$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft File: vO4SgFOJtXjDX9i0JVpggdJoP3w.mft (raw, json) Hash identifier: QcUAYogusvDAbD7nf48lFt7a7W2sQ2Y6LpT6xpGxWBk= Subject key identifier: 10:2E:6E:F2:3E:EC:0D:42:AE:23:91:27:9C:4A:77:DF:20:F5:A0:39 Authority key identifier: BC:EE:12:80:53:89:B5:78:C3:5F:D8:B4:25:5A:60:81:D2:68:3F:7C Certificate issuer: /CN=A91B4B33/serialNumber=BCEE12805389B578C35FD8B4255A6081D2683F7C Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft Manifest number: 0152 Signing time: Wed 25 Mar 2026 04:18:24 +0000 Manifest this update: Wed 25 Mar 2026 04:18:24 +0000 Manifest next update: Wed 01 Apr 2026 04:18:24 +0000 Files and hashes: 1: vO4SgFOJtXjDX9i0JVpggdJoP3w.crl (hash: t44+1v6OD9N/z0lXonpS75/zK66MQKLq8z9ojyHJz2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.crl rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4B33, serialNumber=BCEE12805389B578C35FD8B4255A6081D2683F7C Validity Not Before: Mar 25 04:18:24 2026 GMT Not After : Apr 1 04:18:24 2026 GMT Subject: CN=69c36210-8e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:41:99:62:63:68:42:30:e8:d9:23:3d:0d:e0: 75:65:b5:a5:d9:2d:52:91:0a:bb:46:dc:85:86:fe: 72:14:6a:a1:39:21:e8:ca:53:63:c3:61:b4:b6:46: 44:5c:00:97:1e:d0:83:de:17:f1:8d:1c:3c:0a:46: 22:77:25:47:10:c9:62:f3:e6:e6:18:80:f7:60:32: f0:a5:43:de:fb:93:df:dc:19:9a:a4:b3:c8:4a:ad: 02:60:97:df:02:cb:69:ef:2e:cb:0b:24:f9:0f:9d: 33:20:8e:34:58:be:ce:65:89:21:6a:3e:f4:7a:6c: b4:7a:6c:c4:0f:c6:9d:93:19:11:89:57:b4:cb:4b: 4e:1d:d9:53:5a:89:d4:64:99:33:41:a1:fb:5f:31: 68:c7:24:29:44:22:4c:69:c0:ff:7e:b9:c8:0b:b0: 26:81:16:73:bb:06:a4:e1:76:a1:09:ff:0b:02:ba: 41:d4:0d:73:a1:1c:ec:20:3f:dc:a4:88:4b:cf:d6: ce:4c:bd:3f:d4:00:33:a8:0c:31:f0:eb:57:b4:a8: a9:09:ed:cc:c2:74:d5:99:94:ad:4f:dd:e9:17:f2: b4:43:49:8b:3e:83:76:e3:93:60:ed:d2:cc:54:4c: bc:db:d5:cf:c0:40:e8:b2:9f:18:bf:a3:63:cf:2c: 95:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2E:6E:F2:3E:EC:0D:42:AE:23:91:27:9C:4A:77:DF:20:F5:A0:39 X509v3 Authority Key Identifier: keyid:BC:EE:12:80:53:89:B5:78:C3:5F:D8:B4:25:5A:60:81:D2:68:3F:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:9f:c1:e0:0e:6d:40:06:7b:94:93:5d:76:c8:04:38:37:06: 91:8d:65:14:04:2d:33:eb:bc:62:fd:02:e1:10:67:24:bc:ed: