$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft File: 0yZ6-fuWkInDwSr-v9D96b2GdYE.mft (raw, json) Hash identifier: Frk0s6hmOWhOIhg45pg9zTOynxoE323Hj+ooIjOUuCY= Subject key identifier: 39:69:30:1B:5E:31:6B:56:9F:6D:BF:CC:B2:D3:0C:1D:5C:C2:DE:5B Authority key identifier: D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81 Certificate issuer: /CN=A91ACF30/serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581 Certificate serial: 089A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft Manifest number: 0880 Signing time: Tue 24 Mar 2026 20:24:28 +0000 Manifest this update: Tue 24 Mar 2026 20:24:28 +0000 Manifest next update: Tue 31 Mar 2026 20:24:28 +0000 Files and hashes: 1: 0yZ6-fuWkInDwSr-v9D96b2GdYE.crl (hash: +F8tdbUE8EgsUu4tZio0UeRIC31KTSGunj+vPilq1lo=) 2: 4EEEF95AEA4311EE86C1DD73C4F9AE02.roa (hash: lfjq0mjRyBjOjeULyMBRcEJ9mBJ8RaIftGnavOAVlTo=) 3: 40965650EA4311EEA09F786BC4F9AE02.roa (hash: sO2TDcTaubul6PYFHdknsF44FU2zYp0hWwsMezsv3Lc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2202 (0x89a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACF30, serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581 Validity Not Before: Mar 24 20:24:28 2026 GMT Not After : Mar 31 20:24:28 2026 GMT Subject: CN=69c2f2fc-26fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:eb:f4:b7:af:6f:b6:7b:33:22:a9:0b:cc:9e: 22:c0:3e:6d:a1:73:61:9c:15:53:dc:6e:48:12:1b: 5d:1d:05:b5:7d:be:70:56:1a:0e:7d:fb:8d:22:0d: c3:d4:5d:ce:b5:29:63:b0:2b:83:38:70:6a:f0:09: af:e0:af:a6:9b:60:fc:2a:56:3a:cb:84:bd:54:b5: a3:4e:51:c5:7f:21:58:7b:a6:c6:94:ea:a3:fc:4e: 6d:8a:70:86:f4:6e:11:f6:94:06:1b:f8:45:a7:48: 6f:51:8e:1e:49:8c:2b:db:7e:58:56:ae:69:d6:a5: 3f:31:67:87:db:36:0c:48:82:80:9b:92:a1:20:83: 75:1e:3a:6a:f0:6d:04:ad:4d:79:37:a3:8e:af:f0: c5:06:5f:57:a3:75:d3:a3:40:cc:e2:c0:cc:37:07: 87:ed:83:1d:a1:73:16:aa:c5:ec:ff:36:48:8a:5a: 58:9e:43:9f:6c:b2:a5:76:a2:7a:97:92:a3:cb:49: 8b:f0:d4:59:47:a9:ea:70:81:ce:e1:7a:8c:07:5f: e1:d8:34:6e:8e:56:79:e1:57:ac:14:62:de:26:cc: 00:3e:29:fe:29:cf:ce:5d:7b:0d:d9:fc:bb:9a:81: 45:64:3e:a2:c7:28:0e:da:b3:1c:1f:71:54:32:3f: c8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:69:30:1B:5E:31:6B:56:9F:6D:BF:CC:B2:D3:0C:1D:5C:C2:DE:5B X509v3 Authority Key Identifier: keyid:D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:a3:ca:79:cc:97:d3:c5:6a:48:4a:08:dc:0a:20:e1:6b:2a: