$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft File: suPG96kEVKInRzewUsujXxn11aA.mft (raw, json) Hash identifier: TTm6d6JX70wkIoTUgARXOimNOqFVWryWspax4bi5m8c= Subject key identifier: AF:BF:12:87:28:00:09:5C:C7:52:3E:78:3B:33:A2:D2:38:3C:55:C9 Authority key identifier: B2:E3:C6:F7:A9:04:54:A2:27:47:37:B0:52:CB:A3:5F:19:F5:D5:A0 Certificate issuer: /CN=A91BFDE1/serialNumber=B2E3C6F7A90454A2274737B052CBA35F19F5D5A0 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft Manifest number: 10 Signing time: Wed 25 Mar 2026 08:18:11 +0000 Manifest this update: Wed 25 Mar 2026 08:18:10 +0000 Manifest next update: Wed 01 Apr 2026 08:18:10 +0000 Files and hashes: 1: suPG96kEVKInRzewUsujXxn11aA.crl (hash: y1w5dA9mZ+uqkjdHKgcPSWzX4wnCBrMOsnSZF9HPofM=) 2: 000FAEF0187D11F19A5CAFE7383D8C67.roa (hash: segqNYyes6EIoWSsGy8Pu8WgYVh2x3RfT/RKs6A99TE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.crl rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFDE1, serialNumber=B2E3C6F7A90454A2274737B052CBA35F19F5D5A0 Validity Not Before: Mar 25 08:18:10 2026 GMT Not After : Apr 1 08:18:10 2026 GMT Subject: CN=69c39a43-8174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:28:47:64:61:b1:d3:e4:9d:3e:ff:0e:37:a1: 34:5b:66:ff:e9:92:a4:f6:21:14:98:23:c3:f5:34: 28:ef:05:ec:66:a8:2b:56:02:d4:bd:e2:0a:a5:0e: c6:30:d5:8d:23:fd:40:be:d6:8b:9f:c4:52:9c:b3: 96:c0:28:a8:a4:77:2e:e1:91:7f:09:8f:5c:a5:1e: 55:6d:84:a6:9a:c2:d8:86:3e:b1:ab:14:fc:26:c9: ba:e0:27:c7:c1:11:e5:0f:2b:ca:28:cb:20:48:e9: 26:ce:f3:e9:d3:f8:b2:b7:98:ea:32:ba:93:01:ad: 55:5f:30:53:6c:f1:1a:65:fd:77:e9:c8:df:17:76: 81:da:82:33:f3:59:cb:c9:bb:53:90:08:e0:34:31: 0a:bb:e1:0c:3d:4c:0c:4b:83:5a:70:ef:b0:5d:35: db:bf:ce:2f:81:0c:52:0d:b8:d2:11:9d:b9:fb:30: 24:16:53:da:02:7b:53:6c:69:23:5a:5b:49:36:4a: e9:01:af:f1:18:09:96:8a:17:eb:c3:e1:15:8f:b3: 5c:ab:6b:45:62:79:29:12:de:de:87:88:da:62:23: 4e:6c:8e:c2:ce:5b:e2:c1:ee:be:ce:aa:41:67:73: c7:43:e2:f3:42:fe:16:b6:10:06:27:5c:5d:93:55: 91:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:BF:12:87:28:00:09:5C:C7:52:3E:78:3B:33:A2:D2:38:3C:55:C9 X509v3 Authority Key Identifier: keyid:B2:E3:C6:F7:A9:04:54:A2:27:47:37:B0:52:CB:A3:5F:19:F5:D5:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:ae:7f:66:27:f9:50:bf:e4:7b:44:1a:10:34:51:ca:da:c8: