$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft File: 25K4P0wYeDkNakTmrtV6d1ImNRI.mft (raw, json) Hash identifier: Ng/YMDmRKs7Wf3gtZnZ8kIzn2vMva8iBb+4A7T2H7u8= Subject key identifier: CD:0B:9F:35:B1:C7:00:66:81:5B:4C:14:FC:C8:1A:C3:E0:4F:69:51 Authority key identifier: DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12 Certificate issuer: /CN=A91BBD5B/serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512 Certificate serial: 1DB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft Manifest number: 1DA6 Signing time: Thu 26 Mar 2026 16:05:43 +0000 Manifest this update: Thu 26 Mar 2026 16:05:42 +0000 Manifest next update: Thu 02 Apr 2026 16:05:42 +0000 Files and hashes: 1: 25K4P0wYeDkNakTmrtV6d1ImNRI.crl (hash: wMFRVobTnqLmCFSg+TthQcyU7EFz6y7aFen/ukuoNrA=) 2: AB9480A6BB6811E69E8D1212C4F9AE02.roa (hash: bYaDtLZITXZD32x/G/ifQ4D5B/vhmcgFX9IrYx2NC+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 16:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7604 (0x1db4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD5B, serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512 Validity Not Before: Mar 26 16:05:42 2026 GMT Not After : Apr 2 16:05:42 2026 GMT Subject: CN=69c55956-4dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:55:44:37:f3:32:89:2f:7e:a6:fd:64:76:68: a1:50:bb:ca:b1:7f:51:9a:7b:ff:59:ac:07:7c:ac: bd:77:42:46:52:bb:86:1f:5c:1d:13:86:12:37:79: 5a:41:4e:00:72:2d:f6:65:2e:a7:f5:32:3f:ac:b8: c5:63:49:47:91:3d:86:59:e0:97:c9:f7:21:71:a9: ec:eb:ce:ae:76:7c:49:4d:e2:40:3a:bc:df:d1:8d: d7:f3:9c:c0:43:42:fc:12:16:1c:53:4f:55:86:c9: ee:c5:a4:d1:a7:de:4d:b0:a8:e5:e1:05:62:e8:cb: ca:30:0a:18:f8:21:4a:6b:51:83:d0:8d:d9:ec:69: 6b:16:8c:b5:8e:7e:23:78:59:34:fc:e0:ac:60:aa: 22:9b:d6:31:3d:e3:d9:fa:f4:3c:a3:02:9a:e8:eb: 74:48:70:0d:c0:8b:c9:ce:59:49:8f:35:af:61:d8: 28:8b:3c:45:83:ff:a4:87:c2:ae:fa:b7:6d:e1:63: 93:12:07:56:92:d5:51:72:e7:ff:91:61:a5:a8:72: a5:5f:37:da:bf:5d:ac:6a:81:ee:4c:ee:35:59:b3: c9:3c:de:08:c5:3d:17:ff:85:23:28:54:75:e1:e6: b3:61:a7:04:d7:f5:b2:d6:53:6a:3c:0b:05:36:d1: 4a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0B:9F:35:B1:C7:00:66:81:5B:4C:14:FC:C8:1A:C3:E0:4F:69:51 X509v3 Authority Key Identifier: keyid:DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:73:f1:ae:9e:8c:f0:06:70:86:f7:d3:f7:e3:24:2c:ad:9a: 71:55:af:64:e0:8d:53:db:9b:a9:0c:75:64:a2:5c:cb:5d:ae: a6:5b:af:5a:7b:40:d4:9c:fa:ee:9f:10:e4:f4:a8:bb:6f:b0: 4f:35:55:2e:bf:20:4d:26:6b:3b:f0:f3:d1:75:29:42:1c:74: 9c:4d:53:b0:18:33:f2:b4:36:c8:6b:66:9e:ca:43:18:5e:dc: 66:a3:55:a3:33:1e:7c:79:5d:1d:95:6e:38:0e:ac:81:2c:e5: 4d:a9:45:59:d5:66:ac:0c:9b:2e:00:71:a0:96:0d:83:42:0f: 81:da:cf:94:af:73:ff:7a:6b:3e:36:78:48:94:6c:7e:ed:2a: dd:0c:2c:c3:b9:fe:c8:a8:98:29:fb:17:7e:74:b8:cf:89:89: 62:c0:c3:5c:e1:a6:7c:3e:48:fc:a1:87:53:8d:a4:80:fb:d2: c5:47:32:b6:c0:a9:eb:10:06:c6:a5:50:7a:f3:b6:52:6a:24: 58:04:d6:f7:44:5a:07:73:d0:85:31:43:4f:b0:c9:c0:49:7c: 1e:ec:4c:b0:21:6e:8a:41:2e:79:f2:09:e2:5a:96:df:1a:b7: e7:75:06:0d:67:70:20:88:b1:ab:fa:cc:e7:dd:51:c5:a9:64: 77:6e:a2:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJENUIxMTAvBgNVBAUTKERCOTJCODNGNEMxODc4MzkwRDZBNDRFNkFFRDU3QTc3 NTIyNjM1MTIwHhcNMjYwMzI2MTYwNTQyWhcNMjYwNDAyMTYwNTQyWjAYMRYwFAYD VQQDEw02OWM1NTk1Ni00ZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmFVEN/MyiS9+pv1kdmihULvKsX9Rmnv/WawHfKy9d0JGUruGH1wdE4YSN3la QU4Aci32ZS6n9TI/rLjFY0lHkT2GWeCXyfchcans686udnxJTeJAOrzf0Y3X85zA Q0L8EhYcU09VhsnuxaTRp95NsKjl4QVi6MvKMAoY+CFKa1GD0I3Z7GlrFoy1jn4j eFk0/OCsYKoim9YxPePZ+vQ8owKa6Ot0SHANwIvJzllJjzWvYdgoizxFg/+kh8Ku +rdt4WOTEgdWktVRcuf/kWGlqHKlXzfav12saoHuTO41WbPJPN4IxT0X/4UjKFR1 4eazYacE1/Wy1lNqPAsFNtFKjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM0LnzWx xwBmgVtMFPzIGsPgT2lRMB8GA1UdIwQYMBaAFNuSuD9MGHg5DWpE5q7VendSJjUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ1Qi8xNzAyRkMzRUJC NjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVEa05ha1RtcnRWNmQxSW1O UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1SzRQMHdZZURrTmFrVG1ydFY2ZDFJbU5SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ1Qi8xNzAyRkMzRUJCNjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVE a05ha1RtcnRWNmQxSW1OUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl3Pxrp6M8AZwhvfT9+MkLK2acVWvZOCNU9ubqQx1ZKJcy12upluvWntA1Jz6 7p8Q5PSou2+wTzVVLr8gTSZrO/Dz0XUpQhx0nE1TsBgz8rQ2yGtmnspDGF7cZqNV ozMefHldHZVuOA6sgSzlTalFWdVmrAybLgBxoJYNg0IPgdrPlK9z/3prPjZ4SJRs fu0q3Qwsw7n+yKiYKfsXfnS4z4mJYsDDXOGmfD5I/KGHU42kgPvSxUcytsCp6xAG xqVQevO2UmokWATW90RaB3PQhTFDT7DJwEl8HuxMsCFuikEuefIJ4lqW3xq353UG DWdwIIixq/rM591Rxalkd26ioQ== -----END CERTIFICATE-----Generated at Sat Mar 28 13:42:40 2026 by rpki-client