$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft File: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft (raw, json) Hash identifier: 7BoBSy6qUJFhPgxv4ECtKoA0SHXCs7k1mnPg6LNyqjs= Subject key identifier: 46:18:5A:18:32:F9:F9:F1:0F:95:B1:5A:60:C5:45:14:0B:E3:F6:A9 Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Certificate serial: 1087 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft Manifest number: 0FF9 Signing time: Tue 24 Mar 2026 17:24:34 +0000 Manifest this update: Tue 24 Mar 2026 17:24:34 +0000 Manifest next update: Tue 31 Mar 2026 17:24:34 +0000 Files and hashes: 1: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl (hash: OOcwlXvRh9FxTBRD6PI4rgBcD99CnJ/mdV6e8lLpHKU=) 2: B1F39E9C334111EF9770A542C4F9AE02.roa (hash: TLIL13JgGPe1P4BL40jELv4mEyCxR17v77PRx0bd8FM=) 3: B2A71CE2334111EF9770A542C4F9AE02.roa (hash: CAc0lSCqkmGaHO8KNNEhlMOK99LXlZrr2QvZXGpcJRg=) 4: 7BD12E3A480811EE8C512B0DC4F9AE02.roa (hash: a/aSh7H+9BOPAN+WcSvePCOi0af08D3dWGvwlCEpYQk=) 5: B2AB6010721811F09FD98A22C4F9AE02.roa (hash: RppZ41kvs72Nx/kep3oP9EH50fRwPEp+eO9LIxKJPl0=) 6: 2EFFC95471DC11F0B648E61EC4F9AE02.roa (hash: imzzgK2jkD8mtGVZSU5UK2u7UGX3PSejQBat9sn+BNw=) 7: 6AB0F2A2892611EEB5E27D69C4F9AE02.roa (hash: PRbYpTR7dL6OD02LCfnRi/JtoGtSSPYB6suy4a9h8Dk=) 8: B35E5B46334111EF9770A542C4F9AE02.roa (hash: KbfiegSJRccS2wc3BWQkCJHlKd3xmNfbrA1PK5bBMgQ=) 9: 2F787ACA71DC11F0B648E61EC4F9AE02.roa (hash: eAns+FZkAHBk1mAiuYMr/116oRI3l4XLKkm5ctbEEec=) 10: 931E0F7681C911EFA5B1D80BC4F9AE02.roa (hash: CK4ODNzWrU/j1GWyDHdyLVzs0cc7hbXsl1UKT9ytXhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4231 (0x1087) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Validity Not Before: Mar 24 17:24:34 2026 GMT Not After : Mar 31 17:24:34 2026 GMT Subject: CN=69c2c8d2-5b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6a:d2:b7:a4:2e:47:0f:e6:6b:ac:ca:da:20: fb:db:17:ee:42:c7:46:0d:a9:d2:e0:fb:2d:d7:0c: 43:1e:c2:b5:ab:9d:7e:5f:4b:d2:af:67:7f:b1:bd: 91:53:7f:fb:4f:67:21:95:26:47:bb:61:2b:42:66: 25:e5:fe:fd:b0:5a:ca:86:31:03:1b:bc:93:eb:81: 85:40:00:cf:bc:26:b2:b7:69:ea:ea:e9:9b:92:e9: 63:7c:34:6a:e1:f4:fe:37:64:54:5e:e7:b8:f1:0e: db:bd:86:f1:a9:13:17:f2:1b:66:56:3c:59:ca:b0: 6b:ca:2d:ff:5a:f7:78:bb:36:ab:fd:92:1b:ba:58: 32:6f:80:16:49:f1:8d:c7:0c:0e:69:83:8e:b1:21: 23:38:a4:af:8a:69:43:3d:17:90:1f:bc:9a:51:d1: 92:93:c8:f8:a9:d0:15:db:53:2c:d9:ab:fb:04:67: e5:43:b6:0a:05:2b:33:d0:09:8f:7a:6e:c8:46:6e: 