$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft File: aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft (raw, json) Hash identifier: unZ5075+rgnkRWmGO4+Vpr6O7LbOas2ObC2r5VXbqAU= Subject key identifier: F1:A7:9B:AF:13:32:F0:3A:ED:5E:CC:01:5B:1B:2B:B6:3E:3C:B9:89 Authority key identifier: 69:9F:55:44:D0:78:A9:0A:F5:AA:60:41:2E:1A:D3:F1:FB:DE:4C:D6 Certificate issuer: /CN=A91B9690/serialNumber=699F5544D078A90AF5AA60412E1AD3F1FBDE4CD6 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft Manifest number: 1E Signing time: Wed 25 Mar 2026 08:08:58 +0000 Manifest this update: Wed 25 Mar 2026 08:08:57 +0000 Manifest next update: Wed 01 Apr 2026 08:08:57 +0000 Files and hashes: 1: aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl (hash: qYRTw0ZbPiopOeqMm9DGjj2uJJUVlJOg5IsGaH29nAg=) 2: 131D50EC03B511F1B33AD351023D8C67.roa (hash: 4DVRGZxyRZyMC2zYs9Lj4r2TkOADE/WYrSah7tqHjmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9690, serialNumber=699F5544D078A90AF5AA60412E1AD3F1FBDE4CD6 Validity Not Before: Mar 25 08:08:57 2026 GMT Not After : Apr 1 08:08:57 2026 GMT Subject: CN=69c39819-5170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:00:e5:80:67:fc:a2:b2:44:24:10:83:41:d4: 54:40:e6:44:62:36:d7:7a:e9:a3:d0:b8:fc:7f:31: 88:89:0f:bb:99:ee:d6:66:29:db:df:bb:7f:b2:f2: 2d:31:44:3e:a6:43:c0:62:51:ca:9c:63:f5:df:d8: b4:d4:db:b2:a2:f5:cd:15:64:28:2a:ac:ca:1a:60: a5:28:48:41:b4:6a:56:ed:ea:fc:5b:dc:13:d7:d0: 7f:5d:a0:71:b8:1c:e4:64:a9:94:61:d0:d1:86:29: 5c:11:24:f4:5f:62:75:fe:84:c6:f6:10:67:c2:dc: 07:6b:50:8d:d9:63:2a:28:d8:a9:f4:86:8f:ef:6f: 54:1d:b9:2b:5c:76:a0:f8:22:a0:b2:07:64:5f:d5: 3a:bd:4d:4b:c7:43:e1:de:db:c7:6a:84:ac:29:9a: 99:9a:28:70:82:c8:58:b6:39:10:4a:da:07:69:f3: 13:9a:c8:3c:aa:02:dc:1b:b8:0d:89:fa:01:af:c5: 62:79:77:bc:fc:7b:84:21:36:c2:e0:c8:2e:1f:40: 21:cf:7c:6a:34:5f:1d:e1:37:de:95:5d:7d:81:bf: 24:b8:5e:75:83:e2:cd:52:de:b0:31:dc:eb:b2:c8: 6b:be:b3:e1:4f:8e:ea:d4:00:a7:d1:55:a8:22:6f: e5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A7:9B:AF:13:32:F0:3A:ED:5E:CC:01:5B:1B:2B:B6:3E:3C:B9:89 X509v3 Authority Key Identifier: keyid:69:9F:55:44:D0:78:A9:0A:F5:AA:60:41:2E:1A:D3:F1:FB:DE:4C:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:d8:b6:fa:e0:23:d6:01:62:34:f5:b6:07:15:32:a7:9f:63: 