$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft File: f_x8VcpIXDdqYe_sDlN3ZToEw70.mft (raw, json) Hash identifier: BvpqW+wjJQ5jatb1NOi5nOkZq1PYCG7DNWIxSv+dxLE= Subject key identifier: 3E:EF:F8:23:93:F0:C6:CE:D9:19:86:41:91:9B:87:6E:90:AC:B8:E6 Authority key identifier: 7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD Certificate issuer: /CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Certificate serial: 02A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft Manifest number: 0291 Signing time: Fri 27 Mar 2026 01:21:15 +0000 Manifest this update: Fri 27 Mar 2026 01:21:15 +0000 Manifest next update: Fri 03 Apr 2026 01:21:15 +0000 Files and hashes: 1: f_x8VcpIXDdqYe_sDlN3ZToEw70.crl (hash: GDoxlLEEsxCFy2PY2SJzA/ON4l3OVdJyBRrowbhOp1Y=) 2: 9535628E5C0D11EDA7191A0AC4F9AE02.roa (hash: UoPSD/sB882BUptuBl7wMhpHSR5jbx5b49dtZHebnaw=) 3: E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa (hash: 10T57IR+PMdmV6j2kmrAkG4ca6NjWj+tRvDyWCCrDmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 01:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABD25, serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Validity Not Before: Mar 27 01:21:15 2026 GMT Not After : Apr 3 01:21:15 2026 GMT Subject: CN=69c5db8b-8f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:66:5b:ad:e0:73:cc:b6:5c:03:ec:fe:60:e1: 44:bf:98:9e:55:eb:02:31:b6:75:ae:e3:71:17:45: b2:43:ef:48:8c:5d:d2:f3:1c:8e:ce:f9:57:54:62: cc:fd:36:72:13:e5:af:16:a8:6b:2d:6d:e0:7f:03: 6c:7d:a7:b0:61:32:3b:7a:d0:33:4c:fd:85:5e:2f: b3:c9:4c:bc:cb:1a:70:32:a9:3b:81:41:9c:c8:50: 66:e8:64:50:05:59:1c:70:5b:4d:a7:0e:f1:b5:90: 18:4c:a4:1b:9a:59:0d:fe:a0:cb:ea:cc:aa:22:2d: d0:b6:5b:ba:06:2e:c2:40:9e:1f:f8:04:a6:c3:5f: e0:69:29:65:cb:ea:79:ed:be:a6:c6:04:d8:d8:a1: e2:93:ae:a3:d7:92:a6:e6:ef:5b:e3:d2:0a:1e:fe: 17:bb:12:17:ad:64:64:c2:c7:bd:01:fb:ab:b7:c5: c7:45:72:d0:ad:20:92:7f:a7:56:65:f6:0d:9a:ab: ce:c8:21:ea:66:56:af:23:e4:ec:be:75:92:78:26: 69:6d:ea:ad:b5:df:3f:06:69:db:b6:5d:37:1d:cf: 02:4c:58:df:e2:20:7b:d9:55:64:af:19:3f:db:cc: d7:a9:c7:d1:d6:94:5b:f4:a9:f7:c8:78:13:7d:12: 46:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EF:F8:23:93:F0:C6:CE:D9:19:86:41:91:9B:87:6E:90:AC:B8:E6 X509v3 Authority Key Identifier: keyid:7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:ab:96:fb:09:b6:24:af:cd:39:54:26:d8:dc:d3:11:9d:8d: 04:58:9e:9a:e5:b2:03:af:17:9e:fc:07:b6:9d:44:8e:19:62: a5:5c:e7:2d:fc:95:14:86:6b:ce:2e:7c:20:aa:b5:81:36:cd: df:02:14:9d:c4:99:48:c0:8f:e4:3b:42:30:a5:b3:5e:db:79: 74:f8:63:02:c3:7a:7c:f6:9d:95:99:55:df:62:81:50:a5:b5: 1e:99:90:49:eb:fc:38:13:92:43:1d:e7:8b:90:dc:d2:1b:fc: 80:15:e0:53:25:e1:47:e7:b2:ed:b2:2a:14:69:bd:0c:de:ab: 87:82:1e:f5:06:65:f2:0f:73:05:0c:d2:b1:94:55:0b:9b:fa: d7:f2:0f:8c:36:23:b5:71:a3:6e:26:7b:1d:72:9e:55:86:bb: dc:b8:34:d3:db:7b:a3:1f:a5:a6:44:ca:e2:76:d5:fc:13:89: 9a:29:d6:62:6c:33:76:7b:8a:b9:8e:76:14:65:de:9d:c3:6a: 8b:3e:4f:ff:6d:a5:9b:90:0b:7d:bf:01:af:b5:93:73:e3:57: f5:6e:93:8d:22:ce:51:d2:d7:c5:6f:8e:46:bd:a4:1f:34:29: 44:5e:ec:e6:a4:4b:3e:2f:74:85:f9:cf:ac:ad:41:7a:88:3e: 04:05:ed:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJEMjUxMTAvBgNVBAUTKDdGRkM3QzU1Q0E0ODVDMzc2QTYxRUZFQzBFNTM3NzY1 M0EwNEMzQkQwHhcNMjYwMzI3MDEyMTE1WhcNMjYwNDAzMDEyMTE1WjAYMRYwFAYD VQQDEw02OWM1ZGI4Yi04ZjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkGZbreBzzLZcA+z+YOFEv5ieVesCMbZ1ruNxF0WyQ+9IjF3S8xyOzvlXVGLM /TZyE+WvFqhrLW3gfwNsfaewYTI7etAzTP2FXi+zyUy8yxpwMqk7gUGcyFBm6GRQ BVkccFtNpw7xtZAYTKQbmlkN/qDL6syqIi3Qtlu6Bi7CQJ4f+ASmw1/gaSlly+p5 7b6mxgTY2KHik66j15Km5u9b49IKHv4XuxIXrWRkwse9Afurt8XHRXLQrSCSf6dW ZfYNmqvOyCHqZlavI+TsvnWSeCZpbeqttd8/Bmnbtl03Hc8CTFjf4iB72VVkrxk/ 28zXqcfR1pRb9Kn3yHgTfRJGbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD7v+COT 8MbO2RmGQZGbh26QrLjmMB8GA1UdIwQYMBaAFH/8fFXKSFw3amHv7A5Td2U6BMO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkQyNS81MjdERDI1QTRF QUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhEZHFZZV9zRGxOM1pUb0V3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfeDhWY3BJWERkcVllX3NEbE4zWlRvRXc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkQyNS81MjdERDI1QTRFQUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhE ZHFZZV9zRGxOM1pUb0V3NzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqquW+wm2JK/NOVQm2NzTEZ2NBFiemuWyA68XnvwHtp1EjhlipVznLfyVFIZr zi58IKq1gTbN3wIUncSZSMCP5DtCMKWzXtt5dPhjAsN6fPadlZlV32KBUKW1HpmQ Sev8OBOSQx3ni5Dc0hv8gBXgUyXhR+ey7bIqFGm9DN6rh4Ie9QZl8g9zBQzSsZRV C5v61/IPjDYjtXGjbiZ7HXKeVYa73Lg009t7ox+lpkTK4nbV/BOJminWYmwzdnuK uY52FGXencNqiz5P/22lm5ALfb8Br7WTc+NX9W6TjSLOUdLXxW+ORr2kHzQpRF7s 5qRLPi90hfnPrK1Beog+BAXtDQ== -----END CERTIFICATE-----Generated at Sat Mar 28 12:20:08 2026 by rpki-client