$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft File: ak27o21Mdn1b1ytu6XCoAA_FSV4.mft (raw, json) Hash identifier: IdawnLwbqrtv9hIJL6D0r+yQNsNjobbWFNEaI86yCRs= Subject key identifier: 72:B9:1F:02:91:B4:04:A3:5E:E9:92:9E:8A:86:1F:1F:E6:C0:DF:2C Authority key identifier: 6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E Certificate issuer: /CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E Certificate serial: 0883 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft Manifest number: 0863 Signing time: Tue 24 Mar 2026 20:35:31 +0000 Manifest this update: Tue 24 Mar 2026 20:35:31 +0000 Manifest next update: Tue 31 Mar 2026 20:35:31 +0000 Files and hashes: 1: ak27o21Mdn1b1ytu6XCoAA_FSV4.crl (hash: 4xLs0jcy0zy6mNTFHSdmakqX6LPCiX+eL9YU6QcegPw=) 2: E51AC37C169D11F18D04F8B992EE528E.roa (hash: mYlJdFIW8EjyX8ajfhqX1Cs+hajlapMlYM5UC79/gBw=) 3: 0BE76940057F11F1BBFA6CD7ADEE528E.roa (hash: 6ZHlxBuUbn16eSux/ogpwO6CFNWl05TS7wn4VyI0hlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2179 (0x883) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8C3, serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E Validity Not Before: Mar 24 20:35:31 2026 GMT Not After : Mar 31 20:35:31 2026 GMT Subject: CN=69c2f593-f099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d5:de:60:ef:39:c4:25:9c:73:ff:cb:e7:f4: 69:a3:e2:5d:de:4a:67:b3:70:b1:da:f5:e1:06:eb: 93:b6:40:8f:b0:4f:26:83:0b:96:ec:1b:e3:83:1b: 26:94:71:fb:db:31:64:14:4e:aa:98:42:58:2b:4f: 63:09:93:08:26:09:bc:97:70:d2:1a:df:4e:4c:68: f6:55:ee:9f:b7:a5:5c:3d:7d:e7:c9:06:c8:1b:7c: 69:a6:7c:1e:9b:63:53:0b:69:b2:93:d5:b7:08:bc: a2:db:eb:a4:cd:ee:0b:70:aa:b4:47:3e:1e:81:22: 5e:ee:4e:ed:c9:2f:9c:2e:04:76:57:d6:03:13:2a: 86:49:50:69:6e:7c:51:c7:c0:c3:44:90:0d:ca:f9: 25:b7:d6:23:f0:75:ea:45:cf:fc:09:81:6d:83:33: 09:6b:8f:0d:57:c4:b2:c6:5d:6a:cf:66:55:86:f6: e2:3f:40:69:e3:0f:66:85:b0:7a:64:c9:12:12:67: 50:48:e6:b3:6b:ab:b7:74:7f:56:95:2b:db:d6:12: ec:d7:a1:18:da:ef:5e:b3:62:67:4c:2e:cd:ae:4f: 68:f1:de:44:30:54:e2:98:d1:77:b5:99:b3:1b:70: 4b:5b:e8:22:21:24:10:49:87:e5:6d:ee:65:5e:6e: a8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B9:1F:02:91:B4:04:A3:5E:E9:92:9E:8A:86:1F:1F:E6:C0:DF:2C X509v3 Authority Key Identifier: keyid:6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:25:80:93:25:c5:d2:6e:ef:31:7d:bb:9e:7d:a9:fb:63:3e: 