$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft File: b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft (raw, json) Hash identifier: K6efhmLYwD+4xyCkDgW2NzANh0seSDoAgYSHl5D8oSo= Subject key identifier: FF:57:DB:A1:AE:81:8F:B4:22:4C:0F:2A:10:77:94:0D:E5:D4:A2:E9 Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft Manifest number: 017F Signing time: Wed 25 Mar 2026 04:01:36 +0000 Manifest this update: Wed 25 Mar 2026 04:01:35 +0000 Manifest next update: Wed 01 Apr 2026 04:01:35 +0000 Files and hashes: 1: b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl (hash: G59lQ2cK7bE4XNc678HjR2Qpz8b1xJWXLvEa5lVjces=) 2: 3F5C47A0531411F0B5969F4DC4F9AE02.roa (hash: qxIP3Llk0p2PAKZXvKAeEyqecNor+P2OlAPibwb26G8=) 3: 4034878C531411F0B5969F4DC4F9AE02.roa (hash: HrcOu88/JBmIFobTfUt0ecLd7H5lABy3mnlURTBZl4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Validity Not Before: Mar 25 04:01:35 2026 GMT Not After : Apr 1 04:01:35 2026 GMT Subject: CN=69c35e1f-332f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2e:95:31:79:3f:fb:e6:09:93:2c:af:ec:d4: 6c:2b:a3:2c:1d:7e:68:44:51:d3:4f:5b:f4:89:52: b6:83:df:da:2b:b9:5d:ef:f0:81:e6:bc:b2:31:ce: ce:d8:01:e0:97:b0:50:dc:48:c1:f6:dd:e3:d8:64: c4:09:96:a5:cf:c2:b3:7f:1c:47:46:7e:34:c1:53: 12:18:da:09:58:94:1f:b3:07:20:27:a6:d9:65:c3: c4:cc:06:c8:0d:68:8a:2e:4c:ba:6c:67:b0:24:f2: b4:53:6d:bf:f7:e4:77:f9:11:04:c7:83:a5:aa:95: d8:84:6f:a9:38:9f:03:72:4b:56:17:d4:a3:30:23: 83:4d:86:96:5a:41:73:54:5d:b3:48:18:f8:bc:2a: 64:b2:7c:35:5f:bc:8e:a6:7d:65:32:a2:d2:a7:7e: ee:7f:8d:7a:9b:7a:40:11:96:ad:92:57:8e:7a:3d: a8:c3:c0:96:9c:ef:f3:94:ae:3d:2a:32:aa:82:ed: 51:40:e8:2c:f3:17:2d:87:c9:60:03:28:ef:b2:2d: 0a:79:bc:e3:32:98:73:86:ee:78:28:85:da:f8:77: 19:f6:d8:9a:92:fe:3b:ff:21:08:da:01:83:09:aa: 65:33:34:66:ff:e7:81:bd:e8:05:14:15:42:88:79: c6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:57:DB:A1:AE:81:8F:B4:22:4C:0F:2A:10:77:94:0D:E5:D4:A2:E9 X509v3 Authority Key Identifier: keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:52:e0:fd:77:3c:45:50:dc:3b:e6:78:86:77:0d:2e:6d:a6: e9:87:0f:ef:42:31:2f:6c:27:86:76:36:d9:fd:23:f7:47:38: 4f:e2:34:d3:5d:b0:de:0c:0c:a2:bc:47:2e:64:25:67:1a:89: 6f:01:aa:16:0c:2b:27:0c:94:ec:0d:e7:f9:ba:09:00:f4:af: 99:5d:83:3b:d4:a5:39:2b:19:9c:7c:d2:b7:fc:4f:cb:eb:50: e5:0c:66:95:9c:50:4d:ff:b2:96:39:9f:67:28:4e:78:39:4f: 31:ca:b8:ab:b1:a3:bf:b8:e9:47:ac:09:bc:f3:09:86:33:4c: 4b:31:6b:34:94:42:42:e6:ac:63:4c:0d:37:a8:5e:b8:67:91: b4:c9:b0:ca:1c:4e:9e:85:be:8f:ab:a9:de:95:70:1b:58:99: 86:7e:c9:0e:37:a6:77:b1:d7:b3:3e:a5:f1:cf:ee:27:70:de: 42:83:5a:48:28:8d:6b:b1:ea:b5:c3:d7:ed:c2:18:93:f7:bd: 2e:bd:49:0e:33:7d:96:21:9b:ed:32:dd:53:8b:ca:cf:ce:2e: 59:13:52:4f:ef:ac:81:fd:79:cb:70:f5:11:50:3b:34:eb:c0: c9:fe:aa:0f:09:d4:b5:25:22:1c:52:ee:1f:b8:9d:9e:9a:7f: 5e:08:05:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0RkUxMTAvBgNVBAUTKDZGQzcwOTA2RkJBNkY0NTM5NDUyMDkxOTMyQzQ1RkZB NEQ4NTcyQjgwHhcNMjYwMzI1MDQwMTM1WhcNMjYwNDAxMDQwMTM1WjAYMRYwFAYD VQQDEw02OWMzNWUxZi0zMzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5y6VMXk/++YJkyyv7NRsK6MsHX5oRFHTT1v0iVK2g9/aK7ld7/CB5ryyMc7O 2AHgl7BQ3EjB9t3j2GTECZalz8KzfxxHRn40wVMSGNoJWJQfswcgJ6bZZcPEzAbI DWiKLky6bGewJPK0U22/9+R3+REEx4OlqpXYhG+pOJ8DcktWF9SjMCODTYaWWkFz VF2zSBj4vCpksnw1X7yOpn1lMqLSp37uf416m3pAEZatkleOej2ow8CWnO/zlK49 KjKqgu1RQOgs8xcth8lgAyjvsi0KebzjMphzhu54KIXa+HcZ9tiakv47/yEI2gGD CaplMzRm/+eBvegFFBVCiHnGeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP9X26Gu gY+0IkwPKhB3lA3l1KLpMB8GA1UdIwQYMBaAFG/HCQb7pvRTlFIJGTLEX/pNhXK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTRGRS9ENjExN0RGNkY2 RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlGT1VVZ2taTXNSZi1rMkZj cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTRGRS9ENjExN0RGNkY2RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlG T1VVZ2taTXNSZi1rMkZjcmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiVLg/Xc8RVDcO+Z4hncNLm2m6YcP70IxL2wnhnY22f0j90c4T+I0012w3gwM orxHLmQlZxqJbwGqFgwrJwyU7A3n+boJAPSvmV2DO9SlOSsZnHzSt/xPy+tQ5Qxm lZxQTf+yljmfZyhOeDlPMcq4q7Gjv7jpR6wJvPMJhjNMSzFrNJRCQuasY0wNN6he uGeRtMmwyhxOnoW+j6up3pVwG1iZhn7JDjemd7HXsz6l8c/uJ3DeQoNaSCiNa7Hq tcPX7cIYk/e9Lr1JDjN9liGb7TLdU4vKz84uWRNST++sgf15y3D1EVA7NOvAyf6q DwnUtSUiHFLuH7idnpp/XggFVA== -----END CERTIFICATE-----Generated at Thu Mar 26 10:12:52 2026 by rpki-client