$ rpki-client -vvf rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft File: mpwxvYeWc4abPI8FWW6IFVgvEdA.mft (raw, json) Hash identifier: u0PtoDzyJmrTjXuSjU/jd1Q6S+wLZklRIGKL0PndoOs= Subject key identifier: B9:78:70:7A:D4:0B:8F:AF:18:E3:79:16:90:36:A3:43:A9:08:05:77 Authority key identifier: 9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 Certificate issuer: /CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Certificate serial: 0CF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft Manifest number: 0CDF Signing time: Tue 24 Mar 2026 18:05:26 +0000 Manifest this update: Tue 24 Mar 2026 18:05:25 +0000 Manifest next update: Tue 31 Mar 2026 18:05:25 +0000 Files and hashes: 1: mpwxvYeWc4abPI8FWW6IFVgvEdA.crl (hash: y3MmcauEr19Qd2vt6R+hni7HV27rrVnn9uAU78gIaFU=) 2: 98DC875C050111EA9BDD372BC4F9AE02.roa (hash: YHhtbTx3DFi9+kl85V+ijdhzu/uN/CR3C5x9c+CBrX0=) 3: 58AEC9929C0F11EA9CC4217CC4F9AE02.roa (hash: 1lJZiaXN2+jlJbSyyyT2ZVc0TvKSt6+Hz3K+SpWk1T8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3313 (0xcf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91856C4, serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Validity Not Before: Mar 24 18:05:25 2026 GMT Not After : Mar 31 18:05:25 2026 GMT Subject: CN=69c2d266-db37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9f:98:6e:fd:38:61:89:66:38:4d:3c:21:51: 13:ef:05:95:9f:e6:39:5a:99:56:7e:f5:bc:e0:aa: b6:e3:2f:c1:88:e8:96:a4:ad:4d:ca:66:da:c4:c3: fb:e4:4f:5b:af:7a:72:b6:1d:2f:2c:b4:29:83:11: e3:05:cc:4d:c6:b4:fc:be:76:cb:a4:2c:12:60:b1: ef:66:0c:ba:40:db:68:c8:43:29:0f:78:1d:47:25: 45:ac:b1:38:5f:4a:c1:cf:33:7b:97:1a:16:fa:7e: 67:8c:17:db:2f:0d:c4:e9:52:6e:c4:c6:97:10:39: 34:d2:b4:3d:1d:93:0d:cf:56:5a:8f:9d:4e:23:47: 84:80:f8:8c:b1:f1:e6:e5:3f:f6:09:c4:e8:03:36: 35:53:ed:8d:f4:c7:ff:e0:4e:bb:03:4e:7a:ca:2f: 1e:ba:1d:64:3a:4a:a7:5d:6b:51:3f:69:20:56:5b: bb:93:6d:4e:1d:5c:d3:df:4b:e9:35:82:ec:12:2f: 9f:7d:65:05:e0:cd:bc:44:87:9c:7f:c2:ee:62:48: c0:32:84:4c:bc:40:eb:ca:1b:d1:36:f7:b5:d8:02: 59:30:dd:c1:93:b7:2e:16:51:de:55:ea:97:5a:6d: 6c:bf:b6:de:62:fd:17:50:28:a1:8d:ea:76:ae:ff: 6e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:78:70:7A:D4:0B:8F:AF:18:E3:79:16:90:36:A3:43:A9:08:05:77 X509v3 Authority Key Identifier: keyid:9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:af:37:e8:f0:6e:ed:58:eb:48:1a:9c:06:48:76:ac:b7:e7: 9b:33:ab:2b:49:05:ba:a5:dc:30:4e:0e:5e:77:e6:69:99:59: 58:9f:b0:70:c2:8e:76:15:9f:08:8d:c6:dd:91:06:ec:40:2f: 83:fa:c3:91:21:54:75:fc:4e:84:6f:55:cd:68:2e:83:4a:c5: 35:ec:91:7a:e3:03:48:90:1e:37:e9:58:7b:56:e1:7c:6b:12: 60:a4:3e:89:f2:0e:3c:18:45:58:bc:cc:63:e5:39:ee:85:76: 02:92:d0:4e:56:30:3e:33:e7:f3:9d:26:cc:44:3e:03:08:12: f0:7b:39:f5:9d:82:c1:10:26:63:02:8c:b9:f4:a8:02:f0:af: f4:dc:63:db:a7:d8:c4:86:e7:bc:a3:62:b9:e8:5f:cf:ee:2e: fd:2d:94:51:a6:1d:0a:ad:b2:d2:18:65:aa:f8:77:2c:61:4a: 04:35:34:b4:f1:56:f1:81:27:2b:82:fc:4a:d3:07:85:3c:b7: bc:96:1e:c4:11:d2:19:cc:c7:97:76:4b:6d:2e:f4:c7:7e:9b: 0b:a7:3f:91:6e:33:66:f4:25:56:00:08:03:ae:30:d0:2b:63: 5f:4d:54:24:1c:5a:16:b6:7a:d3:c2:50:62:e8:06:65:a4:ab: d3:1b:9d:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2QzQxMTAvBgNVBAUTKDlBOUMzMUJEODc5NjczODY5QjNDOEYwNTU5NkU4ODE1 NTgyRjExRDAwHhcNMjYwMzI0MTgwNTI1WhcNMjYwMzMxMTgwNTI1WjAYMRYwFAYD VQQDEw02OWMyZDI2Ni1kYjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnp+Ybv04YYlmOE08IVET7wWVn+Y5WplWfvW84Kq24y/BiOiWpK1NymbaxMP7 5E9br3pyth0vLLQpgxHjBcxNxrT8vnbLpCwSYLHvZgy6QNtoyEMpD3gdRyVFrLE4 X0rBzzN7lxoW+n5njBfbLw3E6VJuxMaXEDk00rQ9HZMNz1Zaj51OI0eEgPiMsfHm 5T/2CcToAzY1U+2N9Mf/4E67A056yi8euh1kOkqnXWtRP2kgVlu7k21OHVzT30vp NYLsEi+ffWUF4M28RIecf8LuYkjAMoRMvEDryhvRNve12AJZMN3Bk7cuFlHeVeqX Wm1sv7beYv0XUCihjep2rv9uOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLl4cHrU C4+vGON5FpA2o0OpCAV3MB8GA1UdIwQYMBaAFJqcMb2HlnOGmzyPBVluiBVYLxHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTZDNC9BM0JBRDhFMjA0 RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0YWJQSThGV1c2SUZWZ3ZF ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21wd3h2WWVXYzRhYlBJOEZXVzZJRlZndkVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTZDNC9BM0JBRDhFMjA0RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0 YWJQSThGV1c2SUZWZ3ZFZEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPK836PBu7VjrSBqcBkh2rLfnmzOrK0kFuqXcME4OXnfmaZlZWJ+wcMKOdhWf CI3G3ZEG7EAvg/rDkSFUdfxOhG9VzWgug0rFNeyReuMDSJAeN+lYe1bhfGsSYKQ+ ifIOPBhFWLzMY+U57oV2ApLQTlYwPjPn850mzEQ+AwgS8Hs59Z2CwRAmYwKMufSo AvCv9Nxj26fYxIbnvKNiuehfz+4u/S2UUaYdCq2y0hhlqvh3LGFKBDU0tPFW8YEn K4L8StMHhTy3vJYexBHSGczHl3ZLbS70x36bC6c/kW4zZvQlVgAIA64w0CtjX01U JBxaFrZ608JQYugGZaSr0xudRg== -----END CERTIFICATE-----Generated at Thu Mar 26 14:11:03 2026 by rpki-client