7b:f1:b4:a6:f7:66:b5:0e:03:a9:05:4b:c7:38:44:bb:2b:d6: d6:97:d9:3e:b9:87:75:c1:01:fc:bd:a4:30:b2:71:6b:df:7a: 0c:75:f9:5c:56:63:b0:c3:5e:5f:ca:c1:71:2b:34:c6:c7:b4: 1f:92:37:b4:7e:78:b6:a6:a9:f0:de:cd:9e:b5:af:c6:3a:7c: 64:70:e4:4a:75:fc:dd:06:5d:1d:d1:66:4b:40:80:7a:e4:19: 60:81:18:a7:88:41:79:aa:f8:09:d2:34:50:00:2c:fc:01:6a: 5f:a3:55:29:03:a2:78:f0:ee:1a:8d:60:9c:65:d2:c8:7f:a8: bf:9f:1b:9f:47:80:3e:ae:e3:b1:57:23:b2:e2:2d:65:0d:34: d7:3e:ff:e5:50:8b:16:ca:24:c7:19:a2:0e:b8:21:35:b7:32: 5b:1f:e2:e8:42:7f:87:0b:aa:38:26:66:ab:56:89:2c:96:5a: f8:41:66:4e:e0:fa:cc:54:77:3e:6a:b2:a4:41:d8:ec:a2:94: ab:92:d6:b5:de:94:46:cb:58:8b:7d:20:67:cd:22:41:a8:3d: 72:6d:e5:5f:0b:71:e1:8e:4c:ae:c9:c5:dc:1e:95:7d:b9:aa: 92:3b:f9:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4QzMxMTAvBgNVBAUTKDZBNERCQkEzNkQ0Qzc2N0Q1QkQ3MkI2RUU5NzBBODAw MEZDNTQ5NUUwHhcNMjYwMzI0MjAzNTMxWhcNMjYwMzMxMjAzNTMxWjAYMRYwFAYD VQQDEw02OWMyZjU5My1mMDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9XeYO85xCWcc//L5/Rpo+Jd3kpns3Cx2vXhBuuTtkCPsE8mgwuW7Bvjgxsm lHH72zFkFE6qmEJYK09jCZMIJgm8l3DSGt9OTGj2Ve6ft6VcPX3nyQbIG3xppnwe m2NTC2myk9W3CLyi2+ukze4LcKq0Rz4egSJe7k7tyS+cLgR2V9YDEyqGSVBpbnxR x8DDRJANyvklt9Yj8HXqRc/8CYFtgzMJa48NV8Syxl1qz2ZVhvbiP0Bp4w9mhbB6 ZMkSEmdQSOaza6u3dH9WlSvb1hLs16EY2u9es2JnTC7Nrk9o8d5EMFTimNF3tZmz G3BLW+giISQQSYflbe5lXm6oSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHK5HwKR tASjXumSnoqGHx/mwN8sMB8GA1UdIwQYMBaAFGpNu6NtTHZ9W9crbulwqAAPxUle MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhDMy9EMEUzM0ZBNDAy QzMxMUVCOEFEQzMyMzhDNEY5QUUwMi9hazI3bzIxTWRuMWIxeXR1NlhDb0FBX0ZT VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrMjdvMjFNZG4xYjF5dHU2WENvQUFfRlNWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhDMy9EMEUzM0ZBNDAyQzMxMUVCOEFEQzMyMzhDNEY5QUUwMi9hazI3bzIxTWRu MWIxeXR1NlhDb0FBX0ZTVjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZCWAkyXF0m7vMX27nn2p+2M+e/G0pvdmtQ4DqQVLxzhEuyvW1pfZPrmHdcEB /L2kMLJxa996DHX5XFZjsMNeX8rBcSs0xse0H5I3tH54tqap8N7NnrWvxjp8ZHDk SnX83QZdHdFmS0CAeuQZYIEYp4hBear4CdI0UAAs/AFqX6NVKQOiePDuGo1gnGXS yH+ov58bn0eAPq7jsVcjsuItZQ001z7/5VCLFsokxxmiDrghNbcyWx/i6EJ/hwuq OCZmq1aJLJZa+EFmTuD6zFR3PmqypEHY7KKUq5LWtd6URstYi30gZ80iQag9cm3l Xwtx4Y5MrsnF3B6Vfbmqkjv5ow== -----END CERTIFICATE-----Generated at Thu Mar 26 00:51:36 2026 by rpki-client