$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft File: elBsIXoxB45CF4FgOA3SyDko2S4.mft (raw, json) Hash identifier: 98p+MFdaTFvvXlq7NZMK1iRm69rz/KTSLiHRy52Hv8A= Subject key identifier: B6:0B:70:56:4A:BE:9D:94:A5:52:57:9F:3D:1F:8C:7F:95:56:08:CB Authority key identifier: 7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E Certificate issuer: /CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E Certificate serial: 0D49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft Manifest number: 0D3C Signing time: Tue 24 Mar 2026 17:52:40 +0000 Manifest this update: Tue 24 Mar 2026 17:52:40 +0000 Manifest next update: Tue 31 Mar 2026 17:52:40 +0000 Files and hashes: 1: elBsIXoxB45CF4FgOA3SyDko2S4.crl (hash: YV1qxiJgj9qqFGERmDOfdy78Fj0yPvp7WfOPNM6eSeQ=) 2: 07B85890C29D11EBBAF29939C4F9AE02.roa (hash: Ohcdy58kQP+4fXw4fnYH+zSLsCeQ8xFhQqrxtgGqWp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3401 (0xd49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6DF8, serialNumber=7A506C217A31078E42178160380DD2C83928D92E Validity Not Before: Mar 24 17:52:40 2026 GMT Not After : Mar 31 17:52:40 2026 GMT Subject: CN=69c2cf68-584c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:dc:e5:39:b5:d2:09:c0:a0:6d:0a:a4:a6:4d: 00:56:37:3c:a1:0d:b0:70:fa:de:33:69:12:19:40: fb:d8:69:14:5b:c5:41:8c:d4:2c:ed:5b:f1:42:e3: 1e:84:23:ec:c3:f0:4a:11:aa:ad:86:c1:87:b6:13: e8:9d:fa:dc:8e:17:f2:cb:9a:9f:d2:3e:67:c2:37: 4a:c6:1b:27:e6:76:46:b8:01:04:11:c4:ca:b9:2c: 96:15:f0:6e:4a:84:14:6c:75:3e:30:4d:a4:de:87: 50:8e:39:f6:e3:f4:77:90:7e:20:ad:5d:6c:2e:3f: 96:3a:0d:b8:6a:49:36:ef:8c:74:e7:91:57:78:1a: 55:4e:fa:cc:d2:c5:28:2a:e8:3a:34:76:dc:f6:7e: f7:17:8b:67:de:b3:2f:7b:02:36:65:b8:83:e8:a2: d9:49:5d:52:25:a7:98:ca:78:e0:dd:14:51:02:04: 70:44:7f:99:5f:e7:c0:57:51:bc:05:ae:4c:0f:3f: 04:aa:1a:25:fd:f1:24:42:bf:b1:8d:4f:31:7a:d0: 49:70:38:de:03:36:b6:47:d6:43:6a:8b:ca:ac:8a: 16:0a:0c:7e:97:a8:14:3a:a8:44:7a:fd:9d:9a:70: 93:27:da:12:d6:e5:32:23:dd:48:9c:66:b3:b0:a8: 0a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0B:70:56:4A:BE:9D:94:A5:52:57:9F:3D:1F:8C:7F:95:56:08:CB X509v3 Authority Key Identifier: keyid:7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e0:51:10:26:7a:24:78:2f:a3:a4:6f:c6:b9:27:15:b5:e6: 8b:98:1d:d3:ce:3a:da:ea:3a:2e:36:ad:1c:3c:b6:14:52:66: 93:f6:6f:5e:f6:97:a4:87:e6:33:fe:6b:88:1a:64:56:8a:6a: 98:e0:7b:dd:f5:2c:28:21:65:ee:cc:1b:4c:7b:84:e4:ab:b8: 82:19:ca:57:43:96:1f:be:b6:5d:15:5d:80:ba:fb:70:65:cc: 28:a3:32:dd:26:e2:68:a5:29:b5:3a:70:d2:77:16:1e:32:b1: 21:04:86:74:32:f9:cd:1e:24:8e:d2:25:c8:97:ea:ad:0e:36: fd:69:50:4e:f5:a2:50:51:6a:47:c2:d0:86:52:52:84:98:34: 7f:20:d5:31:3e:cd:57:23:ac:ec:d8:78:91:ca:db:68:db:4b: e2:2d:bb:d2:c6:2b:bd:60:83:05:78:6a:aa:85:92:62:e9:ba: a0:c0:b6:13:54:d1:2a:db:0d:db:da:00:b3:d8:40:d3:a0:c3: 3a:fe:96:22:67:b2:50:a3:45:48:9f:07:af:f9:ee:c6:6d:c2: a7:ea:76:04:b6:a2:6b:06:e9:03:aa:a8:2e:ec:74:7f:33:39: 87:ba:50:7c:6c:54:08:31:28:b8:05:9f:e1:a4:60:88:2d:9f: 56:d9:98:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZERjgxMTAvBgNVBAUTKDdBNTA2QzIxN0EzMTA3OEU0MjE3ODE2MDM4MEREMkM4 MzkyOEQ5MkUwHhcNMjYwMzI0MTc1MjQwWhcNMjYwMzMxMTc1MjQwWjAYMRYwFAYD VQQDEw02OWMyY2Y2OC01ODRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkNzlObXSCcCgbQqkpk0AVjc8oQ2wcPreM2kSGUD72GkUW8VBjNQs7VvxQuMe hCPsw/BKEaqthsGHthPonfrcjhfyy5qf0j5nwjdKxhsn5nZGuAEEEcTKuSyWFfBu SoQUbHU+ME2k3odQjjn24/R3kH4grV1sLj+WOg24akk274x055FXeBpVTvrM0sUo Kug6NHbc9n73F4tn3rMvewI2ZbiD6KLZSV1SJaeYynjg3RRRAgRwRH+ZX+fAV1G8 Ba5MDz8Eqhol/fEkQr+xjU8xetBJcDjeAza2R9ZDaovKrIoWCgx+l6gUOqhEev2d mnCTJ9oS1uUyI91InGazsKgKqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLYLcFZK vp2UpVJXnz0fjH+VVgjLMB8GA1UdIwQYMBaAFHpQbCF6MQeOQheBYDgN0sg5KNku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkRGOC83Njc2RjVEQ0Yz Q0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0NUNGNEZnT0EzU3lEa28y UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VsQnNJWG94QjQ1Q0Y0RmdPQTNTeURrbzJTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkRGOC83Njc2RjVEQ0YzQ0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0 NUNGNEZnT0EzU3lEa28yUzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL+BRECZ6JHgvo6RvxrknFbXmi5gd08462uo6LjatHDy2FFJmk/ZvXvaXpIfm M/5riBpkVopqmOB73fUsKCFl7swbTHuE5Ku4ghnKV0OWH762XRVdgLr7cGXMKKMy 3SbiaKUptTpw0ncWHjKxIQSGdDL5zR4kjtIlyJfqrQ42/WlQTvWiUFFqR8LQhlJS hJg0fyDVMT7NVyOs7Nh4kcrbaNtL4i270sYrvWCDBXhqqoWSYum6oMC2E1TRKtsN 29oAs9hA06DDOv6WImeyUKNFSJ8Hr/nuxm3Cp+p2BLaiawbpA6qoLux0fzM5h7pQ fGxUCDEouAWf4aRgiC2fVtmYvQ== -----END CERTIFICATE-----Generated at Thu Mar 26 11:04:38 2026 by rpki-client