$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft File: F_M9uCahQtM3xeuZhL4txPm8ZCk.mft (raw, json) Hash identifier: Y5JzZC1YwNpFouqOsZBGAurYQkn/r+TIBVkky2QRNcg= Subject key identifier: 2D:D7:53:56:42:D4:30:6D:D0:F5:C9:CF:8B:74:3B:18:22:27:D4:7D Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 Certificate issuer: /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Certificate serial: 354B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft Manifest number: 3532 Signing time: Thu 26 Mar 2026 15:17:17 +0000 Manifest this update: Thu 26 Mar 2026 15:17:16 +0000 Manifest next update: Thu 02 Apr 2026 15:17:16 +0000 Files and hashes: 1: F_M9uCahQtM3xeuZhL4txPm8ZCk.crl (hash: +gxW+nryoUVGbMNyNqZ63j30z7D2BvOKoxiM7rqLSQM=) 2: 3A42DAB8DE6311E8BFB1BF16C4F9AE02.roa (hash: qbotwLlAh51+g4Xv22i4fgZHlT9iGbA8driasdN6/0A=) 3: 91268A4A06F311F09EDDC851C4F9AE02.roa (hash: 8HVixqpXOTJwr8xhnI3q6f8IZdTatsuz93wdVY1nD/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 15:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13643 (0x354b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFA29, serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Validity Not Before: Mar 26 15:17:16 2026 GMT Not After : Apr 2 15:17:16 2026 GMT Subject: CN=69c54dfc-f9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:17:63:15:a3:ad:f4:ec:d0:6e:6f:1c:31:ee: 74:25:98:2a:a9:dd:63:6e:9a:71:03:e4:c1:f9:36: d3:b3:a3:30:3a:ab:04:d3:77:3b:71:ee:89:d3:fc: 19:dc:a2:c0:4f:52:e8:4b:c6:a0:45:38:5b:bf:f5: 02:b6:a3:09:a9:90:f5:b3:55:2c:d5:57:f1:e2:00: cf:87:81:8a:71:28:50:0b:fe:0a:1d:a9:b4:1b:b8: 3a:d8:1e:a3:c0:38:ab:10:a9:7c:0a:21:73:b4:d3: d3:17:83:9c:6a:1e:d1:49:1f:e7:99:f8:00:cc:8b: 5e:58:fb:aa:14:3c:ed:0d:73:c4:22:1f:58:c5:14: 2d:4a:b7:dd:0d:da:ed:03:34:9d:c7:db:b1:4a:f8: 0a:c8:f3:cc:84:d3:63:c8:aa:59:da:d3:98:b5:cd: ad:f4:28:5d:31:3c:0f:4d:98:d8:25:41:c4:bf:6b: b1:54:3e:78:fb:ae:24:9f:b1:1b:33:8f:84:e3:4a: a9:8c:83:26:a0:d0:da:e5:36:7c:c0:91:ea:16:2c: 98:44:42:93:40:0a:cf:92:2d:b3:8e:1a:b1:b9:54: d5:6c:f3:1e:5d:44:f5:9e:a1:24:fa:af:a7:30:f1: eb:99:e2:46:01:76:86:ac:ea:3e:0b:54:0e:65:dd: b3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D7:53:56:42:D4:30:6D:D0:F5:C9:CF:8B:74:3B:18:22:27:D4:7D X509v3 Authority Key Identifier: keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:9f:10:a9:f2:2c:1b:03:bb:53:c8:0e:06:b4:ea:bd:3b:f7: 37:1d:23:3b:8a:d9:d0:59:40:b3:15:12:81:cf:c7:8b:eb:ec: 4c:37:7e:94:89:1d:32:43:8d:03:40:6e:0e:53:d6:95:9b:a9: 80:05:d0:0f:a5:5f:3c:e4:38:e6:cd:b6:fb:b0:0b:91:ce:c9: 2b:46:a9:40:fd:47:46:a9:98:4d:91:3b:63:d4:f7:6e:e5:f3: d7:04:03:09:97:11:ea:82:ad:2b:d4:c3:9f:42:36:9c:5e:ae: 43:8f:c7:73:9e:4d:7b:ee:86:13:f8:d6:d4:82:a5:30:c3:02: d9:f0:be:91:b0:20:1b:03:3c:0c:ff:29:0d:4a:04:c3:55:29: 56:80:74:3d:9f:97:eb:c0:d3:7e:87:38:96:58:68:7d:c9:8e: 7c:09:f9:55:47:c2:87:5c:0f:9b:78:83:36:ae:a0:3d:72:39: 75:5d:38:92:84:af:23:9b:f3:1c:26:9b:48:65:98:d8:52:05: 90:40:74:18:79:9f:81:62:cc:92:b9:3f:60:5b:7b:ba:05:4f: 66:ae:ec:84:41:d5:5a:d6:3e:6e:ab:46:41:40:08:d2:e7:6a: 2d:b4:a2:c1:37:84:b9:a7:4b:5a:ef:42:6b:66:0a:04:35:21: b2:70:6b:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZBMjkxMTAvBgNVBAUTKDE3RjMzREI4MjZBMTQyRDMzN0M1RUI5OTg0QkUyREM0 RjlCQzY0MjkwHhcNMjYwMzI2MTUxNzE2WhcNMjYwNDAyMTUxNzE2WjAYMRYwFAYD VQQDEw02OWM1NGRmYy1mOWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRdjFaOt9OzQbm8cMe50JZgqqd1jbppxA+TB+TbTs6MwOqsE03c7ce6J0/wZ 3KLAT1LoS8agRThbv/UCtqMJqZD1s1Us1Vfx4gDPh4GKcShQC/4KHam0G7g62B6j wDirEKl8CiFztNPTF4Ocah7RSR/nmfgAzIteWPuqFDztDXPEIh9YxRQtSrfdDdrt AzSdx9uxSvgKyPPMhNNjyKpZ2tOYtc2t9ChdMTwPTZjYJUHEv2uxVD54+64kn7Eb M4+E40qpjIMmoNDa5TZ8wJHqFiyYREKTQArPki2zjhqxuVTVbPMeXUT1nqEk+q+n MPHrmeJGAXaGrOo+C1QOZd2zEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC3XU1ZC 1DBt0PXJz4t0OxgiJ9R9MB8GA1UdIwQYMBaAFBfzPbgmoULTN8XrmYS+LcT5vGQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkEyOS8wRjFBNEU2NDFE QUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0TTN4ZXVaaEw0dHhQbTha Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfTTl1Q2FoUXRNM3hldVpoTDR0eFBtOFpDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkEyOS8wRjFBNEU2NDFEQUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0 TTN4ZXVaaEw0dHhQbThaQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgp8QqfIsGwO7U8gOBrTqvTv3Nx0jO4rZ0FlAsxUSgc/Hi+vsTDd+lIkdMkON A0BuDlPWlZupgAXQD6VfPOQ45s22+7ALkc7JK0apQP1HRqmYTZE7Y9T3buXz1wQD CZcR6oKtK9TDn0I2nF6uQ4/Hc55Ne+6GE/jW1IKlMMMC2fC+kbAgGwM8DP8pDUoE w1UpVoB0PZ+X68DTfoc4llhofcmOfAn5VUfCh1wPm3iDNq6gPXI5dV04koSvI5vz HCabSGWY2FIFkEB0GHmfgWLMkrk/YFt7ugVPZq7shEHVWtY+bqtGQUAI0udqLbSi wTeEuadLWu9Ca2YKBDUhsnBrLg== -----END CERTIFICATE-----Generated at Fri Mar 27 04:59:13 2026 by rpki-client