$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft File: AKZAby8KlHvrUUE2cN9yG611usQ.mft (raw, json) Hash identifier: VPospitydUIVUF6T0SNhEB+2OjY2WbgGz+NqDuQjllA= Subject key identifier: 5E:1F:E5:5A:EB:AC:09:76:4E:38:4C:95:27:64:40:AA:70:21:9E:A9 Authority key identifier: 00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 Certificate issuer: /CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Certificate serial: 03DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft Manifest number: 03D8 Signing time: Wed 25 Mar 2026 00:12:16 +0000 Manifest this update: Wed 25 Mar 2026 00:12:15 +0000 Manifest next update: Wed 01 Apr 2026 00:12:15 +0000 Files and hashes: 1: AKZAby8KlHvrUUE2cN9yG611usQ.crl (hash: ZZKVG4YcHM4Sc+d4rR8eOoN60KsKmbHglnE7ZspWtNw=) 2: FB1D01D4BF8B11ECB9B8D351C4F9AE02.roa (hash: psNUn0KVy8LcXg75lwX0oEYThtl+Fy/xxsSylBXFzFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 990 (0x3de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0B6, serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Validity Not Before: Mar 25 00:12:15 2026 GMT Not After : Apr 1 00:12:15 2026 GMT Subject: CN=69c32860-bb4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:40:6c:a4:3c:4d:77:49:fe:cc:9e:f8:1a:db: 52:b9:6d:e2:ea:51:04:bf:2c:c0:32:25:b1:e1:93: bb:e9:45:48:76:9b:a7:66:d2:5f:59:e7:5a:1c:05: d1:c1:4d:1c:56:82:dc:df:4a:47:b1:6c:51:3f:77: ab:bf:07:7c:05:98:05:c8:ac:06:eb:08:9b:0c:78: d6:5a:6e:3f:97:f9:cd:64:5b:80:d3:ae:a9:f9:f3: 1b:b6:c9:af:e2:95:c4:7e:79:bd:4d:de:b9:66:d8: 27:31:a0:38:d2:49:eb:39:e5:b2:e8:dc:0c:36:19: 13:c2:07:b0:31:da:c8:68:fa:54:52:fa:a3:cc:56: a4:80:c5:2f:3f:16:e7:63:b1:5b:a4:11:1f:9f:ec: 20:c3:50:d8:8e:b9:59:06:7e:73:b3:ff:e1:04:fb: 24:03:2c:f1:d7:01:c1:9d:1a:6d:89:49:f5:b0:c6: 85:4f:26:b2:ef:03:9f:4a:18:18:8e:8a:5f:be:9c: 68:d9:29:c5:b7:db:e4:ed:4b:8e:55:82:95:5b:74: 3e:47:b0:a3:c7:e0:cf:d4:a6:04:f5:45:cf:18:7a: 8c:b8:3b:da:7d:9c:b7:4b:cb:36:2a:d7:e3:74:78: b6:04:62:24:92:6b:80:8f:b0:35:d1:4c:61:a1:00: f0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1F:E5:5A:EB:AC:09:76:4E:38:4C:95:27:64:40:AA:70:21:9E:A9 X509v3 Authority Key Identifier: keyid:00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:3e:a1:3b:ae:c8:ed:fa:8c:ed:06:47:05:dc:c5:32:c2:ff: 50:d1:a4:7f:26:d6:b3:8d:b1:00:b3:c6:b3:38:15:1e:4e:87: ab:d6:22:e0:13:eb:91:7d:48:df:ed:f2:5f:0e:77:c3:1b:3b: f4:dc:2e:32:67:b8:24:2f:3f:7d:46:54:6e:80:cb:4b:ce:e5: 07:86:38:01:38:ff:e6:18:8c:0c:44:e5:35:53:41:37:d9:8e: a5:a2:00:e4:41:91:78:9a:c6:f4:9d:63:a0:f1:d0:cb:7d:7d: ee:9c:20:f8:79:46:17:b1:f1:87:0d:b2:6a:8a:64:bd:f3:24: b9:30:5c:17:1b:f1:bf:d7:a0:5c:17:2c:85:8e:bd:ba:b6:6f: 75:c4:f4:dc:1e:0a:03:62:6f:20:c2:1d:a3:73:d4:43:8c:93: e6:a2:18:fa:18:38:d0:74:b5:cc:a5:a0:1d:fd:f2:79:36:76: fe:7c:e0:50:e7:0d:37:96:d9:cc:e9:e6:7c:3b:e0:66:b7:c0: 58:67:86:30:08:4b:8e:83:cc:6e:4c:12:5b:7f:c9:f7:8f:93: e0:80:71:20:83:57:c8:95:16:5e:33:72:d1:63:aa:67:ef:db: 50:e7:ff:fb:6d:d0:63:b7:aa:2b:72:7d:8c:28:c3:7f:f7:a7: e1:5c:e5:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQjYxMTAvBgNVBAUTKDAwQTY0MDZGMkYwQTk0N0JFQjUxNDEzNjcwREY3MjFC QUQ3NUJBQzQwHhcNMjYwMzI1MDAxMjE1WhcNMjYwNDAxMDAxMjE1WjAYMRYwFAYD VQQDEw02OWMzMjg2MC1iYjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskBspDxNd0n+zJ74GttSuW3i6lEEvyzAMiWx4ZO76UVIdpunZtJfWedaHAXR wU0cVoLc30pHsWxRP3ervwd8BZgFyKwG6wibDHjWWm4/l/nNZFuA066p+fMbtsmv 4pXEfnm9Td65ZtgnMaA40knrOeWy6NwMNhkTwgewMdrIaPpUUvqjzFakgMUvPxbn Y7FbpBEfn+wgw1DYjrlZBn5zs//hBPskAyzx1wHBnRptiUn1sMaFTyay7wOfShgY jopfvpxo2SnFt9vk7UuOVYKVW3Q+R7Cjx+DP1KYE9UXPGHqMuDvafZy3S8s2Ktfj dHi2BGIkkmuAj7A10UxhoQDw2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF4f5Vrr rAl2TjhMlSdkQKpwIZ6pMB8GA1UdIwQYMBaAFACmQG8vCpR761FBNnDfchutdbrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBCNi8wNzU5MzhENkJG ODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xIdnJVVUUyY045eUc2MTF1 c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLWkFieThLbEh2clVVRTJjTjl5RzYxMXVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBCNi8wNzU5MzhENkJGODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xI dnJVVUUyY045eUc2MTF1c1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJT6hO67I7fqM7QZHBdzFMsL/UNGkfybWs42xALPGszgVHk6Hq9Yi4BPrkX1I 3+3yXw53wxs79NwuMme4JC8/fUZUboDLS87lB4Y4ATj/5hiMDETlNVNBN9mOpaIA 5EGReJrG9J1joPHQy3197pwg+HlGF7Hxhw2yaopkvfMkuTBcFxvxv9egXBcshY69 urZvdcT03B4KA2JvIMIdo3PUQ4yT5qIY+hg40HS1zKWgHf3yeTZ2/nzgUOcNN5bZ zOnmfDvgZrfAWGeGMAhLjoPMbkwSW3/J94+T4IBxIINXyJUWXjNy0WOqZ+/bUOf/ +23QY7eqK3J9jCjDf/en4VzlKg== -----END CERTIFICATE-----Generated at Thu Mar 26 15:51:44 2026 by rpki-client