$ rpki-client -vvf rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft File: nAcegU2AsQ4sofcemy5TXDkFy2U.mft (raw, json) Hash identifier: LFCaCDGVmylX4ZumAcf28sWYJ0s0LAiPNVYEynlEiD8= Subject key identifier: FA:D0:C6:78:A7:F7:05:08:CE:70:C3:72:5C:4A:52:A1:99:19:3F:35 Authority key identifier: 9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65 Certificate issuer: /CN=A91A998A/serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft Manifest number: 012E Signing time: Wed 25 Mar 2026 05:00:12 +0000 Manifest this update: Wed 25 Mar 2026 05:00:11 +0000 Manifest next update: Wed 01 Apr 2026 05:00:11 +0000 Files and hashes: 1: nAcegU2AsQ4sofcemy5TXDkFy2U.crl (hash: LB+yUFftoywW1cefMOH9Kn/uxgrdzFu7l5HMI9CzFB4=) 2: B6DE83747AE811EF94E01B38C4F9AE02.roa (hash: /Mfb+/GCj01R9lifsGJinmVrLBP5+B8J3/UWQZMFbAU=) 3: F60E5BC87C8711EFB9EB5F5FC4F9AE02.roa (hash: YSZYviBTPxtzDHVeHnT8ow3/nXxU9t04H0K+ZmSVj7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A998A, serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65 Validity Not Before: Mar 25 05:00:11 2026 GMT Not After : Apr 1 05:00:11 2026 GMT Subject: CN=69c36bdc-b547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6b:2b:40:5c:fb:09:39:f4:e0:de:fb:55:a8: e7:21:b1:cf:3d:aa:3f:c0:40:fe:65:3e:41:73:fc: c8:84:c3:5b:69:73:a3:22:29:c5:a2:65:95:40:67: fa:4a:44:61:38:df:ed:c3:74:80:27:55:de:93:35: 3d:52:69:0b:4d:df:01:ac:80:2d:6c:18:98:19:97: 69:8a:09:f9:11:7e:14:56:43:a3:8e:ad:1b:b1:76: 60:3c:2a:9e:96:0f:d9:c2:70:23:bc:ed:e2:78:e9: a2:c8:49:e6:2a:17:12:3a:e5:86:28:7b:2d:0d:00: 25:9c:ea:45:23:1b:f7:79:1c:d6:87:f5:c3:c6:f1: c4:46:8d:66:43:99:6f:19:ba:7a:4e:3b:b4:36:54: 97:97:2a:c2:6b:da:d9:78:c4:a3:25:c3:a5:9b:49: 44:70:3b:e4:af:98:2d:cf:f1:57:47:ba:1d:da:9e: ea:43:fd:44:f3:6a:eb:0b:6a:41:cc:23:b9:7c:aa: 93:c9:57:ee:7f:3a:35:96:40:86:cc:71:ab:df:dc: 9a:d6:b3:20:ce:10:68:28:3a:53:d0:c8:d9:2d:8a: ff:2b:1b:9d:78:56:26:09:8e:25:62:82:93:76:7f: 29:ad:cb:ec:a1:7d:d9:42:93:e5:21:3c:09:db:cf: 64:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D0:C6:78:A7:F7:05:08:CE:70:C3:72:5C:4A:52:A1:99:19:3F:35 X509v3 Authority Key Identifier: keyid:9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c3:6b:aa:53:e8:06:36:ad:c4:b3:1d:98:ca:b0:a2:57:68: fb:9b:db:91:da:f6:6e:9c:89:47:7a:b9:c6:97:71:d8:ca:2b: 