$ rpki-client -vvf rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft File: 0dZcikMk4of26pFbOfXTYC0eN6Y.mft (raw, json) Hash identifier: gTXcM2KsM515QEWt6SglvJ8g8GGJPPJtq6Xoj+3VPPw= Subject key identifier: 52:B2:07:53:82:DD:0C:B0:6C:51:B9:6E:9C:63:8B:65:B7:52:56:E1 Authority key identifier: D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6 Certificate issuer: /CN=A91743EF/serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6 Certificate serial: 18AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft Manifest number: 189C Signing time: Tue 24 Mar 2026 16:24:08 +0000 Manifest this update: Tue 24 Mar 2026 16:24:08 +0000 Manifest next update: Tue 31 Mar 2026 16:24:08 +0000 Files and hashes: 1: 0dZcikMk4of26pFbOfXTYC0eN6Y.crl (hash: zf90lcbLhZvKabvWELRUM5lzfRVBXrZfp2QsocYgHb8=) 2: 8B2EE9667A0911EE934F1262C4F9AE02.roa (hash: MEzLdc1mcUKhmt3EB8Vtl6X+cdAGdTbXNb9giVL32ZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6319 (0x18af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91743EF, serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6 Validity Not Before: Mar 24 16:24:08 2026 GMT Not After : Mar 31 16:24:08 2026 GMT Subject: CN=69c2baa8-193c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:93:07:c5:dd:5c:d7:64:14:e3:f1:75:7e:ad: bf:67:bc:b5:6b:b8:c5:73:1c:23:99:41:ea:89:44: 5f:78:41:24:de:b7:38:dc:a4:44:34:de:32:f8:1b: 1b:79:2e:44:13:8b:44:70:73:2c:97:da:9e:ee:c4: b2:3b:ac:ad:06:33:0f:3c:ec:97:18:ad:0e:b9:22: 71:98:fe:9d:10:e7:29:65:57:92:e3:5c:06:4a:53: 25:e7:f5:a6:61:64:5f:5c:19:b8:7d:e3:07:57:cb: 3a:e5:56:f0:87:72:7b:0f:42:a0:83:81:90:27:ab: cc:d0:03:e4:0e:f5:7b:63:75:4a:5e:cb:cd:ae:6f: 57:a5:5f:63:c0:c9:f9:49:f5:32:93:d9:6d:22:8f: 68:8f:6d:f0:ce:9f:aa:94:57:89:ea:bd:1a:88:7c: 91:03:4a:ed:52:18:dc:09:ff:23:6b:1f:13:ad:cb: f8:b1:9f:34:8f:bf:0c:11:a3:de:eb:38:ad:ea:8b: 53:be:7c:34:78:c4:8d:07:87:91:1d:78:fe:49:8d: a3:c2:99:84:20:09:b8:ad:11:cf:91:01:91:f1:83: 5d:c5:77:8e:49:68:71:c9:cc:d7:48:e8:50:26:f2: aa:c0:d4:ff:8e:f3:88:84:25:01:f4:8d:28:b9:fa: 42:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B2:07:53:82:DD:0C:B0:6C:51:B9:6E:9C:63:8B:65:B7:52:56:E1 X509v3 Authority Key Identifier: keyid:D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:40:37:cc:cc:04:ec:d4:af:2a:51:4e:f6:e9:a9:c2:04:14: fb:ac:c3:55:a3:92:51:ef:0c:d0:0b:57:69:91:e8:83:95:44: 40:22:4a:84:99:68:4e:cb:fa:d3:1c:24:a0:f8:41:39:e3:fb: 25:28:69:50:97:8a:b8:0a:6d:7f:84:aa:d9:6d:37:b5:88:80: a5:31:8b:58:06:4a:55:80:4c:7e:e1:f3:24:12:82:cb:fa:b1: 44:ad:dc:cf:be:0b:7e:e3:e3:82:aa:7d:5c:0a:62:ee:cb:fe: 68:d7:d9:1a:07:df:72:0a:bc:03:d6:37:72:98:67:ec:2c:b4: 71:c6:1a:31:89:ef:d5:91:56:1b:e8:16:ca:b1:b8:c6:05:13: b7:40:39:e2:ad:2a:fb:71:13:8a:18:45:02:e8:08:38:8f:59: 3d:22:5b:3c:64:c5:85:1f:34:c8:d1:49:8e:18:0f:3d:a5:d6: 02:72:da:b8:59:04:e1:8d:f2:81:89:a8:5e:2f:aa:b4:61:f4: c5:35:b6:bb:2d:4d:45:f6:89:98:c6:49:ce:a2:ab:59:32:44: 54:f0:8b:89:d2:b2:60:8d:7e:02:a3:90:c9:5e:48:51:a8:96: 80:bf:02:93:34:81:f0:71:57:11:87:c0:9d:81:fc:59:1b:01: 48:5a:5d:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQzRUYxMTAvBgNVBAUTKEQxRDY1QzhBNDMyNEUyODdGNkVBOTE1QjM5RjVEMzYw MkQxRTM3QTYwHhcNMjYwMzI0MTYyNDA4WhcNMjYwMzMxMTYyNDA4WjAYMRYwFAYD VQQDEw02OWMyYmFhOC0xOTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZMHxd1c12QU4/F1fq2/Z7y1a7jFcxwjmUHqiURfeEEk3rc43KRENN4y+Bsb eS5EE4tEcHMsl9qe7sSyO6ytBjMPPOyXGK0OuSJxmP6dEOcpZVeS41wGSlMl5/Wm YWRfXBm4feMHV8s65Vbwh3J7D0Kgg4GQJ6vM0APkDvV7Y3VKXsvNrm9XpV9jwMn5 SfUyk9ltIo9oj23wzp+qlFeJ6r0aiHyRA0rtUhjcCf8jax8Trcv4sZ80j78MEaPe 6zit6otTvnw0eMSNB4eRHXj+SY2jwpmEIAm4rRHPkQGR8YNdxXeOSWhxyczXSOhQ JvKqwNT/jvOIhCUB9I0oufpCPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFKyB1OC 3QywbFG5bpxji2W3UlbhMB8GA1UdIwQYMBaAFNHWXIpDJOKH9uqRWzn102AtHjem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDNFRi9FNkFCQjAxMEJB NDAxMUU3QTA4RDI2NkZDNEY5QUUwMi8wZFpjaWtNazRvZjI2cEZiT2ZYVFlDMGVO NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBkWmNpa01rNG9mMjZwRmJPZlhUWUMwZU42WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDNFRi9FNkFCQjAxMEJBNDAxMUU3QTA4RDI2NkZDNEY5QUUwMi8wZFpjaWtNazRv ZjI2cEZiT2ZYVFlDMGVONlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkEA3zMwE7NSvKlFO9umpwgQU+6zDVaOSUe8M0AtXaZHog5VEQCJKhJloTsv6 0xwkoPhBOeP7JShpUJeKuAptf4Sq2W03tYiApTGLWAZKVYBMfuHzJBKCy/qxRK3c z74LfuPjgqp9XApi7sv+aNfZGgffcgq8A9Y3cphn7Cy0ccYaMYnv1ZFWG+gWyrG4 xgUTt0A54q0q+3ETihhFAugIOI9ZPSJbPGTFhR80yNFJjhgPPaXWAnLauFkE4Y3y gYmoXi+qtGH0xTW2uy1NRfaJmMZJzqKrWTJEVPCLidKyYI1+AqOQyV5IUaiWgL8C kzSB8HFXEYfAnYH8WRsBSFpd5A== -----END CERTIFICATE-----Generated at Thu Mar 26 03:36:17 2026 by rpki-client