$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft File: f5auCiLKk4vV-dmnMor1g2LrIsE.mft (raw, json) Hash identifier: 9QlEwEpqwSc8hJG8R+ZEHb/gqFPSH5DueE2GByqLHP8= Subject key identifier: B3:07:73:A4:53:DC:55:D5:62:5F:7D:37:4A:E7:B2:43:E0:1F:89:24 Authority key identifier: 7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 Certificate issuer: /CN=A91BFFBE/serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft Manifest number: 0107 Signing time: Wed 25 Mar 2026 05:18:33 +0000 Manifest this update: Wed 25 Mar 2026 05:18:33 +0000 Manifest next update: Wed 01 Apr 2026 05:18:33 +0000 Files and hashes: 1: f5auCiLKk4vV-dmnMor1g2LrIsE.crl (hash: KDX14/l6WQJAA7K/wDzgvs2VEvjJJLDtv0g4hn56Fxw=) 2: DCAD7228C9DD11F0AAF51581C4F9AE02.roa (hash: I1++mHrzNJqcHerLAm9oVxqpl6Ew26O0T9gv6+CjfZw=) 3: 4450DA2C9D0311EF877CD229C4F9AE02.roa (hash: trVTzJLMk0YYPZd2GJXZbw8hjd3VyHaYjDSjZyfSaIc=) 4: 835EF5A2C9DD11F09DEB004DC4F9AE02.roa (hash: XxGdk2TiWSYL+s9+eYriQGRBlu9vhfdeWmlV4N+TUNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFFBE, serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Validity Not Before: Mar 25 05:18:33 2026 GMT Not After : Apr 1 05:18:33 2026 GMT Subject: CN=69c37029-d89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:c5:f7:8e:23:34:db:8c:41:ba:13:b7:04:70: 53:02:60:5a:06:80:b6:a8:cc:76:de:aa:27:88:b8: 05:c2:06:55:dd:d2:d5:7b:d1:0c:bc:3f:d2:41:84: bd:1c:04:4e:7d:83:38:4e:15:ec:63:0d:a4:86:da: a2:9e:5f:ec:d1:2d:6c:8a:f1:36:ed:e7:76:95:36: 7e:b8:b7:6a:d8:b8:84:b4:47:13:18:2e:2f:dc:17: 6b:9d:43:ee:72:1f:34:a2:16:1d:09:9f:0e:08:f1: 68:e4:7a:71:f8:63:9c:42:30:67:f2:57:0c:70:94: e1:10:87:3c:18:7d:63:7f:05:de:88:ca:22:55:0d: 88:0b:a7:ee:8a:09:57:18:c1:cb:b4:07:38:06:d9: 12:13:ac:e2:f7:d1:f9:fa:40:bd:3a:fa:6c:23:ab: 86:d7:60:71:70:d8:7e:50:09:6f:12:dc:a8:0e:eb: 30:0a:ba:64:18:c4:8f:8e:96:60:81:01:8e:89:9c: 38:d3:b2:15:22:ce:38:54:dc:10:bb:f7:a9:2f:3b: b6:2a:e1:bb:74:63:f7:95:4b:09:78:01:7b:0a:f6: a9:76:7f:fc:e5:de:ec:d6:82:7a:8c:31:61:9b:d0: 01:02:e6:9e:da:00:d6:24:43:4b:43:e7:57:3b:57: c7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:07:73:A4:53:DC:55:D5:62:5F:7D:37:4A:E7:B2:43:E0:1F:89:24 X509v3 Authority Key Identifier: keyid:7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:12:68:f5:a7:0f:b8:bd:40:09:cd:3c:a0:fb:7f:78:ea:18: 