$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft File: toNIsZBwY8BERWnOsijqUkbQLxk.mft (raw, json) Hash identifier: 39GcgoGrIPManKoLjb5jfSjCVK7zWr7rZQIvwx2Qlg0= Subject key identifier: E3:A5:95:74:BC:F4:1F:6E:3D:4A:FF:E7:DD:72:AB:FE:ED:93:C2:E9 Authority key identifier: B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 Certificate issuer: /CN=A91B3CB5/serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft Manifest number: 4A Signing time: Thu 26 Mar 2026 18:10:37 +0000 Manifest this update: Thu 26 Mar 2026 18:10:37 +0000 Manifest next update: Thu 02 Apr 2026 18:10:37 +0000 Files and hashes: 1: toNIsZBwY8BERWnOsijqUkbQLxk.crl (hash: EScDuTpvwvq4GnWhHnLlVrYOv+ddIf9Okc6GB9SA72c=) 2: 3AF6CDE4CE7E11F0BDD3E452C4F9AE02.roa (hash: 0wi2dknpR06NzdVHMhDQvzTD3ZFfo6Ir3jbrCyXBQX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 18:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CB5, serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Validity Not Before: Mar 26 18:10:37 2026 GMT Not After : Apr 2 18:10:37 2026 GMT Subject: CN=69c5769d-ded8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:95:d3:d7:91:d1:89:fc:18:2e:54:e1:5b:9d: 25:e3:1e:03:85:1d:17:48:1e:ac:53:a3:f2:57:85: 0e:62:3d:84:5e:77:a8:2e:2b:88:85:f7:3a:b4:be: 78:43:c0:2e:16:81:29:54:14:eb:57:80:f2:d4:76: 84:30:3f:43:61:cd:39:fc:4e:d0:25:32:d9:91:f6: bd:bb:71:07:5a:b1:d5:c8:d6:ad:6b:29:6d:44:23: 99:59:4b:75:31:6e:91:9b:27:85:d5:0e:97:f6:09: 8f:07:f8:e5:4f:97:9a:b9:ae:b3:0c:76:f4:a7:f4: b9:3b:ec:cb:bf:c8:d0:ea:60:6a:6b:a8:7d:ef:db: b1:a5:ae:6a:11:fa:c6:5a:38:cd:fb:6d:9a:93:d2: 39:b7:29:42:6a:5a:91:19:2d:22:b3:e2:33:1e:a9: 45:72:f9:44:ac:92:48:fe:1f:e1:2a:00:db:78:13: 08:47:30:57:83:da:6d:85:15:2a:be:ea:fa:87:2a: e7:63:3d:81:67:4a:68:97:22:62:a3:fb:43:ec:8e: 6a:65:07:ae:7d:c6:04:11:f2:df:b2:01:62:6a:ad: a0:46:c3:49:2b:14:2a:3e:32:bc:46:41:09:d6:8e: 23:de:5b:7e:48:79:be:78:6f:cb:d7:2a:c8:81:00: fb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A5:95:74:BC:F4:1F:6E:3D:4A:FF:E7:DD:72:AB:FE:ED:93:C2:E9 X509v3 Authority Key Identifier: keyid:B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:76:8f:c5:ed:20:af:25:3c:83:29:92:d0:05:f8:c4:39:fa: 43:c8:ac:4a:90:8b:f5:0d:d2:ae:59:0c:fa:2c:3e:7e:7e:b1: 35:44:0d:ca:36:4f:3e:2d:a3:d9:ac:61:ca:8f:55:ab:6c:3c: 7b:6e:f7:57:0c:c9:e5:2f:11:29:79:26:af:d4:58:50:ee:d1: 8a:25:0d:eb:02:fd:8a:48:b4:56:81:37:82:12:95:9b:8a:b9: e8:73:8e:ed:19:a2:4c:7f:01:d0:34:17:ae:40:11:ab:c6:96: 32:34:44:e3:38:98:ca:60:fa:a3:cd:ed:2d:88:9b:3a:5d:78: 19:15:a2:3a:04:ae:a6:3a:24:34:11:15:3e:6d:87:a7:44:8c: bf:ce:63:9a:eb:a2:67:d6:21:ef:83:c2:12:35:24:97:a5:93: 11:5f:f7:af:0c:1c:a6:b9:2e:62:2a:9d:68:a7:9d:b1:0b:87: 73:c0:b4:c4:33:a6:1d:0b:39:2c:9f:92:25:36:b4:bc:9a:90: 6b:55:62:fc:4d:85:02:60:65:52:30:4f:95:88:4d:59:5b:97: c3:ba:42:d7:52:71:e6:51:fd:e4:7f:17:73:ca:a1:d3:0a:10: 70:c9:50:90:1b:bc:92:1d:fc:29:c3:f5:59:3a:26:a4:c6:ee: b7:0e:50:6d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0NCNTExMC8GA1UEBRMoQjY4MzQ4QjE5MDcwNjNDMDQ0NDU2OUNFQjIyOEVBNTI0 NkQwMkYxOTAeFw0yNjAzMjYxODEwMzdaFw0yNjA0MDIxODEwMzdaMBgxFjAUBgNV BAMTDTY5YzU3NjlkLWRlZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjldPXkdGJ/BguVOFbnSXjHgOFHRdIHqxTo/JXhQ5iPYRed6guK4iF9zq0vnhD wC4WgSlUFOtXgPLUdoQwP0NhzTn8TtAlMtmR9r27cQdasdXI1q1rKW1EI5lZS3Ux bpGbJ4XVDpf2CY8H+OVPl5q5rrMMdvSn9Lk77Mu/yNDqYGprqH3v27GlrmoR+sZa OM37bZqT0jm3KUJqWpEZLSKz4jMeqUVy+USskkj+H+EqANt4EwhHMFeD2m2FFSq+ 6vqHKudjPYFnSmiXImKj+0PsjmplB659xgQR8t+yAWJqraBGw0krFCo+MrxGQQnW jiPeW35Ieb54b8vXKsiBAPuLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU46WVdLz0 H249Sv/n3XKr/u2TwukwHwYDVR0jBBgwFoAUtoNIsZBwY8BERWnOsijqUkbQLxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzQ0I1L0VEMjI1NTMyQzQz NDExRjBBODI3QTU3REM0RjlBRTAyL3RvTklzWkJ3WThCRVJXbk9zaWpxVWtiUUx4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdG9OSXNaQndZOEJFUlduT3NpanFVa2JRTHhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz Q0I1L0VEMjI1NTMyQzQzNDExRjBBODI3QTU3REM0RjlBRTAyL3RvTklzWkJ3WThC RVJXbk9zaWpxVWtiUUx4ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBPdo/F7SCvJTyDKZLQBfjEOfpDyKxKkIv1DdKuWQz6LD5+frE1RA3KNk8+LaPZ rGHKj1WrbDx7bvdXDMnlLxEpeSav1FhQ7tGKJQ3rAv2KSLRWgTeCEpWbirnoc47t GaJMfwHQNBeuQBGrxpYyNETjOJjKYPqjze0tiJs6XXgZFaI6BK6mOiQ0ERU+bYen RIy/zmOa66Jn1iHvg8ISNSSXpZMRX/evDBymuS5iKp1op52xC4dzwLTEM6YdCzks n5IlNrS8mpBrVWL8TYUCYGVSME+ViE1ZW5fDukLXUnHmUf3kfxdzyqHTChBwyVCQ G7ySHfwpw/VZOiakxu63DlBt -----END CERTIFICATE-----Generated at Thu Mar 26 21:48:59 2026 by rpki-client