$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft File: RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft (raw, json) Hash identifier: J2a4wFgodbLTZKkpZu4m06maMCk++FU9x+Jdrws86/4= Subject key identifier: 4A:4C:E0:D5:76:62:21:DF:E7:BA:62:04:70:5C:A7:2F:D8:2E:F8:16 Authority key identifier: 45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1 Certificate issuer: /CN=A91C6833/serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1 Certificate serial: 1EF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft Manifest number: 1ED9 Signing time: Tue 24 Mar 2026 15:57:55 +0000 Manifest this update: Tue 24 Mar 2026 15:57:55 +0000 Manifest next update: Tue 31 Mar 2026 15:57:55 +0000 Files and hashes: 1: RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl (hash: AdbhUUurhM5Pd0ClpXk8cUtJ4T743Sb/WArXjw7yFZA=) 2: 3F1BB7A09BC011EF995CBB11C4F9AE02.roa (hash: 1uL/iGleC4ndS65zjcBm2KBk7uIxinb++OXJi9TogpQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7921 (0x1ef1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6833, serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1 Validity Not Before: Mar 24 15:57:55 2026 GMT Not After : Mar 31 15:57:55 2026 GMT Subject: CN=69c2b483-ba74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:96:f4:44:a7:a6:3e:71:4a:ba:50:55:5b:9b: ac:55:80:02:20:c3:ff:28:b0:65:73:3e:f4:0d:99: 99:54:80:d1:a7:9f:39:a7:f7:78:e4:a6:4f:7d:47: 7e:f6:c6:da:9f:de:a5:51:37:ec:1b:9a:57:2a:69: 9b:ce:ff:5e:1d:11:ca:54:62:af:51:71:b6:33:b9: f0:88:70:dc:8f:a2:92:85:43:79:e4:f4:a6:d5:46: 6d:12:9d:ac:f7:bb:6c:ef:20:aa:f2:9c:b0:ca:96: 52:2f:f0:0a:1d:2a:ca:f4:8c:ab:8b:5f:e2:48:f2: 19:e7:4b:ff:97:3b:4a:c1:24:38:85:1d:74:76:83: 4e:21:a0:69:6e:09:18:c1:e9:05:bd:b9:eb:e7:83: 3f:0d:31:37:5b:8b:ce:42:e7:26:e5:25:a0:49:29: 57:f7:62:92:4e:e4:3c:3d:c8:1d:55:9f:3c:4f:fe: 82:c8:99:e5:2b:b6:dd:f7:77:bd:f3:f6:2c:27:11: 2b:07:d1:74:26:44:d1:62:c9:e7:13:7e:37:4a:63: 05:e4:1a:48:af:c7:6e:b2:84:ed:1e:83:f2:71:b5: 3c:35:0e:e5:60:ba:60:77:05:8c:4d:3b:b5:45:23: 5b:87:66:3f:be:6f:a7:53:ec:32:25:41:c5:e4:53: ab:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4C:E0:D5:76:62:21:DF:E7:BA:62:04:70:5C:A7:2F:D8:2E:F8:16 X509v3 Authority Key Identifier: keyid:45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:d4:91:a3:74:57:1a:25:d9:50:fd:7b:c4:9f:68:df:e2:1c: 70:ad:d1:c0:ce:ab:60:bd:bd:e6:15:e7:a0:5f:e2:ee:41:48: 3a:34:1e:06:cb:55:ad:38:31:13:48:61:6f:0d:fb:e4:4a:39: 17:9e:66:bb:62:01:14:62:2b:22:4f:39:a8:e7:c0:40:b7:cd: ee:cf:97:b9:81:ba:a4:bd:8e:a2:03:4e:ac:a6:1b:89:3a:a6: bc:0d:04:a7:fe:a8:fb:3d:c6:72:f8:cc:f8:c4:81:9e:a0:e3: ec:14:ff:7c:81:da:e5:74:2f:63:5a:72:dd:eb:9e:4c:76:5d: 59:5b:77:cd:ea:e2:8e:aa:50:43:fb:4f:22:62:f6:d6:f9:36: 83:6c:c7:c7:a9:04:8d:ff:fd:7b:42:8d:54:08:43:31:af:29: 0c:7b:f5:92:46:9a:7e:31:c6:40:a5:32:21:df:e7:a2:3d:40: 53:2e:08:38:34:34:90:db:d9:02:6d:32:af:2f:99:d2:1a:0e: aa:82:b0:f6:dd:91:35:d1:ff:13:d7:75:d8:fa:54:f3:bd:a4: ef:e0:18:11:47:f1:51:ce:e0:db:ea:24:0c:ef:c3:dc:50:61: 14:c2:c3:0e:30:35:a6:ff:44:7e:3c:ad:c6:eb:3c:7f:5f:68: 06:91:83:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4MzMxMTAvBgNVBAUTKDQ1QzgwOEE4QUNERTI0QUM5NjEzRTAxQTQ5NTk2MTAw RUQ1RThDRjEwHhcNMjYwMzI0MTU1NzU1WhcNMjYwMzMxMTU1NzU1WjAYMRYwFAYD VQQDEw02OWMyYjQ4My1iYTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5b0RKemPnFKulBVW5usVYACIMP/KLBlcz70DZmZVIDRp585p/d45KZPfUd+ 9sban96lUTfsG5pXKmmbzv9eHRHKVGKvUXG2M7nwiHDcj6KShUN55PSm1UZtEp2s 97ts7yCq8pywypZSL/AKHSrK9Iyri1/iSPIZ50v/lztKwSQ4hR10doNOIaBpbgkY wekFvbnr54M/DTE3W4vOQucm5SWgSSlX92KSTuQ8PcgdVZ88T/6CyJnlK7bd93e9 8/YsJxErB9F0JkTRYsnnE343SmMF5BpIr8dusoTtHoPycbU8NQ7lYLpgdwWMTTu1 RSNbh2Y/vm+nU+wyJUHF5FOriwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEpM4NV2 YiHf57piBHBcpy/YLvgWMB8GA1UdIwQYMBaAFEXICKis3iSslhPgGklZYQDtXozx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjgzMy9GM0Q0ODBFQzgz QjMxMUU2OUREODY3MzBDNEY5QUUwMi9SY2dJcUt6ZUpLeVdFLUFhU1ZsaEFPMWVq UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JjZ0lxS3plSkt5V0UtQWFTVmxoQU8xZWpQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjgzMy9GM0Q0ODBFQzgzQjMxMUU2OUREODY3MzBDNEY5QUUwMi9SY2dJcUt6ZUpL eVdFLUFhU1ZsaEFPMWVqUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJtSRo3RXGiXZUP17xJ9o3+IccK3RwM6rYL295hXnoF/i7kFIOjQeBstVrTgx E0hhbw375Eo5F55mu2IBFGIrIk85qOfAQLfN7s+XuYG6pL2OogNOrKYbiTqmvA0E p/6o+z3GcvjM+MSBnqDj7BT/fIHa5XQvY1py3eueTHZdWVt3zerijqpQQ/tPImL2 1vk2g2zHx6kEjf/9e0KNVAhDMa8pDHv1kkaafjHGQKUyId/noj1AUy4IODQ0kNvZ Am0yry+Z0hoOqoKw9t2RNdH/E9d12PpU872k7+AYEUfxUc7g2+okDO/D3FBhFMLD DjA1pv9Efjytxus8f19oBpGDqQ== -----END CERTIFICATE-----Generated at Thu Mar 26 15:02:44 2026 by rpki-client