$ rpki-client -vvf rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft File: fLBjBy0uSJJZhhStW6tT4d6v9wE.mft (raw, json) Hash identifier: esqOnQXoABf0iJH0WnCIL6O5yoiTvjs0fiUqhP+Jm1g= Subject key identifier: 75:D6:56:59:09:61:4F:E2:2C:95:20:29:19:04:1E:18:6D:F6:BB:E7 Authority key identifier: 7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01 Certificate issuer: /CN=A91B994F/serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701 Certificate serial: 089C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft Manifest number: 0891 Signing time: Tue 24 Mar 2026 20:19:21 +0000 Manifest this update: Tue 24 Mar 2026 20:19:20 +0000 Manifest next update: Tue 31 Mar 2026 20:19:20 +0000 Files and hashes: 1: fLBjBy0uSJJZhhStW6tT4d6v9wE.crl (hash: tmOxsR8qD7ZnMdgH7yZi7RutMYY+CZQWF92+PMcOWpo=) 2: 2B24D5DC854511EB9B57240FC4F9AE02.roa (hash: QNcFW8jETPGZaiZI02ZkhuoyJg75vptFUOTMezljxJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2204 (0x89c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B994F, serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701 Validity Not Before: Mar 24 20:19:20 2026 GMT Not After : Mar 31 20:19:20 2026 GMT Subject: CN=69c2f1c8-8f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:63:a0:a2:ee:dc:a2:f3:13:cf:a9:6d:b9:b4: 0b:56:80:29:01:bf:f9:af:b7:af:78:9d:fd:25:f8: 5c:c0:3a:cf:83:42:59:c1:c1:45:a5:7f:6c:05:29: 8c:b0:d3:c4:9d:09:f1:8a:9d:a6:d1:3c:8f:03:fa: f8:eb:b0:70:ca:46:5d:a8:4b:ce:34:a2:9d:d2:3f: 70:e3:33:15:37:8a:6d:5b:ce:1c:29:dc:7a:6d:1a: 65:67:4d:78:24:67:70:0a:a1:f0:df:08:6d:94:a8: 04:16:f9:8b:b9:51:d4:b4:8b:45:76:be:b2:b0:f5: a0:29:8d:8f:a6:31:9f:4d:f3:ca:84:be:c4:66:b7: 5f:47:31:d3:12:ed:e0:c6:5b:86:ef:a0:d6:d4:66: 47:1c:f8:5f:37:f8:94:99:57:f4:48:76:7f:d7:91: 4f:79:67:4e:f6:bd:1b:21:e3:c5:f7:0d:c1:7a:4e: 89:dc:50:72:28:ce:07:f4:da:e5:76:8d:fd:b5:fa: 25:1f:f9:17:a4:09:93:5b:bb:a0:50:e8:8e:bc:c4: 86:ec:88:84:a5:43:34:fd:92:c9:9d:59:ac:3d:57: 7a:65:7c:3a:01:e8:5f:2f:24:94:02:f1:d5:d5:28: 6a:d3:45:45:e2:5a:14:69:24:26:7d:3c:4f:4e:61: a3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D6:56:59:09:61:4F:E2:2C:95:20:29:19:04:1E:18:6D:F6:BB:E7 X509v3 Authority Key Identifier: keyid:7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:83:02:ef:8b:7c:43:82:c6:41:96:54:f8:41:7a:46:b4:c8: 19:de:59:d7:c6:1b:b5:83:aa:41:12:54:4e:2b:22:37:b1:6e: cf:5f:26:e6:be:1c:b5:21:ff:43:a0:86:1d:de:6f:63:9a:69: 52:6f:72:12:5c:9e:bd:a0:76:b7:27:48:bf:2c:ce:4c:d2:d4: 79:d4:5d:cf:1d:b3:99:95:56:0c:2c:1d:a9:29:37:c9:5a:22: a4:98:d3:30:83:4a:34:28:1d:df:7d:66:9b:72:16:08:b0:09: da:1a:6e:ad:b0:b6:ec:88:9d:7c:84:26:8d:32:ab:6f:1f:bd: 19:31:a1:64:60:57:73:63:22:60:4b:f0:c3:00:60:2f:cc:7d: 14:b1:f3:af:c4:55:58:dd:9c:1e:45:dc:23:85:83:fc:4d:8f: 67:b6:13:b6:62:b1:d5:af:24:47:9f:fa:72:56:73:cb:a0:ec: 95:49:22:78:02:5f:8e:dc:51:cd:5d:e4:9e:00:fc:5e:5f:34: b2:d3:cf:f2:bd:f0:7c:19:a1:d9:ef:40:28:40:dd:cc:22:62: f2:a7:43:cc:07:a7:d7:70:67:29:ed:23:a4:c2:3d:4d:48:78: b9:ff:23:b9:e4:5f:c3:68:98:79:fc:67:6d:4c:14:41:f3:42: 77:13:d6:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk5NEYxMTAvBgNVBAUTKDdDQjA2MzA3MkQyRTQ4OTI1OTg2MTRBRDVCQUI1M0Ux REVBRkY3MDEwHhcNMjYwMzI0MjAxOTIwWhcNMjYwMzMxMjAxOTIwWjAYMRYwFAYD VQQDEw02OWMyZjFjOC04ZjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWOgou7covMTz6ltubQLVoApAb/5r7eveJ39JfhcwDrPg0JZwcFFpX9sBSmM sNPEnQnxip2m0TyPA/r467BwykZdqEvONKKd0j9w4zMVN4ptW84cKdx6bRplZ014 JGdwCqHw3whtlKgEFvmLuVHUtItFdr6ysPWgKY2PpjGfTfPKhL7EZrdfRzHTEu3g xluG76DW1GZHHPhfN/iUmVf0SHZ/15FPeWdO9r0bIePF9w3Bek6J3FByKM4H9Nrl do39tfolH/kXpAmTW7ugUOiOvMSG7IiEpUM0/ZLJnVmsPVd6ZXw6AehfLySUAvHV 1Shq00VF4loUaSQmfTxPTmGjiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHXWVlkJ YU/iLJUgKRkEHhht9rvnMB8GA1UdIwQYMBaAFHywYwctLkiSWYYUrVurU+Her/cB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTk0Ri9BQUZEMTRFQ0U1 QTIxMUVBODlBMzYwNkRDNEY5QUUwMi9mTEJqQnkwdVNKSlpoaFN0VzZ0VDRkNnY5 d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMQmpCeTB1U0pKWmhoU3RXNnRUNGQ2djl3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTk0Ri9BQUZEMTRFQ0U1QTIxMUVBODlBMzYwNkRDNEY5QUUwMi9mTEJqQnkwdVNK SlpoaFN0VzZ0VDRkNnY5d0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfYMC74t8Q4LGQZZU+EF6RrTIGd5Z18YbtYOqQRJUTisiN7Fuz18m5r4ctSH/ Q6CGHd5vY5ppUm9yElyevaB2tydIvyzOTNLUedRdzx2zmZVWDCwdqSk3yVoipJjT MINKNCgd331mm3IWCLAJ2hpurbC27IidfIQmjTKrbx+9GTGhZGBXc2MiYEvwwwBg L8x9FLHzr8RVWN2cHkXcI4WD/E2PZ7YTtmKx1a8kR5/6clZzy6DslUkieAJfjtxR zV3kngD8Xl80stPP8r3wfBmh2e9AKEDdzCJi8qdDzAen13BnKe0jpMI9TUh4uf8j ueRfw2iYefxnbUwUQfNCdxPWjw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:33:22 2026 by rpki-client