$ rpki-client -vvf rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft File: 15qMdwXiQZ6rQpU7a8ilcga6xiY.mft (raw, json) Hash identifier: PjSZcpnZhQ8gL/GEFz+GL/Q3bcBwC/PRpQK3oMGqUYs= Subject key identifier: CC:E8:61:DD:9C:10:1E:7A:6A:44:F0:62:25:BF:6D:B4:48:36:FB:7C Authority key identifier: D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26 Certificate issuer: /CN=A91BADCE/serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626 Certificate serial: 0541 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft Manifest number: 0533 Signing time: Tue 24 Mar 2026 23:13:28 +0000 Manifest this update: Tue 24 Mar 2026 23:13:27 +0000 Manifest next update: Tue 31 Mar 2026 23:13:27 +0000 Files and hashes: 1: 15qMdwXiQZ6rQpU7a8ilcga6xiY.crl (hash: CwwZ+knFRkUIFMCmikD/tE5EXN4kLbFeYWvxqGEmUqQ=) 2: 56C4925E3B0711EC9715501EC4F9AE02.roa (hash: 3/W6rA2EZQ9LTmSbpHpq8E02n0iBtefklJIZbF4CvQI=) 3: 4BD423FE3AF911EC918C643AC4F9AE02.roa (hash: OWs47VxIEQ1QhlgbrlxvKW4VXn5SiZ0ruC9D8eNOYWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:13:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1345 (0x541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BADCE, serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626 Validity Not Before: Mar 24 23:13:27 2026 GMT Not After : Mar 31 23:13:27 2026 GMT Subject: CN=69c31a98-4a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3f:0e:6f:c2:1a:aa:95:57:21:85:f7:9b:af: e3:c7:be:da:fb:8a:f0:e6:30:38:56:c9:2e:48:01: b2:c3:6a:ee:20:02:d0:e2:89:97:84:c0:d3:95:ec: 43:b0:06:e1:ec:41:ed:2f:e8:c0:78:a1:8b:ac:e9: 75:3d:60:dd:63:b9:86:0f:ec:c5:6a:05:92:29:b7: f9:16:49:d2:10:ca:4d:f2:ca:65:8e:33:01:10:dd: c3:c6:d9:4e:4e:da:72:79:05:c5:6f:d3:46:bc:08: 48:c6:0a:6f:b1:8f:1a:16:9b:8f:6e:67:5d:41:0c: 61:01:30:b2:2d:85:4f:10:a7:14:52:b5:c5:81:60: 75:5b:2f:8d:80:c5:6e:50:bd:1b:55:e9:d6:b5:56: 2c:46:82:87:4a:ff:b4:af:99:ed:0e:37:61:6f:26: 7c:46:aa:0d:c5:26:60:32:46:a8:6b:e9:26:3b:32: 39:e0:df:46:a6:6f:58:91:bc:9f:3b:ca:33:c7:75: c5:1c:88:e4:a5:a1:1a:32:11:4b:c6:7a:a2:96:c0: 29:1e:11:a2:8a:fe:d6:9f:d7:0b:21:62:9e:d4:d3: 6a:91:92:2c:7f:ec:9c:b4:da:34:05:03:39:83:f2: 07:b7:c0:74:04:86:3d:f8:d7:e0:d8:31:c9:fc:5a: cb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E8:61:DD:9C:10:1E:7A:6A:44:F0:62:25:BF:6D:B4:48:36:FB:7C X509v3 Authority Key Identifier: keyid:D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:aa:8f:1e:34:3d:99:82:79:13:1a:f4:38:28:41:37:23:64: d3:25:f6:37:04:ae:6c:fe:ad:34:ee:fa:43:f3:4a:d4:e5:fc: 9d:2f:8d:5d:7b:ba:fd:89:53:97:71:42:4a:b9:26:dc:7c:ac: ad:68:27:8b:94:96:6b:8b:20:76:5c:fb:8b:09:1f:18:37:fd: 29:55:e6:af:d6:15:81:18:39:40:83:a0:7f:12:d8:93:64:eb: 36:c0:2d:30:84:b7:b1:de:06:76:eb:3d:ea:88:ab:9d:e0:14: e4:5a:92:84:f9:b6:73:69:c6:7b:8e:90:cb:a8:05:fe:dd:b5: 4d:5d:29:b5:bb:aa:55:d6:4a:5e:69:cc:05:31:24:c9:92:c8: 60:21:42:92:e4:89:2c:b4:e8:a0:ec:a1:02:6f:38:fe:44:cf: 19:77:de:8a:08:d7:e6:68:5e:8d:f3:01:b8:05:c0:9d:aa:79: b1:6d:d1:66:7f:82:0a:52:bc:a3:e7:83:1a:01:41:0d:3d:74: d8:56:78:fb:e1:71:a4:21:8c:97:18:c7:80:23:4e:3d:b8:fe: 03:4c:66:c2:7d:e2:9d:1e:c7:cf:3e:e9:9a:44:fe:21:98:2e: 62:3d:58:0b:3d:1c:52:19:fe:4c:bb:f9:d8:f9:0f:e0:40:93: 2e:9b:c2:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFEQ0UxMTAvBgNVBAUTKEQ3OUE4Qzc3MDVFMjQxOUVBQjQyOTUzQjZCQzhBNTcy MDZCQUM2MjYwHhcNMjYwMzI0MjMxMzI3WhcNMjYwMzMxMjMxMzI3WjAYMRYwFAYD VQQDEw02OWMzMWE5OC00YTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqD8Ob8IaqpVXIYX3m6/jx77a+4rw5jA4VskuSAGyw2ruIALQ4omXhMDTlexD sAbh7EHtL+jAeKGLrOl1PWDdY7mGD+zFagWSKbf5FknSEMpN8spljjMBEN3DxtlO TtpyeQXFb9NGvAhIxgpvsY8aFpuPbmddQQxhATCyLYVPEKcUUrXFgWB1Wy+NgMVu UL0bVenWtVYsRoKHSv+0r5ntDjdhbyZ8RqoNxSZgMkaoa+kmOzI54N9Gpm9Ykbyf O8ozx3XFHIjkpaEaMhFLxnqilsApHhGiiv7Wn9cLIWKe1NNqkZIsf+yctNo0BQM5 g/IHt8B0BIY9+Nfg2DHJ/FrLTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMzoYd2c EB56akTwYiW/bbRINvt8MB8GA1UdIwQYMBaAFNeajHcF4kGeq0KVO2vIpXIGusYm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQURDRS8wRjcyODFCQzNB RjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFaNnJRcFU3YThpbGNnYTZ4 aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1cU1kd1hpUVo2clFwVTdhOGlsY2dhNnhpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QURDRS8wRjcyODFCQzNBRjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFa NnJRcFU3YThpbGNnYTZ4aVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALKqPHjQ9mYJ5Exr0OChBNyNk0yX2NwSubP6tNO76Q/NK1OX8nS+NXXu6/YlT l3FCSrkm3HysrWgni5SWa4sgdlz7iwkfGDf9KVXmr9YVgRg5QIOgfxLYk2TrNsAt MIS3sd4Gdus96oirneAU5FqShPm2c2nGe46Qy6gF/t21TV0ptbuqVdZKXmnMBTEk yZLIYCFCkuSJLLTooOyhAm84/kTPGXfeigjX5mhejfMBuAXAnap5sW3RZn+CClK8 o+eDGgFBDT102FZ4++FxpCGMlxjHgCNOPbj+A0xmwn3inR7Hzz7pmkT+IZguYj1Y Cz0cUhn+TLv52PkP4ECTLpvCRw== -----END CERTIFICATE-----Generated at Thu Mar 26 08:52:27 2026 by rpki-client