$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft File: bRscXsmpziDouF2j9sHjzdQu-Dk.mft (raw, json) Hash identifier: 9lIJjYzmc/VVG6KF+z6bQONKKNNGIkbdAzYU0P4uQF0= Subject key identifier: 0E:52:3E:F3:F4:7B:2D:5D:AE:99:7E:B5:BE:48:0C:45:7E:E7:80:A8 Authority key identifier: 6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39 Certificate issuer: /CN=A91B4378/serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft Manifest number: 36 Signing time: Wed 25 Mar 2026 07:46:45 +0000 Manifest this update: Wed 25 Mar 2026 07:46:45 +0000 Manifest next update: Wed 01 Apr 2026 07:46:45 +0000 Files and hashes: 1: bRscXsmpziDouF2j9sHjzdQu-Dk.crl (hash: /aLhzzaCwCvP/V0Oss/BP6zMu6nWOOXyjc88NFW0eAA=) 2: 21656302D9A211F09604B56168D3641D.roa (hash: J7YgpNqOcaYjOCo1OiB0WdtVs6cboNKClgYeNKdHnYI=) 3: D106F48C1D1911F19643AB4F103D8C67.roa (hash: Vnwa52V2rw4iQn/D3rDg54HehQEyfCOLvGurPGwR3Vs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4378, serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839 Validity Not Before: Mar 25 07:46:45 2026 GMT Not After : Apr 1 07:46:45 2026 GMT Subject: CN=69c392e5-ddd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:01:54:28:12:0a:1c:a2:bf:bb:b8:a9:e4:c4: 34:38:09:0c:fb:b3:ef:ee:2b:cf:1c:34:83:f3:8c: d7:a2:85:4f:92:17:ff:91:9a:1b:b7:14:23:20:3d: 87:42:16:55:68:98:18:ad:1f:89:d8:a4:41:f0:e8: 37:5e:49:e1:4c:45:75:f6:0d:90:82:d4:73:be:e3: a1:3a:c9:8f:aa:fc:f3:fa:0b:43:f4:11:24:e9:ed: 72:4c:07:73:10:0c:46:58:96:66:6b:da:b5:6f:4c: 65:94:c7:d5:d4:a3:cc:37:74:b4:1e:9f:b3:fd:e0: 15:c8:bf:59:b6:68:49:29:ab:49:10:ad:8f:91:9a: 28:ff:f3:b8:41:e3:54:2e:38:1c:4d:76:4e:97:f0: 6f:9e:0f:af:c2:48:fd:76:f9:1c:f5:0a:bb:4f:8a: 88:bd:f9:b0:8f:94:c6:de:37:8a:2e:37:f1:38:d0: f6:2d:74:83:4b:ad:eb:f9:9c:fd:5c:ab:47:b8:8e: 27:a4:7f:e5:52:d6:35:e3:bd:be:84:eb:90:3f:b4: cf:19:2e:51:e6:11:0b:d8:76:79:aa:7c:bd:ef:ed: 72:bf:11:ed:39:58:d6:01:68:d4:df:39:34:22:d6: 28:99:04:6b:64:dd:42:c1:30:ec:73:4e:2e:02:34: 51:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:52:3E:F3:F4:7B:2D:5D:AE:99:7E:B5:BE:48:0C:45:7E:E7:80:A8 X509v3 Authority Key Identifier: keyid:6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4f:31:eb:90:06:3e:1e:e2:98:13:d4:55:f8:35:7e:b3:2a: b7:aa:0a:b8:fe:ec:cd:7c:53:81:0f:9d:72:4b:4b:7f:07:52: 