCyLtU.mft (raw, json) Hash identifier: 6CnNw+kMlJUgoJs294shvFqZsyGZmNO2GT5n0jqbKYo= Subject key identifier: 6A:BE:C1:88:4A:11:22:63:33:43:32:09:EE:F1:64:AC:06:79:E4:66 Authority key identifier: 57:68:BF:4B:BD:8B:BB:0D:E5:C1:5C:FF:8F:0A:91:48:A0:B2:2E:D5 Certificate issuer: /CN=A91538E7/serialNumber=5768BF4BBD8BBB0DE5C15CFF8F0A9148A0B22ED5 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V2i_S72Luw3lwVz_jwqRSKCyLtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.mft Manifest number: 3A Signing time: Tue 24 Mar 2026 20:35:02 +0000 Manifest this update: Tue 24 Mar 2026 20:35:01 +0000 Manifest next update: Tue 31 Mar 2026 20:35:01 +0000 Files and hashes: 1: V2i_S72Luw3lwVz_jwqRSKCyLtU.crl (hash: F9H14AFA7MxgNf/KJmrc/4J56qqBtDEt+YSn5V+007M=) 2: CEDA6062150911F1B271807B1E3D8C67.roa (hash: GaJ7HxRYE0+l3L7iJs19B7gCjn2WV0Am/9oj7fC5tW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.crl rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V2i_S72Luw3lwVz_jwqRSKCyLtU.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=5768BF4BBD8BBB0DE5C15CFF8F0A9148A0B22ED5 Validity Not Before: Mar 24 20:35:01 2026 GMT Not After : Mar 31 20:35:01 2026 GMT Subject: CN=69c2f576-9dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f9:0f:19:07:0f:a2:fc:e2:af:85:ba:26:47: 0f:3d:fe:b5:d4:1f:fe:33:d4:62:fb:6f:88:26:0c: b1:02:3c:8f:73:da:1d:67:52:62:a3:84:9c:86:59: 52:e2:9a:e5:fd:76:32:f7:aa:56:d8:0d:31:1f:70: aa:33:e1:f6:eb:ea:79:98:31:da:66:fc:1b:0e:34: c4:30:5f:b2:e2:d9:c0:9e:a7:25:9d:01:e1:2a:ab: 8e:a3:b6:df:fe:22:3f:a4:83:38:8f:78:8e:69:22: d0:a8:2a:1f:3e:22:e0:c7:79:2a:65:a0:5e:46:af: 25:65:6d:fc:ea:8c:df:90:95:24:c0:96:0a:dd:cc: 13:a9:b1:3e:42:11:55:ee:20:eb:6f:51:43:24:db: 41:84:79:44:ca:62:e0:50:f7:ef:6e:83:4d:0c:d6: b2:bb:12:88:4d:c0:a1:30:f7:24:f5:8b:91:f0:33: 2f:bf:cc:72:33:5d:ab:98:7b:aa:7b:36:3f:a1:f3: bc:48:20:93:e0:36:ce:60:77:f0:5f:4d:89:87:1c: 01:8a:01:4e:ee:a2:26:7d:7d:b2:7a:cb:24:a3:0f: ac:b1:07:b1:8f:cf:12:ea:6d:27:10:d5:76:6b:57: 97:0a:4c:92:ef:84:fb:d3:c0:c8:7e:71:bc:46:38: f1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BE:C1:88:4A:11:22:63:33:43:32:09:EE:F1:64:AC:06:79:E4:66 X509v3 Authority Key Identifier: keyid:57:68:BF:4B:BD:8B:BB:0D:E5:C1:5C:FF:8F:0A:91:48:A0:B2:2E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V2i_S72Luw3lwVz_jwqRSKCyLtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:dc:8d:e2:0b:9a:b2:3b:0d:4d:da:fe:18:b3:9b:9e:70:ea: