$ rpki-client -vvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft File: fnHZ0UYSF7D4LAexXE8CnyZySYo.mft (raw, json) Hash identifier: Ff3ASlMPjX9gQ0OSKO1Qb0qGLGfVPnyvDQrRyZiRiKY= Subject key identifier: 05:6A:47:3D:6C:43:C1:32:6B:24:83:19:36:1D:CB:D5:03:00:C5:A5 Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A Certificate issuer: /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft Manifest number: 01A3 Signing time: Wed 25 Mar 2026 03:30:00 +0000 Manifest this update: Wed 25 Mar 2026 03:30:00 +0000 Manifest next update: Wed 01 Apr 2026 03:30:00 +0000 Files and hashes: 1: fnHZ0UYSF7D4LAexXE8CnyZySYo.crl (hash: nqpvvpbMOTuitUrpjD1/6+fKMPk2gapnvBPRJggwwtk=) 2: F57B503EB05F11EEB6F38532C4F9AE02.roa (hash: Cf+f/rErS+gscIQrLTVw0RlWMSXZG8pgxu+sjMSHC6U=) 3: FA66BA00BD1311EEBC015623C4F9AE02.roa (hash: qJJvsPUngd7sU+FxNj5+ieKU5yZcXa/zUUo8JSHAZ60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Validity Not Before: Mar 25 03:30:00 2026 GMT Not After : Apr 1 03:30:00 2026 GMT Subject: CN=69c356b8-3be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1a:a5:52:61:79:1f:af:03:3f:1f:7d:2d:80: 05:1b:70:ce:4b:e9:31:10:ba:cc:71:f4:52:b5:b5: af:4d:67:64:4d:e0:88:e4:2c:6e:59:18:9d:bb:33: 6b:88:05:53:b1:be:2c:5f:1b:18:9e:69:3a:3d:03: f5:e4:bc:db:94:1d:49:4b:5b:7d:f3:09:a3:cb:f0: e7:6e:99:b5:3e:5e:c8:d9:b2:23:c8:33:38:12:2e: 7c:66:72:74:36:67:6b:76:32:e3:ba:e7:b5:c2:b4: 01:d6:c4:5a:82:e8:c8:50:ce:1c:95:05:a1:ef:dc: 08:b4:84:be:b2:c1:f0:1f:77:77:5c:60:c6:db:d8: 37:4c:ae:59:63:84:ea:b7:da:40:8b:e1:6a:ca:f1: 17:66:4c:e6:b9:5e:fd:18:29:cf:52:b2:47:e1:88: 4e:bd:0b:83:c3:8a:da:90:e4:fc:c8:2a:4a:ab:97: c3:6d:4c:aa:08:6a:ad:b5:3a:08:80:1b:a7:7c:2f: 98:89:0e:f8:c8:c4:85:f9:28:11:48:03:85:8b:b9: 2b:ac:4c:bb:11:b1:35:3b:b3:6e:5a:b0:1c:4b:d8: 95:24:94:49:4c:d6:e1:91:28:87:f7:59:4d:c5:2c: bd:cb:ee:1e:73:df:fa:29:b0:81:d2:73:04:cf:76: 8d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6A:47:3D:6C:43:C1:32:6B:24:83:19:36:1D:CB:D5:03:00:C5:A5 X509v3 Authority Key Identifier: keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:40:99:83:be:8b:82:55:a8:44:67:8a:f6:82:2f:51:c5:db: 7b:13:b5:14:62:74:b9:09:fb:0c:ea:b5:cb:5a:44:64:9d:e2: 0b:1a:44:84:de:ef:73:c9:c2:79:ac:e9:b3:5a:e8:cf:2a:21: 04:76:00:27:ca:76:1f:3c:80:fb:27:43:dc:a5:ee:c3:9e:cf: 7f:32:a4:07:24:88:96:95:6d:0d:e1:19:78:85:f3:12:54:cb: cf:3f:09:81:83:b4:66:84:5d:db:78:01:bb:26:06:2a:c9:02: 76:1b:01:6f:24:c4:fb:09:c7:73:a3:7c:0e:d8:d2:5c:f9:f7: 65:55:de:d3:57:9c:9a:ac:a8:44:f4:8a:01:ff:cb:f0:1d:79: 05:7c:91:af:e5:99:3c:d3:ed:aa:c3:6d:e2:9d:ab:63:88:64: c1:f1:e7:01:6d:cb:8a:ce:e7:cb:de:58:07:79:d8:69:ee:42: b5:f6:6f:f8:0a:79:fa:aa:bd:4b:95:6a:fd:c8:40:eb:2f:7b: 9c:8f:69:ae:87:46:12:d5:00:c0:3d:b8:43:32:39:b5:a7:06: 1a:a0:48:06:6c:62:76:67:aa:5b:0a:dd:ff:cb:d8:86:d5:4b: cd:51:fb:de:4b:20:ef:b3:8a:4d:30:5d:f9:46:36:41:8e:4e: 37:38:5b:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTExQTExMTAvBgNVBAUTKDdFNzFEOUQxNDYxMjE3QjBGODJDMDdCMTVDNEYwMjlG MjY3MjQ5OEEwHhcNMjYwMzI1MDMzMDAwWhcNMjYwNDAxMDMzMDAwWjAYMRYwFAYD VQQDEw02OWMzNTZiOC0zYmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxqlUmF5H68DPx99LYAFG3DOS+kxELrMcfRStbWvTWdkTeCI5CxuWRiduzNr iAVTsb4sXxsYnmk6PQP15LzblB1JS1t98wmjy/Dnbpm1Pl7I2bIjyDM4Ei58ZnJ0 NmdrdjLjuue1wrQB1sRagujIUM4clQWh79wItIS+ssHwH3d3XGDG29g3TK5ZY4Tq t9pAi+FqyvEXZkzmuV79GCnPUrJH4YhOvQuDw4rakOT8yCpKq5fDbUyqCGqttToI gBunfC+YiQ74yMSF+SgRSAOFi7krrEy7EbE1O7NuWrAcS9iVJJRJTNbhkSiH91lN xSy9y+4ec9/6KbCB0nMEz3aN8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAVqRz1s Q8EyaySDGTYdy9UDAMWlMB8GA1UdIwQYMBaAFH5x2dFGEhew+CwHsVxPAp8mckmK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTFBMS9BOUI3M0NBOEIw NUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3RDRMQWV4WEU4Q255WnlT WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuSFowVVlTRjdENExBZXhYRThDbnlaeVNZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTFBMS9BOUI3M0NBOEIwNUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3 RDRMQWV4WEU4Q255WnlTWW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGkCZg76LglWoRGeK9oIvUcXbexO1FGJ0uQn7DOq1y1pEZJ3iCxpEhN7vc8nC eazps1rozyohBHYAJ8p2HzyA+ydD3KXuw57PfzKkBySIlpVtDeEZeIXzElTLzz8J gYO0ZoRd23gBuyYGKskCdhsBbyTE+wnHc6N8DtjSXPn3ZVXe01ecmqyoRPSKAf/L 8B15BXyRr+WZPNPtqsNt4p2rY4hkwfHnAW3Lis7ny95YB3nYae5CtfZv+Ap5+qq9 S5Vq/chA6y97nI9prodGEtUAwD24QzI5tacGGqBIBmxidmeqWwrd/8vYhtVLzVH7 3ksg77OKTTBd+UY2QY5ONzhbAQ== -----END CERTIFICATE-----Generated at Thu Mar 26 13:38:31 2026 by rpki-client