$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft File: 0m38xFnFMcUEmANsxs5nBrgGF1I.mft (raw, json) Hash identifier: VfN4C1Pj+bldpGFzen35L016jyjDr3gBFpdWdQQGpmI= Subject key identifier: 93:ED:87:12:A0:41:3D:45:FB:9B:54:F8:4B:07:5B:5B:6A:91:0F:8A Authority key identifier: D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 Certificate issuer: /CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Certificate serial: 0DBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft Manifest number: 0DAF Signing time: Tue 24 Mar 2026 17:47:07 +0000 Manifest this update: Tue 24 Mar 2026 17:47:06 +0000 Manifest next update: Tue 31 Mar 2026 17:47:06 +0000 Files and hashes: 1: 0m38xFnFMcUEmANsxs5nBrgGF1I.crl (hash: 55p1ODII5M50KO58vm5x6vxTj51A8XDaejJQZFZ1BqM=) 2: 3C46581E96C411F0AA8A5D32C4F9AE02.roa (hash: 5UiluviLkvdmrPxj6Fg50iGwlauvTqLugtpFjTJWRPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3518 (0xdbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DA6, serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Validity Not Before: Mar 24 17:47:06 2026 GMT Not After : Mar 31 17:47:06 2026 GMT Subject: CN=69c2ce1b-f3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e9:ac:89:be:69:de:55:d8:53:80:2a:ba:25: bb:ca:a8:66:e0:03:b2:75:0a:ee:f2:e1:69:c6:fc: 60:2f:24:14:52:c8:c5:a0:e4:f8:2a:ae:07:51:96: b2:e9:95:01:32:11:91:79:9e:db:10:2b:2d:69:13: ef:60:52:69:86:61:31:9a:9e:a3:79:26:88:11:25: 42:0d:d3:a3:36:1b:f6:fe:a3:a1:2c:8c:98:b6:3c: b7:8f:56:07:0e:f5:d3:ef:f8:5c:95:3f:60:62:f9: 51:e7:2e:62:fb:a3:f0:f8:6c:12:30:33:d6:53:e0: 11:5e:bb:e9:de:c3:f4:48:7a:52:40:99:12:d7:4d: f6:75:8d:7d:8f:e7:d4:78:79:d8:d0:9c:db:89:ee: f1:3a:15:78:e4:fa:b2:2b:8e:e4:a3:d4:af:09:34: a9:dd:c6:60:e1:36:7d:f7:b8:20:a7:d4:83:3b:87: 40:e8:f3:14:94:b4:33:59:3c:63:84:77:7b:e1:d6: 0a:3b:a9:32:85:df:77:bc:cf:66:70:a8:01:2f:95: 51:8d:81:fd:a8:27:b0:db:33:af:30:21:16:22:bf: e3:87:a8:5f:ba:de:1a:1f:4e:e6:e1:7e:73:9a:1e: 09:b3:0b:ff:ba:9f:cb:82:98:4e:bc:df:ef:ab:ae: ad:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:ED:87:12:A0:41:3D:45:FB:9B:54:F8:4B:07:5B:5B:6A:91:0F:8A X509v3 Authority Key Identifier: keyid:D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b2:0c:ff:15:0c:be:06:4a:fe:63:fd:2f:56:22:39:e7:51: b6:e5:14:32:88:12:89:09:95:60:91:72:3b:9f:d4:d5:70:3b: 63:69:7c:c6:51:24:3e:6f:fc:bf:6c:3a:4a:b5:c4:b9:d5:26: 2e:b0:55:1e:b1:95:ef:77:a2:1a:0d:18:34:ff:f8:dc:0a:be: 87:a5:2e:4b:85:1f:75:d4:de:4e:24:95:b9:15:97:9b:a2:9e: c6:05:ce:0e:56:bc:7d:65:fa:57:43:4b:8b:4f:17:a2:ac:a6: 90:c5:5d:08:60:25:d6:98:38:06:bb:a0:2b:5d:25:ea:be:c1: 8c:d3:c9:b5:3e:70:6e:d7:63:8f:d7:9f:63:b7:b5:d7:3d:d5: d7:d8:ff:ea:f3:ac:0a:fc:7a:88:25:cb:ca:2e:c5:82:33:2d: 7a:b6:4e:b3:53:da:67:c0:3d:3c:9d:b0:93:12:7e:4d:a2:1e: 81:eb:2a:62:36:77:aa:b6:e9:3f:17:a1:e5:e4:89:9c:fb:32: 1a:64:6a:56:2c:a8:ed:ad:5e:de:a6:87:41:3f:12:05:bc:2c: ea:9c:4e:66:49:a8:4b:50:f4:fc:24:48:f5:72:2a:e2:eb:05: 8c:c1:6f:c0:17:23:f8:63:f0:a7:df:9e:41:21:7b:e7:d1:b4: 96:92:c5:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQTYxMTAvBgNVBAUTKEQyNkRGQ0M0NTlDNTMxQzUwNDk4MDM2Q0M2Q0U2NzA2 QjgwNjE3NTIwHhcNMjYwMzI0MTc0NzA2WhcNMjYwMzMxMTc0NzA2WjAYMRYwFAYD VQQDEw02OWMyY2UxYi1mM2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5+msib5p3lXYU4AquiW7yqhm4AOydQru8uFpxvxgLyQUUsjFoOT4Kq4HUZay 6ZUBMhGReZ7bECstaRPvYFJphmExmp6jeSaIESVCDdOjNhv2/qOhLIyYtjy3j1YH DvXT7/hclT9gYvlR5y5i+6Pw+GwSMDPWU+ARXrvp3sP0SHpSQJkS1032dY19j+fU eHnY0Jzbie7xOhV45PqyK47ko9SvCTSp3cZg4TZ997ggp9SDO4dA6PMUlLQzWTxj hHd74dYKO6kyhd93vM9mcKgBL5VRjYH9qCew2zOvMCEWIr/jh6hfut4aH07m4X5z mh4Jswv/up/LgphOvN/vq66tiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJPthxKg QT1F+5tU+EsHW1tqkQ+KMB8GA1UdIwQYMBaAFNJt/MRZxTHFBJgDbMbOZwa4BhdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURBNi9EQjE4QjhFNkRE REYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1jVUVtQU5zeHM1bkJyZ0dG MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBtMzh4Rm5GTWNVRW1BTnN4czVuQnJnR0YxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURBNi9EQjE4QjhFNkREREYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1j VUVtQU5zeHM1bkJyZ0dGMUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG7IM/xUMvgZK/mP9L1YiOedRtuUUMogSiQmVYJFyO5/U1XA7Y2l8xlEkPm/8 v2w6SrXEudUmLrBVHrGV73eiGg0YNP/43Aq+h6UuS4UfddTeTiSVuRWXm6KexgXO Dla8fWX6V0NLi08XoqymkMVdCGAl1pg4BrugK10l6r7BjNPJtT5wbtdjj9efY7e1 1z3V19j/6vOsCvx6iCXLyi7FgjMterZOs1PaZ8A9PJ2wkxJ+TaIegesqYjZ3qrbp Pxeh5eSJnPsyGmRqViyo7a1e3qaHQT8SBbws6pxOZkmoS1D0/CRI9XIq4usFjMFv wBcj+GPwp9+eQSF759G0lpLFVQ== -----END CERTIFICATE-----Generated at Thu Mar 26 08:07:28 2026 by rpki-client