$ rpki-client -vvf rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft File: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft (raw, json) Hash identifier: yQ8hBokce8dtxhTUB5fOEShCTbqgMENgWOmayAxHUy8= Subject key identifier: 8A:00:EE:B4:89:B3:85:73:B3:37:42:6A:45:33:2E:38:55:A4:7A:CF Authority key identifier: 03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34 Certificate issuer: /CN=A91805BF/serialNumber=031E29F26E783281B768E8910853144DF1EE5534 Certificate serial: 0827 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft Manifest number: 081C Signing time: Tue 24 Mar 2026 20:48:49 +0000 Manifest this update: Tue 24 Mar 2026 20:48:49 +0000 Manifest next update: Tue 31 Mar 2026 20:48:49 +0000 Files and hashes: 1: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl (hash: qPAULH1yXi91N8KIUfZeK3MPXZvZtLJgW3B94RiZeTA=) 2: 67F4BD64519811F092842D60C4F9AE02.roa (hash: Lp3bNyJgfkc/SQZCgAth54GJ5kkoQOOIRUFq6Ssbpu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2087 (0x827) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91805BF, serialNumber=031E29F26E783281B768E8910853144DF1EE5534 Validity Not Before: Mar 24 20:48:49 2026 GMT Not After : Mar 31 20:48:49 2026 GMT Subject: CN=69c2f8b1-fca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:44:00:59:21:d5:a3:28:c0:f8:86:6b:9b:0f: b7:cd:33:82:f9:91:00:8d:30:41:ef:9a:41:3c:b9: cf:aa:7c:82:32:73:61:a0:53:05:cb:8b:0f:6c:25: c3:d1:7a:11:c6:97:8b:7a:ae:76:50:e0:eb:28:9d: f1:7a:ae:64:94:07:2c:3d:42:e1:d6:07:76:7f:68: 8f:51:2e:fd:fc:c4:e7:e4:d2:0b:76:71:ca:fe:ce: ae:e5:dc:84:7b:0b:d6:b8:6e:20:f3:4f:71:43:80: 1f:52:dc:e2:23:d5:07:8b:03:dd:d4:e0:74:57:b6: 99:1b:f1:57:f8:b6:e4:60:cb:4c:dc:37:2d:e6:bc: eb:cd:25:7c:7c:24:e8:96:02:ef:d9:fc:6b:4a:4c: 47:27:ac:45:3f:95:f8:2d:76:cc:99:51:09:20:38: 5a:40:6e:d5:ff:31:00:f4:1d:b7:1a:c3:6f:1f:5c: 41:52:68:38:c5:2b:03:3f:a9:c4:5a:a0:00:02:67: e6:48:af:16:1e:68:3a:f1:c2:4f:58:58:08:80:31: 71:cc:60:12:f6:6a:b0:ed:7c:b7:0e:67:9d:84:3a: f3:3d:a9:d6:79:a8:d1:b4:91:e0:bc:dd:b1:cc:5e: 81:dd:87:50:2f:8b:1c:20:ac:9c:98:d8:1e:fd:59: 1c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:00:EE:B4:89:B3:85:73:B3:37:42:6A:45:33:2E:38:55:A4:7A:CF X509v3 Authority Key Identifier: keyid:03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:0b:9c:54:f8:22:13:58:4e:9f:1f:b1:1f:37:5b:ff:09:19: 33:37:24:bd:c5:1d:56:f2:2e:e5:d1:e4:68:28:8c:6b:6e:ba: e5:7e:f8:d3:69:d6:cc:1f:03:7e:e2:8d:30:36:14:c5:c6:52: a7:4f:f8:b6:bd:17:53:90:22:cd:b1:b5:e7:2b:b3:55:07:c7: 97:b3:8a:ea:f3:b8:79:de:87:a7:09:1d:4f:88:18:24:b4:8a: 47:f4:8a:83:d2:2f:31:61:f9:23:02:51:96:ba:03:ae:a4:ab: 64:54:32:90:7f:a6:a7:ba:25:85:44:91:89:fd:d8:ce:4b:1d: 4d:75:94:ba:7d:0c:08:88:0d:e5:56:d2:1f:28:97:ef:b7:3d: 5a:af:46:89:d0:3a:62:8f:1b:ba:36:31:f0:3a:8d:60:dd:f2: 4e:48:c4:13:7f:a9:98:e6:0d:05:d9:14:12:4f:ce:44:66:29: c6:97:34:47:3d:f2:b9:fb:8a:0d:4c:29:e1:ab:69:6f:22:79: a6:a6:54:7c:8f:d3:a1:db:17:28:71:84:ef:88:c9:58:aa:93: 53:8f:ff:c9:d6:58:84:e9:42:1d:f2:1d:a1:a3:ae:9e:83:b1: 11:5f:b7:49:50:b4:41:82:5f:ca:bc:d4:89:66:b4:86:ec:67: f4:5b:fb:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1QkYxMTAvBgNVBAUTKDAzMUUyOUYyNkU3ODMyODFCNzY4RTg5MTA4NTMxNDRE RjFFRTU1MzQwHhcNMjYwMzI0MjA0ODQ5WhcNMjYwMzMxMjA0ODQ5WjAYMRYwFAYD VQQDEw02OWMyZjhiMS1mY2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkQAWSHVoyjA+IZrmw+3zTOC+ZEAjTBB75pBPLnPqnyCMnNhoFMFy4sPbCXD 0XoRxpeLeq52UODrKJ3xeq5klAcsPULh1gd2f2iPUS79/MTn5NILdnHK/s6u5dyE ewvWuG4g809xQ4AfUtziI9UHiwPd1OB0V7aZG/FX+LbkYMtM3Dct5rzrzSV8fCTo lgLv2fxrSkxHJ6xFP5X4LXbMmVEJIDhaQG7V/zEA9B23GsNvH1xBUmg4xSsDP6nE WqAAAmfmSK8WHmg68cJPWFgIgDFxzGAS9mqw7Xy3DmedhDrzPanWeajRtJHgvN2x zF6B3YdQL4scIKycmNge/VkcyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIoA7rSJ s4VzszdCakUzLjhVpHrPMB8GA1UdIwQYMBaAFAMeKfJueDKBt2jokQhTFE3x7lU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDVCRi9GMTMzQkRBQzEz RjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1vRzNhT2lSQ0ZNVVRmSHVW VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F4NHA4bTU0TW9HM2FPaVJDRk1VVGZIdVZUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDVCRi9GMTMzQkRBQzEzRjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1v RzNhT2lSQ0ZNVVRmSHVWVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJQucVPgiE1hOnx+xHzdb/wkZMzckvcUdVvIu5dHkaCiMa2665X7402nWzB8D fuKNMDYUxcZSp0/4tr0XU5AizbG15yuzVQfHl7OK6vO4ed6HpwkdT4gYJLSKR/SK g9IvMWH5IwJRlroDrqSrZFQykH+mp7olhUSRif3YzksdTXWUun0MCIgN5VbSHyiX 77c9Wq9GidA6Yo8bujYx8DqNYN3yTkjEE3+pmOYNBdkUEk/ORGYpxpc0Rz3yufuK DUwp4atpbyJ5pqZUfI/TodsXKHGE74jJWKqTU4//ydZYhOlCHfIdoaOunoOxEV+3 SVC0QYJfyrzUiWa0huxn9Fv7VA== -----END CERTIFICATE-----Generated at Thu Mar 26 09:35:46 2026 by rpki-client