$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft File: eFfRGlHcrpwuCIahDOBvVfW4QwA.mft (raw, json) Hash identifier: D1vMcGy4zs62NVNDAEb2uaTnPhL7Vw1LvHB4oexGCNQ= Subject key identifier: 8C:03:45:E7:34:61:DB:60:94:52:E4:F1:89:58:21:35:93:E0:DA:9B Authority key identifier: 78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 Certificate issuer: /CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Certificate serial: 0656 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft Manifest number: 0648 Signing time: Tue 24 Mar 2026 22:24:59 +0000 Manifest this update: Tue 24 Mar 2026 22:24:59 +0000 Manifest next update: Tue 31 Mar 2026 22:24:59 +0000 Files and hashes: 1: eFfRGlHcrpwuCIahDOBvVfW4QwA.crl (hash: BTsReNiaNg9AnMnhU+b/UrXhp+bFU04Xg6pUKqJhJWA=) 2: 18981398329B11EDB9F09862C4F9AE02.roa (hash: kY1YTIxA2Ehr3lWMQGd50rPN8ZZUD4wpWeTbdzq8xgU=) 3: 8183B0FACAF111EBA40AF15BC4F9AE02.roa (hash: Q+2DHykSFmBY3CD0496mIjmhaZXue856I6zGxnb489c=) 4: 324C60ACDD2211F0BB0B52AC636F56BC.roa (hash: se6AtIzQ1zk7CsT2kIdg+P2jONRQ4XENeyUhZkaPumM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1622 (0x656) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5D8A, serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Validity Not Before: Mar 24 22:24:59 2026 GMT Not After : Mar 31 22:24:59 2026 GMT Subject: CN=69c30f3b-55d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2e:21:c0:0a:ff:9c:2e:c8:25:de:9a:46:5c: 2e:69:48:39:a8:26:99:85:27:5b:27:41:f0:f4:3a: 3a:ba:40:9c:a1:45:dd:45:dd:b9:6b:8d:80:3a:3f: 48:1f:5c:97:8f:1e:3e:74:12:10:01:04:51:c1:3b: 72:80:55:e4:66:05:a9:6f:d9:a5:12:23:1e:a2:b5: d0:2f:40:3b:45:2f:d7:e4:b3:dd:a9:9a:41:3d:21: 1d:8a:c3:97:62:e6:83:60:3d:9d:41:d5:82:5d:36: 95:06:f9:c2:0b:95:ec:85:d8:d9:48:1a:8f:c3:7d: 8a:cf:da:dd:48:a2:d5:fb:14:dd:ba:3d:dd:bf:6b: f6:ff:59:a6:0c:f9:57:b1:4b:93:15:c3:a5:bd:93: 34:2a:b8:36:79:20:6a:06:13:28:d9:74:32:cb:4c: 96:9f:95:f0:46:9f:ab:f6:7d:32:a7:be:f7:1a:45: c7:6c:4c:d2:1b:3c:56:10:67:91:0b:a1:52:a6:96: bb:21:9b:ff:c6:7c:58:90:68:c2:89:57:ca:9e:8e: e4:54:db:ae:c7:33:49:13:66:e3:15:8e:49:db:63: 7b:95:e8:c4:cd:ca:3d:7b:65:e0:25:9a:d0:a5:41: 1b:27:c8:00:08:c4:27:59:b3:5a:81:08:fb:39:bb: d2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:03:45:E7:34:61:DB:60:94:52:E4:F1:89:58:21:35:93:E0:DA:9B X509v3 Authority Key Identifier: keyid:78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:f8:0c:f2:dd:c7:5d:45:a1:73:61:1c:70:fe:03:bb:76:f8: 