$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft File: P32buu18W_27o6NJq-lrIa0n2mc.mft (raw, json) Hash identifier: +1K94KOXVSxUgl0/86MHnSXwIFmbH1BesMWQ8RYjByA= Subject key identifier: 51:23:19:9E:DC:65:77:09:57:C5:B6:89:DD:B9:C3:B1:95:D3:A1:59 Authority key identifier: 3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67 Certificate issuer: /CN=A91C4D8E/serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67 Certificate serial: 0CED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft Manifest number: 0CE1 Signing time: Thu 26 Mar 2026 18:13:16 +0000 Manifest this update: Thu 26 Mar 2026 18:13:16 +0000 Manifest next update: Thu 02 Apr 2026 18:13:16 +0000 Files and hashes: 1: P32buu18W_27o6NJq-lrIa0n2mc.crl (hash: EZJV0Pl9pINXl4HSaY//Q4D0TR4uuS4b0T1xHvOx0b4=) 2: C9FF2A7E06A511EAA1FFDB3DC4F9AE02.roa (hash: 0Bzx3cTQetOlK87DOybR5kJ5yU0elH44slx+HVrYHM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 18:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3309 (0xced) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4D8E, serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67 Validity Not Before: Mar 26 18:13:16 2026 GMT Not After : Apr 2 18:13:16 2026 GMT Subject: CN=69c5773c-5cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a5:e2:f5:89:75:d7:32:d1:84:08:d4:1f:b5: 1b:9b:79:c7:8e:30:48:ce:d9:68:b6:0e:b4:5a:f2: 6c:c7:e7:dd:40:d7:82:04:24:e6:1b:8d:1e:bf:e2: db:41:6b:9b:25:b1:10:9e:fb:ba:45:fa:4a:89:e6: 2c:2a:02:99:5e:a1:e0:ae:b4:8a:e6:ca:28:25:35: 77:6a:f1:9c:39:66:47:c4:6b:30:83:8e:c3:99:bb: 36:a5:d5:8b:45:f9:dd:a8:ab:5d:e5:61:a3:d4:6d: 33:d3:94:7f:ef:4e:56:0a:51:28:cf:87:c5:90:2a: 1f:ef:c0:5e:fb:aa:53:f0:c1:05:9e:6f:a3:68:5d: a8:c3:6f:8b:3b:8c:3e:ff:f7:7d:92:dd:23:63:9b: 66:fa:13:d1:46:67:16:2a:fa:c4:06:5f:0c:bf:28: a9:13:5b:84:ee:22:88:9d:60:a4:96:72:0a:30:db: b5:bc:41:0f:15:0e:c2:f8:62:63:43:c7:9c:53:3a: d4:58:50:c1:63:4e:5e:41:b6:b5:75:df:df:c3:0a: 12:00:f5:47:d3:ee:57:33:eb:00:22:17:23:51:f4: 91:56:a6:e1:37:c2:a1:1d:29:a6:c1:0b:91:08:d5: 90:85:93:ad:8b:cc:f3:82:fa:2e:a4:be:87:c7:8c: 35:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:23:19:9E:DC:65:77:09:57:C5:B6:89:DD:B9:C3:B1:95:D3:A1:59 X509v3 Authority Key Identifier: keyid:3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:31:9e:0e:f1:30:b8:85:90:ac:2a:3d:5b:59:7b:ca:c3:43: 