$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft File: piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft (raw, json) Hash identifier: Ro2Mt/1OUI0rWDNQGhbX0kZV35MJ0pBH4kByGeGKd1Q= Subject key identifier: D8:9E:83:60:9E:BE:72:B1:89:36:B3:08:7E:DB:9B:87:84:AB:35:8D Authority key identifier: A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4 Certificate issuer: /CN=A91878B3/serialNumber=A6216FB1D8BC7855F770735D45128A87C713AFC4 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft Manifest number: 39 Signing time: Wed 25 Mar 2026 07:44:09 +0000 Manifest this update: Wed 25 Mar 2026 07:44:09 +0000 Manifest next update: Wed 01 Apr 2026 07:44:09 +0000 Files and hashes: 1: piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl (hash: s2345RScYg7zkAQWxul4epbZEdwqy3lRM7duyJgY2ro=) 2: 276AF720D4EE11F09328C93FC4F9AE02.roa (hash: yvWe793LFDv60yfRRzGNrVWi5via5iRanXNLPGkIsZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878B3, serialNumber=A6216FB1D8BC7855F770735D45128A87C713AFC4 Validity Not Before: Mar 25 07:44:09 2026 GMT Not After : Apr 1 07:44:09 2026 GMT Subject: CN=69c39249-50d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:42:33:9d:c8:4d:92:7b:97:6a:b0:95:e9:f0: e3:89:6b:83:7e:6f:cb:75:8d:ec:ef:77:33:a0:02: 2e:7a:fa:a9:63:58:00:10:ae:4e:27:59:97:1f:1b: d3:1c:93:40:1d:ca:4b:12:2a:ed:fa:a2:94:d9:58: c1:3f:41:88:8c:c9:15:7c:1a:a5:00:97:50:22:bf: e3:d3:b6:bb:1f:2a:b1:e9:8e:e1:4f:fc:f6:15:33: 11:38:fc:36:3b:47:1b:ea:fb:ff:62:1e:e3:d0:ef: 43:db:34:84:b7:59:c8:67:8b:f1:40:be:76:95:2a: a8:b3:70:a4:68:87:22:ae:69:92:c8:0a:07:b9:ff: 1d:c9:8c:21:12:06:6d:5e:57:48:83:21:82:9b:ed: 99:23:49:f5:73:a9:15:a4:0a:a6:68:71:10:ff:8f: c4:fb:24:35:10:d9:b7:fe:c1:79:62:e9:3e:67:dd: 41:f1:08:62:f0:64:e1:2c:65:4a:45:dd:a5:60:89: 63:3b:7e:ff:70:07:a3:4c:f0:00:f2:8e:db:66:3e: 9a:dd:f7:df:56:1c:c8:51:03:03:23:cb:a7:d6:59: 9f:80:32:e3:dc:9d:1e:85:7b:83:5c:90:e3:40:32: 70:36:94:cc:54:62:1a:ec:55:b5:b9:07:98:5b:20: a1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9E:83:60:9E:BE:72:B1:89:36:B3:08:7E:DB:9B:87:84:AB:35:8D X509v3 Authority Key Identifier: keyid:A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:07:8a:88:7f:ff:77:91:03:3e:35:33:ee:8b:46:40:12:40: 14:38:b2:f5:ac:74:4d:df:95:ff:a2:eb:e2:39:7f:44:90:e9: e2:45:04:c3:45:b7:ac:51:54:7b:fd:65:83:48:89:d8:f9:7c: 87:ae:19:08:59:b5:f1:7b:40:d6:a3:c4:e3:ea:eb:53:75:d1: 2c:39:75:8c:11:f8:ec:44:e3:2d:17:5f:f4:94:2c:4b:b7:da: ba:0f:e7:48:67:a1:5c:26:82:a5:b5:6b:72:77:28:00:49:db: 27:e0:19:2a:41:f0:1c:f3:a2:58:b4:d9:04:92:86:6d:dc:ed: eb:1b:92:e8:45:18:4e:f1:23:c6:45:06:cd:3f:89:2c:2d:ad: db:86:a2:fe:a6:65:8b:05:20:81:01:3a:4e:3b:61:89:46:1f: 15:88:69:c7:0b:79:fa:28:55:b6:66:92:81:e7:79:20:83:a0: 17:8a:92:37:6a:25:d5:5d:3a:ac:bc:f7:7c:12:ea:9e:94:09: 19:44:f0:5d:fa:fc:fd:19:cf:27:8a:b2:39:86:77:a2:28:41: cb:c3:2f:4a:68:32:ae:33:75:83:8e:da:d3:8c:64:57:6e:f1: 60:d8:83:78:0f:42:ec:ba:e3:f5:44:a9:01:43:5f:bb:49:51: 50:b0:df:a7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzhCMzExMC8GA1UEBRMoQTYyMTZGQjFEOEJDNzg1NUY3NzA3MzVENDUxMjhBODdD NzEzQUZDNDAeFw0yNjAzMjUwNzQ0MDlaFw0yNjA0MDEwNzQ0MDlaMBgxFjAUBgNV BAMTDTY5YzM5MjQ5LTUwZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNQjOdyE2Se5dqsJXp8OOJa4N+b8t1jezvdzOgAi56+qljWAAQrk4nWZcfG9Mc k0AdyksSKu36opTZWME/QYiMyRV8GqUAl1Aiv+PTtrsfKrHpjuFP/PYVMxE4/DY7 Rxvq+/9iHuPQ70PbNIS3Wchni/FAvnaVKqizcKRohyKuaZLICge5/x3JjCESBm1e V0iDIYKb7ZkjSfVzqRWkCqZocRD/j8T7JDUQ2bf+wXli6T5n3UHxCGLwZOEsZUpF 3aVgiWM7fv9wB6NM8ADyjttmPprd999WHMhRAwMjy6fWWZ+AMuPcnR6Fe4NckONA MnA2lMxUYhrsVbW5B5hbIKE3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2J6DYJ6+ crGJNrMIftubh4SrNY0wHwYDVR0jBBgwFoAUpiFvsdi8eFX3cHNdRRKKh8cTr8Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3OEIzLzFFNTMwRkNDRDRC RTExRjBCRjlGRTIxNkM0RjlBRTAyL3BpRnZzZGk4ZUZYM2NITmRSUktLaDhjVHI4 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGlGdnNkaThlRlgzY0hOZFJSS0toOGNUcjhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 OEIzLzFFNTMwRkNDRDRCRTExRjBCRjlGRTIxNkM0RjlBRTAyL3BpRnZzZGk4ZUZY M2NITmRSUktLaDhjVHI4US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBxB4qIf/93kQM+NTPui0ZAEkAUOLL1rHRN35X/ouviOX9EkOniRQTDRbesUVR7 /WWDSInY+XyHrhkIWbXxe0DWo8Tj6utTddEsOXWMEfjsROMtF1/0lCxLt9q6D+dI Z6FcJoKltWtydygASdsn4BkqQfAc86JYtNkEkoZt3O3rG5LoRRhO8SPGRQbNP4ks La3bhqL+pmWLBSCBATpOO2GJRh8ViGnHC3n6KFW2ZpKB53kgg6AXipI3aiXVXTqs vPd8EuqelAkZRPBd+vz9Gc8nirI5hneiKEHLwy9KaDKuM3WDjtrTjGRXbvFg2IN4 D0LsuuP1RKkBQ1+7SVFQsN+n -----END CERTIFICATE-----Generated at Thu Mar 26 14:10:32 2026 by rpki-client