$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft File: 1fbdY8A4EGCv-8nSDtMPB_veiOo.mft (raw, json) Hash identifier: 34VHfuQuJVhQWqID5JSXUcwSVxo5ztjgkl+LYx/SPhw= Subject key identifier: F5:10:6D:3D:13:B7:1A:61:2E:17:B0:65:9A:8E:7C:65:83:3C:62:94 Authority key identifier: D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA Certificate issuer: /CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Certificate serial: 0F84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft Manifest number: 0F6A Signing time: Tue 24 Mar 2026 17:25:51 +0000 Manifest this update: Tue 24 Mar 2026 17:25:50 +0000 Manifest next update: Tue 31 Mar 2026 17:25:50 +0000 Files and hashes: 1: 1fbdY8A4EGCv-8nSDtMPB_veiOo.crl (hash: B+Nc/3blTzTE1FhkRHfu6ixCUtCpbg/TETbGkn2UDOo=) 2: 656CB24EC9F611ED9853C583C4F9AE02.roa (hash: mUPMtWwzY3i1DNxfpfsJiEN2KmimOV1tl1pdhwHNds8=) 3: 64554290C9F611ED9853C583C4F9AE02.roa (hash: agpfPSJGjVQ5csFAXUqTBwmD9lbAU8gkO4ush2slIeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3972 (0xf84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBF7F, serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Validity Not Before: Mar 24 17:25:50 2026 GMT Not After : Mar 31 17:25:50 2026 GMT Subject: CN=69c2c91e-6eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:44:fa:47:72:51:b5:a8:49:f3:c6:8a:33:6f: 4e:a5:be:7e:bd:08:ac:36:c2:df:8f:2e:56:d0:52: e7:ff:67:37:7b:1a:68:61:cd:c3:9c:aa:30:dc:da: da:41:d9:7b:86:9f:00:92:8e:4d:b1:e7:25:c0:ae: 22:66:26:29:d3:5b:97:85:2f:e8:f4:4e:d0:50:b4: cf:03:d8:68:9a:4b:3c:cb:e0:1b:b4:98:da:43:d8: 47:d3:47:34:83:5f:1f:72:63:4e:43:fe:ed:3c:c7: a0:c2:1e:69:87:04:23:19:06:a6:bb:4b:88:d0:93: 5a:c7:2f:34:0a:4f:ab:46:69:33:7e:c9:17:d5:de: 81:9f:47:1a:8c:55:7c:46:b8:07:90:b4:72:a2:4b: 1e:fa:e0:53:42:fa:d0:28:bf:ad:ac:66:8b:e0:02: e4:ea:c7:2e:a5:50:63:b6:53:77:42:1f:19:a8:fa: ea:b5:f1:11:50:b5:8a:d1:5c:23:6d:8a:1a:e3:be: 49:a6:fa:08:cf:6d:96:fe:96:fb:79:c6:35:26:49: 56:d6:e1:f2:e6:5b:d2:66:9e:3f:d2:6f:db:c8:55: 09:87:1c:37:c9:6f:88:fd:3b:62:d4:53:e4:48:84: c8:dc:07:90:6c:58:c1:da:8b:d8:e2:41:be:11:b9: fc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:10:6D:3D:13:B7:1A:61:2E:17:B0:65:9A:8E:7C:65:83:3C:62:94 X509v3 Authority Key Identifier: keyid:D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:b8:95:9e:34:01:6b:ff:b7:5e:69:89:6d:9d:27:d3:ba:87: 29:b3:76:ab:1d:92:7a:9f:fe:c3:cb:06:87:42:01:da:b0:aa: 90:7b:2e:fb:ab:d5:98:34:0b:24:88:06:d5:bc:5d:bf:ce:0b: 2b:0f:1c:a6:05:7e:63:69:08:02:c0:8d:55:00:fc:cc:ae:d4: f4:bc:f0:e6:7a:aa:fe:98:56:dc:35:10:a5:6e:11:11:54:ff: 5e:f1:37:a7:13:00:aa:ee:f9:ae:34:08:b7:2f:08:ad:52:05: 36:e9:ba:3d:cb:75:76:91:b2:b7:bd:94:12:95:f1:8a:e3:11: 60:e6:02:77:1d:4b:05:2b:57:da:01:92:db:23:5a:2e:3d:70: ee:0d:fe:78:24:94:87:c5:b0:e8:74:ca:cf:30:9b:5f:fd:7c: 84:82:a2:12:ec:4b:75:19:82:6a:07:8c:f4:04:85:b7:f6:33: 2b:13:c4:44:ee:a4:ec:7e:07:01:64:a3:a4:55:ca:c0:58:71: 8f:82:50:81:95:41:bf:00:eb:89:70:c7:8e:74:cb:17:9c:21: c9:f7:21:d5:75:ef:64:ff:67:1e:dd:2c:34:73:ea:9c:4a:78: f3:7d:88:e5:63:3b:38:fc:59:2b:02:41:74:51:89:28:1c:73: a5:48:85:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJGN0YxMTAvBgNVBAUTKEQ1RjZERDYzQzAzODEwNjBBRkZCQzlEMjBFRDMwRjA3 RkJERTg4RUEwHhcNMjYwMzI0MTcyNTUwWhcNMjYwMzMxMTcyNTUwWjAYMRYwFAYD VQQDEw02OWMyYzkxZS02ZWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0T6R3JRtahJ88aKM29Opb5+vQisNsLfjy5W0FLn/2c3expoYc3DnKow3Nra Qdl7hp8Ako5NseclwK4iZiYp01uXhS/o9E7QULTPA9homks8y+AbtJjaQ9hH00c0 g18fcmNOQ/7tPMegwh5phwQjGQamu0uI0JNaxy80Ck+rRmkzfskX1d6Bn0cajFV8 RrgHkLRyokse+uBTQvrQKL+trGaL4ALk6scupVBjtlN3Qh8ZqPrqtfERULWK0Vwj bYoa475JpvoIz22W/pb7ecY1JklW1uHy5lvSZp4/0m/byFUJhxw3yW+I/Tti1FPk SITI3AeQbFjB2ovY4kG+Ebn8CwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPUQbT0T txphLhewZZqOfGWDPGKUMB8GA1UdIwQYMBaAFNX23WPAOBBgr/vJ0g7TDwf73ojq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkY3Ri80NTNFQjZGNDg3 NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVHQ3YtOG5TRHRNUEJfdmVp T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFmYmRZOEE0RUdDdi04blNEdE1QQl92ZWlPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkY3Ri80NTNFQjZGNDg3NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVH Q3YtOG5TRHRNUEJfdmVpT28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj7iVnjQBa/+3XmmJbZ0n07qHKbN2qx2Sep/+w8sGh0IB2rCqkHsu+6vVmDQL JIgG1bxdv84LKw8cpgV+Y2kIAsCNVQD8zK7U9Lzw5nqq/phW3DUQpW4REVT/XvE3 pxMAqu75rjQIty8IrVIFNum6Pct1dpGyt72UEpXxiuMRYOYCdx1LBStX2gGS2yNa Lj1w7g3+eCSUh8Ww6HTKzzCbX/18hIKiEuxLdRmCageM9ASFt/YzKxPERO6k7H4H AWSjpFXKwFhxj4JQgZVBvwDriXDHjnTLF5whyfch1XXvZP9nHt0sNHPqnEp4832I 5WM7OPxZKwJBdFGJKBxzpUiFLA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:29:28 2026 by rpki-client