$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft File: redjNI0CWa0SzYi3ZNOYy4rHQMk.mft (raw, json) Hash identifier: ANw4hGZyRIR4zQi3NYLtyOG2uUAK4ZxBAOrkKVXZJC4= Subject key identifier: 01:69:C0:AB:6B:43:FD:F5:EB:07:7B:C2:F5:97:76:A9:80:8B:AA:F5 Authority key identifier: AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9 Certificate issuer: /CN=A91BBCC9/serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9 Certificate serial: 0684 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft Manifest number: 067A Signing time: Tue 24 Mar 2026 22:13:37 +0000 Manifest this update: Tue 24 Mar 2026 22:13:36 +0000 Manifest next update: Tue 31 Mar 2026 22:13:36 +0000 Files and hashes: 1: redjNI0CWa0SzYi3ZNOYy4rHQMk.crl (hash: zkHiyc7InvsPupsudSV5QQiev8ZaHRcGGCABam4Cga0=) 2: B69C27DCB6D711EB9D603F7DC4F9AE02.roa (hash: WUXJJ8dA0rIPvSiYS0+Cpa5v7JDaDBTiBjA7j+6k8hI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1668 (0x684) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBCC9, serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9 Validity Not Before: Mar 24 22:13:36 2026 GMT Not After : Mar 31 22:13:36 2026 GMT Subject: CN=69c30c91-a53f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5c:ca:20:40:c3:56:ee:06:0f:fc:b6:20:e8: 84:69:41:23:c3:15:42:9f:90:d7:dd:42:79:a6:b5: ae:c9:f5:c6:55:52:c9:c7:96:db:9e:d0:da:92:1d: e3:89:40:4f:1f:68:65:ef:45:29:fa:bf:f9:31:b7: be:f8:bb:39:d7:7d:a9:0e:8a:2e:af:01:17:dc:5a: 7c:66:10:66:5b:10:e7:35:36:0d:e5:08:05:d0:66: 1f:c0:a7:b6:c0:0b:bf:41:23:e8:c5:88:68:b0:76: 3a:fa:58:02:17:6d:9c:16:ea:36:24:93:5a:a3:bb: fa:63:6d:af:89:07:b0:df:aa:32:77:18:2f:19:48: 04:5f:73:32:f6:37:cd:82:be:6a:b6:91:c1:df:e0: 7b:4c:90:7e:02:b1:51:c3:65:ca:bd:ca:75:06:9c: 86:90:01:65:6a:16:2e:3e:2c:ff:5c:aa:cf:2b:fa: 13:c2:57:5f:fb:6e:0d:aa:4f:c0:e1:99:52:c1:06: 7d:b7:c3:5b:15:82:95:4d:7b:e4:2f:8a:95:67:46: 8a:ac:c6:26:72:b9:5d:dc:ec:64:a8:22:a1:87:2d: 47:21:7e:6e:71:10:a6:b6:59:2f:4e:ca:c0:51:6c: 3c:6d:16:37:86:33:51:b5:8f:84:ab:e0:8a:ab:b0: 44:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:69:C0:AB:6B:43:FD:F5:EB:07:7B:C2:F5:97:76:A9:80:8B:AA:F5 X509v3 Authority Key Identifier: keyid:AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:6b:ba:09:82:cc:54:25:86:09:b1:d0:92:13:8f:46:7d:c6: 03:e8:71:fc:42:82:e1:0b:ac:f4:4e:64:e7:58:a1:2a:09:f7: a3:3a:bc:20:35:4a:82:ff:96:d7:34:47:08:0b:f1:f0:e8:d9: 9b:d3:d2:ec:69:3a:3a:3d:a2:f6:05:93:0b:30:7d:e9:11:10: 56:c8:30:33:be:04:c2:90:f2:9a:18:63:91:c2:fe:1f:bc:4b: b7:a1:62:64:7e:a6:b2:a6:34:da:49:e0:25:18:a1:ec:19:40: aa:f6:65:85:44:ef:5b:d6:d7:86:58:16:01:6c:42:8f:57:ad: b2:de:34:a2:7c:33:2e:20:9c:ed:cb:9d:a7:d0:37:53:6c:67: 44:9b:c8:5f:e7:ed:27:54:cb:44:38:5f:c6:80:ab:7f:61:36: 73:5c:c0:5a:2d:15:64:76:5e:c1:bf:44:2b:5e:31:09:81:d2: 12:da:0a:cc:b2:ba:bb:5b:4c:63:0b:4e:8e:08:84:7f:08:d0: 16:79:26:ef:4e:60:e9:2f:ca:d5:86:ba:59:26:ef:31:a3:f4: 6b:14:80:db:0f:4b:73:c4:ae:ec:f0:01:68:ec:d1:58:4c:b6: 4d:ca:9f:2a:fb:18:2f:d4:d2:00:83:15:18:1a:07:3f:e4:8b: 5b:a4:70:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJDQzkxMTAvBgNVBAUTKEFERTc2MzM0OEQwMjU5QUQxMkNEODhCNzY0RDM5OENC OEFDNzQwQzkwHhcNMjYwMzI0MjIxMzM2WhcNMjYwMzMxMjIxMzM2WjAYMRYwFAYD VQQDEw02OWMzMGM5MS1hNTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVzKIEDDVu4GD/y2IOiEaUEjwxVCn5DX3UJ5prWuyfXGVVLJx5bbntDakh3j iUBPH2hl70Up+r/5Mbe++Ls5132pDoourwEX3Fp8ZhBmWxDnNTYN5QgF0GYfwKe2 wAu/QSPoxYhosHY6+lgCF22cFuo2JJNao7v6Y22viQew36oydxgvGUgEX3My9jfN gr5qtpHB3+B7TJB+ArFRw2XKvcp1BpyGkAFlahYuPiz/XKrPK/oTwldf+24Nqk/A 4ZlSwQZ9t8NbFYKVTXvkL4qVZ0aKrMYmcrld3OxkqCKhhy1HIX5ucRCmtlkvTsrA UWw8bRY3hjNRtY+Eq+CKq7BEuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAFpwKtr Q/316wd7wvWXdqmAi6r1MB8GA1UdIwQYMBaAFK3nYzSNAlmtEs2It2TTmMuKx0DJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkNDOS9EMzBCMTVDMEI2 Q0YxMUVCODRFQjE4NTFDNEY5QUUwMi9yZWRqTkkwQ1dhMFN6WWkzWk5PWXk0ckhR TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlZGpOSTBDV2EwU3pZaTNaTk9ZeTRySFFNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkNDOS9EMzBCMTVDMEI2Q0YxMUVCODRFQjE4NTFDNEY5QUUwMi9yZWRqTkkwQ1dh MFN6WWkzWk5PWXk0ckhRTWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEGu6CYLMVCWGCbHQkhOPRn3GA+hx/EKC4Qus9E5k51ihKgn3ozq8IDVKgv+W 1zRHCAvx8OjZm9PS7Gk6Oj2i9gWTCzB96REQVsgwM74EwpDymhhjkcL+H7xLt6Fi ZH6msqY02kngJRih7BlAqvZlhUTvW9bXhlgWAWxCj1etst40onwzLiCc7cudp9A3 U2xnRJvIX+ftJ1TLRDhfxoCrf2E2c1zAWi0VZHZewb9EK14xCYHSEtoKzLK6u1tM YwtOjgiEfwjQFnkm705g6S/K1Ya6WSbvMaP0axSA2w9Lc8Su7PABaOzRWEy2Tcqf KvsYL9TSAIMVGBoHP+SLW6Rwsw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:34:29 2026 by rpki-client