$ rpki-client -vvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft File: 33nDugFSYeOshDI5zkcDWQHWapQ.mft (raw, json) Hash identifier: 7vPqUlMCsyPMtG16PqQGhJwVOghKO8hP3g7cHL2+hDs= Subject key identifier: 0C:C7:8C:D3:22:60:D4:0C:31:D9:76:FA:16:87:B3:E7:88:AA:89:8B Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft Manifest number: 020C Signing time: Wed 25 Mar 2026 02:23:04 +0000 Manifest this update: Wed 25 Mar 2026 02:23:03 +0000 Manifest next update: Wed 01 Apr 2026 02:23:03 +0000 Files and hashes: 1: 33nDugFSYeOshDI5zkcDWQHWapQ.crl (hash: lPyB0KFsM9kDVdVNzNl/oOcsVMQ3YzaSEv3Tsbrh/Ts=) 2: 18DC0A381C0311EE9B0F2938C4F9AE02.roa (hash: ZuQdvo3O3mwgbl46FNxheRRrkq5c13FZ1QLKqfjZUX8=) 3: 17C68D301C0311EE9B0F2938C4F9AE02.roa (hash: PPUG38GrYc1pSvAs42aCMPByXIt0IlvrGE9mP2N9xD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C572B, serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Validity Not Before: Mar 25 02:23:03 2026 GMT Not After : Apr 1 02:23:03 2026 GMT Subject: CN=69c34708-ad05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b8:c7:60:1c:92:f9:82:5b:50:13:3a:04:71: 81:0c:7f:00:9d:59:41:6c:94:2f:aa:15:71:77:94: bc:f3:ab:18:41:8f:98:99:49:da:c0:ce:f8:89:d7: 9c:e4:7d:76:ee:f0:ab:fe:5a:28:a0:3b:0a:36:51: 9c:c0:28:b9:73:b9:fa:27:db:3d:f3:c9:55:1f:b6: 6b:a0:21:bb:8a:fd:be:9e:5f:48:f7:0e:0c:3f:ea: 99:30:28:52:e7:65:67:a4:37:9f:42:bb:7b:99:04: 26:ae:b5:3e:a5:fb:33:9e:c6:9e:df:77:8a:89:c6: 1d:ee:69:b1:98:6a:71:cf:82:01:ec:26:02:1e:ba: a8:fe:f5:f2:f4:af:5e:ac:14:79:58:c2:ba:1f:60: c7:ee:ca:9a:1e:93:ff:23:23:87:1a:8d:a4:d3:d4: 75:7b:4e:ec:ec:49:6a:cb:09:ce:04:14:17:14:eb: 2a:ee:77:24:a7:22:37:35:ae:89:bf:e2:2b:20:a9: 19:2a:57:d3:a8:73:ea:4a:4d:e3:36:d8:ef:48:f3: 4c:4d:21:0b:b3:99:8b:98:37:48:b2:c9:d1:2f:f9: 63:06:82:67:63:e1:91:8e:1b:c3:c2:03:2c:1f:97: fe:4c:22:54:b2:34:4e:f3:84:9b:04:9c:45:ee:51: 7e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C7:8C:D3:22:60:D4:0C:31:D9:76:FA:16:87:B3:E7:88:AA:89:8B X509v3 Authority Key Identifier: keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:2c:5b:16:1d:f1:73:74:1d:a7:ca:22:cc:9c:0b:a7:87:54: 5c:6b:85:45:52:c4:4c:2d:6e:70:7d:0b:6d:ad:35:4f:32:9f: 8a:3e:ff:c4:01:cb:b9:d5:8d:80:c9:25:ef:f5:6f:db:01:53: e4:fa:34:cc:3f:e1:f8:33:89:7f:3a:e3:01:51:a4:0e:e2:3a: 30:3c:2f:96:98:1a:db:38:eb:d2:52:d6:f4:3f:a8:82:d6:8c: 25:07:85:55:70:90:6f:cf:0c:6d:93:b3:1d:74:d0:3d:ac:0b: 23:34:33:3e:33:0d:3e:c8:4b:a4:25:da:2e:2b:2a:a4:de:a4: cc:49:d2:82:39:fc:d7:51:ce:b5:f1:04:75:97:ff:55:6c:a2: b2:cf:12:e1:be:2c:65:71:31:f6:e2:31:59:d2:37:da:c3:5d: 9b:ee:5b:64:e6:32:54:4d:6b:ed:92:92:73:12:42:ef:cd:82: 75:44:77:cd:50:01:ad:51:34:d8:e5:d7:fc:bd:64:40:5c:70: 29:12:d2:c7:0f:d4:07:62:85:53:ad:04:5d:ac:63:b8:6c:68: 05:23:73:6c:6f:b2:62:2c:f9:1a:a6:a4:b8:68:63:00:5b:fd: 9c:e5:8a:90:1a:b8:a2:b2:59:b9:b4:25:5d:d4:1c:e7:a5:13: de:19:47:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5 MDFENjZBOTQwHhcNMjYwMzI1MDIyMzAzWhcNMjYwNDAxMDIyMzAzWjAYMRYwFAYD VQQDEw02OWMzNDcwOC1hZDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLjHYByS+YJbUBM6BHGBDH8AnVlBbJQvqhVxd5S886sYQY+YmUnawM74idec 5H127vCr/loooDsKNlGcwCi5c7n6J9s988lVH7ZroCG7iv2+nl9I9w4MP+qZMChS 52VnpDefQrt7mQQmrrU+pfsznsae33eKicYd7mmxmGpxz4IB7CYCHrqo/vXy9K9e rBR5WMK6H2DH7sqaHpP/IyOHGo2k09R1e07s7ElqywnOBBQXFOsq7nckpyI3Na6J v+IrIKkZKlfTqHPqSk3jNtjvSPNMTSELs5mLmDdIssnRL/ljBoJnY+GRjhvDwgMs H5f+TCJUsjRO84SbBJxF7lF+wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAzHjNMi YNQMMdl2+haHs+eIqomLMB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTcyQi9GN0U1QzE2ODBFOUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1ll T3NoREk1emtjRFdRSFdhcFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASCxbFh3xc3Qdp8oizJwLp4dUXGuFRVLETC1ucH0Lba01TzKfij7/xAHLudWN gMkl7/Vv2wFT5Po0zD/h+DOJfzrjAVGkDuI6MDwvlpga2zjr0lLW9D+ogtaMJQeF VXCQb88MbZOzHXTQPawLIzQzPjMNPshLpCXaLisqpN6kzEnSgjn811HOtfEEdZf/ VWyiss8S4b4sZXEx9uIxWdI32sNdm+5bZOYyVE1r7ZKScxJC782CdUR3zVABrVE0 2OXX/L1kQFxwKRLSxw/UB2KFU60EXaxjuGxoBSNzbG+yYiz5GqakuGhjAFv9nOWK kBq4orJZubQlXdQc56UT3hlHqw== -----END CERTIFICATE-----Generated at Thu Mar 26 10:08:13 2026 by rpki-client