$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft File: g1GgqJRYpHQmpXCgKQH45lQuguI.mft (raw, json) Hash identifier: 9wlhF2l7f03MZtW7dbcUD2qKBCUlKtMK38MJ7zm/5UY= Subject key identifier: E8:E5:4B:4D:EC:30:F4:69:D0:25:4F:CD:C8:35:55:DD:8D:48:66:DB Authority key identifier: 83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2 Certificate issuer: /CN=A91B7D3D/serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2 Certificate serial: 04EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft Manifest number: 04D3 Signing time: Tue 24 Mar 2026 23:35:03 +0000 Manifest this update: Tue 24 Mar 2026 23:35:03 +0000 Manifest next update: Tue 31 Mar 2026 23:35:03 +0000 Files and hashes: 1: g1GgqJRYpHQmpXCgKQH45lQuguI.crl (hash: YeF59sU3DJy+U66nKaWDgZERF23vQ6R6VlEMY1wDn84=) 2: D516EA2AA1E611EDABFD7D7FC4F9AE02.roa (hash: vxznBiBVR6YDAJK7LuojHusJdEYCXrwVVLv7TWoRtB8=) 3: D3E15ECEA1E611EDABFD7D7FC4F9AE02.roa (hash: kPi4zM9MhBs1Z7XrTJy2yFMDPKRgd24Q9Ibk3GjMnUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1258 (0x4ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7D3D, serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2 Validity Not Before: Mar 24 23:35:03 2026 GMT Not After : Mar 31 23:35:03 2026 GMT Subject: CN=69c31fa7-56b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:3d:38:42:fa:ac:f2:51:ef:50:13:50:3d:67: f1:4c:1a:86:04:f9:a3:be:c7:5b:66:56:5a:bd:c2: 46:ea:c7:b0:44:31:81:aa:5a:99:5f:3e:20:d0:09: d9:12:7d:07:a9:13:7d:a1:88:c8:06:70:2d:b6:62: f8:fe:aa:66:b5:07:5e:90:4f:e2:79:9c:63:21:4d: c4:4e:a0:73:28:95:39:ef:7b:b7:1c:65:8c:75:90: 27:8c:f5:0e:05:a0:93:ed:3a:7e:45:e3:83:03:6f: 64:c2:ab:b3:68:82:c1:ae:e8:bb:36:ec:dd:2d:64: 8c:e6:14:f1:a1:59:67:c4:f7:a6:2c:86:c5:02:14: 63:a7:73:e4:e6:61:a1:ca:b3:84:3e:db:c3:47:b6: 1a:68:c5:9c:c5:9f:26:cf:45:a0:9e:32:7b:65:e4: 7b:67:f3:8e:88:28:0d:69:3b:2a:89:e0:b1:bd:b7: 27:5b:9f:29:d9:b0:b4:a0:1c:b8:55:4a:d7:63:d2: 88:29:da:b6:0b:4a:a3:65:22:9f:27:29:15:d7:4f: 2e:fb:04:ef:9d:43:2d:15:65:a5:10:3b:92:b2:21: b9:22:38:0f:4c:cb:c9:48:ee:4b:b6:b1:e2:38:42: 30:ca:39:fe:bd:70:0f:5c:f1:fa:a8:9d:cd:cc:f4: ad:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E5:4B:4D:EC:30:F4:69:D0:25:4F:CD:C8:35:55:DD:8D:48:66:DB X509v3 Authority Key Identifier: keyid:83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ec:23:59:73:75:fc:dd:35:0e:c9:4c:cd:22:10:f3:7b:17:ae: 