54:bb:cd:bd:90:26:f0:2f:55:d7:5f:25:a6:0a:b2:a7:7b:30: a4:f4:48:96:3d:7b:53:44:89:b1:ea:32:07:7c:e8:d5:dd:e3: 6a:62:af:ed:b4:b2:21:46:ba:d6:c8:10:ff:18:aa:f2:ba:a2: 4e:fc:51:23:b2:fe:31:a7:fa:a9:76:a5:90:13:2b:ae:88:7f: 4e:cc:89:1d:d0:d3:2a:69:76:f5:a7:95:38:96:93:4f:c8:56: 0e:37:20:9d:eb:77:8f:db:ca:91:06:16:9f:e8:c6:e3:e2:e5: 10:6a:be:ee:cb:3c:eb:c2:56:9f:97:0b:9a:7d:e4:51:73:61: 33:60:b8:bb:7a:9c:34:ff:92:15:86:79:a0:aa:1d:ae:44:11: 75:d5:01:c2:fc:d5:f8:b7:77:a7:ee:0e:f2:bd:26:6a:ca:fd: 7b:11:46:da:94:71:d8:65:7d:ab:32:71:34:4f:d4:cf:43:70: c9:59:79:bc:e6:aa:de:72:51:8a:48:b2:9a:ad:e5:8a:cc:03: a4:b4:ad:a7:bb:e0:11:b4:f6:66:58:1f:3d:04:7e:af:6c:50: 27:e5:91:0d:d0:24:26:5f:68:de:41:a4:59:13:72:1c:6d:f6: 4c:b1:97:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZGQkUxMTAvBgNVBAUTKDdGOTZBRTBBMjJDQTkzOEJENUY5RDlBNzMyOEFGNTgz NjJFQjIyQzEwHhcNMjYwMzI1MDUxODMzWhcNMjYwNDAxMDUxODMzWjAYMRYwFAYD VQQDEw02OWMzNzAyOS1kODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA88X3jiM024xBuhO3BHBTAmBaBoC2qMx23qoniLgFwgZV3dLVe9EMvD/SQYS9 HAROfYM4ThXsYw2khtqinl/s0S1sivE27ed2lTZ+uLdq2LiEtEcTGC4v3BdrnUPu ch80ohYdCZ8OCPFo5Hpx+GOcQjBn8lcMcJThEIc8GH1jfwXeiMoiVQ2IC6fuiglX GMHLtAc4BtkSE6zi99H5+kC9OvpsI6uG12BxcNh+UAlvEtyoDuswCrpkGMSPjpZg gQGOiZw407IVIs44VNwQu/epLzu2KuG7dGP3lUsJeAF7Cvapdn/85d7s1oJ6jDFh m9ABAuae2gDWJENLQ+dXO1fHEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLMHc6RT 3FXVYl99N0rnskPgH4kkMB8GA1UdIwQYMBaAFH+WrgoiypOL1fnZpzKK9YNi6yLB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkZCRS80MjE1OUY1QTlE MDIxMUVGOTlDQzg2MDlDNEY5QUUwMi9mNWF1Q2lMS2s0dlYtZG1uTW9yMWcyTHJJ c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y1YXVDaUxLazR2Vi1kbW5Nb3IxZzJMcklzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkZCRS80MjE1OUY1QTlEMDIxMUVGOTlDQzg2MDlDNEY5QUUwMi9mNWF1Q2lMS2s0 dlYtZG1uTW9yMWcyTHJJc0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAxJo9acPuL1ACc08oPt/eOoYVLvNvZAm8C9V118lpgqyp3swpPRIlj17U0SJ seoyB3zo1d3jamKv7bSyIUa61sgQ/xiq8rqiTvxRI7L+Maf6qXalkBMrroh/TsyJ HdDTKml29aeVOJaTT8hWDjcgnet3j9vKkQYWn+jG4+LlEGq+7ss868JWn5cLmn3k UXNhM2C4u3qcNP+SFYZ5oKodrkQRddUBwvzV+Ld3p+4O8r0masr9exFG2pRx2GV9 qzJxNE/Uz0NwyVl5vOaq3nJRikiymq3liswDpLStp7vgEbT2ZlgfPQR+r2xQJ+WR DdAkJl9o3kGkWRNyHG32TLGXZQ== -----END CERTIFICATE-----Generated at Thu Mar 26 19:34:25 2026 by rpki-client