$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft File: a81u0JpBbl_k7lre97FQ8syr6To.mft (raw, json) Hash identifier: trdcJSEOJ6dIIBTD4QLDu88ZsEqsDX34+CDIemR4Y6M= Subject key identifier: CA:55:23:21:FD:64:EC:1E:21:2B:D8:9F:CD:94:B3:A1:04:47:E0:01 Authority key identifier: 6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A Certificate issuer: /CN=A91ADF12/serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A Certificate serial: 0C4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft Manifest number: 0C32 Signing time: Tue 24 Mar 2026 18:36:10 +0000 Manifest this update: Tue 24 Mar 2026 18:36:10 +0000 Manifest next update: Tue 31 Mar 2026 18:36:10 +0000 Files and hashes: 1: a81u0JpBbl_k7lre97FQ8syr6To.crl (hash: eAy9XHZh6DIC7kUWMYAfTd6rPCr+cTunHt1ZF0pLS1w=) 2: 777A546212E511EFB071A31CC4F9AE02.roa (hash: 1/NLiEaXUISjb820jybpDIK6VnxjvAXi+rdfnuVEGtY=) 3: 84B6E12A312911EEBE440C7FC4F9AE02.roa (hash: AlMNQVgOtpgnBSe6UFI6r8IqzTubbKL0YXL2eJjxBI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3148 (0xc4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADF12, serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A Validity Not Before: Mar 24 18:36:10 2026 GMT Not After : Mar 31 18:36:10 2026 GMT Subject: CN=69c2d99a-8383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:28:69:4d:41:45:54:70:64:c6:4b:9f:55:a7: e7:68:fc:3d:12:9b:4c:0c:db:d9:87:b6:d2:25:88: eb:cf:61:de:fc:3f:15:0e:28:01:0b:e7:1c:26:ed: 6a:7f:b7:20:df:bf:8c:30:c4:ae:b3:1a:a0:19:7f: 34:8c:83:ec:11:77:84:ad:55:cc:ac:ec:f3:a3:c9: 02:27:29:d3:8f:0a:e7:6b:70:55:52:53:5e:f7:26: 5d:cd:17:5a:db:c9:69:74:5b:8c:8d:70:01:61:24: 66:e2:3d:98:0d:33:ee:48:e6:10:9a:9d:c5:0d:7a: 70:55:72:19:43:35:b0:fb:da:b2:e0:e1:14:c3:1e: db:ee:60:d6:53:24:dd:5b:c2:8e:75:5f:45:29:e9: 38:c3:70:5f:9d:e6:71:68:50:80:a9:0d:7d:59:b8: 2e:a7:9a:f9:0c:d1:0a:7f:97:10:c2:f6:ed:ed:94: 62:be:d9:0b:0b:07:c4:40:77:24:2e:b8:20:75:5e: 28:12:1a:a7:99:b7:ca:42:04:e9:10:62:ea:da:76: fc:e9:16:d8:16:ce:eb:c9:aa:d4:69:e3:67:e8:fe: 12:70:e3:6a:ba:9c:af:4d:2c:76:3e:fc:86:6e:78: e4:48:09:81:ac:7e:11:81:d4:68:17:0c:1f:cd:d1: ac:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:55:23:21:FD:64:EC:1E:21:2B:D8:9F:CD:94:B3:A1:04:47:E0:01 X509v3 Authority Key Identifier: keyid:6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:ca:66:95:eb:2b:a0:20:45:67:d9:54:33:12:ac:1c:20:35: 