$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft File: gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft (raw, json) Hash identifier: MGe6uwkZYVfLKK2xqCivGF8f3cCqsX1dspIWDVP9DOs= Subject key identifier: 10:6F:44:AC:A3:9E:2B:9F:37:5E:66:73:29:7C:07:07:98:FF:98:36 Authority key identifier: 80:CA:BB:C5:DE:3F:7B:93:27:EA:C4:DB:A8:D9:36:53:A1:22:21:00 Certificate issuer: /CN=A91B3316/serialNumber=80CABBC5DE3F7B9327EAC4DBA8D93653A1222100 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft Manifest number: 35 Signing time: Wed 25 Mar 2026 07:59:09 +0000 Manifest this update: Wed 25 Mar 2026 07:59:08 +0000 Manifest next update: Wed 01 Apr 2026 07:59:08 +0000 Files and hashes: 1: gMq7xd4_e5Mn6sTbqNk2U6EiIQA.crl (hash: fg+D8At6Fb+9NFZAxJDVto4fZDbscWEYcdKKBBihMW4=) 2: C96483E226B111F1829C23D9C3833773.roa (hash: xDH8tBv3qmVSVr8LAJxQ8B2DT/UTFhcoFnYkcj6WUeU=) 3: 10B9878C243D11F1979A5CDAB9833773.roa (hash: zVqpLd7j0J+K3oi88p50tmt71zBHPtzbECf2RGbri0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.crl rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3316, serialNumber=80CABBC5DE3F7B9327EAC4DBA8D93653A1222100 Validity Not Before: Mar 25 07:59:08 2026 GMT Not After : Apr 1 07:59:08 2026 GMT Subject: CN=69c395cc-95f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1b:81:f2:c5:10:0a:38:22:fb:98:1d:f7:1d: da:99:fe:f0:b4:35:9d:be:21:1c:05:ac:f1:bf:27: b0:46:77:48:90:32:e3:52:b0:e8:64:9c:69:e2:61: 09:a9:e1:9a:f0:45:a7:c7:95:e1:a2:be:1f:06:30: f0:8c:79:c4:81:f6:68:5b:0f:02:ae:be:f1:a1:38: 9d:dc:34:d8:fd:df:ad:1c:fd:7f:42:ea:2a:e0:11: c5:ad:6d:e4:29:6a:b9:61:38:cf:0d:df:0d:97:4e: a2:0a:09:17:97:6e:8e:ea:fe:f2:63:71:f5:7c:9f: 77:0e:aa:08:47:c3:a0:6e:74:35:44:73:ec:32:73: c2:cb:55:05:2b:d1:69:2d:00:ee:8b:3f:a6:f6:3e: aa:c6:2e:d2:d4:23:34:99:ab:99:7b:58:c3:2f:db: 15:3e:a9:4c:18:e9:ed:12:55:91:4d:ee:6f:3b:b5: 2b:23:60:58:60:1c:46:ad:4c:46:c3:9d:31:6a:0b: 1e:e3:31:f3:37:91:fd:c3:0d:c6:ae:c1:fd:66:3f: b0:24:21:1f:2e:7e:51:68:1d:f4:08:ec:7b:da:ca: fc:63:26:ea:45:7d:02:7c:a4:da:d4:44:2b:62:1f: 50:82:0f:2b:0b:1a:31:d4:7b:b9:f6:80:96:5d:05: 8d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6F:44:AC:A3:9E:2B:9F:37:5E:66:73:29:7C:07:07:98:FF:98:36 X509v3 Authority Key Identifier: keyid:80:CA:BB:C5:DE:3F:7B:93:27:EA:C4:DB:A8:D9:36:53:A1:22:21:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:84:2f:a7:71:17:d0:08:57:0c:e5:39:f5:c2:c0:98:43:da: 