$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft File: 88hJQLK99AJViHBvWcHm7D0hR_A.mft (raw, json) Hash identifier: dyYlY+njIJjQegnrPFvPKZQcyIVAvZDml0gVzwoSqWc= Subject key identifier: E3:13:79:88:1B:DF:A9:BA:2A:F6:E4:24:23:FC:52:D0:58:FB:63:59 Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 Certificate issuer: /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft Manifest number: 01BD Signing time: Fri 27 Mar 2026 03:19:51 +0000 Manifest this update: Fri 27 Mar 2026 03:19:50 +0000 Manifest next update: Fri 03 Apr 2026 03:19:50 +0000 Files and hashes: 1: 88hJQLK99AJViHBvWcHm7D0hR_A.crl (hash: P3GvMduXiXAPhtzgz3O8u+MEeyueWtNHSIm5XcvYv/I=) 2: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (hash: v31XiVYGJxKH7lnLyUBdZlEf6xpoQVchSdqRGdwSNGw=) 3: D36C048A81E211EEAF423C87C4F9AE02.roa (hash: ZIzmLDCvL9144wtn/f7cPEIGwIVNysAKaWM197wzKng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 03:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Validity Not Before: Mar 27 03:19:50 2026 GMT Not After : Apr 3 03:19:50 2026 GMT Subject: CN=69c5f757-05df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6e:b3:cb:ff:5c:76:20:be:18:61:5e:f9:82: e2:7b:04:c3:6c:40:e0:c3:ca:de:ea:3e:55:aa:96: 88:23:a9:6f:f7:71:b6:70:42:7b:53:c4:92:fa:32: 66:32:92:fc:ce:46:2a:79:2f:a8:19:b7:4d:d7:aa: d2:14:d2:3f:24:07:aa:c6:94:44:1b:05:cb:35:d6: 6f:a2:58:8d:c4:20:da:13:8f:fc:64:d7:b8:33:6e: 21:b8:73:6a:93:a9:2f:9c:40:68:a6:ea:58:92:28: 75:a0:ff:9c:b0:17:85:6a:a6:39:a7:8e:c0:4f:09: b9:5d:3c:2b:7e:7a:af:88:f0:32:7b:f1:0d:21:b5: 5d:80:64:d5:f1:59:65:b3:34:8a:9f:96:7c:bd:75: 7e:79:aa:3e:7d:b3:ea:34:77:61:d3:4b:14:f3:ec: ad:05:75:f8:9b:97:cf:e9:aa:fc:a6:2f:bf:ec:b8: 41:f5:ea:6f:96:2d:84:93:71:9f:ce:a6:05:7d:d3: df:9b:3d:25:2f:b0:e3:d5:56:a1:7d:5f:04:1e:34: c1:e9:4a:40:0a:be:6e:31:de:ef:6a:55:2c:3b:75: 96:94:9c:6b:f4:ea:03:38:11:7f:b2:ec:a9:7b:31: 65:ae:75:e7:a4:19:27:fd:9c:a9:a7:61:d5:7a:04: 95:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:13:79:88:1B:DF:A9:BA:2A:F6:E4:24:23:FC:52:D0:58:FB:63:59 X509v3 Authority Key Identifier: keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:20:a5:0f:08:87:29:42:0d:05:51:28:2c:fa:ed:4e:89:38: 67:a3:b6:a2:e7:43:1c:cf:e7:d8:9a:e0:5d:66:66:df:99:ad: 88:8a:c6:90:02:f3:bb:8d:b5:6d:df:b4:05:86:4d:9b:08:e4: 32:06:3f:7e:32:42:c9:c7:0d:eb:52:a5:90:22:39:00:dd:7f: 21:18:3b:eb:48:b9:13:8e:ec:4c:db:71:9f:61:b2:90:3e:34: db:11:34:db:69:5b:0e:50:ba:7f:23:aa:d8:c0:11:d0:e6:c7: e0:c6:a1:7b:5c:59:f3:c2:bc:de:5a:69:c7:5c:66:f1:71:6e: f7:39:1f:45:3c:13:89:53:02:22:ef:4f:04:5d:d9:b2:83:7d: f1:b4:95:48:7b:cc:03:e4:c3:50:fc:bf:a1:c2:fc:a5:0d:51: b1:b1:66:7a:3a:f8:7f:bb:8e:6c:f9:c9:dc:66:fa:f1:a2:f0: 7c:1f:a5:b8:8f:60:0f:60:36:35:7c:3c:a8:05:85:b7:90:d1: 6e:a1:cf:e2:75:00:56:5f:57:32:46:53:68:a3:1f:a1:02:cc: 9d:16:4f:68:8e:b9:ac:49:f5:14:72:9b:73:75:99:ff:64:64: c6:e1:48:c9:e5:7d:89:e0:d2:45:13:45:7c:4f:a0:74:7e:26: b1:3a:d4:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDMjMxMTAvBgNVBAUTKEYzQzg0OTQwQjJCREY0MDI1NTg4NzA2RjU5QzFFNkVD M0QyMTQ3RjAwHhcNMjYwMzI3MDMxOTUwWhcNMjYwNDAzMDMxOTUwWjAYMRYwFAYD VQQDEw02OWM1Zjc1Ny0wNWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq26zy/9cdiC+GGFe+YLiewTDbEDgw8re6j5VqpaII6lv93G2cEJ7U8SS+jJm MpL8zkYqeS+oGbdN16rSFNI/JAeqxpREGwXLNdZvoliNxCDaE4/8ZNe4M24huHNq k6kvnEBopupYkih1oP+csBeFaqY5p47ATwm5XTwrfnqviPAye/ENIbVdgGTV8Vll szSKn5Z8vXV+eao+fbPqNHdh00sU8+ytBXX4m5fP6ar8pi+/7LhB9epvli2Ek3Gf zqYFfdPfmz0lL7Dj1VahfV8EHjTB6UpACr5uMd7valUsO3WWlJxr9OoDOBF/suyp ezFlrnXnpBkn/Zypp2HVegSVFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOMTeYgb 36m6KvbkJCP8UtBY+2NZMB8GA1UdIwQYMBaAFPPISUCyvfQCVYhwb1nB5uw9IUfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0MyMy85MjVDODBDRTgx RTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlBSlZpSEJ2V2NIbTdEMGhS X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg4aEpRTEs5OUFKVmlIQnZXY0htN0QwaFJfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0MyMy85MjVDODBDRTgxRTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlB SlZpSEJ2V2NIbTdEMGhSX0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJCClDwiHKUINBVEoLPrtTok4Z6O2oudDHM/n2JrgXWZm35mtiIrGkALzu421 bd+0BYZNmwjkMgY/fjJCyccN61KlkCI5AN1/IRg760i5E47sTNtxn2GykD402xE0 22lbDlC6fyOq2MAR0ObH4Mahe1xZ88K83lppx1xm8XFu9zkfRTwTiVMCIu9PBF3Z soN98bSVSHvMA+TDUPy/ocL8pQ1RsbFmejr4f7uObPnJ3Gb68aLwfB+luI9gD2A2 NXw8qAWFt5DRbqHP4nUAVl9XMkZTaKMfoQLMnRZPaI65rEn1FHKbc3WZ/2RkxuFI yeV9ieDSRRNFfE+gdH4msTrUmw== -----END CERTIFICATE-----Generated at Sat Mar 28 10:43:36 2026 by rpki-client