$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft File: T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft (raw, json) Hash identifier: jOWgvunVkZKDi1xc/FWx4/ZKxbbobX5CEsLY00Xe7mg= Subject key identifier: 29:D3:1F:53:49:64:4E:18:ED:C7:F2:E8:AB:A7:56:63:E4:69:3E:02 Authority key identifier: 4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 Certificate issuer: /CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Certificate serial: 0CB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft Manifest number: 0CA7 Signing time: Tue 24 Mar 2026 18:20:02 +0000 Manifest this update: Tue 24 Mar 2026 18:20:02 +0000 Manifest next update: Tue 31 Mar 2026 18:20:02 +0000 Files and hashes: 1: T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl (hash: MdshR9bHtag8vCWwcgK4Qc8PZ5dhUpCwsxSWVX+3UeQ=) 2: 8160C03610E911EA86FA6774C4F9AE02.roa (hash: 6d9x5P4qjslvkCA0UbFumpnnbX594CB88ciKOH4G9Ks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3250 (0xcb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB883, serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Validity Not Before: Mar 24 18:20:02 2026 GMT Not After : Mar 31 18:20:02 2026 GMT Subject: CN=69c2d5d2-a21e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:17:71:64:76:8c:07:a2:88:08:a2:ae:2b:4d: e0:f4:b6:d2:9d:25:fd:05:9e:a2:8f:67:67:28:67: b4:fc:cc:9a:7c:6c:30:01:dd:ad:85:29:81:51:e1: cc:c1:1f:34:77:7d:e0:f3:af:0e:9e:b2:ea:d6:cc: 65:1c:f9:c1:47:0d:ad:1e:ad:0c:94:56:61:78:74: f8:b8:56:66:2a:e4:c6:c1:7c:c7:db:2e:b5:7a:f6: df:63:28:49:12:00:c8:46:8e:b1:c9:6e:76:a4:8e: c2:6c:3d:6e:7b:e6:a5:44:1c:a8:6d:0b:27:bc:47: a7:65:d6:70:f5:59:6a:88:93:f9:79:13:08:09:58: e6:55:a2:14:17:ea:bb:19:6f:97:c7:13:70:e0:50: 6b:f0:51:5b:f8:ef:12:78:86:b5:e3:5e:76:4e:82: a0:56:63:9b:e8:ee:fd:eb:41:b4:ac:b8:b3:79:5d: 76:44:8f:1e:b0:3e:04:de:63:fd:08:a9:aa:5b:96: b5:72:8e:75:a9:b0:ef:aa:42:e8:68:a5:03:8d:2a: 3c:ff:58:f4:44:8b:c4:a0:29:83:0f:0f:4d:f5:33: 72:87:5d:59:ac:76:ad:79:b3:d7:01:75:8d:a3:48: 25:8b:e6:53:37:f4:f1:5b:6c:d4:78:1f:46:cd:5e: 4b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D3:1F:53:49:64:4E:18:ED:C7:F2:E8:AB:A7:56:63:E4:69:3E:02 X509v3 Authority Key Identifier: keyid:4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:10:3b:ca:02:b3:f9:42:99:c3:b9:bb:71:5e:fd:85:11:eb: 83:69:0f:73:40:1e:d8:09:0e:47:10:42:12:08:f3:a4:d3:ad: 5f:93:31:cd:b1:3a:64:a6:49:cc:13:60:40:1e:49:ef:35:76: a0:c1:32:0b:07:bf:df:d6:13:13:fb:f9:a9:a7:bf:36:d6:26: 62:66:8e:9a:a4:0f:4f:2a:37:6c:4c:84:71:dd:a8:09:a4:98: ca:f3:fc:41:12:f3:6f:41:90:3f:d0:a9:e7:ab:c0:68:d6:23: 2d:05:51:6f:4b:2c:45:89:b1:50:7f:fb:1f:5e:79:35:36:b9: 01:4c:96:94:13:3b:56:f4:98:6d:06:b0:4e:9f:5d:52:4d:47: d0:0c:bf:35:60:49:f3:2b:c2:82:30:f0:92:d7:6f:8b:89:88: 95:36:b8:c4:c7:b3:f2:aa:ff:34:c7:4c:91:79:55:06:5c:c8: 2e:97:3f:e4:cf:4d:f1:46:b6:df:38:cb:44:7e:77:12:e8:54: f7:ed:0e:b1:d6:a0:00:4d:95:e3:93:63:62:ae:9b:cd:8a:98: 8f:5f:2f:de:87:3e:6d:c5:56:63:48:70:3c:d1:1b:66:5c:cb: 12:b5:c1:12:51:3c:1d:bb:95:65:86:35:73:f2:e9:ba:a2:7f: a2:23:c1:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4ODMxMTAvBgNVBAUTKDRGNUFGNTY1RDMwREQ1NEYyNDE0N0VGNUUxNzhBQTBC QUEzM0ZDMjkwHhcNMjYwMzI0MTgyMDAyWhcNMjYwMzMxMTgyMDAyWjAYMRYwFAYD VQQDEw02OWMyZDVkMi1hMjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkxdxZHaMB6KICKKuK03g9LbSnSX9BZ6ij2dnKGe0/MyafGwwAd2thSmBUeHM wR80d33g868OnrLq1sxlHPnBRw2tHq0MlFZheHT4uFZmKuTGwXzH2y61evbfYyhJ EgDIRo6xyW52pI7CbD1ue+alRByobQsnvEenZdZw9VlqiJP5eRMICVjmVaIUF+q7 GW+XxxNw4FBr8FFb+O8SeIa14152ToKgVmOb6O7960G0rLizeV12RI8esD4E3mP9 CKmqW5a1co51qbDvqkLoaKUDjSo8/1j0RIvEoCmDDw9N9TNyh11ZrHatebPXAXWN o0gli+ZTN/TxW2zUeB9GzV5LGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCnTH1NJ ZE4Y7cfy6KunVmPkaT4CMB8GA1UdIwQYMBaAFE9a9WXTDdVPJBR+9eF4qguqM/wp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg4My9FOTgyQkEzNjEw RTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFVOGtGSDcxNFhpcUM2b3pf Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QxcjFaZE1OMVU4a0ZINzE0WGlxQzZvel9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg4My9FOTgyQkEzNjEwRTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFV OGtGSDcxNFhpcUM2b3pfQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqBA7ygKz+UKZw7m7cV79hRHrg2kPc0Ae2AkORxBCEgjzpNOtX5MxzbE6ZKZJ zBNgQB5J7zV2oMEyCwe/39YTE/v5qae/NtYmYmaOmqQPTyo3bEyEcd2oCaSYyvP8 QRLzb0GQP9Cp56vAaNYjLQVRb0ssRYmxUH/7H155NTa5AUyWlBM7VvSYbQawTp9d Uk1H0Ay/NWBJ8yvCgjDwktdvi4mIlTa4xMez8qr/NMdMkXlVBlzILpc/5M9N8Ua2 3zjLRH53EuhU9+0OsdagAE2V45NjYq6bzYqYj18v3oc+bcVWY0hwPNEbZlzLErXB ElE8HbuVZYY1c/LpuqJ/oiPBAg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:44:20 2026 by rpki-client