$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft File: 72i9vAcsq0VbbaMWDt-PtsSI3RU.mft (raw, json) Hash identifier: /rL4j9kFlDMww8F7yxDnbOHs8jpeou+wpWO534Zr5IM= Subject key identifier: AE:FC:35:2E:A5:14:1E:A9:18:16:5A:77:6D:FB:FB:99:E8:3A:F1:55 Authority key identifier: EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15 Certificate issuer: /CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15 Certificate serial: 3551 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft Manifest number: 3543 Signing time: Tue 24 Mar 2026 14:59:23 +0000 Manifest this update: Tue 24 Mar 2026 14:59:23 +0000 Manifest next update: Tue 31 Mar 2026 14:59:23 +0000 Files and hashes: 1: 72i9vAcsq0VbbaMWDt-PtsSI3RU.crl (hash: X8yVmwI3VIeW1YkDGGhAsd76H2dmX/H7VhRC3tJW7QU=) 2: C6BCEF8ECF2311F09BE9DF62C4F9AE02.roa (hash: 3jca7UxaXV6c6olMc9z1yWqeuEFOcKZmp0PXJwoJU88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13649 (0x3551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B9D, serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15 Validity Not Before: Mar 24 14:59:23 2026 GMT Not After : Mar 31 14:59:23 2026 GMT Subject: CN=69c2a6cb-a9f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c2:6d:37:07:9a:5e:50:3c:a1:e8:88:4f:eb: ab:42:78:94:9c:d9:03:6f:1e:1e:ad:da:ab:d3:2d: df:85:56:42:db:bb:f9:3b:92:22:78:0c:91:6e:74: fb:3f:66:7c:13:80:fb:68:14:85:9e:52:83:1f:a3: 4b:1c:63:10:b4:f3:3a:51:3c:c0:49:d6:0c:d1:25: 58:81:de:40:21:cb:78:54:4f:ab:9a:07:46:65:e2: 29:99:37:e1:24:08:5d:49:36:c3:5d:8c:50:ca:f1: 7a:6d:d3:d5:01:43:ae:bc:62:50:bc:85:0d:b3:ab: c8:02:9d:1d:a2:0c:6b:1e:a1:62:cd:31:76:86:91: 7c:ae:80:78:00:1d:0c:77:a1:3c:a5:d2:00:d9:86: 30:9d:10:8a:70:e8:39:3f:44:2b:16:77:1f:e8:78: b7:68:e2:68:64:31:06:13:fb:e8:52:ac:f2:8b:46: a3:34:44:12:ac:9a:dd:19:86:52:0f:eb:22:95:a8: 9c:19:8f:98:f1:42:a7:80:f9:31:61:8b:2b:1b:88: 11:4b:96:68:9d:25:f5:fd:88:16:21:fb:3a:15:74: 70:39:db:b2:99:d5:42:15:57:79:6e:ce:a3:93:8a: de:af:ff:43:fc:58:a1:26:01:87:a3:98:78:da:2c: 2d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FC:35:2E:A5:14:1E:A9:18:16:5A:77:6D:FB:FB:99:E8:3A:F1:55 X509v3 Authority Key Identifier: keyid:EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:55:9e:79:34:17:0c:7e:29:ab:93:09:de:d6:ae:f9:47:a7: e5:e8:be:13:89:61:16:6c:e7:08:b8:44:b4:47:a3:9d:d4:24: ad:66:8c:a4:21:98:f9:6c:ea:30:b8:fe:5e:2c:1b:80:d5:81: dd:ba:5a:c2:cf:c1:fe:95:ce:05:9b:cd:22:77:02:16:5f:79: 60:87:e7:7f:74:8c:4a:ed:a9:d4:da:a3:97:a5:ee:da:25:7c: c5:0c:76:50:e4:2e:b1:89:c2:f6:f4:88:39:a1:b2:ad:59:ec: 54:ab:78:92:77:1f:59:03:d0:bf:f4:c2:aa:64:c6:77:c3:ff: 6e:94:a1:56:e1:0e:f4:3b:ba:ff:1a:40:a3:c8:90:62:9c:11: a5:ab:6a:1b:f3:f4:6a:4e:70:d1:ad:cc:d3:55:8a:70:d2:0d: 20:46:7b:37:5d:f6:21:bc:01:ef:d1:40:38:cd:7f:d8:20:2b: da:45:8d:f4:30:74:c8:b2:24:8d:78:78:27:05:d4:80:c5:72: 90:d4:56:d8:b2:2c:a3:d1:7e:9d:e6:c6:35:17:bb:2f:57:bd: ce:af:bb:9d:c7:6a:a3:de:22:cc:cf:24:97:68:6f:93:1b:fd: f1:27:39:7a:41:b6:06:2b:0d:54:d7:68:b5:4f:d3:9f:da:19: a6:93:45:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCOUQxMTAvBgNVBAUTKEVGNjhCREJDMDcyQ0FCNDU1QjZEQTMxNjBFREY4RkI2 QzQ4OEREMTUwHhcNMjYwMzI0MTQ1OTIzWhcNMjYwMzMxMTQ1OTIzWjAYMRYwFAYD VQQDEw02OWMyYTZjYi1hOWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmMJtNweaXlA8oeiIT+urQniUnNkDbx4erdqr0y3fhVZC27v5O5IieAyRbnT7 P2Z8E4D7aBSFnlKDH6NLHGMQtPM6UTzASdYM0SVYgd5AIct4VE+rmgdGZeIpmTfh JAhdSTbDXYxQyvF6bdPVAUOuvGJQvIUNs6vIAp0dogxrHqFizTF2hpF8roB4AB0M d6E8pdIA2YYwnRCKcOg5P0QrFncf6Hi3aOJoZDEGE/voUqzyi0ajNEQSrJrdGYZS D+silaicGY+Y8UKngPkxYYsrG4gRS5ZonSX1/YgWIfs6FXRwOduymdVCFVd5bs6j k4rer/9D/FihJgGHo5h42iwtBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK78NS6l FB6pGBZad237+5noOvFVMB8GA1UdIwQYMBaAFO9ovbwHLKtFW22jFg7fj7bEiN0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEI5RC85NUFEMDM4ODFE OUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3EwVmJiYU1XRHQtUHRzU0kz UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyaTl2QWNzcTBWYmJhTVdEdC1QdHNTSTNSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEI5RC85NUFEMDM4ODFEOUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3Ew VmJiYU1XRHQtUHRzU0kzUlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALFWeeTQXDH4pq5MJ3tau+Uen5ei+E4lhFmznCLhEtEejndQkrWaMpCGY+Wzq MLj+XiwbgNWB3bpaws/B/pXOBZvNIncCFl95YIfnf3SMSu2p1Nqjl6Xu2iV8xQx2 UOQusYnC9vSIOaGyrVnsVKt4kncfWQPQv/TCqmTGd8P/bpShVuEO9Du6/xpAo8iQ YpwRpatqG/P0ak5w0a3M01WKcNINIEZ7N132IbwB79FAOM1/2CAr2kWN9DB0yLIk jXh4JwXUgMVykNRW2LIso9F+nebGNRe7L1e9zq+7ncdqo94izM8kl2hvkxv98Sc5 ekG2BisNVNdotU/Tn9oZppNFZA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:38:13 2026 by rpki-client