$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft File: toNIsZBwY8BERWnOsijqUkbQLxk.mft (raw, json) Hash identifier: 2xTqg6cEwdHMn3pbZv/Jo+QlpYooBMxkuHRUV9ihkdM= Subject key identifier: 4A:A3:89:72:E0:D9:9B:14:2A:55:0B:F0:0A:3A:EE:E4:CF:4B:12:76 Authority key identifier: B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 Certificate issuer: /CN=A91B3CB5/serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft Manifest number: 49 Signing time: Tue 24 Mar 2026 18:05:54 +0000 Manifest this update: Tue 24 Mar 2026 18:05:54 +0000 Manifest next update: Tue 31 Mar 2026 18:05:54 +0000 Files and hashes: 1: toNIsZBwY8BERWnOsijqUkbQLxk.crl (hash: oOk5IP8KVZ9bSfIaa6rhq6voejQFkd8K/538mP87XSA=) 2: 3AF6CDE4CE7E11F0BDD3E452C4F9AE02.roa (hash: 0wi2dknpR06NzdVHMhDQvzTD3ZFfo6Ir3jbrCyXBQX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CB5, serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Validity Not Before: Mar 24 18:05:54 2026 GMT Not After : Mar 31 18:05:54 2026 GMT Subject: CN=69c2d282-75a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9b:8f:ba:b6:6d:45:f5:d6:62:98:d2:50:28: b1:60:cb:1d:d7:6f:09:a2:74:b9:36:c2:17:01:9e: 80:30:86:0e:30:15:09:a4:f2:93:93:f7:84:82:c4: 7e:c6:d7:d7:17:5d:71:ad:b8:37:c0:74:46:02:67: 31:9d:ab:66:16:bc:3a:21:37:cf:bf:2b:34:8b:44: dd:56:87:b1:21:94:4d:f7:7a:fc:d5:e7:e7:a3:73: 6d:05:e8:51:49:0e:6a:13:72:6b:fb:6c:42:3f:55: 08:34:13:fc:d5:9d:cb:ed:e5:9b:2f:a7:c0:f7:9e: 7a:fe:75:e4:7a:c5:3e:56:a7:ee:d5:f1:c5:c4:f8: 84:d1:ea:37:e6:75:95:5c:9e:2d:75:6c:e5:8f:bc: 4f:4c:0e:39:e4:55:d4:c6:3b:22:b6:ba:ea:bb:b9: 6a:85:2f:40:9b:6c:c6:3d:96:18:8d:f3:70:d3:7b: e7:f6:b0:a3:d4:16:e9:94:6a:c8:5f:a8:fe:96:4e: 0b:e1:8e:38:8a:93:dc:c2:5d:a9:80:df:1d:ef:ea: 78:78:d8:6c:90:32:82:09:8e:d6:c0:82:46:83:26: 33:13:8e:59:2c:3f:f6:00:41:ac:ca:05:68:3a:71: dc:d0:27:a6:19:c3:22:6c:20:b9:ae:10:cf:db:6c: be:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A3:89:72:E0:D9:9B:14:2A:55:0B:F0:0A:3A:EE:E4:CF:4B:12:76 X509v3 Authority Key Identifier: keyid:B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:44:51:ce:1e:64:68:3d:9a:d2:6a:df:03:ae:b9:26:28:80: d0:c9:14:ed:a9:b5:37:fa:43:81:60:ab:29:66:08:b1:e5:0c: 85:8c:bb:bf:54:b4:06:52:8f:3e:60:5e:c5:2f:da:43:0e:55: b6:f1:70:f4:49:82:90:8b:04:5b:8a:b4:e6:9a:7f:0c:71:15: 3f:d4:e3:79:4d:34:a4:48:4b:a9:8a:30:f2:d1:de:29:54:9d: d3:fa:8a:1a:40:94:b6:5a:20:1a:80:10:af:cf:5c:8c:75:b1: ea:00:d9:11:a9:56:f8:2e:38:66:0e:fb:b6:36:a1:e7:56:b4: d4:b0:67:31:c1:46:e7:5c:a7:5c:4f:c1:fb:c5:74:c0:56:2a: db:60:11:2c:0f:e4:e7:28:a0:55:7c:c0:0d:39:72:db:de:20: a1:06:42:67:b2:0c:cd:ff:fa:c1:16:70:a8:05:2e:bf:70:07: 20:00:dd:26:f6:19:0f:4b:40:10:a7:b2:4a:d6:4a:c1:59:26: 00:16:a5:6f:00:71:26:8d:03:e7:8a:5c:d1:60:84:90:e8:14: 5c:df:e0:1d:d9:28:df:4f:83:58:bd:86:34:93:90:56:64:6f: d7:d9:73:ad:60:0e:08:df:bf:0b:fb:7f:bb:16:72:e0:44:89: cd:a6:3e:93 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0NCNTExMC8GA1UEBRMoQjY4MzQ4QjE5MDcwNjNDMDQ0NDU2OUNFQjIyOEVBNTI0 NkQwMkYxOTAeFw0yNjAzMjQxODA1NTRaFw0yNjAzMzExODA1NTRaMBgxFjAUBgNV BAMTDTY5YzJkMjgyLTc1YTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCym4+6tm1F9dZimNJQKLFgyx3XbwmidLk2whcBnoAwhg4wFQmk8pOT94SCxH7G 19cXXXGtuDfAdEYCZzGdq2YWvDohN8+/KzSLRN1Wh7EhlE33evzV5+ejc20F6FFJ DmoTcmv7bEI/VQg0E/zVncvt5Zsvp8D3nnr+deR6xT5Wp+7V8cXE+ITR6jfmdZVc ni11bOWPvE9MDjnkVdTGOyK2uuq7uWqFL0CbbMY9lhiN83DTe+f2sKPUFumUashf qP6WTgvhjjiKk9zCXamA3x3v6nh42GyQMoIJjtbAgkaDJjMTjlksP/YAQazKBWg6 cdzQJ6YZwyJsILmuEM/bbL5tAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUSqOJcuDZ mxQqVQvwCjru5M9LEnYwHwYDVR0jBBgwFoAUtoNIsZBwY8BERWnOsijqUkbQLxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzQ0I1L0VEMjI1NTMyQzQz NDExRjBBODI3QTU3REM0RjlBRTAyL3RvTklzWkJ3WThCRVJXbk9zaWpxVWtiUUx4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdG9OSXNaQndZOEJFUlduT3NpanFVa2JRTHhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz Q0I1L0VEMjI1NTMyQzQzNDExRjBBODI3QTU3REM0RjlBRTAyL3RvTklzWkJ3WThC RVJXbk9zaWpxVWtiUUx4ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAhRFHOHmRoPZrSat8DrrkmKIDQyRTtqbU3+kOBYKspZgix5QyFjLu/VLQGUo8+ YF7FL9pDDlW28XD0SYKQiwRbirTmmn8McRU/1ON5TTSkSEupijDy0d4pVJ3T+ooa QJS2WiAagBCvz1yMdbHqANkRqVb4LjhmDvu2NqHnVrTUsGcxwUbnXKdcT8H7xXTA VirbYBEsD+TnKKBVfMANOXLb3iChBkJnsgzN//rBFnCoBS6/cAcgAN0m9hkPS0AQ p7JK1krBWSYAFqVvAHEmjQPnilzRYISQ6BRc3+Ad2SjfT4NYvYY0k5BWZG/X2XOt YA4I378L+3+7FnLgRInNpj6T -----END CERTIFICATE-----Generated at Thu Mar 26 13:01:36 2026 by rpki-client