11:08:42:00:4d:f7:6f:27:66:8e:92:29:ef:0a:91:93:ab:0a: e5:4b:39:25:cc:b3:a7:98:6b:2b:1b:9a:65:73:78:e4:e8:6c: d4:27:52:1d:e8:de:31:ca:93:b0:b2:32:9a:73:a7:b6:df:04: b3:7c:c6:d9:bf:37:94:2c:36:06:5c:89:8c:ef:5e:ca:5a:dc: 82:8c:28:b7:bb:62:51:50:60:0c:f6:53:15:04:d1:6d:41:1e: d2:c4:15:18:a5:3d:d1:f5:9f:ab:db:3b:ab:2d:a2:a3:93:dd: 3d:18:35:17:27:71:66:a4:d6:07:b8:e1:2e:19:48:4a:ee:77: e6:d2:81:c5:78:b6:60:93:9c:d4:20:31:7f:4a:e5:55:07:ad: bf:73:71:02:7b:ec:76:17:7d:d7:47:df:8f:0b:05:25:1b:3a: e4:92:e1:42:cc:a6:e6:7f:7b:8b:87:6b:b4:eb:7f:4a:cc:8c: 65:36:1d:66:55:61:d4:8e:31:23:21:58:a2:7a:d0:45:81:62: 14:03:e4:a7:ec:c1:b3:22:a6:f2:e2:c3:01:77:91:1c:c8:84: 59:81:18:c8:ad:e2:69:d4:21:61:2b:1c:d5:b3:2e:98:05:62: ce:96:c7:94 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OTY5MDExMC8GA1UEBRMoNjk5RjU1NDREMDc4QTkwQUY1QUE2MDQxMkUxQUQzRjFG QkRFNENENjAeFw0yNjAzMjUwODA4NTdaFw0yNjA0MDEwODA4NTdaMBgxFjAUBgNV BAMTDTY5YzM5ODE5LTUxNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCKAOWAZ/yiskQkEINB1FRA5kRiNtd66aPQuPx/MYiJD7uZ7tZmKdvfu3+y8i0x RD6mQ8BiUcqcY/Xf2LTU27Ki9c0VZCgqrMoaYKUoSEG0albt6vxb3BPX0H9doHG4 HORkqZRh0NGGKVwRJPRfYnX+hMb2EGfC3AdrUI3ZYyoo2Kn0ho/vb1QduStcdqD4 IqCyB2Rf1Tq9TUvHQ+He28dqhKwpmpmaKHCCyFi2ORBK2gdp8xOayDyqAtwbuA2J +gGvxWJ5d7z8e4QhNsLgyC4fQCHPfGo0Xx3hN96VXX2BvyS4XnWD4s1S3rAx3Ouy yGu+s+FPjurUAKfRVagib+XtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8aebrxMy 8DrtXswBWxsrtj48uYkwHwYDVR0jBBgwFoAUaZ9VRNB4qQr1qmBBLhrT8fveTNYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5NjkwL0E2Njk0QjNDMDNC MzExRjFCRUQ3OTFGMjQxM0Q4QzY3L2FaOVZSTkI0cVFyMXFtQkJMaHJUOGZ2ZVRO WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVo5VlJOQjRxUXIxcW1CQkxoclQ4ZnZlVE5ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5 NjkwL0E2Njk0QjNDMDNCMzExRjFCRUQ3OTFGMjQxM0Q4QzY3L2FaOVZSTkI0cVFy MXFtQkJMaHJUOGZ2ZVROWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC62Lb64CPWAWI09bYHFTKnn2MRCEIATfdvJ2aOkinvCpGTqwrlSzklzLOnmGsr G5plc3jk6GzUJ1Id6N4xypOwsjKac6e23wSzfMbZvzeULDYGXImM717KWtyCjCi3 u2JRUGAM9lMVBNFtQR7SxBUYpT3R9Z+r2zurLaKjk909GDUXJ3FmpNYHuOEuGUhK 7nfm0oHFeLZgk5zUIDF/SuVVB62/c3ECe+x2F33XR9+PCwUlGzrkkuFCzKbmf3uL h2u0639KzIxlNh1mVWHUjjEjIViietBFgWIUA+Sn7MGzIqby4sMBd5EcyIRZgRjI reJp1CFhKxzVsy6YBWLOlseU -----END CERTIFICATE-----Generated at Thu Mar 26 16:42:19 2026 by rpki-client