$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft File: MB6kG5ONf0s895PQEveN06U5cCQ.mft (raw, json) Hash identifier: h6+3xzgRD7KuuXnBzhz6QD1xW52NPrPUawTAtgl5o9s= Subject key identifier: 14:35:53:8D:D5:17:B3:0E:61:1F:F3:FF:1D:D3:86:8C:3D:30:E1:05 Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 Certificate issuer: /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Certificate serial: 14E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft Manifest number: 14D8 Signing time: Tue 24 Mar 2026 16:45:21 +0000 Manifest this update: Tue 24 Mar 2026 16:45:21 +0000 Manifest next update: Tue 31 Mar 2026 16:45:21 +0000 Files and hashes: 1: MB6kG5ONf0s895PQEveN06U5cCQ.crl (hash: R4gTUijbbjoyKdrwaz7GCUGOjvQV6husgW10rewgm9I=) 2: 61574192E37A11EB8AF29A5BC4F9AE02.roa (hash: p9ON/vBF+VJhjti0OsHW+khk9UzScAaJd1Q9IQceEPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5349 (0x14e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F4F, serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Validity Not Before: Mar 24 16:45:21 2026 GMT Not After : Mar 31 16:45:21 2026 GMT Subject: CN=69c2bfa1-fb0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:35:4a:57:f7:8f:aa:d4:9a:57:94:b1:7c:11: 94:c8:84:02:56:13:4a:49:2b:35:18:2d:48:8f:6d: 2e:2c:a8:d9:2c:b2:47:a6:a3:f4:5e:50:0b:7a:16: 61:77:5b:ea:4d:b1:12:03:ad:c4:8c:42:67:16:58: 89:21:3c:21:64:62:5d:bf:11:3f:bd:37:04:8a:44: 89:39:ff:c7:7c:30:ef:4c:ce:f1:81:a0:15:a5:1d: 54:17:f5:3e:3d:ed:e5:01:01:6a:95:db:e2:22:64: aa:8d:bf:5a:39:4f:e2:cb:4d:d8:b4:69:ef:a3:01: a9:45:bc:9b:2a:c2:1a:6f:2e:55:c8:56:4a:20:f2: ba:72:91:15:2f:f0:44:36:c3:c0:aa:15:5d:14:2b: ed:83:63:5a:ff:88:42:3d:16:17:66:1a:78:e7:f3: 34:dc:73:92:2b:9c:f7:5d:02:e5:00:5b:28:0d:ba: 60:e9:fa:35:cd:41:76:7f:89:5a:ce:fc:14:de:f7: b0:e3:94:79:89:69:95:e6:92:c0:a6:b0:24:44:ab: 12:bc:1c:76:3b:ad:b4:05:75:a4:66:34:13:2a:05: 49:f3:30:3b:09:ff:3e:96:c0:92:58:80:64:ef:10: 9c:0d:3a:e2:b3:5b:b6:93:16:6d:63:af:c2:88:58: b1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:35:53:8D:D5:17:B3:0E:61:1F:F3:FF:1D:D3:86:8C:3D:30:E1:05 X509v3 Authority Key Identifier: keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:9f:a2:72:fe:0b:7a:5b:f4:18:f7:a5:ee:55:fa:ba:25:21: 8a:48:1c:74:89:be:ab:28:f8:0f:9e:0e:ec:55:27:52:9f:7a: 43:17:2a:46:22:15:60:8b:19:a1:0c:11:dc:55:24:19:8b:e5: e2:d7:f8:eb:f8:e2:ad:50:72:03:f3:a4:b4:10:25:c9:2d:50: 2c:22:0b:ba:52:d7:77:ec:99:7a:cb:1e:14:97:3c:c2:a4:b3: 78:65:f1:7e:61:4e:5b:0c:35:84:49:31:c0:39:d6:40:e0:b2: 14:c0:5b:1a:3c:cc:6c:f1:44:54:71:90:77:36:c4:b4:ac:12: 08:38:82:b1:20:85:93:58:16:d6:6a:63:1d:a3:1a:e2:8d:c5: e0:a9:df:3c:be:7f:a4:94:ae:0b:4d:09:34:6c:81:89:48:d6: 09:b3:cf:69:3c:71:5b:87:eb:ea:1c:72:6d:18:2e:c6:63:0a: 4d:ed:40:87:a3:19:06:39:fb:a1:df:02:a1:e6:7c:c9:61:74: bc:70:57:c9:38:52:25:50:97:18:18:8e:80:48:c7:8b:c4:7e: 30:ca:af:61:3f:2c:57:8a:54:1a:c4:46:41:f4:fb:8c:a9:43: b3:32:7f:34:89:bc:dc:75:94:72:a4:a8:2a:e6:da:77:d9:d3: 7b:14:28:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGNEYxMTAvBgNVBAUTKDMwMUVBNDFCOTM4RDdGNEIzQ0Y3OTNEMDEyRjc4REQz QTUzOTcwMjQwHhcNMjYwMzI0MTY0NTIxWhcNMjYwMzMxMTY0NTIxWjAYMRYwFAYD VQQDEw02OWMyYmZhMS1mYjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDVKV/ePqtSaV5SxfBGUyIQCVhNKSSs1GC1Ij20uLKjZLLJHpqP0XlALehZh d1vqTbESA63EjEJnFliJITwhZGJdvxE/vTcEikSJOf/HfDDvTM7xgaAVpR1UF/U+ Pe3lAQFqldviImSqjb9aOU/iy03YtGnvowGpRbybKsIaby5VyFZKIPK6cpEVL/BE NsPAqhVdFCvtg2Na/4hCPRYXZhp45/M03HOSK5z3XQLlAFsoDbpg6fo1zUF2f4la zvwU3vew45R5iWmV5pLAprAkRKsSvBx2O620BXWkZjQTKgVJ8zA7Cf8+lsCSWIBk 7xCcDTris1u2kxZtY6/CiFixiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBQ1U43V F7MOYR/z/x3Thow9MOEFMB8GA1UdIwQYMBaAFDAepBuTjX9LPPeT0BL3jdOlOXAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUY0Ri8wRkRCOTc0Qzc0 RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYwczg5NVBRRXZlTjA2VTVj Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CNmtHNU9OZjBzODk1UFFFdmVOMDZVNWNDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUY0Ri8wRkRCOTc0Qzc0RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYw czg5NVBRRXZlTjA2VTVjQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEp+icv4Lelv0GPel7lX6uiUhikgcdIm+qyj4D54O7FUnUp96QxcqRiIVYIsZ oQwR3FUkGYvl4tf46/jirVByA/OktBAlyS1QLCILulLXd+yZesseFJc8wqSzeGXx fmFOWww1hEkxwDnWQOCyFMBbGjzMbPFEVHGQdzbEtKwSCDiCsSCFk1gW1mpjHaMa 4o3F4KnfPL5/pJSuC00JNGyBiUjWCbPPaTxxW4fr6hxybRguxmMKTe1Ah6MZBjn7 od8CoeZ8yWF0vHBXyThSJVCXGBiOgEjHi8R+MMqvYT8sV4pUGsRGQfT7jKlDszJ/ NIm83HWUcqSoKubad9nTexQo5g== -----END CERTIFICATE-----Generated at Thu Mar 26 19:13:52 2026 by rpki-client