$ rpki-client -vvf rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft File: tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft (raw, json) Hash identifier: jvAEQ8NH25bvC1IZkslYTJVaQ6LbH/+QSO9FYa/eFXw= Subject key identifier: B0:F9:21:A9:7D:FF:04:15:EC:D6:34:D4:1C:D7:4C:FB:09:2D:8F:C7 Authority key identifier: B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 Certificate issuer: /CN=A91599B5/serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft Manifest number: 87 Signing time: Wed 25 Mar 2026 06:58:14 +0000 Manifest this update: Wed 25 Mar 2026 06:58:14 +0000 Manifest next update: Wed 01 Apr 2026 06:58:14 +0000 Files and hashes: 1: tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl (hash: Gtmfs8RVVoTU1ErjNrlDmoe2ZJxaapcHruLm76BS6hY=) 2: E13B045ACAD611F0AB7FEE55C4F9AE02.roa (hash: HUQd5AJYGdLE7NKYHx8Lq6oK6+YpU4Q/zvBoPbc+PIM=) 3: 1D5A2DB2CAD711F0A64CBB56C4F9AE02.roa (hash: UYmzmNOhHVux9yZEz47QdQpPwQPcVltUv0OFhaHMSfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91599B5, serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Validity Not Before: Mar 25 06:58:14 2026 GMT Not After : Apr 1 06:58:14 2026 GMT Subject: CN=69c38786-1ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4c:eb:dc:c9:55:2c:e0:be:b8:f6:98:8f:e8: 6e:ca:60:28:8e:be:89:43:79:95:d2:cc:44:56:5d: 04:bf:6c:7b:88:b2:bf:41:ea:5f:03:7b:31:d7:16: 8c:f2:38:c7:5b:9d:7a:e9:ef:ad:88:3a:37:7c:13: 56:75:97:c3:d2:52:e6:9a:57:6a:58:22:b0:47:1c: 41:8f:e1:ee:57:41:a5:51:8b:f2:e4:7c:a8:66:bb: 36:d0:58:3b:24:09:73:b0:11:35:e0:43:89:81:e2: f3:d3:42:0d:d9:c8:89:b1:d8:34:cf:54:dd:f9:fc: da:84:0a:29:54:ad:54:85:ca:2d:38:78:36:c9:cd: 0c:76:4a:fa:09:e5:35:09:df:1a:fd:4a:21:86:0f: 09:29:c8:57:06:44:9f:24:c4:b1:b2:32:f4:e2:55: 4d:f8:9c:5e:68:08:3f:c3:c8:b9:14:b9:fa:68:97: 55:3b:a6:68:4b:2a:37:8c:73:13:fb:73:41:a6:c2: 65:8c:39:07:d2:7e:90:1e:55:ee:d3:4b:6b:f6:6d: bf:11:a9:6d:cc:7b:f5:aa:a7:bd:79:d0:66:fb:fc: 9d:91:26:46:cb:c6:48:33:99:26:54:f5:56:28:c7: 3a:57:01:43:6c:f8:2c:93:1e:3f:c2:dc:e7:89:d0: e1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F9:21:A9:7D:FF:04:15:EC:D6:34:D4:1C:D7:4C:FB:09:2D:8F:C7 X509v3 Authority Key Identifier: keyid:B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c4:64:9b:24:e6:de:f8:c5:4d:15:65:a1:1d:cc:b9:c9:e0: 