$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft File: 72Z43AzrNBQcZKGKskv4bKsvvTU.mft (raw, json) Hash identifier: RJAN4xfwZ/MOJ3fkFENNnAYj88QAKBJwoDCB6OCWvg8= Subject key identifier: 74:BC:F6:B0:85:B9:CD:69:C3:E8:D6:83:E4:91:1D:E2:1D:EF:2C:35 Authority key identifier: EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35 Certificate issuer: /CN=A91BAE34/serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35 Certificate serial: 055F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft Manifest number: 054B Signing time: Thu 26 Mar 2026 23:15:12 +0000 Manifest this update: Thu 26 Mar 2026 23:15:11 +0000 Manifest next update: Thu 02 Apr 2026 23:15:11 +0000 Files and hashes: 1: 72Z43AzrNBQcZKGKskv4bKsvvTU.crl (hash: P3QFd8LV/lu0YfsA/sM8Js24UKrZabu2fiEn/nF/9Rk=) 2: DCEF2F3CFFD611EFA348445FC4F9AE02.roa (hash: p1NQ7IGWXi2y1DBETkDK+FOB7oMxD5FL9+3PQ1j1/As=) 3: 7AAFF88446BA11ECB8463B6AC4F9AE02.roa (hash: n4tuVdk3omfSB8XzyCrNJHNaBap0wt8tJ/fhHnIddvI=) 4: EEBE377430C411ECBC8D1E20C4F9AE02.roa (hash: nNfdgdLoLhr6Vy9d41UW1l+EsR1U5EgpKmeHjbrVZXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 23:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1375 (0x55f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE34, serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35 Validity Not Before: Mar 26 23:15:11 2026 GMT Not After : Apr 2 23:15:11 2026 GMT Subject: CN=69c5be00-7621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:00:46:2f:c1:e2:d5:56:50:0c:3c:62:36:ec: dd:f9:53:ba:7c:ac:45:5e:76:bf:1e:11:78:44:b9: 41:37:8a:5b:49:32:e5:bb:62:28:4f:83:92:ed:4f: dd:d7:4b:db:ea:e9:4b:59:e1:e2:0c:bf:2b:ac:d0: 37:4d:1b:2b:0a:2f:37:6f:c3:a4:a9:6a:49:5d:fa: 6e:04:63:e6:ba:fb:10:13:fd:6b:61:b6:04:ec:df: 1f:e7:76:1f:ad:cc:33:35:12:33:20:a2:27:2d:ff: ce:79:10:36:58:32:ac:fb:1e:ad:e2:06:42:8c:81: bc:30:59:fc:d4:69:af:61:d2:37:bc:fb:22:9d:2c: 05:ff:0b:b0:f7:91:b2:b3:7d:7e:c9:56:ec:22:26: 00:66:9f:15:f0:44:f0:94:98:98:a6:f1:35:25:fe: 49:32:1e:c3:29:57:30:07:eb:a5:26:39:9b:ec:1a: 69:5c:3a:45:9c:cf:2b:57:f0:62:d3:bd:7a:16:34: 85:75:63:fa:81:36:f8:40:b8:3e:51:ae:04:c7:85: 4c:d4:c0:22:66:a9:61:ee:55:b3:3e:84:5b:7d:50: cb:46:2e:50:38:dd:cc:6d:6d:06:89:93:a1:83:71: 4c:cb:56:64:59:1d:b4:ae:df:18:6a:78:87:b3:d5: 55:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:BC:F6:B0:85:B9:CD:69:C3:E8:D6:83:E4:91:1D:E2:1D:EF:2C:35 X509v3 Authority Key Identifier: