$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft File: AShwXWnFHg4rB4rtuZiR5_GbTR8.mft (raw, json) Hash identifier: 5dxfWsOPiWPW7SRIMs0mG+9SZTdNeclvOmV3r/KqKO4= Subject key identifier: 53:C3:3E:42:FB:29:7D:30:74:C8:11:EC:5D:9B:BA:57:22:7B:99:57 Authority key identifier: 01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F Certificate issuer: /CN=A91C0C0B/serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F Certificate serial: 0C48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft Manifest number: 0C1C Signing time: Tue 24 Mar 2026 18:37:56 +0000 Manifest this update: Tue 24 Mar 2026 18:37:55 +0000 Manifest next update: Tue 31 Mar 2026 18:37:55 +0000 Files and hashes: 1: AShwXWnFHg4rB4rtuZiR5_GbTR8.crl (hash: OVTZh5LYmPriPh4HNYHZ6l3Sybcu+f6OTDz2ogsX05w=) 2: E85B23282DF211EAA63F5D60C4F9AE02.roa (hash: EuY5ohXxwCb20yL/oZ+Bf40RR9HQ+u8RzxEp5n6p+No=) 3: 71E30CDCC4ED11EAA1C5766AC4F9AE02.roa (hash: 7N0LlMCapbNJ9KXikjeWXJKbiREpp9frRRVKC1Mylhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3144 (0xc48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C0B, serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F Validity Not Before: Mar 24 18:37:55 2026 GMT Not After : Mar 31 18:37:55 2026 GMT Subject: CN=69c2da04-e336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:47:18:5b:96:b4:96:ff:9d:52:1a:c0:fa:00: 26:a9:bc:9e:bb:1a:c9:6f:a9:b9:dc:6a:20:9f:5f: 09:6d:81:2c:02:c7:87:de:67:d4:7d:6b:ed:58:93: e9:7e:69:1b:c0:09:4e:96:82:94:10:13:65:e7:cd: 26:d9:ad:67:5b:2b:dd:df:7f:8b:84:c1:73:8a:81: 31:e3:be:6d:50:13:40:f0:77:ed:44:d9:ce:3f:f1: f6:ff:cd:75:0b:6a:97:92:c8:66:96:a7:f0:fc:61: 24:ac:a1:58:26:2c:50:b2:63:8a:68:36:62:2e:0e: 04:99:11:6b:75:e0:fa:cd:85:07:53:1a:74:ea:d8: 2a:ef:bf:d3:7f:2b:1c:2c:7a:83:92:1b:13:63:f2: 1c:14:6c:d6:6f:8e:96:73:98:1c:9b:77:4b:e5:9a: 4b:9a:91:48:ef:e8:c3:56:ec:4d:dd:f4:9a:e7:99: 00:f2:5d:48:ea:60:3e:bf:a5:4c:28:96:71:dc:13: 42:ab:1d:7f:a9:94:16:be:ae:4d:dc:b6:6b:e1:1e: 39:f4:ba:63:d4:1f:aa:57:b1:59:2d:b1:8a:47:0d: b2:69:cd:f2:89:b5:57:61:f7:62:7f:fe:fe:3b:cc: 9d:ee:ea:90:7e:d3:e6:9e:45:09:f9:89:a5:ec:1e: b5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C3:3E:42:FB:29:7D:30:74:C8:11:EC:5D:9B:BA:57:22:7B:99:57 X509v3 Authority Key Identifier: keyid:01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:c9:ef:a4:c2:f7:10:24:ca:4d:84:fc:39:97:5e:03:c5:57: b1:ca:26:da:ce:72:d7:01:71:a3:da:8b:48:40:3e:ca:24:6c: 79:70:09:a6:89:df:47:6c:d2:34:85:c2:89:7c:b5:16:51:05: 49:36:91:95:97:24:80:3e:2a:38:a6:a6:42:db:c9:f2:31:19: e6:7b:f3:9d:87:29:3b:fe:3a:0e:14:81:13:56:e8:d1:06:80: a4:c3:1b:03:e4:28:c6:a6:63:43:e9:e2:01:92:44:85:12:7e: da:eb:8a:1e:cb:4f:9c:5b:b5:59:fd:43:0b:bb:12:2e:60:bc: 36:e8:b7:59:6f:88:ae:49:0e:5b:e3:4e:0c:53:aa:9a:50:69: b3:60:1e:51:b8:7e:47:7e:70:a9:b5:8f:19:93:92:b7:74:d6: 1b:35:e7:84:67:49:30:71:3b:14:c0:f2:db:e4:8a:11:cc:15: 7d:f7:b5:27:4b:b1:b0:29:27:60:82:78:bf:ea:78:8e:10:02: 65:b1:7b:e9:b6:8e:ff:e5:46:d0:f7:43:d9:9d:93:1c:c9:e5: 00:8f:52:19:66:7f:14:aa:d0:c4:b9:1a:11:b5:cc:64:ab:09: 84:83:ba:5b:82:42:35:33:d5:5d:a0:de:c9:2c:36:58:34:ea: 14:ab:b9:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDMEIxMTAvBgNVBAUTKDAxMjg3MDVENjlDNTFFMEUyQjA3OEFFREI5OTg5MUU3 RjE5QjREMUYwHhcNMjYwMzI0MTgzNzU1WhcNMjYwMzMxMTgzNzU1WjAYMRYwFAYD VQQDEw02OWMyZGEwNC1lMzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUcYW5a0lv+dUhrA+gAmqbyeuxrJb6m53Gogn18JbYEsAseH3mfUfWvtWJPp fmkbwAlOloKUEBNl580m2a1nWyvd33+LhMFzioEx475tUBNA8HftRNnOP/H2/811 C2qXkshmlqfw/GEkrKFYJixQsmOKaDZiLg4EmRFrdeD6zYUHUxp06tgq77/Tfysc LHqDkhsTY/IcFGzWb46Wc5gcm3dL5ZpLmpFI7+jDVuxN3fSa55kA8l1I6mA+v6VM KJZx3BNCqx1/qZQWvq5N3LZr4R459Lpj1B+qV7FZLbGKRw2yac3yibVXYfdif/7+ O8yd7uqQftPmnkUJ+Yml7B61iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFPDPkL7 KX0wdMgR7F2bulcie5lXMB8GA1UdIwQYMBaAFAEocF1pxR4OKweK7bmYkefxm00f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEMwQi80NDU5NDQ4QzJD NkExMUVBOUNFQ0JGNEFDNEY5QUUwMi9BU2h3WFduRkhnNHJCNHJ0dVppUjVfR2JU UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FTaHdYV25GSGc0ckI0cnR1WmlSNV9HYlRSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEMwQi80NDU5NDQ4QzJDNkExMUVBOUNFQ0JGNEFDNEY5QUUwMi9BU2h3WFduRkhn NHJCNHJ0dVppUjVfR2JUUjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlMnvpML3ECTKTYT8OZdeA8VXscom2s5y1wFxo9qLSEA+yiRseXAJponfR2zS NIXCiXy1FlEFSTaRlZckgD4qOKamQtvJ8jEZ5nvznYcpO/46DhSBE1bo0QaApMMb A+QoxqZjQ+niAZJEhRJ+2uuKHstPnFu1Wf1DC7sSLmC8Nui3WW+IrkkOW+NODFOq mlBps2AeUbh+R35wqbWPGZOSt3TWGzXnhGdJMHE7FMDy2+SKEcwVffe1J0uxsCkn YIJ4v+p4jhACZbF76baO/+VG0PdD2Z2THMnlAI9SGWZ/FKrQxLkaEbXMZKsJhIO6 W4JCNTPVXaDeySw2WDTqFKu5Gg== -----END CERTIFICATE-----Generated at Thu Mar 26 04:16:31 2026 by rpki-client