$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft File: bz4CYgDVU58n4POqUNMgokUo1X0.mft (raw, json) Hash identifier: b6UHSNu144+kIiM0I3GOoN+99G3o1My5MfWUSS8/3IM= Subject key identifier: C5:5E:84:20:C6:24:FD:E5:DF:99:C6:3C:E5:05:14:57:2B:C6:AD:27 Authority key identifier: 6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D Certificate issuer: /CN=A91B732A/serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft Manifest number: FA Signing time: Wed 25 Mar 2026 05:32:11 +0000 Manifest this update: Wed 25 Mar 2026 05:32:11 +0000 Manifest next update: Wed 01 Apr 2026 05:32:11 +0000 Files and hashes: 1: bz4CYgDVU58n4POqUNMgokUo1X0.crl (hash: KZbes2/mb2yUW6ZDqE+nfCmyg8Vh19ZQ6WlWP4BJKTI=) 2: 31EC2E5CBAAB11EFA97B2C66C4F9AE02.roa (hash: nV38DqB6S2s+obaWtL39HR2W0RXsAZejFz8xEU6bYCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B732A, serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D Validity Not Before: Mar 25 05:32:11 2026 GMT Not After : Apr 1 05:32:11 2026 GMT Subject: CN=69c3735b-9bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:78:01:c9:cb:b8:9b:96:81:a3:73:6a:9c:cd: 48:b1:2b:ea:46:d1:1f:30:58:b6:86:97:87:54:7a: e9:49:b8:a4:f8:31:a3:02:cb:0d:32:06:f1:8c:ff: 66:e1:aa:a5:bd:15:09:86:ae:38:47:d0:64:86:f9: 99:3c:48:18:92:e9:dc:39:36:6d:6b:7d:19:fc:f0: 5e:74:5c:2a:60:bd:aa:e8:fc:01:ad:57:13:46:4d: 9c:b7:23:f4:48:e3:2a:6b:68:35:56:cf:ef:b6:41: 7e:f3:96:4d:13:83:75:64:66:ca:b4:81:ab:92:1f: 99:57:a6:26:71:93:ed:fa:a0:bd:fd:f5:87:95:49: 11:8a:8f:d2:2d:99:b7:d8:9f:85:90:a6:96:e0:3a: e9:61:44:97:5c:1f:41:81:80:a6:94:cc:66:ab:b5: ed:04:7a:fa:ec:2e:81:66:fc:3d:1a:a9:76:9a:59: 2d:bb:e1:3a:9d:94:cd:f2:c6:1b:83:94:ef:a2:4e: 0a:76:1a:8b:fe:48:ff:f0:c9:9e:49:43:ad:69:52: bb:12:0a:36:df:0a:4d:46:e9:3c:89:47:b4:97:61: 3b:f9:d7:9e:1f:dd:26:4b:9e:87:03:8e:e2:95:7c: b0:f9:cb:af:f8:64:e6:9c:ae:a8:d3:0f:54:5f:40: e0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5E:84:20:C6:24:FD:E5:DF:99:C6:3C:E5:05:14:57:2B:C6:AD:27 X509v3 Authority Key Identifier: keyid:6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:55:e3:13:ec:e7:48:fe:7b:13:3e:72:b1:67:2f:34:c7:1c: 21:3c:b9:b4:24:79:d2:19:36:61:5c:89:c8:7f:73:78:2b:63: dd:41:4e:a3:37:72:f7:c9:1e:58:62:d6:fd:aa:58:8b:22:bd: 73:77:be:c3:d8:dd:dc:49:44:93:8d:77:4d:2e:d0:5d:7d:c7: dd:33:13:22:8d:69:1d:76:04:06:42:6b:62:bb:ba:f5:3c:fe: 51:03:87:6e:96:c2:0f:00:a9:a0:a1:85:cd:8d:14:8d:5d:2a: 33:e1:ef:e5:0d:38:4f:31:ac:e9:c3:70:41:56:59:f6:9c:13: bb:ef:c6:7a:4a:fe:ff:e6:61:53:c6:ad:08:6e:6c:42:b2:fc: 84:4b:3a:ec:75:22:d0:ac:1d:56:d8:22:d1:6f:ba:bb:dd:c6: a3:26:85:92:5f:6b:7e:a9:a0:d0:a1:fd:a2:07:3a:22:e8:3e: 75:52:ff:3c:4e:d5:40:32:a5:41:5f:f5:0b:ba:3b:45:f4:3a: db:e1:4d:81:ae:07:d2:90:d3:20:f2:05:50:c5:4c:b8:19:c7: 2d:26:49:48:7e:9a:97:e6:d7:0e:1f:c6:03:52:d9:a1:50:04: 05:25:31:b9:af:92:76:67:97:1b:38:af:c8:7e:48:11:bf:98: a8:b3:01:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjczMkExMTAvBgNVBAUTKDZGM0UwMjYyMDBENTUzOUYyN0UwRjNBQTUwRDMyMEEy NDUyOEQ1N0QwHhcNMjYwMzI1MDUzMjExWhcNMjYwNDAxMDUzMjExWjAYMRYwFAYD VQQDEw02OWMzNzM1Yi05YmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxngBycu4m5aBo3NqnM1IsSvqRtEfMFi2hpeHVHrpSbik+DGjAssNMgbxjP9m 4aqlvRUJhq44R9BkhvmZPEgYkuncOTZta30Z/PBedFwqYL2q6PwBrVcTRk2ctyP0 SOMqa2g1Vs/vtkF+85ZNE4N1ZGbKtIGrkh+ZV6YmcZPt+qC9/fWHlUkRio/SLZm3 2J+FkKaW4DrpYUSXXB9BgYCmlMxmq7XtBHr67C6BZvw9Gql2mlktu+E6nZTN8sYb g5Tvok4KdhqL/kj/8MmeSUOtaVK7Ego23wpNRuk8iUe0l2E7+deeH90mS56HA47i lXyw+cuv+GTmnK6o0w9UX0DgWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMVehCDG JP3l35nGPOUFFFcrxq0nMB8GA1UdIwQYMBaAFG8+AmIA1VOfJ+DzqlDTIKJFKNV9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzMyQS9GRkYyRTZBOEI2 MzAxMUVGQTJEN0ZCNjNDNEY5QUUwMi9iejRDWWdEVlU1OG40UE9xVU5NZ29rVW8x WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2J6NENZZ0RWVTU4bjRQT3FVTk1nb2tVbzFYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzMyQS9GRkYyRTZBOEI2MzAxMUVGQTJEN0ZCNjNDNEY5QUUwMi9iejRDWWdEVlU1 OG40UE9xVU5NZ29rVW8xWDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJlXjE+znSP57Ez5ysWcvNMccITy5tCR50hk2YVyJyH9zeCtj3UFOozdy98ke WGLW/apYiyK9c3e+w9jd3ElEk413TS7QXX3H3TMTIo1pHXYEBkJrYru69Tz+UQOH bpbCDwCpoKGFzY0UjV0qM+Hv5Q04TzGs6cNwQVZZ9pwTu+/Gekr+/+ZhU8atCG5s QrL8hEs67HUi0KwdVtgi0W+6u93GoyaFkl9rfqmg0KH9ogc6Iug+dVL/PE7VQDKl QV/1C7o7RfQ62+FNga4H0pDTIPIFUMVMuBnHLSZJSH6al+bXDh/GA1LZoVAEBSUx ua+SdmeXGzivyH5IEb+YqLMBnQ== -----END CERTIFICATE-----Generated at Thu Mar 26 17:36:36 2026 by rpki-client