$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft File: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft (raw, json) Hash identifier: Mg+2hSPPhFIfhgbxLfh62k/0ppD8nssaJW9VZV/ZfAw= Subject key identifier: 8B:4D:2C:08:BB:FC:E5:6C:16:92:F9:25:EC:52:26:91:7F:8B:AD:59 Authority key identifier: 74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A Certificate issuer: /CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A Certificate serial: 029A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft Manifest number: 0295 Signing time: Wed 25 Mar 2026 01:08:44 +0000 Manifest this update: Wed 25 Mar 2026 01:08:44 +0000 Manifest next update: Wed 01 Apr 2026 01:08:44 +0000 Files and hashes: 1: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl (hash: cTK/kkdflPNWj4kq/q7LyBi4llvDz12xVQrb+tXGbQc=) 2: 88DA4EC83E3511ED8B05E85AC4F9AE02.roa (hash: bW2bcUmqAZfAczNZIh/ATSzOFXV9c+cWlAh6l8i340A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5A, serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A Validity Not Before: Mar 25 01:08:44 2026 GMT Not After : Apr 1 01:08:44 2026 GMT Subject: CN=69c3359c-5680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f4:fe:ea:a3:29:f7:4e:c8:89:91:a3:e2:9b: 2a:62:2c:dd:a7:d5:79:32:52:46:1e:e7:fe:75:b6: d5:9b:bd:ca:4e:a1:db:3f:11:40:77:75:25:24:fe: 6f:a6:98:c1:f5:09:39:ef:6c:57:ed:6c:07:da:86: 8a:08:e5:27:2d:c8:ce:7f:3c:99:cc:74:8a:54:1f: 54:db:89:0f:75:6b:2c:ee:2f:dc:86:20:41:f6:48: 3d:52:84:3f:df:d5:01:7e:c7:e9:d6:c6:4b:76:92: 37:48:3e:47:28:22:6e:1e:63:6e:4a:c7:96:56:8a: 13:ac:8e:b7:4b:25:cb:a6:b8:9c:8e:da:73:6a:7f: 31:f2:77:8c:ef:56:a8:03:23:56:5e:88:d7:02:c7: 8b:fb:78:0d:60:93:c7:1b:69:f5:2c:ca:09:cf:9c: b6:08:ca:9a:1c:e5:2c:47:b1:5d:97:ff:50:9e:d5: 81:f1:e2:ac:cc:7a:10:98:ae:7d:47:ed:dd:fe:20: 21:4d:8a:3b:cc:62:7c:d1:78:74:2a:ed:5d:ef:f9: 71:42:9e:99:68:b7:a6:19:62:65:48:b2:f8:77:c2: c6:80:a0:b0:47:e7:f6:1e:e3:e0:61:20:e9:72:49: 51:41:0a:7e:78:51:98:d7:bd:ee:1a:10:36:f2:1b: bb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4D:2C:08:BB:FC:E5:6C:16:92:F9:25:EC:52:26:91:7F:8B:AD:59 X509v3 Authority Key Identifier: keyid:74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:8b:63:6b:9f:96:da:6b:27:5b:62:97:2e:96:3d:bc:56:ca: b6:41:c9:36:f9:f7:6b:64:a2:83:25:63:14:c7:07:16:f2:d0: 37:9f:6e:5e:fc:22:a1:b4:0b:e5:d1:37:1b:ed:b6:41:d1:df: 71:6f:35:62:c1:1b:7c:b3:82:fe:29:02:24:30:40:6b:24:40: 58:1d:aa:e8:78:87:be:95:40:70:90:9d:b4:f7:da:a3:b6:da: 20:ff:74:7b:f2:cd:23:f2:cf:51:0c:55:95:7d:4c:37:6b:0c: 3e:27:c6:7a:c0:c6:6c:bb:06:37:bb:ba:85:f4:47:64:67:b3: 36:ee:05:13:b2:b3:2d:c1:a3:81:e9:43:ec:b8:e3:e0:b9:ea: 26:46:00:f2:a5:3e:54:c3:e6:48:5c:6a:c4:6a:43:19:17:58: 93:0f:74:40:97:b2:33:04:14:f0:57:7a:2c:ca:89:47:87:4d: 11:74:78:7e:94:44:cc:b9:97:06:89:b5:ce:cf:78:5f:47:09: 9f:69:b9:d6:43:76:f0:51:27:b1:21:2e:5b:62:06:c2:e8:45: 66:4b:ed:05:d4:e2:46:07:a1:bf:46:b6:75:5d:01:c0:6e:14: 53:95:61:da:bc:78:a9:34:31:e9:61:13:f7:ff:d4:9f:df:cf: 27:09:dd:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUExMTAvBgNVBAUTKDc0QkYyRkUyNkQ0NEZGRUY2M0RFNjgzRjQyNDI0ODI0 MEZCNzIyOUEwHhcNMjYwMzI1MDEwODQ0WhcNMjYwNDAxMDEwODQ0WjAYMRYwFAYD VQQDEw02OWMzMzU5Yy01NjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjfT+6qMp907IiZGj4psqYizdp9V5MlJGHuf+dbbVm73KTqHbPxFAd3UlJP5v ppjB9Qk572xX7WwH2oaKCOUnLcjOfzyZzHSKVB9U24kPdWss7i/chiBB9kg9UoQ/ 39UBfsfp1sZLdpI3SD5HKCJuHmNuSseWVooTrI63SyXLpricjtpzan8x8neM71ao AyNWXojXAseL+3gNYJPHG2n1LMoJz5y2CMqaHOUsR7Fdl/9QntWB8eKszHoQmK59 R+3d/iAhTYo7zGJ80Xh0Ku1d7/lxQp6ZaLemGWJlSLL4d8LGgKCwR+f2HuPgYSDp cklRQQp+eFGY173uGhA28hu7twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFItNLAi7 /OVsFpL5JexSJpF/i61ZMB8GA1UdIwQYMBaAFHS/L+JtRP/vY95oP0JCSCQPtyKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1QS8wQUVGMEZEODNF MzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8tOWozbWdfUWtKSUpBLTNJ cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RMOHY0bTFFXy05ajNtZ19Ra0pJSkEtM0lwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkM1QS8wQUVGMEZEODNFMzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8t OWozbWdfUWtKSUpBLTNJcG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYotja5+W2msnW2KXLpY9vFbKtkHJNvn3a2SigyVjFMcHFvLQN59uXvwiobQL 5dE3G+22QdHfcW81YsEbfLOC/ikCJDBAayRAWB2q6HiHvpVAcJCdtPfao7baIP90 e/LNI/LPUQxVlX1MN2sMPifGesDGbLsGN7u6hfRHZGezNu4FE7KzLcGjgelD7Ljj 4LnqJkYA8qU+VMPmSFxqxGpDGRdYkw90QJeyMwQU8Fd6LMqJR4dNEXR4fpREzLmX Bom1zs94X0cJn2m51kN28FEnsSEuW2IGwuhFZkvtBdTiRgehv0a2dV0BwG4UU5Vh 2rx4qTQx6WET9//Un9/PJwndug== -----END CERTIFICATE-----Generated at Thu Mar 26 20:05:00 2026 by rpki-client