$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft File: F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft (raw, json) Hash identifier: 0uBPEn7bF1SvhRzDWhMkUFgA8THkRULDj/dzjCxdMYQ= Subject key identifier: 32:DE:87:07:0A:C1:54:83:64:F7:E4:B1:82:31:96:60:2C:E8:5C:BA Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 Certificate issuer: /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Certificate serial: 09A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft Manifest number: 1A81 Signing time: Tue 24 Mar 2026 17:08:56 +0000 Manifest this update: Tue 24 Mar 2026 17:08:55 +0000 Manifest next update: Tue 31 Mar 2026 17:08:55 +0000 Files and hashes: 1: F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl (hash: Xb/8/Ids7/xVJP3NJbWUe7lJxRyOk1dRbTMxFpup/oE=) 2: 3B4BB0AAFF8111F0BED16FE95C6F56BC.roa (hash: xT4ltQ0fqXtOZbKoSwpsdMTsY3mOeI0/8WHutWp7LmI=) 3: C3D424C4F4F611F0B230A1D14E6F56BC.roa (hash: egk9xsmfxgJd9+6b30PcTbtfCGdbVQzHasvNcINufMc=) 4: 42BEF0C6965A11F089F1E151C4F9AE02.roa (hash: /fSSOJI7jFisIiwSV1Hdvr6sWlr18P2YAd74KzyYiiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:08:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2467 (0x9a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Validity Not Before: Mar 24 17:08:55 2026 GMT Not After : Mar 31 17:08:55 2026 GMT Subject: CN=69c2c528-e10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7d:04:da:5b:05:02:e7:37:05:8d:79:e6:4b: 59:8e:dc:c5:74:ea:7e:83:4e:48:aa:04:65:aa:9c: c6:8f:fd:06:66:3b:71:0c:f9:22:34:36:b3:53:7c: ba:b9:5c:88:d9:c1:6f:43:70:67:bb:4f:71:10:df: f1:02:bc:02:23:e1:32:9e:f8:9b:83:82:10:9b:d8: 04:d4:e8:77:1e:2b:6b:09:b1:b1:86:a3:63:52:f6: 44:7e:af:68:07:40:58:00:02:1b:00:f6:99:b8:5d: 7c:28:c8:34:fe:c3:a8:c4:f8:2a:9e:20:19:19:9f: 54:b7:9d:4f:0a:3a:a5:47:8d:d3:18:7b:3b:0e:3f: 13:57:51:67:fa:8b:0f:aa:b1:33:31:70:98:f5:a2: c0:d0:81:5b:17:bf:92:c9:69:6e:4c:52:a8:ac:ad: 96:b0:5b:ff:10:e2:47:0a:02:fe:2e:7f:4d:31:de: 49:93:c1:ef:70:e6:24:38:1e:f7:13:f4:5e:8f:0e: 72:7c:2c:98:93:ef:59:db:ec:aa:8b:ef:71:61:0d: 30:b4:91:87:c8:5f:61:89:22:8a:6f:0c:a9:43:c4: e2:db:97:7e:db:9c:1b:0b:e8:da:9f:d2:68:eb:05: f0:4b:df:58:a5:46:8f:ff:40:6c:be:9b:69:aa:07: 2b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DE:87:07:0A:C1:54:83:64:F7:E4:B1:82:31:96:60:2C:E8:5C:BA X509v3 Authority Key Identifier: keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:d8:c9:a4:0a:7e:c3:7a:45:17:ff:9c:d0:6d:18:f6:4e:a2: 35:70:f3:29:6a:06:61:04:79:68:a8:83:6d:69:84:8b:02:60: e3:42:82:7e:ac:c5:6c:a7:79:56:5f:7d:d2:6f:98:92:bb:d1: 54:e3:15:a6:b7:cb:37:54:6b:49:c9:3d:f9:32:02:d3:36:99: cf:7c:b9:b8:97:6f:31:6d:a1:62:5e:70:55:67:88:66:c1:48: 9a:33:39:08:10:9f:6c:91:c0:da:52:ad:df:d0:17:30:76:ce: 4b:f2:f1:17:02:5e:88:b0:bc:e9:60:f4:bb:bb:a6:fd:67:e6: 7e:5b:8a:68:62:ea:c8:c1:ef:98:25:d5:03:34:6a:38:74:96: db:0a:cb:c7:19:8d:55:1b:e7:cb:1f:cf:fc:b2:16:3b:bb:25: 9d:d2:d7:63:ab:1a:23:e8:a0:df:99:0a:40:a0:ef:b8:8b:93: 9d:fd:ac:a5:b5:93:6a:de:21:f1:be:cd:d1:3b:52:f7:b7:c0: fb:f6:45:fd:4e:d2:b8:26:73:ae:37:15:f3:26:be:80:c6:e1: 66:96:3d:99:21:d1:d9:1a:9f:2b:95:78:7a:58:f9:31:ab:04: 91:4c:63:25:75:7f:7d:03:91:67:ba:8a:03:95:af:7e:16:35: 6b:63:09:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKDE3ODE3Q0I4Mjg5MjMxQjQ3MDdFOUQ1QjQwNkQ1OEFG Rjc5RDFFMDEwHhcNMjYwMzI0MTcwODU1WhcNMjYwMzMxMTcwODU1WjAYMRYwFAYD VQQDEw02OWMyYzUyOC1lMTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq30E2lsFAuc3BY155ktZjtzFdOp+g05IqgRlqpzGj/0GZjtxDPkiNDazU3y6 uVyI2cFvQ3Bnu09xEN/xArwCI+Eynvibg4IQm9gE1Oh3HitrCbGxhqNjUvZEfq9o B0BYAAIbAPaZuF18KMg0/sOoxPgqniAZGZ9Ut51PCjqlR43TGHs7Dj8TV1Fn+osP qrEzMXCY9aLA0IFbF7+SyWluTFKorK2WsFv/EOJHCgL+Ln9NMd5Jk8HvcOYkOB73 E/Rejw5yfCyYk+9Z2+yqi+9xYQ0wtJGHyF9hiSKKbwypQ8Ti25d+25wbC+jan9Jo 6wXwS99YpUaP/0BsvptpqgcrEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDLehwcK wVSDZPfksYIxlmAs6Fy6MB8GA1UdIwQYMBaAFBeBfLgokjG0cH6dW0BtWK/3nR4B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01iUndmcDFiUUcxWXJfZWRI Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0Rjh1Q2lTTWJSd2ZwMWJRRzFZcl9lZEhnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01i UndmcDFiUUcxWXJfZWRIZ0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYNjJpAp+w3pFF/+c0G0Y9k6iNXDzKWoGYQR5aKiDbWmEiwJg40KCfqzFbKd5 Vl990m+YkrvRVOMVprfLN1RrSck9+TIC0zaZz3y5uJdvMW2hYl5wVWeIZsFImjM5 CBCfbJHA2lKt39AXMHbOS/LxFwJeiLC86WD0u7um/WfmfluKaGLqyMHvmCXVAzRq OHSW2wrLxxmNVRvnyx/P/LIWO7slndLXY6saI+ig35kKQKDvuIuTnf2spbWTat4h 8b7N0TtS97fA+/ZF/U7SuCZzrjcV8ya+gMbhZpY9mSHR2RqfK5V4elj5MasEkUxj JXV/fQORZ7qKA5WvfhY1a2MJdQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:55:40 2026 by rpki-client