84:0c:90:54:6e:c8:34:3b:f4:1b:1a:24:f8:bb:b5:0d:2a:8f: 68:ca:a3:c5:5d:70:a7:99:a4:82:71:34:a6:96:cc:40:a3:62: cc:e1:e5:40:d1:e3:05:e3:cd:4f:b9:e5:fc:25:09:e2:9b:8e: 92:70:bb:a0:ee:60:cb:24:47:be:0f:4d:63:44:0a:0b:b7:17: 42:72:76:d6:2b:85:ed:c5:8e:60:5a:ff:a7:61:d0:a6:ae:70: e9:7f:09:be:f4:53:2d:a3:7a:6e:1c:9b:82:ae:3a:29:c4:41: 1b:82:0c:04:ea:2e:be:76:2c:d9:69:c2:11:06:54:dc:d4:6e: 03:ea:d9:6e:52:d2:76:d9:c0:a0:a4:50:97:29:fe:8e:4e:a8: 84:a8:62:09:09:7f:62:b2:cf:e9:24:8e:3d:fb:81:19:76:28: c2:19:a6:13:e7:b7:93:56:05:81:aa:f5:11:fa:96:df:17:ca: 29:ad:7c:3c:1e:49:c6:43:c9:cc:0f:1a:d9:81:07:69:4c:d1: 9e:c4:51:2e:ee:56:99:7e:a6:99:9c:c9:27:a8:20:42:a7:6a: ca:7a:80:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk5OEExMTAvBgNVBAUTKDlDMDcxRTgxNEQ4MEIxMEUyQ0ExRjcxRTlCMkU1MzVD MzkwNUNCNjUwHhcNMjYwMzI1MDUwMDExWhcNMjYwNDAxMDUwMDExWjAYMRYwFAYD VQQDEw02OWMzNmJkYy1iNTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGsrQFz7CTn04N77VajnIbHPPao/wED+ZT5Bc/zIhMNbaXOjIinFomWVQGf6 SkRhON/tw3SAJ1XekzU9UmkLTd8BrIAtbBiYGZdpign5EX4UVkOjjq0bsXZgPCqe lg/ZwnAjvO3ieOmiyEnmKhcSOuWGKHstDQAlnOpFIxv3eRzWh/XDxvHERo1mQ5lv Gbp6Tju0NlSXlyrCa9rZeMSjJcOlm0lEcDvkr5gtz/FXR7od2p7qQ/1E82rrC2pB zCO5fKqTyVfufzo1lkCGzHGr39ya1rMgzhBoKDpT0MjZLYr/KxudeFYmCY4lYoKT dn8prcvsoX3ZQpPlITwJ289kywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPrQxnin 9wUIznDDclxKUqGZGT81MB8GA1UdIwQYMBaAFJwHHoFNgLEOLKH3HpsuU1w5Bctl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTk4QS81MjJDQjczNDdB RTgxMUVGOUE0QTQ3MzdDNEY5QUUwMi9uQWNlZ1UyQXNRNHNvZmNlbXk1VFhEa0Z5 MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BY2VnVTJBc1E0c29mY2VteTVUWERrRnkyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTk4QS81MjJDQjczNDdBRTgxMUVGOUE0QTQ3MzdDNEY5QUUwMi9uQWNlZ1UyQXNR NHNvZmNlbXk1VFhEa0Z5MlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf8NrqlPoBjatxLMdmMqwoldo+5vbkdr2bpyJR3q5xpdx2MorhAyQVG7INDv0 Gxok+Lu1DSqPaMqjxV1wp5mkgnE0ppbMQKNizOHlQNHjBePNT7nl/CUJ4puOknC7 oO5gyyRHvg9NY0QKC7cXQnJ21iuF7cWOYFr/p2HQpq5w6X8JvvRTLaN6bhybgq46 KcRBG4IMBOouvnYs2WnCEQZU3NRuA+rZblLSdtnAoKRQlyn+jk6ohKhiCQl/YrLP 6SSOPfuBGXYowhmmE+e3k1YFgar1EfqW3xfKKa18PB5JxkPJzA8a2YEHaUzRnsRR Lu5WmX6mmZzJJ6ggQqdqynqAMA== -----END CERTIFICATE-----Generated at Thu Mar 26 23:02:42 2026 by rpki-client