$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft File: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft (raw, json) Hash identifier: vBAcPNi8rB9unUWLDP6SNEK/y5KKCo5WGTbr1eKmqYw= Subject key identifier: B0:40:9C:0E:07:19:EC:05:D2:10:F3:C5:B0:8A:7B:60:C6:E2:55:F5 Authority key identifier: F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD Certificate issuer: /CN=A91B0F3F/serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD Certificate serial: 0AD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft Manifest number: 0AB1 Signing time: Tue 24 Mar 2026 19:20:19 +0000 Manifest this update: Tue 24 Mar 2026 19:20:18 +0000 Manifest next update: Tue 31 Mar 2026 19:20:18 +0000 Files and hashes: 1: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl (hash: I8DY4RKAn4Rftrz9Xw78iOGUuB9TBQjIMRXDzQBAbtw=) 2: FE84EF96F16211F08FA76A8B5F6F56BC.roa (hash: LswMfaH47y3DaYLf6YvWkUTkv4VF2qVi2QmgGi//KfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2771 (0xad3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0F3F, serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD Validity Not Before: Mar 24 19:20:18 2026 GMT Not After : Mar 31 19:20:18 2026 GMT Subject: CN=69c2e3f3-8b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:38:33:01:77:01:cc:ca:03:b5:7b:e3:42:7c: 8a:6b:86:55:8a:e7:af:50:83:f2:84:05:9b:b3:40: f7:d6:4b:2b:1c:23:00:ca:c7:33:81:73:ab:bd:56: 48:d9:bc:3b:bb:87:ad:e9:b9:57:39:c6:d5:bd:5a: a0:26:c1:e7:4f:70:11:76:38:a0:ef:c9:d3:1b:35: b7:e3:e6:a7:06:4c:ef:cf:cd:53:76:a5:d9:14:41: 9d:82:b4:f2:8a:5d:aa:66:71:45:52:f6:17:2c:b1: 90:b6:c0:d0:5a:eb:0f:ce:37:bb:da:2d:bb:5f:c5: 22:ed:2c:ad:fa:e2:5d:1a:5a:85:65:00:8d:95:1a: 1e:60:f0:20:f9:59:c1:7e:8f:b9:20:d4:40:6a:c0: f2:e5:4f:c9:2d:81:2f:5a:a8:c8:4b:4e:88:d4:6f: bc:4d:a7:ae:66:4d:e6:af:69:8a:83:5f:54:70:eb: f4:03:a7:15:de:c8:bf:97:e5:a6:c9:02:b3:cf:10: f7:6a:07:ce:c2:a8:ff:35:a3:0a:97:4e:c1:a1:42: 31:5e:75:4f:95:f8:9b:03:57:04:56:9b:f2:51:45: 2a:7c:2e:b9:12:fa:74:c9:aa:56:be:3e:90:63:68: 34:fa:d9:f4:fd:8b:31:48:ca:61:60:2c:3e:7a:38: ea:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:40:9C:0E:07:19:EC:05:D2:10:F3:C5:B0:8A:7B:60:C6:E2:55:F5 X509v3 Authority Key Identifier: keyid:F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:d7:f9:f5:a5:e7:44:55:4b:83:70:9a:26:a3:ef:81:b0:21: 78:d5:90:0b:4b:41:f9:20:d1:92:07:bc:6b:b7:35:0a:81:ad: 89:1c:31:ec:47:cd:52:0d:8f:c4:1d:64:48:a8:6e:90:06:9f: 6b:9d:b3:8a:9d:38:65:bc:94:6e:da:ef:64:0a:14:77:52:b4: 0a:c3:f2:c7:12:ff:fa:55:fa:03:d8:cd:2a:73:3d:fd:64:95: c3:80:9e:96:6c:e4:cc:1a:1e:c4:35:f9:d9:f5:c6:a3:ac:d9: cb:93:e5:69:42:8f:5e:b3:4f:5a:e6:94:8f:43:7b:1c:ed:d6: 3e:2d:4a:85:9d:07:90:59:50:ff:9f:53:5c:a0:f5:62:38:4f: bb:3f:a0:3a:a5:a6:19:36:cc:9d:f4:6a:44:82:15:d3:e2:08: 77:65:ab:44:d5:0f:6d:f4:6f:8e:7a:45:9a:13:a9:eb:35:26: 25:96:fb:79:90:23:bd:92:49:3f:b5:92:06:35:1c:c5:8e:77: 62:ef:9d:d4:68:f1:2f:cd:83:ac:b5:72:90:b5:2b:d5:82:65: 10:7c:5c:35:2e:43:07:5f:0b:a7:f7:13:8f:39:5e:54:a6:a5: 56:71:c1:4b:fd:cf:d8:33:76:de:76:3a:bd:31:83:38:f8:3e: 15:b1:bc:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBGM0YxMTAvBgNVBAUTKEY4MThGQzk4OEVDNzAzMkMzRTJDNkE0OEE1NTQ5OEFC N0NENTY1RkQwHhcNMjYwMzI0MTkyMDE4WhcNMjYwMzMxMTkyMDE4WjAYMRYwFAYD VQQDEw02OWMyZTNmMy04YjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzgzAXcBzMoDtXvjQnyKa4ZViuevUIPyhAWbs0D31ksrHCMAysczgXOrvVZI 2bw7u4et6blXOcbVvVqgJsHnT3ARdjig78nTGzW34+anBkzvz81TdqXZFEGdgrTy il2qZnFFUvYXLLGQtsDQWusPzje72i27X8Ui7Syt+uJdGlqFZQCNlRoeYPAg+VnB fo+5INRAasDy5U/JLYEvWqjIS06I1G+8TaeuZk3mr2mKg19UcOv0A6cV3si/l+Wm yQKzzxD3agfOwqj/NaMKl07BoUIxXnVPlfibA1cEVpvyUUUqfC65Evp0yapWvj6Q Y2g0+tn0/YsxSMphYCw+ejjqEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLBAnA4H GewF0hDzxbCKe2DG4lX1MB8GA1UdIwQYMBaAFPgY/JiOxwMsPixqSKVUmKt81WX9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEYzRi8wOTM3M0FENjc4 QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5dy1MR3BJcFZTWXEzelZa ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1CajhtSTdIQXl3LUxHcElwVlNZcTN6VlpmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEYzRi8wOTM3M0FENjc4QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5 dy1MR3BJcFZTWXEzelZaZjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoNf59aXnRFVLg3CaJqPvgbAheNWQC0tB+SDRkge8a7c1CoGtiRwx7EfNUg2P xB1kSKhukAafa52zip04ZbyUbtrvZAoUd1K0CsPyxxL/+lX6A9jNKnM9/WSVw4Ce lmzkzBoexDX52fXGo6zZy5PlaUKPXrNPWuaUj0N7HO3WPi1KhZ0HkFlQ/59TXKD1 YjhPuz+gOqWmGTbMnfRqRIIV0+IId2WrRNUPbfRvjnpFmhOp6zUmJZb7eZAjvZJJ P7WSBjUcxY53Yu+d1GjxL82DrLVykLUr1YJlEHxcNS5DB18Lp/cTjzleVKalVnHB S/3P2DN23nY6vTGDOPg+FbG8nQ== -----END CERTIFICATE-----Generated at Thu Mar 26 17:24:53 2026 by rpki-client