0b:79:b8:51:21:08:24:34:dc:6b:d8:bd:f4:27:37:c5:43:e2: 1e:82:15:d6:99:9a:8e:9a:db:eb:0d:97:99:53:35:1b:e7:9d: c5:c2:11:b8:f6:8d:6d:49:d8:d8:f7:de:2a:90:5a:0d:b7:8e: 4f:28:40:85:4d:41:b5:03:92:11:68:fe:09:0a:93:03:4f:ed: 2e:b9:54:fe:65:0d:7e:19:59:b1:b7:db:4a:8f:ab:57:1f:e5: 3b:0f:dd:44:d5:f9:a5:21:de:a2:d3:a0:ad:e8:5c:65:f0:54: 94:68:2d:ad:92:fa:46:45:de:ee:0c:21:45:7a:7b:95:b4:9a: 76:8a:6b:6c:02:b8:c1:db:5f:3d:ab:69:00:49:c1:b8:d8:ad: fa:02:ae:32:16:8e:5d:51:af:40:24:e5:20:36:c2:73:86:2e: 77:46:1e:e1:0e:18:25:65:56:b0:2c:4d:ec:7b:a1:10:8d:ed: 36:d5:fb:09:75:18:61:5f:0f:c2:ab:87:16:6c:b0:56:9d:22: 91:62:ce:12:8e:e6:a6:85:e2:63:9a:b6:ae:2e:e5:20:fa:d6: 99:fb:fc:e1:ff:71:c0:94:d3:2b:82:47:9c:bc:3a:12:6e:21: f4:dc:fb:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEOEExMTAvBgNVBAUTKDc4NTdEMTFBNTFEQ0FFOUMyRTA4ODZBMTBDRTA2RjU1 RjVCODQzMDAwHhcNMjYwMzI0MjIyNDU5WhcNMjYwMzMxMjIyNDU5WjAYMRYwFAYD VQQDEw02OWMzMGYzYi01NWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyi4hwAr/nC7IJd6aRlwuaUg5qCaZhSdbJ0Hw9Do6ukCcoUXdRd25a42AOj9I H1yXjx4+dBIQAQRRwTtygFXkZgWpb9mlEiMeorXQL0A7RS/X5LPdqZpBPSEdisOX YuaDYD2dQdWCXTaVBvnCC5XshdjZSBqPw32Kz9rdSKLV+xTduj3dv2v2/1mmDPlX sUuTFcOlvZM0Krg2eSBqBhMo2XQyy0yWn5XwRp+r9n0yp773GkXHbEzSGzxWEGeR C6FSppa7IZv/xnxYkGjCiVfKno7kVNuuxzNJE2bjFY5J22N7lejEzco9e2XgJZrQ pUEbJ8gACMQnWbNagQj7ObvSPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIwDRec0 YdtglFLk8YlYITWT4NqbMB8GA1UdIwQYMBaAFHhX0RpR3K6cLgiGoQzgb1X1uEMA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUQ4QS9CQTJGMUI5QUNB RUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jwd3VDSWFoRE9CdlZmVzRR d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGZlJHbEhjcnB3dUNJYWhET0J2VmZXNFF3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUQ4QS9CQTJGMUI5QUNBRUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jw d3VDSWFoRE9CdlZmVzRRd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV/gM8t3HXUWhc2EccP4Du3b4C3m4USEIJDTca9i99Cc3xUPiHoIV1pmajprb 6w2XmVM1G+edxcIRuPaNbUnY2PfeKpBaDbeOTyhAhU1BtQOSEWj+CQqTA0/tLrlU /mUNfhlZsbfbSo+rVx/lOw/dRNX5pSHeotOgrehcZfBUlGgtrZL6RkXe7gwhRXp7 lbSadoprbAK4wdtfPatpAEnBuNit+gKuMhaOXVGvQCTlIDbCc4Yud0Ye4Q4YJWVW sCxN7HuhEI3tNtX7CXUYYV8PwquHFmywVp0ikWLOEo7mpoXiY5q2ri7lIPrWmfv8 4f9xwJTTK4JHnLw6Em4h9Nz7dA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:26:33 2026 by rpki-client