36:c5:3c:f2:3c:a0:a6:71:ba:e9:53:d7:65:3c:41:71:c8:6b: 67:db:05:58:6f:80:ca:6c:e2:d2:5f:90:81:0d:6c:15:0d:f3: e9:df:b0:a3:67:ed:28:d9:db:bc:d4:ea:e0:6a:0d:a5:ae:80: f3:34:9c:05:6e:0a:84:3e:ea:6c:bb:93:a0:c2:03:41:7c:50: ff:4c:27:23:93:2a:4a:82:1b:e9:7c:38:53:31:52:ce:c7:5b: 62:3e:19:58:00:db:d4:f5:ff:a0:18:26:c5:d7:20:1b:dc:71: cd:20:82:72:1a:23:cd:ba:0f:46:b4:39:95:47:7a:c8:4f:9f: ea:8f:ad:29:db:6b:d2:ee:da:d9:6f:42:81:51:e2:68:73:47: ac:1c:53:83:bb:3b:31:b7:29:80:d8:a2:09:b0:2a:d8:20:9f: 51:69:c1:d8:d7:a5:6a:a7:48:22:45:1f:6c:06:85:8b:6e:7b: 4c:51:41:b4:23:eb:71:a0:8f:b0:bb:79:65:57:3e:01:11:d2: d3:d0:5d:66:d1:45:12:55:46:f3:8b:fc:3f:ee:c3:e2:d6:cc: 8f:44:30:30:ca:61:c2:82:0a:cc:08:83:bb:d6:29:71:75:35: da:de:02:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdEM0QxMTAvBgNVBAUTKDgzNTFBMEE4OTQ1OEE0NzQyNkE1NzBBMDI5MDFGOEU2 NTQyRTgyRTIwHhcNMjYwMzI0MjMzNTAzWhcNMjYwMzMxMjMzNTAzWjAYMRYwFAYD VQQDEw02OWMzMWZhNy01NmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+T04Qvqs8lHvUBNQPWfxTBqGBPmjvsdbZlZavcJG6sewRDGBqlqZXz4g0AnZ En0HqRN9oYjIBnAttmL4/qpmtQdekE/ieZxjIU3ETqBzKJU573u3HGWMdZAnjPUO BaCT7Tp+ReODA29kwquzaILBrui7NuzdLWSM5hTxoVlnxPemLIbFAhRjp3Pk5mGh yrOEPtvDR7YaaMWcxZ8mz0WgnjJ7ZeR7Z/OOiCgNaTsqieCxvbcnW58p2bC0oBy4 VUrXY9KIKdq2C0qjZSKfJykV108u+wTvnUMtFWWlEDuSsiG5IjgPTMvJSO5LtrHi OEIwyjn+vXAPXPH6qJ3NzPSt8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOjlS03s MPRp0CVPzcg1Vd2NSGbbMB8GA1UdIwQYMBaAFINRoKiUWKR0JqVwoCkB+OZULoLi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0QzRC8yMzNDMEI0NjYz QkMxMUVDOEI4QzgzMkFDNEY5QUUwMi9nMUdncUpSWXBIUW1wWENnS1FINDVsUXVn dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxR2dxSlJZcEhRbXBYQ2dLUUg0NWxRdWd1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0QzRC8yMzNDMEI0NjYzQkMxMUVDOEI4QzgzMkFDNEY5QUUwMi9nMUdncUpSWXBI UW1wWENnS1FINDVsUXVndUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA7CNZc3X83TUOyUzNIhDzexeuNsU88jygpnG66VPXZTxBcchrZ9sFWG+Aymzi 0l+QgQ1sFQ3z6d+wo2ftKNnbvNTq4GoNpa6A8zScBW4KhD7qbLuToMIDQXxQ/0wn I5MqSoIb6Xw4UzFSzsdbYj4ZWADb1PX/oBgmxdcgG9xxzSCCchojzboPRrQ5lUd6 yE+f6o+tKdtr0u7a2W9CgVHiaHNHrBxTg7s7MbcpgNiiCbAq2CCfUWnB2NelaqdI IkUfbAaFi257TFFBtCPrcaCPsLt5ZVc+ARHS09BdZtFFElVG84v8P+7D4tbMj0Qw MMphwoIKzAiDu9YpcXU12t4CCg== -----END CERTIFICATE-----Generated at Thu Mar 26 17:25:25 2026 by rpki-client