$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft File: pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft (raw, json) Hash identifier: xX8dw+WCa759vGYIl3qFxDWCzdGkZkDl46oas5BO088= Subject key identifier: FD:06:4A:2A:7E:52:A8:5F:17:25:25:54:82:F9:6E:2E:40:13:37:D5 Authority key identifier: A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38 Certificate issuer: /CN=A91A8475/serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38 Certificate serial: 02A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft Manifest number: 0297 Signing time: Wed 25 Mar 2026 01:09:19 +0000 Manifest this update: Wed 25 Mar 2026 01:09:18 +0000 Manifest next update: Wed 01 Apr 2026 01:09:18 +0000 Files and hashes: 1: pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl (hash: hBZq6fz1AEa9PcnEGilLhNoucCWiYaNCnjJ9rudqT5s=) 2: A4E607B6B1C511EDA095B220C4F9AE02.roa (hash: NLmMIXJWZuV3b2Iwvn7eaAOIy/czpKGsQRkgmmtmJQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 673 (0x2a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8475, serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38 Validity Not Before: Mar 25 01:09:18 2026 GMT Not After : Apr 1 01:09:18 2026 GMT Subject: CN=69c335be-7a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5b:86:a5:72:f5:46:c1:e3:01:2b:31:63:46: cd:58:d2:17:23:b7:76:66:ee:e4:bb:46:52:19:bb: 4b:b5:e9:19:b2:0a:cf:09:8a:8a:a2:6a:5b:6d:01: 39:f8:1b:c6:37:26:b2:04:d4:68:2a:fd:17:d2:c7: 14:68:72:7b:27:6d:3d:3a:11:79:82:85:3a:8e:be: 45:71:a9:9f:0a:84:f8:fa:5d:0c:ba:5b:9e:6c:cc: 37:b3:78:27:d0:47:02:ec:01:41:d4:99:0d:ae:9f: 91:f4:47:c9:4a:25:39:70:40:bb:59:4b:5f:1f:1f: ec:ff:9d:2e:d4:0a:f1:08:4f:f0:7a:fa:47:19:27: 07:ee:ce:be:d0:1a:43:24:08:e7:27:8a:3e:c5:39: 37:33:a8:83:76:5b:83:dc:71:0b:f2:17:9a:bf:53: fc:02:42:a7:a8:05:4d:a1:ea:ec:0f:2a:b3:06:9c: 87:18:4c:0f:3a:7e:0b:fb:57:73:f8:70:b4:fd:7b: 6e:a8:fd:c0:fc:ad:ab:7c:dd:a8:e2:c2:5d:0d:41: 18:c5:45:a5:d9:db:28:06:ea:16:40:36:ec:77:a9: c9:bd:87:9b:0e:ca:32:f0:a8:c6:2f:f2:77:4e:15: 69:d2:96:e4:12:79:83:e5:83:28:d7:1b:98:0a:48: 8f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:06:4A:2A:7E:52:A8:5F:17:25:25:54:82:F9:6E:2E:40:13:37:D5 X509v3 Authority Key Identifier: keyid:A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f8:e8:ab:75:8c:7c:fe:c7:70:66:e9:0c:b3:75:07:be:a9: bb:40:f4:f6:ff:9a:c7:ae:86:21:22:43:bf:4a:9d:db:bb:17: 53:29:9c:0f:5b:d4:55:e2:34:09:5d:5c:91:d4:0d:38:4b:5d: 73:fd:3a:1f:8c:d5:83:bf:f8:1a:d4:f4:31:ad:8f:27:79:d5: dd:e0:34:c6:cd:9e:d1:d0:6d:e4:b5:0c:34:af:12:0d:94:d1: d6:4c:d2:05:7b:3e:08:a0:b3:0a:42:24:9e:db:41:e0:15:f6: 79:aa:78:49:41:15:a5:2c:82:00:09:7b:9a:19:11:d1:aa:22: b8:c8:19:fe:18:50:e9:26:e3:a7:45:bf:30:4d:56:d6:a9:f2: 12:fe:72:e5:3e:32:c2:02:a0:9f:40:b5:b7:0e:06:59:0f:c0: 1e:1a:29:31:fd:f0:1c:82:34:62:e0:2a:d9:e2:0b:6c:d2:94: c0:01:1f:bd:a0:02:56:c7:55:b1:8e:91:82:7d:27:24:cc:42: 7e:a5:d2:9d:87:ab:4e:11:c6:55:a8:7a:f9:ec:43:ac:2a:5c: 50:55:ab:b1:3a:04:81:c9:0d:6d:7f:e5:3b:59:ac:44:24:63: d9:f6:5a:78:47:56:f1:98:dc:d0:60:da:3d:a6:3f:e4:3b:3d: fb:99:cc:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg0NzUxMTAvBgNVBAUTKEE0OEM5QkQ0QTVEQjExOUUxNTQzMzI0MTM2RTAyRUVB NEJDQUFGMzgwHhcNMjYwMzI1MDEwOTE4WhcNMjYwNDAxMDEwOTE4WjAYMRYwFAYD VQQDEw02OWMzMzViZS03YTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFuGpXL1RsHjASsxY0bNWNIXI7d2Zu7ku0ZSGbtLtekZsgrPCYqKompbbQE5 +BvGNyayBNRoKv0X0scUaHJ7J209OhF5goU6jr5FcamfCoT4+l0MuluebMw3s3gn 0EcC7AFB1JkNrp+R9EfJSiU5cEC7WUtfHx/s/50u1ArxCE/wevpHGScH7s6+0BpD JAjnJ4o+xTk3M6iDdluD3HEL8heav1P8AkKnqAVNoersDyqzBpyHGEwPOn4L+1dz +HC0/XtuqP3A/K2rfN2o4sJdDUEYxUWl2dsoBuoWQDbsd6nJvYebDsoy8KjGL/J3 ThVp0pbkEnmD5YMo1xuYCkiPyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP0GSip+ UqhfFyUlVIL5bi5AEzfVMB8GA1UdIwQYMBaAFKSMm9Sl2xGeFUMyQTbgLupLyq84 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQ3NS82QjY1ODJGMjNF RjAxMUVEQTFGMzA1MUFDNEY5QUUwMi9wSXliMUtYYkVaNFZRekpCTnVBdTZrdkty emcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BJeWIxS1hiRVo0VlF6SkJOdUF1Nmt2S3J6Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODQ3NS82QjY1ODJGMjNFRjAxMUVEQTFGMzA1MUFDNEY5QUUwMi9wSXliMUtYYkVa NFZRekpCTnVBdTZrdktyemcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm/joq3WMfP7HcGbpDLN1B76pu0D09v+ax66GISJDv0qd27sXUymcD1vUVeI0 CV1ckdQNOEtdc/06H4zVg7/4GtT0Ma2PJ3nV3eA0xs2e0dBt5LUMNK8SDZTR1kzS BXs+CKCzCkIknttB4BX2eap4SUEVpSyCAAl7mhkR0aoiuMgZ/hhQ6Sbjp0W/ME1W 1qnyEv5y5T4ywgKgn0C1tw4GWQ/AHhopMf3wHII0YuAq2eILbNKUwAEfvaACVsdV sY6Rgn0nJMxCfqXSnYerThHGVah6+exDrCpcUFWrsToEgckNbX/lO1msRCRj2fZa eEdW8Zjc0GDaPaY/5Ds9+5nMCQ== -----END CERTIFICATE-----Generated at Thu Mar 26 22:50:15 2026 by rpki-client