$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft File: E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft (raw, json) Hash identifier: Q4CQ5rW+1LrvMlIcU59+WLepE8vzCydg5hweOAWxzP4= Subject key identifier: D8:81:B5:73:9C:C2:6C:8D:F0:3F:C7:6F:E7:DD:48:04:BE:F7:B6:8B Authority key identifier: 13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 Certificate issuer: /CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Certificate serial: 090C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft Manifest number: 0904 Signing time: Thu 26 Mar 2026 20:11:00 +0000 Manifest this update: Thu 26 Mar 2026 20:10:59 +0000 Manifest next update: Thu 02 Apr 2026 20:10:59 +0000 Files and hashes: 1: E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl (hash: hpXzGMESD3oJ9DF8qqajkJ81bpBFOVgqHA5Mk9x0la4=) 2: 3046CBE2C4E811EAB607D255C4F9AE02.roa (hash: 6ncKBCqo1ayjhGZxmAp9UT9uWl983hRZQCjMjOFuhy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 20:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2316 (0x90c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA521, serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Validity Not Before: Mar 26 20:10:59 2026 GMT Not After : Apr 2 20:10:59 2026 GMT Subject: CN=69c592d4-4796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0a:0f:0f:fb:a8:7d:11:d0:2a:99:b7:a9:bc: 1f:62:dc:a1:77:24:38:a1:20:95:77:d0:59:8f:87: 2a:2e:72:d2:8f:7f:fe:db:44:cb:6f:0d:64:29:a2: e8:2a:30:1a:39:1f:6d:ec:e2:78:09:96:d6:ec:36: 55:3a:3a:ac:b3:05:e0:e7:b9:85:b3:8b:3d:9e:2a: 12:d3:ba:f0:e1:9b:88:1e:e6:58:06:fc:e0:64:ee: f0:e5:e0:07:f3:92:b8:06:a1:58:d7:51:fd:4d:e3: 31:95:c4:dc:8f:65:83:9e:e6:2c:0d:a5:dc:7b:bf: 14:ed:ff:17:89:cf:e9:f8:9a:90:2d:ed:53:48:9b: e6:17:0f:ba:a3:a5:36:af:14:09:5c:f5:91:28:e2: ed:53:48:19:89:9f:e2:51:b2:29:dc:6b:70:ef:f4: 3c:1a:6d:3c:11:e7:ae:9d:3d:3f:08:b6:24:92:60: 28:53:e5:d7:a7:81:e7:ca:b2:89:ca:b1:f9:e2:fd: 30:4c:90:4e:72:7b:23:9b:91:f9:6d:ea:0c:f9:8f: aa:b4:3d:68:d2:c0:f3:f8:ba:48:9a:8b:bc:9c:74: 7d:e1:93:db:b0:8a:d1:0a:6d:09:19:f7:e5:05:2f: f7:a1:f0:56:d4:7e:e2:a4:95:6a:e3:7a:f0:ec:ba: c6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:81:B5:73:9C:C2:6C:8D:F0:3F:C7:6F:E7:DD:48:04:BE:F7:B6:8B X509v3 Authority Key Identifier: keyid:13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:21:54:ab:4a:27:58:64:53:49:c6:cf:a1:34:8c:ff:7e:8a: 40:0e:1e:d7:2c:95:7d:d1:3b:20:dd:ab:ae:ae:88:f9:e6:2f: 55:ea:79:a8:37:8d:6c:36:20:b6:ff:21:a1:b8:c9:7d:03:34: c8:7c:d0:14:23:11:ea:34:61:e9:fc:45:d7:6c:ad:5c:55:0d: 3e:98:e4:f0:d6:62:97:4f:87:30:a4:02:7f:65:b5:f4:89:6e: eb:3d:7e:65:68:88:4f:5d:c7:7f:4e:86:50:7d:c7:84:37:f4: d1:35:ad:e1:95:0f:e7:76:72:7b:de:3f:c8:33:14:40:6c:b8: 19:60:53:9c:e8:68:eb:89:06:0d:53:41:07:62:f1:fd:05:9c: ff:59:07:3a:96:a2:33:37:3f:30:67:39:f8:17:92:9c:c1:4b: 24:3c:81:4d:4c:60:18:52:98:c3:76:1a:a0:56:a9:44:2f:7a: 64:e6:5a:d7:f3:6a:c8:b4:ee:63:83:2d:f2:ef:e5:f0:1c:00: 3b:a7:b9:26:c7:d6:a7:bd:9a:b4:b0:98:3f:e4:df:f9:7a:e2: f0:35:d1:7f:d7:23:d7:b5:03:be:5c:38:8d:b9:bd:6a:c7:14: 17:b9:fd:32:33:a0:f7:90:e4:c1:6e:ea:44:c2:c4:4b:c1:3f: 37:b3:35:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1MjExMTAvBgNVBAUTKDEzQ0I5OTM0MUU1NDk3OTJBMEFDMEEzNjYyMjExREUx N0YzNDkzODIwHhcNMjYwMzI2MjAxMDU5WhcNMjYwNDAyMjAxMDU5WjAYMRYwFAYD VQQDEw02OWM1OTJkNC00Nzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3goPD/uofRHQKpm3qbwfYtyhdyQ4oSCVd9BZj4cqLnLSj3/+20TLbw1kKaLo KjAaOR9t7OJ4CZbW7DZVOjqsswXg57mFs4s9nioS07rw4ZuIHuZYBvzgZO7w5eAH 85K4BqFY11H9TeMxlcTcj2WDnuYsDaXce78U7f8Xic/p+JqQLe1TSJvmFw+6o6U2 rxQJXPWRKOLtU0gZiZ/iUbIp3Gtw7/Q8Gm08EeeunT0/CLYkkmAoU+XXp4HnyrKJ yrH54v0wTJBOcnsjm5H5beoM+Y+qtD1o0sDz+LpImou8nHR94ZPbsIrRCm0JGffl BS/3ofBW1H7ipJVq43rw7LrGbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNiBtXOc wmyN8D/Hb+fdSAS+97aLMB8GA1UdIwQYMBaAFBPLmTQeVJeSoKwKNmIhHeF/NJOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTUyMS9DOUZBRTdDQUM0 RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1S2dyQW8yWWlFZDRYODBr NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4dVpOQjVVbDVLZ3JBbzJZaUVkNFg4MGs0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTUyMS9DOUZBRTdDQUM0RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1 S2dyQW8yWWlFZDRYODBrNEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcCFUq0onWGRTScbPoTSM/36KQA4e1yyVfdE7IN2rrq6I+eYvVep5qDeNbDYg tv8hobjJfQM0yHzQFCMR6jRh6fxF12ytXFUNPpjk8NZil0+HMKQCf2W19Ilu6z1+ ZWiIT13Hf06GUH3HhDf00TWt4ZUP53Zye94/yDMUQGy4GWBTnOho64kGDVNBB2Lx /QWc/1kHOpaiMzc/MGc5+BeSnMFLJDyBTUxgGFKYw3YaoFapRC96ZOZa1/NqyLTu Y4Mt8u/l8BwAO6e5JsfWp72atLCYP+Tf+Xri8DXRf9cj17UDvlw4jbm9ascUF7n9 MjOg95DkwW7qRMLES8E/N7M1Ag== -----END CERTIFICATE-----Generated at Sat Mar 28 12:13:07 2026 by rpki-client