$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json) Hash identifier: +vnQpuR6ArAxOMVkKGnjUq2SneuHcdNHUrhTnxruBDY= Subject key identifier: BC:07:92:7B:46:44:B0:34:60:2B:1D:CD:F3:CD:56:C8:A9:41:71:13 Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Certificate serial: 0466 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft Manifest number: 0444 Signing time: Tue 24 Mar 2026 23:56:33 +0000 Manifest this update: Tue 24 Mar 2026 23:56:33 +0000 Manifest next update: Tue 31 Mar 2026 23:56:33 +0000 Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: mySNLRugbsmlmUEkDkyCsrxJZxvLffAq+dxoOA+S/jY=) 2: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: M6U8swF0ly3cMKXv8vDoiWv6ScGR2XkNJAyosXpW1y4=) 3: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: xr5mxzxZdrq2ogWRRq3jhLKL51if7GSAH8Ndn8OeVk4=) 4: 0DB56636FB5311F09CD98C1F476F56BC.roa (hash: NKaPuf5hInjJ10XsRF1MsqvWr59ZYXc6bDzbcRMrpWs=) 5: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: zyYzT/V9u8dqJ4WQrQE3OrZiw2M5A6hoVzyDJPpodFk=) 6: 0CC86DF4FB5311F09CD98C1F476F56BC.roa (hash: zmUGqNKP1l1FS6Nt/6rkwRmHKjZnQKttQWEMo/g2TI0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1126 (0x466) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Validity Not Before: Mar 24 23:56:33 2026 GMT Not After : Mar 31 23:56:33 2026 GMT Subject: CN=69c324b1-90bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4e:64:2c:b9:8a:08:92:ab:6f:38:e2:0b:aa: d7:7b:fa:bd:88:51:19:d9:8a:80:40:74:ba:d1:a2: 40:b8:54:65:2f:fa:48:fc:58:71:f6:4e:fe:79:94: 62:80:d4:cf:8c:18:2c:2a:48:32:f0:6f:e1:99:aa: 4e:d0:84:89:f3:02:6b:48:66:e1:a3:f5:d4:5d:df: cb:d5:b3:91:bc:bf:f3:f7:72:de:ec:c1:b8:19:c6: 0d:0d:79:b5:e8:6a:33:3a:fc:2a:1b:23:c9:4a:b5: 2d:da:d9:bd:19:a0:85:d9:9d:f0:47:fd:0d:97:c2: e9:37:db:da:1a:4c:3b:8d:5b:0e:e7:48:ed:14:66: cd:b6:97:b9:e9:ad:50:1a:10:04:d4:2b:9d:d5:08: 27:c1:b6:94:a3:07:26:ec:a4:85:ef:91:9f:e9:cd: da:c3:f3:39:e6:e7:41:b8:1d:07:56:56:59:18:b9: 5e:7c:67:fe:79:bd:72:56:b5:fa:6b:8c:16:b6:4f: 95:03:80:1e:03:31:ba:50:d0:f8:87:92:d4:56:a3: 46:0f:d6:40:73:29:f7:4c:73:ff:5a:62:39:9f:8a: 17:55:fb:7e:bb:1a:79:f1:40:73:e2:7c:a4:f9:2e: 91:d4:9e:24:f5:bd:d3:5d:4b:c5:65:a1:97:28:f2: e7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:07:92:7B:46:44:B0:34:60:2B:1D:CD:F3:CD:56:C8:A9:41:71:13 X509v3 Authority Key Identifier: keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:59:88:bd:b6:7e:ec:ec:a5:c5:2a:94:29:ee:7e:13:2d:da: 1a:b8:a2:0d:9d:4b:ee:60:6c:61:dc:7d:5c:85:b4:62:fe:d4: cc:76:bf:e2:c5:98:34:3c:9f:88:4a:3e:67:3d:ac:7c:61:03: 1d:27:7a:f0:5d:74:00:57:5c:8f:05:6d:20:1c:fa:34:88:85: a2:b9:d6:94:6d:99:95:51:02:4c:a7:1e:e0:ca:c8:77:9c:31: e1:61:e5:27:db:36:1a:dd:a8:8a:ca:34:51:9a:96:76:47:80: 35:14:14:f1:46:2d:31:3d:46:8d:c5:c6:64:83:2f:f1:c2:74: aa:78:6d:b9:0c:e9:59:bb:ce:20:3c:68:aa:8a:6d:87:f1:81: fc:d0:5d:9b:2b:1d:3b:90:a2:d2:d5:82:9e:8d:7e:a6:1a:67: 39:c9:3a:9f:3a:dc:3a:40:fc:7d:fe:06:5e:b0:51:e6:1c:6a: 57:d4:c7:e5:fe:14:e2:f6:0d:d4:eb:b6:e4:e5:fe:ef:d8:8c: fa:04:96:35:38:b3:44:18:ab:10:d1:56:d6:94:d2:01:62:21: da:fb:ac:9c:19:48:f5:11:d5:0f:5e:a8:65:e3:de:ef:e8:31: ff:48:75:33:22:4c:36:c5:b8:58:1b:2d:c5:f5:df:8d:f7:e9: 17:1d:70:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0 NjQ4Q0RFMzcwHhcNMjYwMzI0MjM1NjMzWhcNMjYwMzMxMjM1NjMzWjAYMRYwFAYD VQQDEw02OWMzMjRiMS05MGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApU5kLLmKCJKrbzjiC6rXe/q9iFEZ2YqAQHS60aJAuFRlL/pI/Fhx9k7+eZRi gNTPjBgsKkgy8G/hmapO0ISJ8wJrSGbho/XUXd/L1bORvL/z93Le7MG4GcYNDXm1 6GozOvwqGyPJSrUt2tm9GaCF2Z3wR/0Nl8LpN9vaGkw7jVsO50jtFGbNtpe56a1Q GhAE1Cud1QgnwbaUowcm7KSF75Gf6c3aw/M55udBuB0HVlZZGLlefGf+eb1yVrX6 a4wWtk+VA4AeAzG6UND4h5LUVqNGD9ZAcyn3THP/WmI5n4oXVft+uxp58UBz4nyk +S6R1J4k9b3TXUvFZaGXKPLnWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLwHkntG RLA0YCsdzfPNVsipQXETMB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjNBNi8wRDM5QzRFNDlBOUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1 OWwwMDBBUE53WkpHU00zamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKlmIvbZ+7OylxSqUKe5+Ey3aGriiDZ1L7mBsYdx9XIW0Yv7UzHa/4sWYNDyf iEo+Zz2sfGEDHSd68F10AFdcjwVtIBz6NIiFornWlG2ZlVECTKce4MrId5wx4WHl J9s2Gt2oiso0UZqWdkeANRQU8UYtMT1GjcXGZIMv8cJ0qnhtuQzpWbvOIDxoqopt h/GB/NBdmysdO5Ci0tWCno1+phpnOck6nzrcOkD8ff4GXrBR5hxqV9TH5f4U4vYN 1Ou25OX+79iM+gSWNTizRBirENFW1pTSAWIh2vusnBlI9RHVD16oZePe7+gx/0h1 MyJMNsW4WBstxfXfjffpFx1wxQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:37:50 2026 by rpki-client