c5:3b:b5:9c:dd:35:da:56:dc:16:b5:27:f7:e1:89:15:3b:2f: a5:ec:3c:66:f5:bf:81:ed:f7:ef:ed:cd:b1:8e:4b:d1:30:ac: 3e:14:e7:6a:d0:9e:2b:b0:bb:3f:bf:b9:ea:cf:19:c4:d7:f8: 6d:ca:12:d8:5f:b7:9b:e6:10:fc:c6:6e:2c:4d:87:72:73:e3: e4:f7:41:b4:e6:d2:43:44:da:32:ba:dd:4b:93:35:1f:07:c7: c0:5f:f7:77:a7:21:7c:a3:fe:57:f6:87:20:ef:65:71:63:b5: 0c:47:03:1e:e3:c2:da:7e:87:50:7b:86:64:1e:41:d7:ab:6e: 10:d5:c8:e8:96:4d:d6:cc:75:4a:51:21:1b:b8:6f:d6:6a:be: b6:77:40:83:f6:92:b1:cc:2f:59:22:f6:9c:dc:8b:ac:df:10: e2:96:ac:06:de:82:d8:4d:f5:58:b7:94:ae:33:ff:3f:70:32: 8e:16:ce:55:46:c8:da:4f:aa:25:3b:77:28:90:fb:e3:d1:38: ef:25:f8:10:49:21:7e:b0:67:9c:3a:6d:cf:b0:f2:24:0e:31: b7:b3:6b:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRCMzMxMTAvBgNVBAUTKEJDRUUxMjgwNTM4OUI1NzhDMzVGRDhCNDI1NUE2MDgx RDI2ODNGN0MwHhcNMjYwMzI1MDQxODI0WhcNMjYwNDAxMDQxODI0WjAYMRYwFAYD VQQDEw02OWMzNjIxMC04ZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUGZYmNoQjDo2SM9DeB1ZbWl2S1SkQq7RtyFhv5yFGqhOSHoylNjw2G0tkZE XACXHtCD3hfxjRw8CkYidyVHEMli8+bmGID3YDLwpUPe+5Pf3BmapLPISq0CYJff Astp7y7LCyT5D50zII40WL7OZYkhaj70emy0emzED8adkxkRiVe0y0tOHdlTWonU ZJkzQaH7XzFoxyQpRCJMacD/frnIC7AmgRZzuwak4XahCf8LArpB1A1zoRzsID/c pIhLz9bOTL0/1AAzqAwx8OtXtKipCe3MwnTVmZStT93pF/K0Q0mLPoN245Ng7dLM VEy829XPwEDosp8Yv6NjzyyVZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBAubvI+ 7A1CriORJ5xKd98g9aA5MB8GA1UdIwQYMBaAFLzuEoBTibV4w1/YtCVaYIHSaD98 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEIzMy8yNDRGODQ5QTIy MUUxMUVGOTM0NEEzMDlDNEY5QUUwMi92TzRTZ0ZPSnRYakRYOWkwSlZwZ2dkSm9Q M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZPNFNnRk9KdFhqRFg5aTBKVnBnZ2RKb1Azdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEIzMy8yNDRGODQ5QTIyMUUxMUVGOTM0NEEzMDlDNEY5QUUwMi92TzRTZ0ZPSnRY akRYOWkwSlZwZ2dkSm9QM3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm5/B4A5tQAZ7lJNddsgEODcGkY1lFAQtM+u8Yv0C4RBnJLztxTu1nN012lbc FrUn9+GJFTsvpew8ZvW/ge337+3NsY5L0TCsPhTnatCeK7C7P7+56s8ZxNf4bcoS 2F+3m+YQ/MZuLE2HcnPj5PdBtObSQ0TaMrrdS5M1HwfHwF/3d6chfKP+V/aHIO9l cWO1DEcDHuPC2n6HUHuGZB5B16tuENXI6JZN1sx1SlEhG7hv1mq+tndAg/aSscwv WSL2nNyLrN8Q4pasBt6C2E31WLeUrjP/P3AyjhbOVUbI2k+qJTt3KJD749E47yX4 EEkhfrBnnDptz7DyJA4xt7NrUQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:35:53 2026 by rpki-client