$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft File: t0bN0xcqIBHwIYn_La14fSnAEek.mft (raw, json) Hash identifier: eK/gRYZ5lNvw3gKjiCs9BsjzMMCCfaPrVfkFNsLCCGA= Subject key identifier: 09:17:A0:16:B2:4B:F6:19:09:A1:46:C2:BD:03:39:44:B8:D8:3E:92 Authority key identifier: B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 Certificate issuer: /CN=A91C1B92/serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Certificate serial: 0E58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft Manifest number: 0E4D Signing time: Tue 24 Mar 2026 17:39:28 +0000 Manifest this update: Tue 24 Mar 2026 17:39:27 +0000 Manifest next update: Tue 31 Mar 2026 17:39:27 +0000 Files and hashes: 1: t0bN0xcqIBHwIYn_La14fSnAEek.crl (hash: Z+UJH9lRwJkwR7W2qmIBNm5X9Q4pYXeuYKvgBOm8nWI=) 2: F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa (hash: o6Xw5xLS8YVW62CrGPTjvjmk2nm6Ne1ncHaH7pEqVM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3672 (0xe58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1B92, serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Validity Not Before: Mar 24 17:39:27 2026 GMT Not After : Mar 31 17:39:27 2026 GMT Subject: CN=69c2cc50-7cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:91:f5:04:7d:56:c0:ba:b9:b4:2b:99:69:8b: 44:49:b6:f0:f5:33:ce:3f:84:41:ee:92:25:e7:77: 12:e1:0b:12:f9:95:9c:2a:5a:0c:3c:9c:c0:1e:dc: 02:d0:6a:1e:0a:bb:c6:6c:75:d0:a5:17:57:5a:d6: bc:30:fb:48:81:fd:e8:01:4b:b2:e5:23:cd:a8:85: 8b:e4:eb:92:68:28:5f:47:b2:45:cb:1e:b8:bd:16: 33:de:c9:4a:29:57:89:0c:fe:02:15:23:28:10:c6: 32:5f:dc:3f:ee:9c:b4:b5:18:21:92:56:8e:71:15: 16:a3:51:42:c4:25:f7:d8:e6:50:63:09:9c:0b:e9: 67:51:47:e0:34:b4:48:5c:c8:a0:ba:f5:d7:9d:00: 0b:73:ed:07:b2:3e:6c:06:09:e9:60:20:99:ac:fc: e3:5f:8b:a9:f0:80:e5:9b:39:c8:16:64:71:dd:b0: c6:72:3f:ea:db:73:99:74:a8:dc:b2:3d:39:4a:67: e9:ba:49:f7:f8:48:19:06:25:d0:5d:cf:aa:68:98: 91:ac:12:e4:97:ac:54:4d:c0:b6:f0:5c:5e:34:3b: e8:b9:8b:ed:78:07:1b:d0:8b:4d:90:cc:be:f0:2f: 86:d9:d6:96:88:c1:af:09:d2:0b:13:eb:6c:09:3c: 8c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:17:A0:16:B2:4B:F6:19:09:A1:46:C2:BD:03:39:44:B8:D8:3E:92 X509v3 Authority Key Identifier: keyid:B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:11:97:d0:6e:ef:53:80:91:a1:a7:74:0f:e5:6c:4d:03:49: 6f:05:e1:7a:f9:72:e7:99:5f:5b:62:a4:05:28:1d:37:77:5e: e5:b5:6a:ea:5d:53:c7:df:b3:e5:40:b1:6d:c0:f4:bc:ff:ae: 18:04:d5:c7:26:29:44:b0:2d:8a:35:7a:9c:99:07:8b:25:c6: 48:2d:84:ab:39:8d:93:0c:58:f3:e6:68:ca:bd:8a:c0:0d:57: e9:ee:41:ce:d8:29:43:27:a8:49:93:0f:a8:a2:8d:06:e0:12: f0:fb:6a:86:b4:5d:3c:8d:d8:5c:6e:c8:60:ed:23:d2:fe:60: ae:fa:10:30:87:7f:b2:1b:51:2c:23:d4:fa:db:fc:81:ca:83: 62:e9:17:25:d2:21:ae:f2:e4:09:c1:86:df:a4:d0:fb:e2:c7: cf:1f:5f:29:c8:c5:ae:b0:78:1c:a7:d3:48:40:0c:62:11:8c: 10:2e:de:28:d4:a1:38:80:44:0a:da:f3:59:1a:4d:f1:b1:d8: 47:18:23:80:36:a7:c4:43:dc:9b:4b:4d:ee:d2:a9:d5:d0:a9: fc:77:9e:fe:77:5a:40:e2:d6:d1:fd:fb:9a:3e:24:43:97:1d: 87:43:4e:9c:92:3c:86:c9:b7:94:5e:6a:14:c8:6c:a3:06:a0: 3b:f8:6f:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFCOTIxMTAvBgNVBAUTKEI3NDZDREQzMTcyQTIwMTFGMDIxODlGRjJEQUQ3ODdE MjlDMDExRTkwHhcNMjYwMzI0MTczOTI3WhcNMjYwMzMxMTczOTI3WjAYMRYwFAYD VQQDEw02OWMyY2M1MC03Y2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5H1BH1WwLq5tCuZaYtESbbw9TPOP4RB7pIl53cS4QsS+ZWcKloMPJzAHtwC 0GoeCrvGbHXQpRdXWta8MPtIgf3oAUuy5SPNqIWL5OuSaChfR7JFyx64vRYz3slK KVeJDP4CFSMoEMYyX9w/7py0tRghklaOcRUWo1FCxCX32OZQYwmcC+lnUUfgNLRI XMiguvXXnQALc+0Hsj5sBgnpYCCZrPzjX4up8IDlmznIFmRx3bDGcj/q23OZdKjc sj05Smfpukn3+EgZBiXQXc+qaJiRrBLkl6xUTcC28FxeNDvouYvteAcb0ItNkMy+ 8C+G2daWiMGvCdILE+tsCTyMcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAkXoBay S/YZCaFGwr0DOUS42D6SMB8GA1UdIwQYMBaAFLdGzdMXKiAR8CGJ/y2teH0pwBHp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUI5Mi9BQUJGQzQ5QUJE NjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlCSHdJWW5fTGExNGZTbkFF ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QwYk4weGNxSUJId0lZbl9MYTE0ZlNuQUVlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUI5Mi9BQUJGQzQ5QUJENjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlC SHdJWW5fTGExNGZTbkFFZWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhRGX0G7vU4CRoad0D+VsTQNJbwXhevly55lfW2KkBSgdN3de5bVq6l1Tx9+z 5UCxbcD0vP+uGATVxyYpRLAtijV6nJkHiyXGSC2EqzmNkwxY8+Zoyr2KwA1X6e5B ztgpQyeoSZMPqKKNBuAS8PtqhrRdPI3YXG7IYO0j0v5grvoQMId/shtRLCPU+tv8 gcqDYukXJdIhrvLkCcGG36TQ++LHzx9fKcjFrrB4HKfTSEAMYhGMEC7eKNShOIBE CtrzWRpN8bHYRxgjgDanxEPcm0tN7tKp1dCp/Hee/ndaQOLW0f37mj4kQ5cdh0NO nJI8hsm3lF5qFMhsowagO/hvVg== -----END CERTIFICATE-----Generated at Thu Mar 26 14:30:47 2026 by rpki-client