$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft File: rKpuJqXy3KoUzfyezI6c9oKaQCE.mft (raw, json) Hash identifier: soMtdwtloSaoSc29PA4P/vNv0gcl7PEScmmOI1gdOjw= Subject key identifier: 04:8E:DC:0F:6E:60:65:9E:A3:08:14:BD:0D:07:1E:A3:6D:88:89:00 Authority key identifier: AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21 Certificate issuer: /CN=A91AEF45/serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021 Certificate serial: 0432 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft Manifest number: 042B Signing time: Tue 24 Mar 2026 23:59:52 +0000 Manifest this update: Tue 24 Mar 2026 23:59:52 +0000 Manifest next update: Tue 31 Mar 2026 23:59:52 +0000 Files and hashes: 1: rKpuJqXy3KoUzfyezI6c9oKaQCE.crl (hash: 4Uoa8r54yE6L6pzoM3qAnmkAB8OWkz4gAlFE6j2N2yE=) 2: 1AE323249F2D11EC897FD30CC4F9AE02.roa (hash: KTSt+ZHRMgLJ8/R5wENqUSR1L1JAi9WdX/iu4I2PtVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1074 (0x432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEF45, serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021 Validity Not Before: Mar 24 23:59:52 2026 GMT Not After : Mar 31 23:59:52 2026 GMT Subject: CN=69c32578-e228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ee:25:7b:16:26:79:ba:2f:6b:4a:24:09:4c: 4a:21:12:ef:db:eb:0b:e2:1e:c6:5e:5b:1f:81:f8: af:4a:d1:c8:09:a8:05:51:61:52:6e:51:e5:b8:b8: 57:f0:60:6e:df:bb:62:a1:42:82:c2:d8:29:b4:3c: e7:a6:e8:c9:6d:08:0c:18:2b:6e:bc:e5:c3:a5:ea: d5:8e:33:ab:4e:eb:f7:e5:86:90:18:2d:7e:93:c3: 53:b0:b1:12:c4:a0:df:a0:e1:40:38:0e:b0:fb:a0: 0e:38:64:9d:b7:52:9b:bb:d7:77:f1:f3:de:44:04: bc:a0:d9:69:43:ad:9d:95:d1:3d:d0:71:35:a4:15: 30:a1:eb:25:7e:ef:02:e6:80:77:2e:09:54:0c:f1: 65:cd:c1:fc:d9:68:0e:c0:fc:1a:8d:62:48:04:9d: 60:29:83:d0:70:59:18:55:00:72:c2:2a:ef:89:9a: 15:c5:c5:c5:b7:8e:55:e1:c7:d7:a9:4a:53:ba:d8: b3:0a:e5:f6:f7:7f:2f:26:02:77:69:aa:a4:12:01: 2f:92:e2:51:6c:41:da:29:16:0a:ce:c1:4c:2d:cd: 2c:42:25:c2:82:5f:76:cc:fa:fc:a6:b4:4a:1b:a4: 4c:29:52:ab:6e:38:6e:72:03:01:20:90:3f:9b:81: dc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8E:DC:0F:6E:60:65:9E:A3:08:14:BD:0D:07:1E:A3:6D:88:89:00 X509v3 Authority Key Identifier: keyid:AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:fe:00:2d:bb:ab:90:e3:64:64:09:f1:00:eb:3c:2d:6f:84: 0f:6a:d1:19:57:69:7e:f3:6e:0a:4d:ba:b7:f1:cd:77:0a:5f: 7d:39:a3:15:9d:af:d6:96:6f:fa:f4:b8:4a:c5:dd:7e:d8:3e: 0a:f5:f6:e4:37:14:b2:f3:a6:18:b1:d4:ba:aa:45:53:2e:e7: 27:60:19:2a:3b:ef:dc:59:d2:95:a6:81:d8:0f:cb:f0:a4:22: c2:a4:5a:ff:6e:f8:89:32:3d:b9:e6:4f:a9:c1:9b:8f:b9:a9: 60:50:a2:5f:7f:e4:3e:73:e8:90:61:af:ff:f4:08:80:00:27: 1b:00:4f:70:a3:88:87:a3:70:da:7e:2a:21:9c:ef:fa:0a:92: a0:5a:23:e7:63:c8:e3:f1:d7:73:c9:69:a0:1d:4a:af:1d:26: 83:45:63:c7:ab:af:17:d1:8b:ce:e2:a2:d7:e8:81:e7:84:ab: 50:de:2a:a3:2a:ef:26:37:a4:e7:8c:4f:a1:f3:7a:02:d4:58: da:08:9a:5a:b1:60:82:ba:57:f1:13:63:d7:cb:7c:d1:90:86: 54:56:4b:0d:9e:73:f4:46:47:ae:09:52:35:46:a8:82:3b:27: 6e:61:e4:73:7f:7b:70:cf:a5:ac:e9:8b:a0:3d:6b:55:f5:b7: c4:2f:42:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVGNDUxMTAvBgNVBAUTKEFDQUE2RTI2QTVGMkRDQUExNENERkM5RUNDOEU5Q0Y2 ODI5QTQwMjEwHhcNMjYwMzI0MjM1OTUyWhcNMjYwMzMxMjM1OTUyWjAYMRYwFAYD VQQDEw02OWMzMjU3OC1lMjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0O4lexYmebova0okCUxKIRLv2+sL4h7GXlsfgfivStHICagFUWFSblHluLhX 8GBu37tioUKCwtgptDznpujJbQgMGCtuvOXDperVjjOrTuv35YaQGC1+k8NTsLES xKDfoOFAOA6w+6AOOGSdt1Kbu9d38fPeRAS8oNlpQ62dldE90HE1pBUwoeslfu8C 5oB3LglUDPFlzcH82WgOwPwajWJIBJ1gKYPQcFkYVQBywirviZoVxcXFt45V4cfX qUpTutizCuX2938vJgJ3aaqkEgEvkuJRbEHaKRYKzsFMLc0sQiXCgl92zPr8prRK G6RMKVKrbjhucgMBIJA/m4HcjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFASO3A9u YGWeowgUvQ0HHqNtiIkAMB8GA1UdIwQYMBaAFKyqbial8tyqFM38nsyOnPaCmkAh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUY0NS81RDhCOUI4MjlG MkExMUVDQTdDRkFEMEFDNEY5QUUwMi9yS3B1SnFYeTNLb1V6Znllekk2YzlvS2FR Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JLcHVKcVh5M0tvVXpmeWV6STZjOW9LYVFDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUY0NS81RDhCOUI4MjlGMkExMUVDQTdDRkFEMEFDNEY5QUUwMi9yS3B1SnFYeTNL b1V6Znllekk2YzlvS2FRQ0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdf4ALburkONkZAnxAOs8LW+ED2rRGVdpfvNuCk26t/HNdwpffTmjFZ2v1pZv +vS4SsXdftg+CvX25DcUsvOmGLHUuqpFUy7nJ2AZKjvv3FnSlaaB2A/L8KQiwqRa /274iTI9ueZPqcGbj7mpYFCiX3/kPnPokGGv//QIgAAnGwBPcKOIh6Nw2n4qIZzv +gqSoFoj52PI4/HXc8lpoB1Krx0mg0Vjx6uvF9GLzuKi1+iB54SrUN4qoyrvJjek 54xPofN6AtRY2giaWrFggrpX8RNj18t80ZCGVFZLDZ5z9EZHrglSNUaogjsnbmHk c397cM+lrOmLoD1rVfW3xC9Csw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:36:19 2026 by rpki-client