$ rpki-client -vvf rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft File: _0KzQ2BElUaW_-CLDuGXXGxbjW0.mft (raw, json) Hash identifier: h27V946uCLEqL+4vupvwIevX5t2OGRBduPaumxvYk+s= Subject key identifier: 8F:2B:8C:AC:C8:38:43:79:BF:92:42:C2:BB:B6:A1:D8:1B:4A:20:B2 Authority key identifier: FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D Certificate issuer: /CN=A91864A7/serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D Certificate serial: 0254 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft Manifest number: 0241 Signing time: Wed 25 Mar 2026 01:57:47 +0000 Manifest this update: Wed 25 Mar 2026 01:57:47 +0000 Manifest next update: Wed 01 Apr 2026 01:57:47 +0000 Files and hashes: 1: _0KzQ2BElUaW_-CLDuGXXGxbjW0.crl (hash: cbHd/N5efYDzxKiUxKprSF0HxKB8pazBba6EWeTiDkY=) 2: B34D1A26F6C811EEBC4BE00BC4F9AE02.roa (hash: VvVjYiDQeO0/Kuu5dNnxQmNtzBeDEDxanFTxX0efrwo=) 3: D62511F6C41D11F08D2E621EC4F9AE02.roa (hash: HAQPkYTVEHvUCCvstD3cbGBNAUP4hbxEWfa91gL9q2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91864A7, serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D Validity Not Before: Mar 25 01:57:47 2026 GMT Not After : Apr 1 01:57:47 2026 GMT Subject: CN=69c3411b-f8e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1a:d4:66:31:29:dc:d2:23:60:82:0f:05:32: 2a:13:b8:87:87:0e:b0:4b:07:08:45:8d:a3:07:00: ca:2a:c9:8b:21:0d:4a:08:ed:08:7e:e5:09:87:78: 6e:27:d1:cd:79:5c:4d:0c:c4:c5:48:ef:08:91:8d: e1:8e:0d:d9:a6:49:55:40:bb:6e:8e:46:48:12:9c: 24:a1:c4:6b:6b:be:4c:d0:d5:87:0a:06:16:58:bc: 3f:6f:19:a1:47:79:63:31:08:8d:e7:88:ac:89:a2: d6:76:79:4d:b1:e5:bf:f8:a8:83:23:1c:60:cb:b8: 92:41:66:0a:88:9d:37:71:e4:c0:94:f9:59:44:6d: ac:26:29:01:61:d8:4f:4b:5f:f5:f4:14:d8:7a:d5: 16:cb:d7:67:86:77:07:7f:12:f5:fc:6b:e7:46:e4: 60:31:16:be:97:4a:60:f7:6f:08:b7:a1:d7:19:61: 0d:ee:6e:c3:8c:a2:8a:64:42:74:34:67:e9:9d:f3: c2:33:99:9f:8a:88:77:a0:d9:03:90:2b:bb:66:8e: 91:dd:70:08:6e:11:02:cc:89:63:05:78:25:c2:8b: 3e:96:33:9e:b9:cf:87:92:86:f7:c5:e7:a4:c8:77: 44:cf:fb:37:bc:9c:88:ca:22:5d:f9:9e:a9:eb:6c: c9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2B:8C:AC:C8:38:43:79:BF:92:42:C2:BB:B6:A1:D8:1B:4A:20:B2 X509v3 Authority Key Identifier: keyid:FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:07:73:b0:95:b4:c9:72:71:9d:7f:53:93:4d:ee:d0:14:9f: 