$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft File: E1XVGH0uY9fm1JB42OcfoFHEVuM.mft (raw, json) Hash identifier: qE4hTy3THaC5kTunfxaL+je18Lj76JWRANkz7IM1FXg= Subject key identifier: B9:E2:A3:B7:8A:1E:77:8E:52:D1:FC:D3:67:23:3D:59:EC:CF:7B:0B Authority key identifier: 13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3 Certificate issuer: /CN=A91B3CB5/serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3 Certificate serial: 0D24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft Manifest number: 0CF8 Signing time: Tue 24 Mar 2026 18:05:57 +0000 Manifest this update: Tue 24 Mar 2026 18:05:56 +0000 Manifest next update: Tue 31 Mar 2026 18:05:56 +0000 Files and hashes: 1: E1XVGH0uY9fm1JB42OcfoFHEVuM.crl (hash: 8PqPUBNXr1m236wulXc9PxhAU48k1bfMRVIRHHvW9Rc=) 2: F2F8C8B2AAE311EFB889317FC4F9AE02.roa (hash: FMrV9a339leH9QraYW+j9/idX+LpdB6y6EvY3B6c48k=) 3: E26173CE050611EAA0470B49C4F9AE02.roa (hash: T7ng/FvE1eGQwu1xpjITgzXCh8uTK8CfKE7hPSXoFdk=) 4: 257E3B94E37B11EA84A20810C4F9AE02.roa (hash: Dw3nMUxEhyHX5ev98aRNWPLfcsu+JByGF2YmsWZl+nQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3364 (0xd24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CB5, serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3 Validity Not Before: Mar 24 18:05:56 2026 GMT Not After : Mar 31 18:05:56 2026 GMT Subject: CN=69c2d285-5e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4c:8e:f8:9a:79:3d:df:2c:2b:81:36:ce:0f: 8a:b1:75:f4:9f:96:78:f5:e2:00:db:28:8b:e3:ca: e7:bb:2a:4f:01:4e:c4:04:38:6e:fc:08:ad:9e:75: 28:26:2d:d9:d7:3e:e3:c1:8e:e1:c3:7a:02:6c:92: 9a:5d:72:a7:04:42:58:ee:05:6a:a1:39:00:da:8a: 40:3c:26:4e:87:06:63:d1:22:e8:55:68:63:9d:ec: 2a:c8:db:20:15:17:b4:f4:f3:d3:fe:88:d2:4f:55: ac:8d:e0:93:24:34:14:3a:61:95:fc:5b:ab:63:dc: d4:4e:87:4a:d9:ba:ec:f2:d0:96:e6:70:25:de:b2: 30:25:19:e3:e4:9e:a9:ae:f2:26:5d:59:39:b0:07: ee:07:38:64:55:3f:e9:bb:b8:44:20:e3:bc:71:83: 0d:42:77:86:ca:1f:f2:68:3d:b7:7d:2f:a7:e4:66: 19:b3:64:5c:de:f3:38:6b:f7:ec:8c:92:42:b7:d3: 2b:ce:bb:f4:f2:d6:31:1b:95:e4:1f:6b:2a:bf:0b: 1b:83:b1:e3:61:3a:69:bb:7e:09:ae:63:43:ed:34: e5:31:0c:b7:7e:d5:f3:e8:5e:60:a9:6e:6c:5f:bd: 13:47:8e:1a:86:36:e5:8e:1b:96:50:ec:dd:61:98: 04:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E2:A3:B7:8A:1E:77:8E:52:D1:FC:D3:67:23:3D:59:EC:CF:7B:0B X509v3 Authority Key Identifier: keyid:13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f3:6f:33:24:25:4e:fc:6c:d7:39:f0:35:0d:43:82:b0:81: 6c:cf:86:14:7c:b1:fc:dd:ab:8e:ae:07:bd:d0:1a:c8:a8:a8: 4d:17:cb:6f:b0:7f:42:e9:67:0e:0d:7a:53:4c:d0:c0:98:41: d2:cf:be:d7:da:28:7e:4f:79:18:ed:b0:d5:12:21:54:54:73: 33:7c:3d:d4:b0:3b:cc:65:ab:f2:1c:5b:17:a0:20:79:17:ff: 7d:4c:49:ac:ae:d4:3d:af:6e:26:57:73:61:11:04:d8:1b:db: e5:7c:2f:26:86:b8:e0:2d:d3:da:96:50:50:f8:6c:5f:7d:e8: 4a:b1:ba:d4:cb:45:4e:7d:5f:bd:25:47:56:42:4e:59:53:b8: 65:8b:6b:16:c8:91:b0:96:12:6f:80:e0:1b:fd:f9:74:38:bc: d4:1c:27:62:94:d9:de:9d:69:a1:7e:ef:21:4a:86:e9:ad:e2: db:2b:1b:8f:58:2c:92:26:bf:4f:de:5c:a3:fc:ab:77:61:e3: 52:f5:b4:d1:ac:a8:4a:0c:53:70:4e:14:a2:75:26:28:7d:05: ac:29:b6:49:83:4a:44:ab:07:bc:b2:18:e9:1d:03:af:ab:22: f9:34:8e:07:5a:76:2f:69:a5:b1:bc:7b:04:5d:0c:ef:33:34: f2:11:7a:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNDQjUxMTAvBgNVBAUTKDEzNTVENTE4N0QyRTYzRDdFNkQ0OTA3OEQ4RTcxRkEw NTFDNDU2RTMwHhcNMjYwMzI0MTgwNTU2WhcNMjYwMzMxMTgwNTU2WjAYMRYwFAYD VQQDEw02OWMyZDI4NS01ZTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6EyO+Jp5Pd8sK4E2zg+KsXX0n5Z49eIA2yiL48rnuypPAU7EBDhu/AitnnUo Ji3Z1z7jwY7hw3oCbJKaXXKnBEJY7gVqoTkA2opAPCZOhwZj0SLoVWhjnewqyNsg FRe09PPT/ojST1WsjeCTJDQUOmGV/FurY9zUTodK2brs8tCW5nAl3rIwJRnj5J6p rvImXVk5sAfuBzhkVT/pu7hEIOO8cYMNQneGyh/yaD23fS+n5GYZs2Rc3vM4a/fs jJJCt9Mrzrv08tYxG5XkH2sqvwsbg7HjYTppu34JrmND7TTlMQy3ftXz6F5gqW5s X70TR44ahjbljhuWUOzdYZgElwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLnio7eK HneOUtH802cjPVnsz3sLMB8GA1UdIwQYMBaAFBNV1Rh9LmPX5tSQeNjnH6BRxFbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0NCNS82MzI2NTBGODA1 MDUxMUVBQUE5MzRDNDNDNEY5QUUwMi9FMVhWR0gwdVk5Zm0xSkI0Mk9jZm9GSEVW dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UxWFZHSDB1WTlmbTFKQjQyT2Nmb0ZIRVZ1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0NCNS82MzI2NTBGODA1MDUxMUVBQUE5MzRDNDNDNEY5QUUwMi9FMVhWR0gwdVk5 Zm0xSkI0Mk9jZm9GSEVWdU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbPNvMyQlTvxs1znwNQ1DgrCBbM+GFHyx/N2rjq4HvdAayKioTRfLb7B/Quln Dg16U0zQwJhB0s++19oofk95GO2w1RIhVFRzM3w91LA7zGWr8hxbF6AgeRf/fUxJ rK7UPa9uJldzYREE2Bvb5XwvJoa44C3T2pZQUPhsX33oSrG61MtFTn1fvSVHVkJO WVO4ZYtrFsiRsJYSb4DgG/35dDi81BwnYpTZ3p1poX7vIUqG6a3i2ysbj1gskia/ T95co/yrd2HjUvW00ayoSgxTcE4UonUmKH0FrCm2SYNKRKsHvLIY6R0Dr6si+TSO B1p2L2mlsbx7BF0M7zM08hF6rg== -----END CERTIFICATE-----Generated at Thu Mar 26 00:54:10 2026 by rpki-client