$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft File: mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json) Hash identifier: 7RjC3w+4QTBJ3tVfg+dSgRecj1CyqYY6hZ3t2GYNpGM= Subject key identifier: DE:E8:A1:3A:BA:C3:0E:26:99:82:FB:E3:7A:FE:02:BD:EA:74:43:94 Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D Certificate issuer: /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft Manifest number: 01D1 Signing time: Wed 25 Mar 2026 02:58:35 +0000 Manifest this update: Wed 25 Mar 2026 02:58:35 +0000 Manifest next update: Wed 01 Apr 2026 02:58:35 +0000 Files and hashes: 1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: xWZjxt9vcrcgqto0HoulmAvUXQZxSvy5QkbgfgwZuLU=) 2: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: +y5rCicZP5PLUrf/IaiEUvKxVk8tGpptOs2ZUbAFH7g=) 3: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: 1bLjvUFKAie+LhFsglKp4ujOu6m4XQrp7oBF2mMsatU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Validity Not Before: Mar 25 02:58:35 2026 GMT Not After : Apr 1 02:58:35 2026 GMT Subject: CN=69c34f5b-8a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8e:af:a3:c4:09:36:04:a5:c8:c2:5f:ed:49: 9c:0d:ed:f9:0a:74:ce:8d:14:9a:36:c3:e1:59:4e: 6c:c7:02:b7:78:11:30:f0:e0:7e:e3:d0:f5:d5:e5: 6f:fe:a4:a5:b7:d0:68:93:9e:69:bb:49:48:fe:79: f9:86:2f:74:84:14:f7:43:5f:8e:35:b6:96:ef:3e: ea:e6:79:c4:13:29:3f:2b:fe:0b:5b:c7:9e:3b:21: ed:c0:04:88:d4:95:72:b5:66:02:d9:57:24:d9:91: d5:19:08:20:04:87:18:11:cf:38:51:db:56:ec:d4: 08:f1:7b:c6:71:7b:54:9e:01:63:ed:bd:f7:b9:54: 61:24:c0:7f:bb:9a:f4:eb:9a:c1:d3:f6:66:a8:96: cb:a7:3e:b6:d3:22:9d:36:68:67:5c:1b:c2:14:68: 68:02:d4:f0:d9:3e:5b:33:33:56:a6:ff:01:75:99: ca:ee:48:85:d4:8f:62:da:93:e4:eb:3b:1e:c7:77: 27:46:79:34:ee:1e:ef:1b:68:24:c6:f3:a7:a6:50: ac:5a:fa:d8:ee:89:62:68:c9:6c:c7:cb:b0:6f:f5: 58:7e:49:dc:da:46:c0:0b:86:32:85:49:64:5a:3f: 9a:ea:e0:99:20:3f:2c:f0:ab:b6:ae:b6:28:8e:49: ef:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E8:A1:3A:BA:C3:0E:26:99:82:FB:E3:7A:FE:02:BD:EA:74:43:94 X509v3 Authority Key Identifier: keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:cb:47:dc:52:ba:bc:8e:a5:bd:ac:31:69:bb:2f:c5:be:2a: da:1f:1e:19:5f:39:f5:36:6d:a2:ce:4c:2e:bc:3e:02:f9:06: 35:dc:12:53:46:6a:7f:8e:c5:65:92:d0:97:1e:7f:3d:a4:15: 95:f8:79:e8:a4:43:71:9a:ff:34:aa:55:4d:f1:6d:f5:16:14: 3d:6a:d6:a3:2a:c1:ea:1c:1f:14:02:97:f2:82:be:d7:6d:3d: 1a:02:58:12:6e:6c:e6:04:96:41:37:08:b0:51:30:78:be:01: 96:d3:80:0b:d8:e1:d3:26:75:d5:00:d2:ee:ac:ec:72:ec:0e: ca:a5:b1:eb:f5:6f:89:23:59:c2:63:bd:cb:7a:db:58:57:9f: dc:13:b5:2c:3b:db:ab:09:f4:9e:e6:e6:68:1c:d0:29:c4:f5: 30:79:5e:b0:26:32:5a:fa:44:cd:20:66:67:c3:f2:3e:a3:d9: 12:06:5d:fe:1c:47:54:5a:ea:64:52:63:a5:4d:77:2b:a4:a5: 31:02:f1:dc:f2:8b:a6:b0:34:a1:bc:c1:ba:77:2f:ef:ea:2d: 7b:8f:6c:c1:f2:da:51:c2:5e:2e:3f:ff:de:dd:dd:17:67:5a: 0d:49:c5:87:b6:52:91:39:14:98:fd:3a:42:de:99:4c:74:5d: 4d:db:95:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZEOEIxMTAvBgNVBAUTKDlBQjY4NkUzQzI5OUFBN0U0NDU1NDkzNDk1QjQ2QkE1 QTc0NDA5OUQwHhcNMjYwMzI1MDI1ODM1WhcNMjYwNDAxMDI1ODM1WjAYMRYwFAYD VQQDEw02OWMzNGY1Yi04YTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA046vo8QJNgSlyMJf7UmcDe35CnTOjRSaNsPhWU5sxwK3eBEw8OB+49D11eVv /qSlt9Bok55pu0lI/nn5hi90hBT3Q1+ONbaW7z7q5nnEEyk/K/4LW8eeOyHtwASI 1JVytWYC2Vck2ZHVGQggBIcYEc84UdtW7NQI8XvGcXtUngFj7b33uVRhJMB/u5r0 65rB0/ZmqJbLpz620yKdNmhnXBvCFGhoAtTw2T5bMzNWpv8BdZnK7kiF1I9i2pPk 6zsex3cnRnk07h7vG2gkxvOnplCsWvrY7oliaMlsx8uwb/VYfknc2kbAC4YyhUlk Wj+a6uCZID8s8Ku2rrYojknvqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN7ooTq6 ww4mmYL743r+Ar3qdEOUMB8GA1UdIwQYMBaAFJq2huPCmap+RFVJNJW0a6WnRAmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkQ4Qi9CMkYyMzVCMjY3 MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFuNUVWVWswbGJScnBhZEVD WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21yYUc0OEtacW41RVZVazBsYlJycGFkRUNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkQ4Qi9CMkYyMzVCMjY3MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFu NUVWVWswbGJScnBhZEVDWjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArctH3FK6vI6lvawxabsvxb4q2h8eGV859TZtos5MLrw+AvkGNdwSU0Zqf47F ZZLQlx5/PaQVlfh56KRDcZr/NKpVTfFt9RYUPWrWoyrB6hwfFAKX8oK+1209GgJY Em5s5gSWQTcIsFEweL4BltOAC9jh0yZ11QDS7qzscuwOyqWx6/VviSNZwmO9y3rb WFef3BO1LDvbqwn0nubmaBzQKcT1MHlesCYyWvpEzSBmZ8PyPqPZEgZd/hxHVFrq ZFJjpU13K6SlMQLx3PKLprA0obzBuncv7+ote49swfLaUcJeLj//3t3dF2daDUnF h7ZSkTkUmP06Qt6ZTHRdTduVMg== -----END CERTIFICATE-----Generated at Thu Mar 26 09:13:13 2026 by rpki-client