49:ba:2e:cb:22:4e:f6:52:8a:7f:40:46:f3:f9:23:97:44:61: 17:f6:db:d4:2d:d8:39:f5:07:e7:74:c4:dc:29:45:ca:62:e4: b9:c5:f4:54:8b:d0:b5:b3:59:22:e0:b5:88:c2:b9:d0:f9:41: 1f:36:50:eb:f5:be:b1:1f:9f:7a:87:1a:79:63:7a:7c:74:52: a4:7a:3a:62:d2:a7:a7:93:42:eb:5e:ab:de:04:93:e8:83:dc: 3f:d9:90:2b:8a:d3:49:fa:0a:2e:13:3f:0d:0a:94:c9:a8:eb: b4:ee:44:e1:74:08:75:ca:68:d0:76:cb:47:16:67:fa:63:60: c9:5c:d4:62:57:e6:d9:58:49:63:e0:44:7c:8c:8c:28:0e:2e: 01:19:64:97:c7:e0:c1:ae:ca:2b:00:23:84:88:1e:1d:ea:40: 95:59:ee:d8:61:45:c4:4d:58:4b:1a:3d:f6:c6:47:e7:72:39: b2:e7:17:4f:6c:72:19:28:41:8d:00:b9:b3:03:50:27:6f:3a: 9d:a9:df:c5:26:08:b3:5a:77:c5:78:eb:99:29:f8:bf:6d:2d: 59:6d:91:30:1a:74:98:59:8e:05:c8:db:67:33:07:01:78:0c: ac:99:b3:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY0QTcxMTAvBgNVBAUTKEZGNDJCMzQzNjA0NDk1NDY5NkZGRTA4QjBFRTE5NzVD NkM1QjhENkQwHhcNMjYwMzI1MDE1NzQ3WhcNMjYwNDAxMDE1NzQ3WjAYMRYwFAYD VQQDEw02OWMzNDExYi1mOGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RrUZjEp3NIjYIIPBTIqE7iHhw6wSwcIRY2jBwDKKsmLIQ1KCO0IfuUJh3hu J9HNeVxNDMTFSO8IkY3hjg3ZpklVQLtujkZIEpwkocRra75M0NWHCgYWWLw/bxmh R3ljMQiN54isiaLWdnlNseW/+KiDIxxgy7iSQWYKiJ03ceTAlPlZRG2sJikBYdhP S1/19BTYetUWy9dnhncHfxL1/GvnRuRgMRa+l0pg928It6HXGWEN7m7DjKKKZEJ0 NGfpnfPCM5mfioh3oNkDkCu7Zo6R3XAIbhECzIljBXglwos+ljOeuc+Hkob3xeek yHdEz/s3vJyIyiJd+Z6p62zJuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI8rjKzI OEN5v5JCwru2odgbSiCyMB8GA1UdIwQYMBaAFP9Cs0NgRJVGlv/giw7hl1xsW41t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjRBNy9DODA1NUZENkM5 MjUxMUVEODA5MzYxNDlDNEY5QUUwMi9fMEt6UTJCRWxVYVdfLUNMRHVHWFhHeGJq VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wS3pRMkJFbFVhV18tQ0xEdUdYWEd4YmpXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjRBNy9DODA1NUZENkM5MjUxMUVEODA5MzYxNDlDNEY5QUUwMi9fMEt6UTJCRWxV YVdfLUNMRHVHWFhHeGJqVzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsgdzsJW0yXJxnX9Tk03u0BSfSbouyyJO9lKKf0BG8/kjl0RhF/bb1C3YOfUH 53TE3ClFymLkucX0VIvQtbNZIuC1iMK50PlBHzZQ6/W+sR+feocaeWN6fHRSpHo6 YtKnp5NC616r3gST6IPcP9mQK4rTSfoKLhM/DQqUyajrtO5E4XQIdcpo0HbLRxZn +mNgyVzUYlfm2VhJY+BEfIyMKA4uARlkl8fgwa7KKwAjhIgeHepAlVnu2GFFxE1Y Sxo99sZH53I5sucXT2xyGShBjQC5swNQJ286nanfxSYIs1p3xXjrmSn4v20tWW2R MBp0mFmOBcjbZzMHAXgMrJmzrg== -----END CERTIFICATE-----Generated at Thu Mar 26 04:09:25 2026 by rpki-client