$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft File: p4emPknujsb5dRFgfxt8Ww3xFk4.mft (raw, json) Hash identifier: 74aMuNyGuHgJtqZKmrf7PggyKF8hAz65LXOlGBw8Sw4= Subject key identifier: 69:08:B8:63:71:4C:01:DA:06:6E:19:03:CC:D5:E7:28:96:E8:B2:FA Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E Certificate issuer: /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Certificate serial: 0A72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft Manifest number: 0A5F Signing time: Tue 24 Mar 2026 19:25:32 +0000 Manifest this update: Tue 24 Mar 2026 19:25:31 +0000 Manifest next update: Tue 31 Mar 2026 19:25:31 +0000 Files and hashes: 1: p4emPknujsb5dRFgfxt8Ww3xFk4.crl (hash: bfEcwm9uBnZEjQ7AAlfOyhpMnQnTwsNkrHUscnLFwf0=) 2: B13B2E5A5B5D11EEADF5C61CC4F9AE02.roa (hash: 5dWM1aBFZBre348MozCE9BHGCcZ6AZ6XEKKZComnpY4=) 3: 305312F67CA011F098F1673CC4F9AE02.roa (hash: oSLf+ALvc0axyKMKORxabRkQ2yd+wi5i1pJe4n2LdQk=) 4: CFDF8B8A5B5D11EE967F161DC4F9AE02.roa (hash: vIQ6ijY/P5ugAhg4/kXnIXxgsJTlmnXdecL34fGC5qg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2674 (0xa72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Validity Not Before: Mar 24 19:25:31 2026 GMT Not After : Mar 31 19:25:31 2026 GMT Subject: CN=69c2e52c-533c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:90:21:3a:87:71:36:de:16:e7:c5:d3:60:71: 6a:b6:7a:3a:53:49:f5:b8:5a:36:26:fc:cb:9c:22: 30:8a:c5:01:34:f9:79:50:3c:4d:f0:25:41:db:a6: f4:5f:0a:45:0b:c1:8f:8f:93:7d:06:a9:05:bf:fe: 2e:bd:5e:71:33:8b:3a:94:80:96:c8:cb:71:1f:e0: 92:26:8b:1e:01:d3:f5:7a:d9:67:ab:85:43:53:a8: e0:20:df:d1:1d:1f:ee:e4:4e:2e:8c:b3:78:e3:86: a8:f4:e6:fd:f1:b3:dd:a7:23:12:2c:7f:8f:74:0a: 60:dd:8f:df:f4:26:1c:dc:4d:73:a3:b1:b2:88:0e: ad:c4:44:86:0d:b2:38:b1:93:bb:b1:8b:72:a1:86: 63:a2:f1:7b:45:51:5a:07:ce:6d:ef:48:77:69:0c: ea:9c:55:e8:94:fa:03:bc:34:4a:37:ac:47:19:d9: 57:d8:da:0e:9d:97:e4:aa:74:62:b3:bb:8c:e8:0b: 4d:2e:53:79:24:86:9f:ad:22:1a:e1:ab:51:8a:ac: 3f:da:24:25:d9:f6:3b:46:0a:e0:66:77:80:59:46: a0:68:21:c2:5c:30:56:19:76:9d:3c:c3:83:b3:31: a7:c2:b2:a8:f8:db:a1:8b:2a:23:35:8d:bb:2e:f3: 05:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:08:B8:63:71:4C:01:DA:06:6E:19:03:CC:D5:E7:28:96:E8:B2:FA X509v3 Authority Key Identifier: keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:1d:d3:71:00:d1:6d:f6:51:fb:15:b2:bc:76:b8:e6:1f:90: d2:d6:87:ef:6f:65:a2:24:37:5f:eb:47:32:e8:94:0a:26:00: 26:cd:d2:ec:5f:9b:e7:63:fd:5b:c2:3d:9b:0d:ee:66:94:40: 64:50:61:e8:ff:08:dd:e6:da:b8:87:69:8c:d0:61:1a:9f:e6: 19:10:70:c4:97:5f:24:e7:6c:8f:68:93:ee:48:61:0a:aa:66: d4:a2:ee:e6:66:7e:f4:f1:d2:ba:a9:1a:88:ee:85:92:76:34: f2:0b:6a:ae:5c:fb:ab:5f:dd:87:0b:7f:62:a0:08:63:c4:64: 7b:1c:41:56:b5:7a:13:8b:f0:28:5a:45:2b:c9:9d:c6:b5:31: 45:2c:d1:5f:2d:b5:b4:be:d0:be:97:74:f5:c4:00:53:43:90: 99:3f:ee:7f:a0:de:70:34:97:18:46:99:a9:18:12:6a:db:18: 70:14:a1:dc:87:dc:7f:dc:9d:db:5a:8f:28:35:89:8d:d3:05: e0:4f:58:8c:38:26:e9:6c:2f:8a:a3:97:d1:f6:1c:bb:93:67: d6:13:bf:53:57:24:b4:54:4b:1c:e2:18:9c:2b:3f:78:38:05: dd:a2:57:49:0c:55:4b:be:d3:3c:db:c5:c3:4f:31:7e:5c:1b: 9e:57:45:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBBNkMxMTAvBgNVBAUTKEE3ODdBNjNFNDlFRThFQzZGOTc1MTE2MDdGMUI3QzVC MERGMTE2NEUwHhcNMjYwMzI0MTkyNTMxWhcNMjYwMzMxMTkyNTMxWjAYMRYwFAYD VQQDEw02OWMyZTUyYy01MzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZAhOodxNt4W58XTYHFqtno6U0n1uFo2JvzLnCIwisUBNPl5UDxN8CVB26b0 XwpFC8GPj5N9BqkFv/4uvV5xM4s6lICWyMtxH+CSJoseAdP1etlnq4VDU6jgIN/R HR/u5E4ujLN444ao9Ob98bPdpyMSLH+PdApg3Y/f9CYc3E1zo7GyiA6txESGDbI4 sZO7sYtyoYZjovF7RVFaB85t70h3aQzqnFXolPoDvDRKN6xHGdlX2NoOnZfkqnRi s7uM6AtNLlN5JIafrSIa4atRiqw/2iQl2fY7RgrgZneAWUagaCHCXDBWGXadPMOD szGnwrKo+NuhiyojNY27LvMFEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGkIuGNx TAHaBm4ZA8zV5yiW6LL6MB8GA1UdIwQYMBaAFKeHpj5J7o7G+XURYH8bfFsN8RZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEE2Qy9COTE2RjM4ODgy QzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpzYjVkUkZnZnh0OFd3M3hG azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A0ZW1Qa251anNiNWRSRmdmeHQ4V3czeEZrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEE2Qy9COTE2RjM4ODgyQzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpz YjVkUkZnZnh0OFd3M3hGazQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFx3TcQDRbfZR+xWyvHa45h+Q0taH729loiQ3X+tHMuiUCiYAJs3S7F+b52P9 W8I9mw3uZpRAZFBh6P8I3ebauIdpjNBhGp/mGRBwxJdfJOdsj2iT7khhCqpm1KLu 5mZ+9PHSuqkaiO6FknY08gtqrlz7q1/dhwt/YqAIY8RkexxBVrV6E4vwKFpFK8md xrUxRSzRXy21tL7Qvpd09cQAU0OQmT/uf6DecDSXGEaZqRgSatsYcBSh3Ifcf9yd 21qPKDWJjdMF4E9YjDgm6WwviqOX0fYcu5Nn1hO/U1cktFRLHOIYnCs/eDgF3aJX SQxVS77TPNvFw08xflwbnldFMw== -----END CERTIFICATE-----Generated at Thu Mar 26 13:58:58 2026 by rpki-client