02:42:0f:04:34:bd:6e:46:61:ba:2a:bf:84:10:0b:c4:a5:ed: 35:30:98:e9:7a:56:22:5b:92:a1:a7:69:77:0f:05:aa:b0:95: 4e:6b:97:3d:2f:8e:4e:ca:80:13:c5:45:17:75:3b:ce:c5:ab: e8:6e:be:4e:1b:ce:51:07:02:c3:93:21:05:b5:0a:66:a7:dc: fb:12:92:c1:cd:c1:e3:91:2c:f0:60:36:90:e6:f9:ee:45:db: 65:33:9e:2c:e5:72:14:41:1a:b3:1a:65:5a:db:82:a3:d3:29: 93:fb:e2:70:b4:32:b5:b4:db:9f:d2:db:ea:b5:b1:d4:0a:83: 6b:65:d0:5d:86:8d:63:87:0a:ad:78:52:5f:18:5e:3c:96:37: 5a:fd:8b:9a:93:ef:88:e6:d5:af:e6:9b:a2:1c:14:46:35:e3: dd:75:e0:5c:d6:bd:a2:67:5a:13:af:f2:24:f4:91:e8:30:96: de:4f:82:40:d7:93:4d:60:08:13:17:d9:5a:59:f9:12:71:4a: b0:0d:28:46:56:85:5f:95:37:9b:8e:65:79:8e:5d:9a:6b:b2: ec:3e:12:d8:7c:a8:a2:4c:63:37:85:ca:f7:7c:1a:9c:18:f9: d3:3e:37:8a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzMxNjExMC8GA1UEBRMoODBDQUJCQzVERTNGN0I5MzI3RUFDNERCQThEOTM2NTNB MTIyMjEwMDAeFw0yNjAzMjUwNzU5MDhaFw0yNjA0MDEwNzU5MDhaMBgxFjAUBgNV BAMTDTY5YzM5NWNjLTk1ZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqG4HyxRAKOCL7mB33HdqZ/vC0NZ2+IRwFrPG/J7BGd0iQMuNSsOhknGniYQmp 4ZrwRafHleGivh8GMPCMecSB9mhbDwKuvvGhOJ3cNNj9360c/X9C6irgEcWtbeQp arlhOM8N3w2XTqIKCReXbo7q/vJjcfV8n3cOqghHw6BudDVEc+wyc8LLVQUr0Wkt AO6LP6b2PqrGLtLUIzSZq5l7WMMv2xU+qUwY6e0SVZFN7m87tSsjYFhgHEatTEbD nTFqCx7jMfM3kf3DDcauwf1mP7AkIR8uflFoHfQI7HvayvxjJupFfQJ8pNrURCti H1CCDysLGjHUe7n2gJZdBY3jAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEG9ErKOe K583XmZzKXwHB5j/mDYwHwYDVR0jBBgwFoAUgMq7xd4/e5Mn6sTbqNk2U6EiIQAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzMzE2LzIwNjhDMDYyRjJD NDExRjA4Qjg0RTQ0NTM5NkY1NkJDL2dNcTd4ZDRfZTVNbjZzVGJxTmsyVTZFaUlR QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvZ01xN3hkNF9lNU1uNnNUYnFOazJVNkVpSVFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz MzE2LzIwNjhDMDYyRjJDNDExRjA4Qjg0RTQ0NTM5NkY1NkJDL2dNcTd4ZDRfZTVN bjZzVGJxTmsyVTZFaUlRQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBvhC+ncRfQCFcM5Tn1wsCYQ9oCQg8ENL1uRmG6Kr+EEAvEpe01MJjpelYiW5Kh p2l3DwWqsJVOa5c9L45OyoATxUUXdTvOxavobr5OG85RBwLDkyEFtQpmp9z7EpLB zcHjkSzwYDaQ5vnuRdtlM54s5XIUQRqzGmVa24Kj0ymT++JwtDK1tNuf0tvqtbHU CoNrZdBdho1jhwqteFJfGF48ljda/Yuak++I5tWv5puiHBRGNePddeBc1r2iZ1oT r/Ik9JHoMJbeT4JA15NNYAgTF9laWfkScUqwDShGVoVflTebjmV5jl2aa7LsPhLY fKiiTGM3hcr3fBqcGPnTPjeK -----END CERTIFICATE-----Generated at Thu Mar 26 15:19:17 2026 by rpki-client