da:19:fd:ab:90:e5:63:62:80:63:11:8b:0f:b0:a4:5e:00:47: b1:4c:93:5a:59:8c:a5:72:ff:3f:a9:b5:bb:6e:55:61:6e:a0: 42:6e:06:06:20:8a:94:8a:1e:2a:b0:5d:32:f0:f8:70:49:bf: 82:5d:e7:cc:38:9c:bf:04:25:30:7a:53:09:3f:ab:ae:9f:3e: ca:b5:bc:89:4f:47:82:bd:22:9b:31:1f:50:40:e4:37:97:c7: b9:64:1e:d2:0f:d7:25:d8:89:25:94:ef:a0:82:26:67:e9:d3: 05:b3:3b:8b:e5:08:1c:6a:33:26:1f:a9:9c:b7:52:c9:0c:e7: 1b:de:a4:7d:b9:79:ed:5b:1f:32:50:6a:91:72:e8:48:9d:a1: ab:4e:3f:e3:ef:54:44:01:97:0c:c5:25:19:3d:22:56:40:6b: 34:c2:87:48:24:4e:4e:9d:16:67:63:05:fd:8e:83:9f:1e:f9: c1:00:24:69:77:d4:1a:c3:a0:85:89:de:2f:23:7b:72:63:78: 7d:04:e5:3d:07:2b:d0:dd:56:5f:4a:0b:3e:f9:78:63:78:c9: 94:4e:0f:fd:8f:1e:7b:bd:06:e5:d7:3c:29:e0:d5:96:3a:af: fb:06:74:ae -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzhFNzExMC8GA1UEBRMoNTc2OEJGNEJCRDhCQkIwREU1QzE1Q0ZGOEYwQTkxNDhB MEIyMkVENTAeFw0yNjAzMjQyMDM1MDFaFw0yNjAzMzEyMDM1MDFaMBgxFjAUBgNV BAMTDTY5YzJmNTc2LTlkYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCX+Q8ZBw+i/OKvhbomRw89/rXUH/4z1GL7b4gmDLECPI9z2h1nUmKjhJyGWVLi muX9djL3qlbYDTEfcKoz4fbr6nmYMdpm/BsONMQwX7Li2cCepyWdAeEqq46jtt/+ Ij+kgziPeI5pItCoKh8+IuDHeSploF5GryVlbfzqjN+QlSTAlgrdzBOpsT5CEVXu IOtvUUMk20GEeUTKYuBQ9+9ug00M1rK7EohNwKEw9yT1i5HwMy+/zHIzXauYe6p7 Nj+h87xIIJPgNs5gd/BfTYmHHAGKAU7uoiZ9fbJ6yySjD6yxB7GPzxLqbScQ1XZr V5cKTJLvhPvTwMh+cbxGOPFtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUar7BiEoR ImMzQzIJ7vFkrAZ55GYwHwYDVR0jBBgwFoAUV2i/S72Luw3lwVz/jwqRSKCyLtUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOEU3LzAxNEM4OEZBRTEw NjExRjA5Q0Y2Q0IzNDk2RUU1MjhFL1YyaV9TNzJMdXczbHdWel9qd3FSU0tDeUx0 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG RDFGRjIvVjJpX1M3Mkx1dzNsd1Z6X2p3cVJTS0N5THRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz OEU3LzAxNEM4OEZBRTEwNjExRjA5Q0Y2Q0IzNDk2RUU1MjhFL1YyaV9TNzJMdXcz bHdWel9qd3FSU0tDeUx0VS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAe3I3iC5qyOw1N2v4Ys5uecOraGf2rkOVjYoBjEYsPsKReAEexTJNaWYylcv8/ qbW7blVhbqBCbgYGIIqUih4qsF0y8PhwSb+CXefMOJy/BCUwelMJP6uunz7KtbyJ T0eCvSKbMR9QQOQ3l8e5ZB7SD9cl2IkllO+ggiZn6dMFszuL5QgcajMmH6mct1LJ DOcb3qR9uXntWx8yUGqRcuhInaGrTj/j71REAZcMxSUZPSJWQGs0wodIJE5OnRZn YwX9joOfHvnBACRpd9Qaw6CFid4vI3tyY3h9BOU9ByvQ3VZfSgs++XhjeMmUTg/9 jx57vQbl1zwp4NWWOq/7BnSu -----END CERTIFICATE-----Generated at Thu Mar 26 21:03:36 2026 by rpki-client