$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft File: -L4s6ssxJNZg8w-KJzgGZIr0PIc.mft (raw, json) Hash identifier: s8LtEwVl6VWd0c2e/o2bI/IctGd09SRzLGNhmFpSN3g= Subject key identifier: 78:2D:75:1E:14:12:0A:3E:A6:11:DA:0F:E6:B2:E1:BC:A9:3E:33:67 Authority key identifier: F8:BE:2C:EA:CB:31:24:D6:60:F3:0F:8A:27:38:06:64:8A:F4:3C:87 Certificate issuer: /CN=A91AFAAC/serialNumber=F8BE2CEACB3124D660F30F8A273806648AF43C87 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft Manifest number: A0 Signing time: Wed 25 Mar 2026 06:32:22 +0000 Manifest this update: Wed 25 Mar 2026 06:32:21 +0000 Manifest next update: Wed 01 Apr 2026 06:32:21 +0000 Files and hashes: 1: -L4s6ssxJNZg8w-KJzgGZIr0PIc.crl (hash: HgrNUmZsw3APgqh172H6Zu0w63BnK4NCnB0XIikrjyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.crl rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFAAC, serialNumber=F8BE2CEACB3124D660F30F8A273806648AF43C87 Validity Not Before: Mar 25 06:32:21 2026 GMT Not After : Apr 1 06:32:21 2026 GMT Subject: CN=69c38175-22fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b9:bc:7a:71:c2:f8:e6:ad:08:5c:93:a3:8f: 15:2a:9c:b5:eb:e7:62:3f:95:38:a8:12:4e:b0:48: bb:1a:06:83:0d:92:3a:6b:97:14:8f:5a:ae:ac:fe: 48:13:45:5c:8f:af:65:86:86:1c:54:85:2c:40:de: 89:a4:80:12:90:a2:ee:71:3f:26:08:6d:d4:06:ec: 21:19:87:fe:59:76:34:b4:a3:3d:df:08:6f:6d:b6: a4:7a:82:44:f4:9d:a7:cd:11:30:3f:73:28:53:c1: 87:d5:e9:ac:03:57:93:88:29:a6:a1:10:01:19:ff: 68:09:88:16:54:52:4d:a7:c9:79:c5:58:3a:c2:43: 41:53:82:ff:46:f4:21:10:d9:eb:26:c0:24:46:94: 68:51:3f:4f:2c:06:7d:f0:a5:e0:c6:45:9f:63:07: d0:b4:5f:97:d7:f1:6c:53:04:09:70:97:8c:4f:7f: fb:9f:87:0a:04:98:94:fb:f3:cc:9e:65:ac:08:f3: 89:1c:e8:ff:c2:4c:8e:dc:31:ca:43:d9:62:8e:fc: 26:02:61:0d:b9:4d:3b:2c:ac:86:5e:2f:5f:9e:24: 81:34:55:58:6b:69:52:34:0d:35:f1:64:4c:eb:92: 62:98:bf:6f:f3:f5:27:c3:bc:84:6f:24:06:6d:28: 9d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2D:75:1E:14:12:0A:3E:A6:11:DA:0F:E6:B2:E1:BC:A9:3E:33:67 X509v3 Authority Key Identifier: keyid:F8:BE:2C:EA:CB:31:24:D6:60:F3:0F:8A:27:38:06:64:8A:F4:3C:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:83:93:e6:f0:6b:fd:f8:ad:06:fa:68:70:05:08:8c:61:41: 42:ef:13:3b:84:43:51:76:6a:80:56:a0:67:80:2f:db:f1:b3: fe:31:99:ff:89:fd:0c:f3:55:5d:17:80:90:7a:1e:27:1b:0f: 20:41:37:35:51:fa:3b:44:4a:8b:39:96:56:f1:a1:94:43:9e: bc:38:85:41:f8:85:6a:51:44:ce:4c:29:12:75:81:b8:59:dd: 95:b1:9d:45:4b:68:c5:6d:a8:3d:da:63:94:17:20:9b:85:17: 4c:cb:ec:60:56:4c:19:37:3f:b2:92:57:27:fb:65:d8:f3:2e: 9f:10:20:16:bc:fa:01:7f:97:d4:aa:af:3c:65:76:f0:22:f4: 42:6e:0c:d1:65:af:29:70:9f:c7:48:0b:66:c7:ba:c2:df:14: 80:63:a8:45:25:d7:df:84:f1:d0:71:6a:12:12:96:aa:d6:a6: c5:1b:83:6a:a3:ca:34:b2:29:ae:18:7b:af:eb:dc:24:cf:e9: 31:67:20:4a:e7:66:97:57:00:16:cb:a0:b8:d4:40:12:6b:ee: cc:4f:aa:ba:a3:1a:b6:2b:81:1c:cb:c3:c6:82:0d:88:d2:9b: 9b:4f:0d:82:1f:47:b7:d0:23:8b:00:dc:03:01:38:51:04:88: 7b:2d:40:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZBQUMxMTAvBgNVBAUTKEY4QkUyQ0VBQ0IzMTI0RDY2MEYzMEY4QTI3MzgwNjY0 OEFGNDNDODcwHhcNMjYwMzI1MDYzMjIxWhcNMjYwNDAxMDYzMjIxWjAYMRYwFAYD VQQDEw02OWMzODE3NS0yMmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rm8enHC+OatCFyTo48VKpy16+diP5U4qBJOsEi7GgaDDZI6a5cUj1qurP5I E0Vcj69lhoYcVIUsQN6JpIASkKLucT8mCG3UBuwhGYf+WXY0tKM93whvbbakeoJE 9J2nzREwP3MoU8GH1emsA1eTiCmmoRABGf9oCYgWVFJNp8l5xVg6wkNBU4L/RvQh ENnrJsAkRpRoUT9PLAZ98KXgxkWfYwfQtF+X1/FsUwQJcJeMT3/7n4cKBJiU+/PM nmWsCPOJHOj/wkyO3DHKQ9lijvwmAmENuU07LKyGXi9fniSBNFVYa2lSNA018WRM 65JimL9v8/Unw7yEbyQGbSidAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHgtdR4U Ego+phHaD+ay4bypPjNnMB8GA1UdIwQYMBaAFPi+LOrLMSTWYPMPiic4BmSK9DyH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkFBQy81M0Q1NUNENjM1 NEExMUYwQkE3NjZFNENDNEY5QUUwMi8tTDRzNnNzeEpOWmc4dy1LSnpnR1pJcjBQ SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1MNHM2c3N4Sk5aZzh3LUtKemdHWklyMFBJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkFBQy81M0Q1NUNENjM1NEExMUYwQkE3NjZFNENDNEY5QUUwMi8tTDRzNnNzeEpO Wmc4dy1LSnpnR1pJcjBQSWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFYOT5vBr/fitBvpocAUIjGFBQu8TO4RDUXZqgFagZ4Av2/Gz/jGZ/4n9DPNV XReAkHoeJxsPIEE3NVH6O0RKizmWVvGhlEOevDiFQfiFalFEzkwpEnWBuFndlbGd RUtoxW2oPdpjlBcgm4UXTMvsYFZMGTc/spJXJ/tl2PMunxAgFrz6AX+X1KqvPGV2 8CL0Qm4M0WWvKXCfx0gLZse6wt8UgGOoRSXX34Tx0HFqEhKWqtamxRuDaqPKNLIp rhh7r+vcJM/pMWcgSudml1cAFsuguNRAEmvuzE+quqMatiuBHMvDxoINiNKbm08N gh9Ht9AjiwDcAwE4UQSIey1AUA== -----END CERTIFICATE-----Generated at Thu Mar 26 07:28:56 2026 by rpki-client