c4:a3:f4:be:9d:e0:53:df:19:15:50:b4:a9:f9:43:ad:ba:bd: 9c:be:bc:60:c0:2e:b9:da:f6:c1:53:7a:ac:4f:54:93:66:c4: 5a:84:3e:e4:1f:2d:68:6f:c4:67:ab:89:55:e2:9f:5b:e2:3c: e8:33:13:ce:b7:43:c2:06:b8:08:b9:0c:ff:c2:a7:24:6c:71: 46:de:9a:3d:35:e1:d8:20:7c:a3:d8:36:a7:c5:03:2e:9d:97: 81:8b:77:8f:f6:ef:0a:8e:40:51:85:fe:73:48:a8:13:b8:39: a6:39:ea:20:e6:4c:2f:13:54:c8:36:fa:2f:0e:f4:f5:c0:43: fc:ad:5f:17:50:a2:75:a1:2d:b3:b9:1b:6f:b4:94:06:ca:09: c9:ed:c4:77:2e:2e:b7:c2:1c:fb:8d:18:37:65:e2:e6:e5:53: 72:fb:a9:89:9b:b6:62:db:03:7f:81:34:4c:7a:c3:b5:b0:50: 00:a7:e5:d1:97:e5:18:4b:0f:94:8c:38:64:6e:92:10:60:6a: 7e:02:56:26:50:9c:cc:44:8d:f2:9f:b6:86:e3:96:ed:95:69: 8d:4c:94:db:dd:7b:e1:0f:de:25:fe:93:13:2d:94:be:db:33: a5:0f:a3:32 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RkRFMTExMC8GA1UEBRMoQjJFM0M2RjdBOTA0NTRBMjI3NDczN0IwNTJDQkEzNUYx OUY1RDVBMDAeFw0yNjAzMjUwODE4MTBaFw0yNjA0MDEwODE4MTBaMBgxFjAUBgNV BAMTDTY5YzM5YTQzLTgxNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2KEdkYbHT5J0+/w43oTRbZv/pkqT2IRSYI8P1NCjvBexmqCtWAtS94gqlDsYw 1Y0j/UC+1oufxFKcs5bAKKikdy7hkX8Jj1ylHlVthKaawtiGPrGrFPwmybrgJ8fB EeUPK8ooyyBI6SbO8+nT+LK3mOoyupMBrVVfMFNs8Rpl/XfpyN8XdoHagjPzWcvJ u1OQCOA0MQq74Qw9TAxLg1pw77BdNdu/zi+BDFINuNIRnbn7MCQWU9oCe1NsaSNa W0k2SukBr/EYCZaKF+vD4RWPs1yra0VieSkS3t6HiNpiI05sjsLOW+LB7r7OqkFn c8dD4vNC/ha2EAYnXF2TVZERAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUr78ShygA CVzHUj54OzOi0jg8VckwHwYDVR0jBBgwFoAUsuPG96kEVKInRzewUsujXxn11aAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGREUxLzBENzMxREI4MTg1 MzExRjE4RTk3MEFEQzI5M0Q4QzY3L3N1UEc5NmtFVktJblJ6ZXdVc3VqWHhuMTFh QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3VQRzk2a0VWS0luUnpld1VzdWpYeG4xMWFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG REUxLzBENzMxREI4MTg1MzExRjE4RTk3MEFEQzI5M0Q4QzY3L3N1UEc5NmtFVktJ blJ6ZXdVc3VqWHhuMTFhQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAYrn9mJ/lQv+R7RBoQNFHK2sjEo/S+neBT3xkVULSp+UOtur2cvrxgwC652vbB U3qsT1STZsRahD7kHy1ob8Rnq4lV4p9b4jzoMxPOt0PCBrgIuQz/wqckbHFG3po9 NeHYIHyj2DanxQMunZeBi3eP9u8KjkBRhf5zSKgTuDmmOeog5kwvE1TINvovDvT1 wEP8rV8XUKJ1oS2zuRtvtJQGygnJ7cR3Li63whz7jRg3ZeLm5VNy+6mJm7Zi2wN/ gTRMesO1sFAAp+XRl+UYSw+UjDhkbpIQYGp+AlYmUJzMRI3yn7aG45btlWmNTJTb 3XvhD94l/pMTLZS+2zOlD6My -----END CERTIFICATE-----Generated at Thu Mar 26 08:09:09 2026 by rpki-client