$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft File: SU13HlEeEgBTuwmx8nS9j1nXOqg.mft (raw, json) Hash identifier: lg0qdWPsjMRIHkY9XkJgJFhygVPAxNgZlpWpomfhT7U= Subject key identifier: B0:F5:84:4A:C6:A5:55:83:75:17:69:CA:69:9F:2C:B2:71:CE:3E:88 Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Certificate serial: 0D57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft Manifest number: 0D41 Signing time: Tue 24 Mar 2026 17:54:21 +0000 Manifest this update: Tue 24 Mar 2026 17:54:21 +0000 Manifest next update: Tue 31 Mar 2026 17:54:21 +0000 Files and hashes: 1: SU13HlEeEgBTuwmx8nS9j1nXOqg.crl (hash: XFe114nG1ERqxkK7lc5wWlQmJISBeWyW9thkh9Iu6Y0=) 2: 2BFBE7E687EF11F0BA5DF073C4F9AE02.roa (hash: 6W0EKCmbhZXUCb3JTj4cb3LX+lvYczLDKfF06TRghFI=) 3: 86B2C22287EF11F0BB972D77C4F9AE02.roa (hash: n64xYPc/honl4c/2W5UUus2lLDkgfGWSMJZBO6CSTtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3415 (0xd57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Validity Not Before: Mar 24 17:54:21 2026 GMT Not After : Mar 31 17:54:21 2026 GMT Subject: CN=69c2cfcd-399d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:34:80:28:a1:1e:35:99:2f:c6:d7:01:8a:41: f8:44:df:7e:08:6a:ff:4e:9c:2e:93:a1:2c:ed:8d: 6f:b4:19:04:e8:83:92:f4:7f:52:77:20:15:8d:69: 98:2f:77:bd:24:56:d5:11:e0:ba:6a:98:5d:83:08: 49:b9:55:74:81:58:38:f8:6c:ee:3e:ae:e0:7d:75: 55:2e:a1:01:29:76:14:54:4c:56:67:60:d6:3e:60: 9f:fc:6f:db:c2:ff:94:9f:d7:fe:53:f4:3d:69:85: 93:dc:77:5d:aa:69:bf:61:16:ef:07:5e:02:8b:5d: e8:e7:3b:9d:dc:df:af:0f:60:6a:a7:b4:a1:68:46: 78:c7:5b:e6:77:0f:99:d8:a0:24:0f:7e:14:cb:37: 57:1d:ec:44:a9:4c:4e:0f:5f:bb:63:d3:fe:c8:83: de:d9:3e:99:ad:87:f0:bf:03:b6:d7:02:ce:f9:6d: 35:21:26:6c:0a:d9:bd:e2:23:0a:ac:a2:b0:22:a4: 16:13:59:3b:11:08:f2:e0:43:37:00:4e:90:af:d8: f3:70:17:0d:fc:70:d2:ba:ff:0c:e2:bb:c4:03:ef: 9a:5c:91:6a:d2:11:cb:63:84:e7:e0:00:32:ef:63: 3d:cc:9b:c2:05:d9:0a:6b:99:88:5f:ca:44:6d:8c: a3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F5:84:4A:C6:A5:55:83:75:17:69:CA:69:9F:2C:B2:71:CE:3E:88 X509v3 Authority Key Identifier: keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:89:ff:b4:41:cc:d7:2f:6d:3a:2c:17:aa:6a:bd:ce:8b:90: 0d:bd:05:46:ee:1f:ab:24:b7:54:54:bc:f6:81:ac:88:d5:be: 6f:fd:5d:73:5d:26:f3:2c:3f:88:d3:08:cb:16:43:fb:f9:15: a8:31:91:52:fe:d4:1d:c7:b6:0b:aa:f3:7b:d3:40:ea:4f:a6: 5a:96:87:0c:6b:88:a4:33:fe:9e:4d:a5:09:67:a0:da:71:e0: 62:12:69:2b:fa:37:fa:49:59:82:b1:a5:e6:8d:d0:10:74:91: fa:b3:68:0a:be:6c:01:6c:d8:f2:56:db:fe:97:bb:73:0f:8a: 86:f1:b4:d2:6f:bd:0a:75:9c:e9:92:2f:74:43:42:b6:61:35: b8:ca:03:23:a1:89:8f:c2:80:7f:34:37:4e:c4:5f:03:e2:00: 64:3b:f4:77:0d:a7:4f:8c:d9:c3:54:b0:ed:f1:dd:47:3d:29: 85:10:03:2a:80:33:82:ad:d2:9a:5f:3a:a8:0a:b1:d2:65:e7: f0:16:aa:3d:38:1f:f2:20:c2:78:eb:32:bb:9e:7b:cd:de:9b: 4d:c2:ac:42:85:71:34:e2:17:64:9f:9d:d0:ad:c3:4f:f5:ec: ba:ad:09:9a:f1:af:65:05:a7:e0:d0:f0:1a:38:ca:d0:a5:e3: 45:60:e1:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG NTlENzNBQTgwHhcNMjYwMzI0MTc1NDIxWhcNMjYwMzMxMTc1NDIxWjAYMRYwFAYD VQQDEw02OWMyY2ZjZC0zOTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzSAKKEeNZkvxtcBikH4RN9+CGr/Tpwuk6Es7Y1vtBkE6IOS9H9SdyAVjWmY L3e9JFbVEeC6aphdgwhJuVV0gVg4+GzuPq7gfXVVLqEBKXYUVExWZ2DWPmCf/G/b wv+Un9f+U/Q9aYWT3Hddqmm/YRbvB14Ci13o5zud3N+vD2Bqp7ShaEZ4x1vmdw+Z 2KAkD34UyzdXHexEqUxOD1+7Y9P+yIPe2T6ZrYfwvwO21wLO+W01ISZsCtm94iMK rKKwIqQWE1k7EQjy4EM3AE6Qr9jzcBcN/HDSuv8M4rvEA++aXJFq0hHLY4Tn4AAy 72M9zJvCBdkKa5mIX8pEbYyjNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLD1hErG pVWDdRdpymmfLLJxzj6IMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0 RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDYxNC8xQzk0ODk5QUY0RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVn QlR1d214OG5TOWoxblhPcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ4n/tEHM1y9tOiwXqmq9zouQDb0FRu4fqyS3VFS89oGsiNW+b/1dc10m8yw/ iNMIyxZD+/kVqDGRUv7UHce2C6rze9NA6k+mWpaHDGuIpDP+nk2lCWeg2nHgYhJp K/o3+klZgrGl5o3QEHSR+rNoCr5sAWzY8lbb/pe7cw+KhvG00m+9CnWc6ZIvdENC tmE1uMoDI6GJj8KAfzQ3TsRfA+IAZDv0dw2nT4zZw1Sw7fHdRz0phRADKoAzgq3S ml86qAqx0mXn8BaqPTgf8iDCeOsyu557zd6bTcKsQoVxNOIXZJ+d0K3DT/Xsuq0J mvGvZQWn4NDwGjjK0KXjRWDh+w== -----END CERTIFICATE-----Generated at Thu Mar 26 17:38:33 2026 by rpki-client