59:a3:62:24:3f:f5:1c:d3:de:03:fd:aa:28:43:4c:2a:d7:28: 64:ce:af:ce:86:66:23:e5:2e:cd:98:f1:bb:64:f3:12:76:7e: ac:ce:10:5c:e2:3d:b5:ba:01:f3:cd:5e:39:cd:26:d1:ea:7a: 68:76:cf:58:73:d4:88:75:1f:0a:96:e0:2e:8f:3c:e3:4a:ba: 5b:7d:8a:75:24:84:ba:fa:db:16:72:f3:8b:30:98:55:5b:e0: 77:0d:0e:86:12:91:41:a1:27:ee:51:c3:eb:3c:4f:dd:9e:b2: 99:5c:88:ea:77:14:03:1b:be:4e:31:9d:68:16:58:75:41:7a: f5:58:6d:c8:91:c3:28:4e:9d:be:0e:e4:5c:42:0b:5c:e3:10: 4f:85:5d:f6:1e:dd:ad:5d:bc:f5:03:0b:5d:e3:29:8d:d5:b3: 78:67:42:5d:04:16:eb:e7:fb:56:90:bb:62:6d:0d:be:68:55: 9f:e3:c7:4c:97:9d:9e:f3:b0:05:aa:bb:cd:3f:fb:f5:cf:c2: 76:60:53:d9:d6:40:96:c6:e2:2a:de:14:a3:a0:c4:65:c6:10: 6b:47:53:25 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDM3ODExMC8GA1UEBRMoNkQxQjFDNUVDOUE5Q0UyMEU4Qjg1REEzRjZDMUUzQ0RE NDJFRjgzOTAeFw0yNjAzMjUwNzQ2NDVaFw0yNjA0MDEwNzQ2NDVaMBgxFjAUBgNV BAMTDTY5YzM5MmU1LWRkZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMAVQoEgocor+7uKnkxDQ4CQz7s+/uK88cNIPzjNeihU+SF/+Rmhu3FCMgPYdC FlVomBitH4nYpEHw6DdeSeFMRXX2DZCC1HO+46E6yY+q/PP6C0P0ESTp7XJMB3MQ DEZYlmZr2rVvTGWUx9XUo8w3dLQen7P94BXIv1m2aEkpq0kQrY+Rmij/87hB41Qu OBxNdk6X8G+eD6/CSP12+Rz1CrtPioi9+bCPlMbeN4ouN/E40PYtdINLrev5nP1c q0e4jiekf+VS1jXjvb6E65A/tM8ZLlHmEQvYdnmqfL3v7XK/Ee05WNYBaNTfOTQi 1iiZBGtk3ULBMOxzTi4CNFHJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDlI+8/R7 LV2umX61vkgMRX7ngKgwHwYDVR0jBBgwFoAUbRscXsmpziDouF2j9sHjzdQu+Dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0Mzc4L0Y2MjkxNDhDRDlB MDExRjA5QTBGQjAxNzY4RDM2NDFEL2JSc2NYc21wemlEb3VGMmo5c0hqemRRdS1E ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYlJzY1hzbXB6aURvdUYyajlzSGp6ZFF1LURrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 Mzc4L0Y2MjkxNDhDRDlBMDExRjA5QTBGQjAxNzY4RDM2NDFEL2JSc2NYc21wemlE b3VGMmo5c0hqemRRdS1Eay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAtTzHrkAY+HuKYE9RV+DV+syq3qgq4/uzNfFOBD51yS0t/B1JZo2IkP/Uc094D /aooQ0wq1yhkzq/OhmYj5S7NmPG7ZPMSdn6szhBc4j21ugHzzV45zSbR6npods9Y c9SIdR8KluAujzzjSrpbfYp1JIS6+tsWcvOLMJhVW+B3DQ6GEpFBoSfuUcPrPE/d nrKZXIjqdxQDG75OMZ1oFlh1QXr1WG3IkcMoTp2+DuRcQgtc4xBPhV32Ht2tXbz1 Awtd4ymN1bN4Z0JdBBbr5/tWkLtibQ2+aFWf48dMl52e87AFqrvNP/v1z8J2YFPZ 1kCWxuIq3hSjoMRlxhBrR1Ml -----END CERTIFICATE-----Generated at Thu Mar 26 11:31:26 2026 by rpki-client