57:36:82:34:32:48:0d:40:cd:a6:55:22:86:85:8b: 74:02:fa:e3:da:7d:65:10:2f:a0:30:f1:fc:5b:7c: 81:42:7b:44:e7:54:c1:c1:41:3d:2c:5c:fa:8c:cf: e0:3e:83:12:31:cc:31:94:77:c9:64:70:e8:13:27: 86:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:18:5A:18:32:F9:F9:F1:0F:95:B1:5A:60:C5:45:14:0B:E3:F6:A9 X509v3 Authority Key Identifier: keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:87:e3:b4:c6:e4:d5:98:90:fa:bf:0c:bd:9d:78:c5:51:8f: 1e:92:f4:51:85:44:61:a5:e6:31:4b:25:32:a3:9a:3a:26:f0: fa:65:48:4b:7b:55:67:b3:e4:7d:a5:5b:4c:69:ec:35:3a:94: a1:38:f1:60:10:b1:3d:3a:d5:d4:d2:4e:fc:15:3f:1f:f9:7d: 75:40:e8:25:b2:45:3a:54:e3:16:1f:73:6b:86:d2:1d:10:c3: e5:9a:d6:e0:94:a3:6f:fb:9a:a5:a9:eb:e6:03:15:8e:1a:75: ef:24:e9:1c:bb:74:0a:ab:fe:42:f3:3a:08:c2:ea:e8:65:83: 3b:3d:76:95:77:b6:ad:33:c8:fa:46:0a:1a:c2:13:08:84:40: 74:7b:2e:e7:a8:5b:ac:48:33:f2:70:36:f6:94:de:e6:9b:cd: c1:38:97:79:3a:a3:99:a5:0c:03:57:09:12:89:2f:c2:cc:5d: 6f:c2:61:d2:44:cc:3f:d6:24:32:a1:c6:8a:85:1e:db:8c:69: 82:21:e3:d1:65:ab:95:19:5c:1f:bf:4e:ba:79:20:3c:d7:9f: 3b:c6:8f:87:8f:55:7b:da:2e:e3:dd:bb:0a:2a:d7:0e:d1:be: d9:f7:b8:4e:69:b0:3e:bc:46:b1:0b:f9:0d:80:3d:fe:ad:c8: a6:2c:3b:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw MUYxOEZGNDkwHhcNMjYwMzI0MTcyNDM0WhcNMjYwMzMxMTcyNDM0WjAYMRYwFAYD VQQDEw02OWMyYzhkMi01Yjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2rSt6QuRw/ma6zK2iD72xfuQsdGDanS4Pst1wxDHsK1q51+X0vSr2d/sb2R U3/7T2chlSZHu2ErQmYl5f79sFrKhjEDG7yT64GFQADPvCayt2nq6umbkuljfDRq 4fT+N2RUXue48Q7bvYbxqRMX8htmVjxZyrBryi3/Wvd4uzar/ZIbulgyb4AWSfGN xwwOaYOOsSEjOKSvimlDPReQH7yaUdGSk8j4qdAV21Ms2av7BGflQ7YKBSsz0AmP em7IRm5XNoI0MkgNQM2mVSKGhYt0Avrj2n1lEC+gMPH8W3yBQntE51TBwUE9LFz6 jM/gPoMSMcwxlHfJZHDoEyeG6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEYYWhgy +fnxD5WxWmDFRRQL4/apMB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkNDNy83OTFDNkEzNDdCMzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91 dmFqeVZjVUJRUnNCOFlfMGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvYfjtMbk1ZiQ+r8MvZ14xVGPHpL0UYVEYaXmMUslMqOaOibw+mVIS3tVZ7Pk faVbTGnsNTqUoTjxYBCxPTrV1NJO/BU/H/l9dUDoJbJFOlTjFh9za4bSHRDD5ZrW 4JSjb/uapanr5gMVjhp17yTpHLt0Cqv+QvM6CMLq6GWDOz12lXe2rTPI+kYKGsIT CIRAdHsu56hbrEgz8nA29pTe5pvNwTiXeTqjmaUMA1cJEokvwsxdb8Jh0kTMP9Yk MqHGioUe24xpgiHj0WWrlRlcH79OunkgPNefO8aPh49Ve9ou4927CirXDtG+2fe4 TmmwPrxGsQv5DYA9/q3Ipiw7wQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:42:43 2026 by rpki-client