e6:41:ec:fa:a9:46:f0:e9:50:bd:4f:a8:58:6a:3d:16:d0:39: 82:f0:42:44:51:50:fa:03:9a:e2:7e:fc:e6:26:e8:15:2d:e7: 27:eb:c5:66:0a:99:3f:ed:ba:7a:64:b6:74:23:c2:b4:07:d7: ea:88:e7:94:bf:3e:03:3e:93:92:21:bb:22:6d:6c:6a:7b:6c: 40:be:f9:1c:05:89:89:cd:b9:9f:0f:a0:dd:a9:71:28:78:7b: d7:ad:80:4e:fb:af:ce:5d:db:4b:77:f6:04:62:c5:7a:6b:69: 69:29:d8:53:67:83:64:4e:04:be:93:86:5e:93:c3:d5:1c:02: f0:87:43:51:cb:ad:e8:0b:3e:96:44:0c:f7:c0:61:9f:90:70: df:6c:cc:ba:fb:ad:f9:8f:25:c7:c8:d3:18:37:51:b9:03:d1: 48:5d:30:9b:0b:e4:b2:79:3e:9d:fa:c8:77:e0:8e:ed:9c:49: af:40:3f:c1:93:d1:df:d0:36:94:62:ad:2c:a7:1f:12:4d:18: cd:87:ad:37:47:84:bd:f5:54:25:64:26:19:67:eb:9d:af:32: 88:b3:bb:d7:12:b4:66:07:20:d2:c5:ae:66:49:7e:f5:6d:64: 47:67:df:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNGMzAxMTAvBgNVBAUTKEQzMjY3QUY5RkI5NjkwODlDM0MxMkFGRUJGRDBGREU5 QkQ4Njc1ODEwHhcNMjYwMzI0MjAyNDI4WhcNMjYwMzMxMjAyNDI4WjAYMRYwFAYD VQQDEw02OWMyZjJmYy0yNmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuv0t69vtnszIqkLzJ4iwD5toXNhnBVT3G5IEhtdHQW1fb5wVhoOffuNIg3D 1F3OtSljsCuDOHBq8Amv4K+mm2D8KlY6y4S9VLWjTlHFfyFYe6bGlOqj/E5tinCG 9G4R9pQGG/hFp0hvUY4eSYwr235YVq5p1qU/MWeH2zYMSIKAm5KhIIN1Hjpq8G0E rU15N6OOr/DFBl9Xo3XTo0DM4sDMNweH7YMdoXMWqsXs/zZIilpYnkOfbLKldqJ6 l5Kjy0mL8NRZR6nqcIHO4XqMB1/h2DRujlZ54VesFGLeJswAPin+Kc/OXXsN2fy7 moFFZD6ixygO2rMcH3FUMj/IVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDlpMBte MWtWn22/zLLTDB1cwt5bMB8GA1UdIwQYMBaAFNMmevn7lpCJw8Eq/r/Q/em9hnWB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0YzMC8zQjkxMkYxMkYx ODIxMUVBQTUzNzk3MEFDNEY5QUUwMi8weVo2LWZ1V2tJbkR3U3ItdjlEOTZiMkdk WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB5WjYtZnVXa0luRHdTci12OUQ5NmIyR2RZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0YzMC8zQjkxMkYxMkYxODIxMUVBQTUzNzk3MEFDNEY5QUUwMi8weVo2LWZ1V2tJ bkR3U3ItdjlEOTZiMkdkWUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl6PKecyX08VqSEoI3Aog4Wsq5kHs+qlG8OlQvU+oWGo9FtA5gvBCRFFQ+gOa 4n785iboFS3nJ+vFZgqZP+26emS2dCPCtAfX6ojnlL8+Az6TkiG7Im1santsQL75 HAWJic25nw+g3alxKHh7162ATvuvzl3bS3f2BGLFemtpaSnYU2eDZE4EvpOGXpPD 1RwC8IdDUcut6As+lkQM98Bhn5Bw32zMuvut+Y8lx8jTGDdRuQPRSF0wmwvksnk+ nfrId+CO7ZxJr0A/wZPR39A2lGKtLKcfEk0YzYetN0eEvfVUJWQmGWfrna8yiLO7 1xK0Zgcg0sWuZkl+9W1kR2ff/g== -----END CERTIFICATE-----Generated at Thu Mar 26 00:50:47 2026 by rpki-client