$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft File: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft (raw, json) Hash identifier: lD++yn0EDSN8McoIOy5W5QCyZNZXBgCIjSJP+fnLH9o= Subject key identifier: FB:DC:05:C8:68:25:B0:71:BB:F2:85:B8:F7:C0:DA:43:93:C2:17:02 Authority key identifier: 7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F Certificate issuer: /CN=A91971CB/serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F Certificate serial: 0C21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft Manifest number: 0C17 Signing time: Tue 24 Mar 2026 15:09:40 +0000 Manifest this update: Tue 24 Mar 2026 15:09:39 +0000 Manifest next update: Tue 31 Mar 2026 15:09:39 +0000 Files and hashes: 1: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl (hash: /Ut3vpVIrtXqDbqk6LUsyVOz+zGvhyPDgl616wt/UyA=) 2: 99D18D463C0211EAA729693AC4F9AE02.roa (hash: /lTemBonHucyHdLH99iEZJS0pkpWT8EtwFhDtf78iXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3105 (0xc21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91971CB, serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F Validity Not Before: Mar 24 15:09:39 2026 GMT Not After : Mar 31 15:09:39 2026 GMT Subject: CN=69c2a934-bbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:02:fe:7a:36:0a:ad:9c:64:d6:72:c8:8e:7f: 17:10:5b:7f:0a:45:e5:d4:85:e5:dc:e2:6c:dc:bf: f9:34:56:66:23:6b:35:61:7f:9b:46:f2:85:5e:cd: 63:fe:12:a5:86:f9:d1:38:a6:23:25:02:da:a8:02: 19:e1:6c:fb:85:17:a9:e7:69:75:92:c8:52:e9:e2: 54:6e:e2:ba:50:db:53:a3:3b:3c:ef:f3:c1:c5:09: 5c:f6:4d:b9:f4:2d:b3:8e:57:b7:f6:34:30:b2:5c: d7:24:e0:6e:22:5c:6d:ac:56:10:46:90:44:86:d6: 95:90:6f:39:d0:75:63:7a:ef:d3:e6:3a:de:eb:0b: 6a:c0:36:e6:c7:fe:2e:3a:30:d6:6a:73:29:8b:c5: 9d:14:a1:61:d2:8f:3d:41:d6:27:84:e8:bd:8c:38: 81:17:d6:91:ba:cb:d4:7e:70:62:0d:1d:3e:fb:49: 64:ec:92:de:56:d5:c9:31:ef:6e:05:f2:2b:8e:f4: 61:f3:db:69:46:25:a0:10:d1:aa:d1:5f:94:f5:6d: 55:4a:7f:47:bc:a9:bd:d6:05:93:3f:79:0f:fa:d5: ef:8d:ce:03:bc:ca:5c:5f:f4:b7:66:86:5a:1c:7a: 15:41:4f:c9:a7:b9:f7:f3:b2:c8:04:90:b6:84:c0: c7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DC:05:C8:68:25:B0:71:BB:F2:85:B8:F7:C0:DA:43:93:C2:17:02 X509v3 Authority Key Identifier: keyid:7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:01:ee:2b:c2:54:04:27:67:36:32:77:93:aa:ab:b2:26:f7: e7:f4:10:1d:6b:82:06:44:9d:44:93:85:12:5e:88:65:b0:13: c6:93:cc:05:ce:ef:62:19:22:2b:6c:f3:5e:81:fe:1f:16:40: 00:bf:58:0d:90:b7:ec:40:b2:84:6a:7a:35:9d:fd:2d:f9:b5: d0:ef:ad:6f:cd:a7:4e:a3:0f:06:15:9f:7e:2b:13:98:8a:40: 6d:c3:1b:78:0a:c8:5c:bd:ff:a2:ce:1a:9e:38:de:45:31:59: c0:30:4e:5f:72:92:1d:82:4c:5a:d4:a4:b6:d6:9d:fd:3d:96: 1e:0e:43:53:b6:ce:8d:7b:5b:ab:fb:46:da:11:95:4d:38:76: 68:df:fc:d7:70:b0:fb:0e:58:89:2d:84:20:12:ad:0b:e9:a4: e8:37:15:05:cb:d5:9f:04:21:bf:78:80:92:f1:e6:dc:9b:55: 02:2e:67:e8:97:66:9c:b3:ee:01:26:21:ed:c7:55:ed:80:6d: 81:a6:a4:79:b5:a9:a0:03:c7:43:9f:be:61:c7:65:7d:62:78: 16:f5:4d:02:ce:3f:d9:98:9d:8a:b9:b5:15:bc:c8:2d:69:74: 92:5e:8c:57:5e:86:e3:e0:9f:2d:f3:1d:b3:a6:5c:bf:05:f5: ed:84:d1:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxQ0IxMTAvBgNVBAUTKDdEMDQ1MTY1QjI5QTY4QUZDQjhCQTgxNTk5Q0UzMDY3 NDU0NEZEOEYwHhcNMjYwMzI0MTUwOTM5WhcNMjYwMzMxMTUwOTM5WjAYMRYwFAYD VQQDEw02OWMyYTkzNC1iYmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5AL+ejYKrZxk1nLIjn8XEFt/CkXl1IXl3OJs3L/5NFZmI2s1YX+bRvKFXs1j /hKlhvnROKYjJQLaqAIZ4Wz7hRep52l1kshS6eJUbuK6UNtTozs87/PBxQlc9k25 9C2zjle39jQwslzXJOBuIlxtrFYQRpBEhtaVkG850HVjeu/T5jre6wtqwDbmx/4u OjDWanMpi8WdFKFh0o89QdYnhOi9jDiBF9aRusvUfnBiDR0++0lk7JLeVtXJMe9u BfIrjvRh89tpRiWgENGq0V+U9W1VSn9HvKm91gWTP3kP+tXvjc4DvMpcX/S3ZoZa HHoVQU/Jp7n387LIBJC2hMDHBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPvcBcho JbBxu/KFuPfA2kOTwhcCMB8GA1UdIwQYMBaAFH0EUWWymmivy4uoFZnOMGdFRP2P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi83QTc1MEEwQTJE RDgxMUVBOUMzNTIwNURDNEY5QUUwMi9mUVJSWmJLYWFLX0xpNmdWbWM0d1owVkVf WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZRUlJaYkthYUtfTGk2Z1ZtYzR3WjBWRV9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzFDQi83QTc1MEEwQTJERDgxMUVBOUMzNTIwNURDNEY5QUUwMi9mUVJSWmJLYWFL X0xpNmdWbWM0d1owVkVfWTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlQHuK8JUBCdnNjJ3k6qrsib35/QQHWuCBkSdRJOFEl6IZbATxpPMBc7vYhki K2zzXoH+HxZAAL9YDZC37ECyhGp6NZ39Lfm10O+tb82nTqMPBhWffisTmIpAbcMb eArIXL3/os4anjjeRTFZwDBOX3KSHYJMWtSkttad/T2WHg5DU7bOjXtbq/tG2hGV TTh2aN/813Cw+w5YiS2EIBKtC+mk6DcVBcvVnwQhv3iAkvHm3JtVAi5n6JdmnLPu ASYh7cdV7YBtgaakebWpoAPHQ5++YcdlfWJ4FvVNAs4/2Zidirm1FbzILWl0kl6M V16G4+CfLfMds6ZcvwX17YTRBA== -----END CERTIFICATE-----Generated at Thu Mar 26 13:11:20 2026 by rpki-client