7c:f1:51:c2:7b:d8:57:e2:dc:bc:05:84:1b:51:19:6a:e8:ed: ce:d1:d4:f2:6f:4e:51:d1:b7:49:94:47:5b:f1:4f:31:32:5f: f2:f8:8c:d1:58:bf:4e:03:eb:8c:09:be:1b:85:19:6b:2f:cb: 95:cb:bd:79:cf:cd:4b:7b:d3:3e:65:4e:76:a3:94:30:3e:49: a5:c9:da:bd:c9:df:e2:a6:81:8c:3a:ee:c4:4e:7a:9a:69:e8: f8:6f:c0:ce:ec:02:32:d8:b6:84:39:d7:70:6a:f3:3a:64:f5: 36:8b:3e:7f:14:1d:ed:1e:94:7d:d5:1f:ad:11:f3:8c:4c:b6: 44:65:0a:77:ae:fc:ea:3c:49:37:51:c9:49:0c:b1:f0:6b:f3: 79:16:e5:e4:5f:f5:ad:3f:c4:85:44:0c:87:06:34:b4:94:65: 85:71:9a:70:7a:81:b1:a9:41:55:0a:2a:c8:10:b9:b4:07:5b: 3c:a0:a8:fd:b3:c3:64:da:ef:72:48:be:ac:01:5c:68:a0:05: 33:48:3f:11:eb:1b:f8:4b:98:ff:2f:ba:37:11:37:5d:e2:54: bd:02:36:e1:36:9e:12:7b:0d:da:19:be:85:b0:07:f2:c8:7a: 69:7d:1b:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzREOEUxMTAvBgNVBAUTKDNGN0Q5QkJBRUQ3QzVCRkRCQkEzQTM0OUFCRTk2QjIx QUQyN0RBNjcwHhcNMjYwMzI2MTgxMzE2WhcNMjYwNDAyMTgxMzE2WjAYMRYwFAYD VQQDEw02OWM1NzczYy01Y2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6Xi9Yl11zLRhAjUH7Ubm3nHjjBIztlotg60WvJsx+fdQNeCBCTmG40ev+Lb QWubJbEQnvu6RfpKieYsKgKZXqHgrrSK5sooJTV3avGcOWZHxGswg47Dmbs2pdWL RfndqKtd5WGj1G0z05R/705WClEoz4fFkCof78Be+6pT8MEFnm+jaF2ow2+LO4w+ //d9kt0jY5tm+hPRRmcWKvrEBl8MvyipE1uE7iKInWCklnIKMNu1vEEPFQ7C+GJj Q8ecUzrUWFDBY05eQba1dd/fwwoSAPVH0+5XM+sAIhcjUfSRVqbhN8KhHSmmwQuR CNWQhZOti8zzgvoupL6Hx4w1FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFEjGZ7c ZXcJV8W2id25w7GV06FZMB8GA1UdIwQYMBaAFD99m7rtfFv9u6OjSavpayGtJ9pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEQ4RS81ODlCOTMzQzA2 QTQxMUVBQjNDNjZCMzhDNEY5QUUwMi9QMzJidXUxOFdfMjdvNk5KcS1scklhMG4y bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzMmJ1dTE4V18yN282TkpxLWxySWEwbjJtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEQ4RS81ODlCOTMzQzA2QTQxMUVBQjNDNjZCMzhDNEY5QUUwMi9QMzJidXUxOFdf MjdvNk5KcS1scklhMG4ybWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoDGeDvEwuIWQrCo9W1l7ysNDfPFRwnvYV+LcvAWEG1EZaujtztHU8m9OUdG3 SZRHW/FPMTJf8viM0Vi/TgPrjAm+G4UZay/Llcu9ec/NS3vTPmVOdqOUMD5Jpcna vcnf4qaBjDruxE56mmno+G/AzuwCMti2hDnXcGrzOmT1Nos+fxQd7R6UfdUfrRHz jEy2RGUKd6786jxJN1HJSQyx8GvzeRbl5F/1rT/EhUQMhwY0tJRlhXGacHqBsalB VQoqyBC5tAdbPKCo/bPDZNrvcki+rAFcaKAFM0g/Eesb+EuY/y+6NxE3XeJUvQI2 4TaeEnsN2hm+hbAH8sh6aX0bQA== -----END CERTIFICATE-----Generated at Sat Mar 28 12:19:37 2026 by rpki-client