keyid:EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:f6:7c:a8:ca:17:e9:c6:ac:7d:e4:27:6c:32:aa:ad:69:d4: dc:e5:dc:fc:f7:c1:95:1c:ff:f3:c4:5c:7b:39:de:ca:d4:1e: 47:e0:4d:50:e6:69:65:2b:37:61:3a:9c:c2:05:2e:b7:1f:17: c2:39:a4:7d:fc:01:d3:d1:e7:44:03:44:93:38:88:66:2b:ce: 01:3a:11:ac:21:0e:56:5b:70:68:84:bf:4c:c3:da:b8:49:73: ea:ab:2b:8d:20:e7:0e:68:70:4b:62:d9:52:d4:0b:5e:e5:f5: 8e:02:ad:fe:71:61:66:a8:a4:b3:1f:45:45:86:6e:d4:7f:f0: cd:a4:45:e9:d1:00:07:0e:b7:7f:54:2f:39:34:be:69:af:16: 88:a9:72:c0:e3:fb:cf:2c:57:d2:b0:4d:79:91:b2:2e:63:92: ee:86:bf:04:15:61:57:d4:46:ba:28:90:5a:a1:5e:4d:f7:24: c1:d4:e7:90:c8:45:08:98:db:0e:fa:7d:1a:a8:c8:da:7e:e6: 53:6d:67:70:cf:fb:e7:ac:29:bc:94:25:85:a5:12:f7:08:77: 62:63:4f:e2:11:92:cd:11:9f:10:cc:13:aa:6c:2f:fc:c9:7d: fe:4c:5e:50:64:2c:7a:18:41:2b:f6:10:f8:c7:23:42:a5:a4: 8f:f7:96:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMzQxMTAvBgNVBAUTKEVGNjY3OERDMENFQjM0MTQxQzY0QTE4QUIyNEJGODZD QUIyRkJEMzUwHhcNMjYwMzI2MjMxNTExWhcNMjYwNDAyMjMxNTExWjAYMRYwFAYD VQQDEw02OWM1YmUwMC03NjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvABGL8Hi1VZQDDxiNuzd+VO6fKxFXna/HhF4RLlBN4pbSTLlu2IoT4OS7U/d 10vb6ulLWeHiDL8rrNA3TRsrCi83b8OkqWpJXfpuBGPmuvsQE/1rYbYE7N8f53Yf rcwzNRIzIKInLf/OeRA2WDKs+x6t4gZCjIG8MFn81GmvYdI3vPsinSwF/wuw95Gy s31+yVbsIiYAZp8V8ETwlJiYpvE1Jf5JMh7DKVcwB+ulJjmb7BppXDpFnM8rV/Bi 0716FjSFdWP6gTb4QLg+Ua4Ex4VM1MAiZqlh7lWzPoRbfVDLRi5QON3MbW0GiZOh g3FMy1ZkWR20rt8YaniHs9VVswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHS89rCF uc1pw+jWg+SRHeId7yw1MB8GA1UdIwQYMBaAFO9meNwM6zQUHGShirJL+GyrL701 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUzNC80QkVGQkVDQTMw QzIxMUVDOTFBMTcwMURDNEY5QUUwMi83Mlo0M0F6ck5CUWNaS0dLc2t2NGJLc3Z2 VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyWjQzQXpyTkJRY1pLR0tza3Y0YktzdnZUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUUzNC80QkVGQkVDQTMwQzIxMUVDOTFBMTcwMURDNEY5QUUwMi83Mlo0M0F6ck5C UWNaS0dLc2t2NGJLc3Z2VFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh/Z8qMoX6casfeQnbDKqrWnU3OXc/PfBlRz/88RcezneytQeR+BNUOZpZSs3 YTqcwgUutx8XwjmkffwB09HnRANEkziIZivOAToRrCEOVltwaIS/TMPauElz6qsr jSDnDmhwS2LZUtQLXuX1jgKt/nFhZqiksx9FRYZu1H/wzaRF6dEABw63f1QvOTS+ aa8WiKlywOP7zyxX0rBNeZGyLmOS7oa/BBVhV9RGuiiQWqFeTfckwdTnkMhFCJjb Dvp9GqjI2n7mU21ncM/756wpvJQlhaUS9wh3YmNP4hGSzRGfEMwTqmwv/Ml9/kxe UGQsehhBK/YQ+McjQqWkj/eWBw== -----END CERTIFICATE-----Generated at Sat Mar 28 10:39:36 2026 by rpki-client