18:a0:e3:ca:43:58:e3:a4:dc:8d:e4:3e:7d:bf:45:86:2b:00: 7f:c8:38:4e:48:28:fe:43:0e:f7:41:29:86:68:e2:1d:42:0e: 4d:f7:2f:d3:b6:a7:79:09:29:47:7d:e5:da:af:52:2b:62:8e: 60:73:d8:49:6c:9b:34:a7:9d:b7:58:a6:dd:78:b0:94:44:fd: 6c:b4:ac:60:5a:e7:61:8b:9c:26:ac:27:be:95:06:df:fc:42: 6a:dd:1a:9d:52:c0:d9:97:80:63:a2:d5:8d:06:8c:e3:be:3f: 0a:a2:8b:e8:82:52:2d:5a:ff:dd:16:21:53:7f:4c:4a:03:2e: 25:6a:d6:cf:e8:8a:fe:4b:ac:9c:30:50:e1:34:4e:5f:26:c2: 2d:8a:1a:28:d1:a9:b9:23:8d:3f:d5:48:21:98:0f:6a:27:7c: 2d:c3:1f:1b:d7:b5:a9:7c:ac:43:17:00:dc:ef:b5:a0:d1:96: 44:91:b0:29:7d:a9:1b:b2:39:7c:a5:08:5a:a0:53:0a:aa:9d: 9c:61:60:65:2d:b2:c5:29:23:c1:6c:dc:23:82:a6:c9:2a:02: ab:1a:8d:62:59:e8:a6:9a:32:46:e3:57:06:74:fd:c6:82:ef: df:62:32:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURGMTIxMTAvBgNVBAUTKDZCQ0Q2RUQwOUE0MTZFNUZFNEVFNUFERUY3QjE1MEYy Q0NBQkU5M0EwHhcNMjYwMzI0MTgzNjEwWhcNMjYwMzMxMTgzNjEwWjAYMRYwFAYD VQQDEw02OWMyZDk5YS04MzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzChpTUFFVHBkxkufVafnaPw9EptMDNvZh7bSJYjrz2He/D8VDigBC+ccJu1q f7cg37+MMMSusxqgGX80jIPsEXeErVXMrOzzo8kCJynTjwrna3BVUlNe9yZdzRda 28lpdFuMjXABYSRm4j2YDTPuSOYQmp3FDXpwVXIZQzWw+9qy4OEUwx7b7mDWUyTd W8KOdV9FKek4w3BfneZxaFCAqQ19Wbgup5r5DNEKf5cQwvbt7ZRivtkLCwfEQHck LrggdV4oEhqnmbfKQgTpEGLq2nb86RbYFs7ryarUaeNn6P4ScONqupyvTSx2PvyG bnjkSAmBrH4RgdRoFwwfzdGs0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMpVIyH9 ZOweISvYn82Us6EER+ABMB8GA1UdIwQYMBaAFGvNbtCaQW5f5O5a3vexUPLMq+k6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREYxMi9DRkE1MjU5QTI4 QzAxMUVBQUFFMjRFNDhDNEY5QUUwMi9hODF1MEpwQmJsX2s3bHJlOTdGUThzeXI2 VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E4MXUwSnBCYmxfazdscmU5N0ZROHN5cjZUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REYxMi9DRkE1MjU5QTI4QzAxMUVBQUFFMjRFNDhDNEY5QUUwMi9hODF1MEpwQmJs X2s3bHJlOTdGUThzeXI2VG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN8pmlesroCBFZ9lUMxKsHCA1GKDjykNY46TcjeQ+fb9FhisAf8g4Tkgo/kMO 90EphmjiHUIOTfcv07aneQkpR33l2q9SK2KOYHPYSWybNKedt1im3XiwlET9bLSs YFrnYYucJqwnvpUG3/xCat0anVLA2ZeAY6LVjQaM474/CqKL6IJSLVr/3RYhU39M SgMuJWrWz+iK/kusnDBQ4TROXybCLYoaKNGpuSONP9VIIZgPaid8LcMfG9e1qXys QxcA3O+1oNGWRJGwKX2pG7I5fKUIWqBTCqqdnGFgZS2yxSkjwWzcI4KmySoCqxqN YlnoppoyRuNXBnT9xoLv32Iy4g== -----END CERTIFICATE-----Generated at Thu Mar 26 14:56:43 2026 by rpki-client