76:3d:5a:d3:b0:db:24:ab:ca:1d:75:8e:6d:05:94:67:cd:16: 7b:3f:6a:94:5a:5d:b3:0d:cb:53:ee:24:b6:d6:67:cc:e0:7c: 23:e3:40:62:3f:ec:2e:8d:4b:a5:0d:4b:7d:c9:1a:b3:d0:41: 7a:10:80:6c:9a:86:91:7f:c0:b8:23:87:5d:d7:03:1b:a6:77: b8:49:23:fd:2d:5c:78:75:30:0e:c6:40:7b:b5:40:fb:f3:79: 3e:a1:0a:e7:91:2a:16:6f:61:b0:ac:31:91:11:e3:3f:9a:db: 75:0c:18:3f:91:09:fa:8c:43:fe:4d:98:18:4f:a8:e4:67:d7: 1a:17:c7:a9:a7:f3:16:a6:7d:4d:78:47:c7:9c:40:ba:45:a2: 9d:8d:de:7b:cb:b4:59:6d:2c:6b:37:7f:f9:5a:a1:7c:ee:2c: 40:11:b5:46:88:44:57:37:53:30:fa:29:18:14:e6:b0:66:02: 73:dd:ae:f7:0d:97:fd:f2:f9:ed:c1:37:ed:1f:66:4a:95:df: 59:08:9f:8c:b9:4d:25:f6:f0:0e:71:c6:91:99:43:cc:be:2b: 09:8c:85:6a:a0:08:c9:6b:40:2b:98:46:84:44:55:10:ab:05: ef:55:1f:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk5QjUxMTAvBgNVBAUTKEI1MkFFMTgzNkM2MTE5M0RFQThCQTVCRTlENzFCOENC QjM0MzAzOTgwHhcNMjYwMzI1MDY1ODE0WhcNMjYwNDAxMDY1ODE0WjAYMRYwFAYD VQQDEw02OWMzODc4Ni0xYmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoEzr3MlVLOC+uPaYj+huymAojr6JQ3mV0sxEVl0Ev2x7iLK/QepfA3sx1xaM 8jjHW5166e+tiDo3fBNWdZfD0lLmmldqWCKwRxxBj+HuV0GlUYvy5HyoZrs20Fg7 JAlzsBE14EOJgeLz00IN2ciJsdg0z1Td+fzahAopVK1UhcotOHg2yc0Mdkr6CeU1 Cd8a/Uohhg8JKchXBkSfJMSxsjL04lVN+JxeaAg/w8i5FLn6aJdVO6ZoSyo3jHMT +3NBpsJljDkH0n6QHlXu00tr9m2/EaltzHv1qqe9edBm+/ydkSZGy8ZIM5kmVPVW KMc6VwFDbPgskx4/wtznidDhzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLD5Ial9 /wQV7NY01BzXTPsJLY/HMB8GA1UdIwQYMBaAFLUq4YNsYRk96oulvp1xuMuzQwOY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTlCNS9CMjI2NkZEMjZE RTQxMUYwQkUwMkY5NjFDNEY5QUUwMi90U3JoZzJ4aEdUM3FpNlctblhHNHk3TkRB NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RTcmhnMnhoR1QzcWk2Vy1uWEc0eTdOREE1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTlCNS9CMjI2NkZEMjZERTQxMUYwQkUwMkY5NjFDNEY5QUUwMi90U3JoZzJ4aEdU M3FpNlctblhHNHk3TkRBNWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfcRkmyTm3vjFTRVloR3Mucngdj1a07DbJKvKHXWObQWUZ80Wez9qlFpdsw3L U+4kttZnzOB8I+NAYj/sLo1LpQ1Lfckas9BBehCAbJqGkX/AuCOHXdcDG6Z3uEkj /S1ceHUwDsZAe7VA+/N5PqEK55EqFm9hsKwxkRHjP5rbdQwYP5EJ+oxD/k2YGE+o 5GfXGhfHqafzFqZ9TXhHx5xAukWinY3ee8u0WW0sazd/+VqhfO4sQBG1RohEVzdT MPopGBTmsGYCc92u9w2X/fL57cE37R9mSpXfWQifjLlNJfbwDnHGkZlDzL4rCYyF aqAIyWtAK5hGhERVEKsF71UfSQ== -----END CERTIFICATE-----Generated at Thu Mar 26 15:30:48 2026 by rpki-client