$ rpki-client -vvf rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft File: MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft (raw, json) Hash identifier: PWV82DzP/kIRgzkwarb1r6YKgfRBiNtAjW/P262z2ME= Subject key identifier: 64:24:AD:4F:4E:BD:3B:F9:0B:C2:B0:60:8A:42:87:77:C0:0F:89:3F Authority key identifier: 32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0 Certificate issuer: /CN=A91B886F/serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft Manifest number: 41 Signing time: Wed 25 Mar 2026 07:36:42 +0000 Manifest this update: Wed 25 Mar 2026 07:36:42 +0000 Manifest next update: Wed 01 Apr 2026 07:36:42 +0000 Files and hashes: 1: MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl (hash: bESred6M8rjPOR20UQBKqN/ra+yl3qZcxtqZZWG3lG4=) 2: 1DB45B20C8ED11F0B740F848C4F9AE02.roa (hash: S989I0Dh1VM/GqYxyKd3cTzapisk/BuvItcPdUyWkEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B886F, serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0 Validity Not Before: Mar 25 07:36:42 2026 GMT Not After : Apr 1 07:36:42 2026 GMT Subject: CN=69c3908a-d252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:33:4f:d0:05:6a:16:be:e2:fa:a6:39:95:9e: 98:fc:df:a9:0c:5b:49:c6:77:82:8c:48:64:ca:8e: c7:46:f1:b0:98:f1:65:8c:6c:82:5f:e3:68:6a:6e: 4e:52:78:4e:5d:c2:f7:0d:47:f1:95:cf:16:6d:7a: 99:ec:a7:33:46:98:f1:80:05:66:75:ab:47:5d:38: cc:40:0b:3a:fe:fb:c9:d2:a8:96:a0:28:0a:dd:52: 9b:96:15:ab:e0:c1:39:db:5e:5a:03:bb:83:48:20: ab:d7:00:8d:95:8f:a9:59:2b:6a:87:67:72:1c:56: e1:b9:37:69:20:53:b4:4c:b2:1a:24:d2:b7:75:68: 0d:ed:42:d1:9d:b4:c9:d2:c9:57:44:b1:ef:27:1f: e9:02:85:37:97:b1:7e:27:2d:c2:7e:8e:b6:68:ba: ae:be:b5:36:cb:79:01:b7:82:ac:cd:03:15:bf:ef: 82:a3:d2:f4:28:3b:ff:cf:21:10:48:3e:6d:eb:d9: 85:c6:1d:be:ca:0c:ea:23:75:c9:a0:ab:cb:e1:6b: 2d:85:9d:47:ec:c0:0e:36:ac:cd:34:04:59:1e:8b: 06:e2:1b:aa:0a:6f:56:8a:37:49:a6:12:28:73:b4: 94:b5:a1:bc:f1:40:fe:8c:47:93:62:bb:2a:e4:59: d0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:24:AD:4F:4E:BD:3B:F9:0B:C2:B0:60:8A:42:87:77:C0:0F:89:3F X509v3 Authority Key Identifier: keyid:32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e8:d3:db:65:ae:54:b8:96:52:47:99:32:7b:64:ce:99:60: df:d5:87:97:e4:13:0b:a9:65:2f:80:72:7c:36:53:5b:9a:fb: 52:e8:27:cf:15:07:02:2d:7b:43:e2:4f:da:ec:2d:c9:0b:f5: ff:8d:e5:bc:82:42:a3:70:16:d7:40:12:cf:fd:13:f4:c8:ef: b8:cb:6b:c7:65:52:63:59:7c:51:f4:3b:34:05:ac:60:46:d8: 11:3e:ec:79:29:56:1a:80:81:5f:bd:c7:39:40:6a:4c:50:29: a2:6f:40:72:b3:4d:4b:6e:06:0e:94:eb:c9:0d:7a:41:10:10: 87:78:3f:35:6c:46:ea:cb:9e:45:d4:ff:e2:92:dc:9e:83:05: 10:26:49:54:12:20:7f:9d:44:96:be:e9:6f:13:e8:ac:bc:e6: 0b:f6:07:f1:a7:2f:18:65:c9:8c:e4:f5:60:1a:36:b4:30:21: df:14:6c:aa:ed:b9:ae:5c:05:8e:5a:c9:f1:1d:5d:26:3a:c4: a6:a0:23:b1:88:fa:89:bb:5d:e2:7c:1b:77:b6:61:cc:e4:21: 62:b5:2a:15:cc:29:f2:71:92:36:fd:2e:c9:17:7c:d7:ed:99: 94:a2:19:85:8e:37:b5:89:e7:e4:d6:f8:31:8b:60:64:05:4c: 3b:97:25:40 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODg2RjExMC8GA1UEBRMoMzI1MzIxOUNCNjBDN0Q5Q0ZBNkU2MzNEQkI0Q0E5NEQ2 ODM5OTJFMDAeFw0yNjAzMjUwNzM2NDJaFw0yNjA0MDEwNzM2NDJaMBgxFjAUBgNV BAMTDTY5YzM5MDhhLWQyNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsM0/QBWoWvuL6pjmVnpj836kMW0nGd4KMSGTKjsdG8bCY8WWMbIJf42hqbk5S eE5dwvcNR/GVzxZtepnspzNGmPGABWZ1q0ddOMxACzr++8nSqJagKArdUpuWFavg wTnbXloDu4NIIKvXAI2Vj6lZK2qHZ3IcVuG5N2kgU7RMshok0rd1aA3tQtGdtMnS yVdEse8nH+kChTeXsX4nLcJ+jrZouq6+tTbLeQG3gqzNAxW/74Kj0vQoO//PIRBI Pm3r2YXGHb7KDOojdcmgq8vhay2FnUfswA42rM00BFkeiwbiG6oKb1aKN0mmEihz tJS1obzxQP6MR5NiuyrkWdCZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZCStT069 O/kLwrBgikKHd8APiT8wHwYDVR0jBBgwFoAUMlMhnLYMfZz6bmM9u0ypTWg5kuAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4ODZGL0YxRjU2N0QwQzhF ODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6NmJtTTl1MHlwVFdnNWt1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWxNaG5MWU1mWno2Ym1NOXUweXBUV2c1a3VBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 ODZGL0YxRjU2N0QwQzhFODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6 NmJtTTl1MHlwVFdnNWt1QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAr6NPbZa5UuJZSR5kye2TOmWDf1YeX5BMLqWUvgHJ8NlNbmvtS6CfPFQcCLXtD 4k/a7C3JC/X/jeW8gkKjcBbXQBLP/RP0yO+4y2vHZVJjWXxR9Ds0BaxgRtgRPux5 KVYagIFfvcc5QGpMUCmib0Bys01LbgYOlOvJDXpBEBCHeD81bEbqy55F1P/iktye gwUQJklUEiB/nUSWvulvE+isvOYL9gfxpy8YZcmM5PVgGja0MCHfFGyq7bmuXAWO WsnxHV0mOsSmoCOxiPqJu13ifBt3tmHM5CFitSoVzCnycZI2/S7JF3zX7ZmUohmF jje1iefk1vgxi2BkBUw7lyVA -----END CERTIFICATE-----Generated at Thu Mar 26 08:31:01 2026 by rpki-client