$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft File: fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft (raw, json) Hash identifier: rLe16tE7CCIDAPA6B8ljpNS5gadY2QWrtg+I/xd9gn4= Subject key identifier: C1:DB:35:35:87:92:11:21:4E:F5:43:0C:15:0D:09:E0:6B:49:D2:BE Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25 Certificate issuer: /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225 Certificate serial: 0243 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft Manifest number: 10D6 Signing time: Tue 24 Mar 2026 17:35:46 +0000 Manifest this update: Tue 24 Mar 2026 17:35:46 +0000 Manifest next update: Tue 31 Mar 2026 17:35:46 +0000 Files and hashes: 1: fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl (hash: f8+dQiiUP7/SLFiYcuu9UcY+M+h6h2655oozsQoX3Cc=) 2: 329274C4D31611EEA7F0475FC4F9AE02.roa (hash: LPlQvyP4GbUm5RG5ECEhvL2ZjD88OXS223O3hIeCkik=) 3: C81D36F6BEDC11F0AF08E624C4F9AE02.roa (hash: Tkxg3E9zZ6oNMWL2MvDhktoFqNUlB3qfA8SouJ2KXDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 579 (0x243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BF0, serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225 Validity Not Before: Mar 24 17:35:46 2026 GMT Not After : Mar 31 17:35:46 2026 GMT Subject: CN=69c2cb72-407c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:da:5b:c5:97:49:a3:4e:2c:97:74:e4:58:de: be:c7:6c:1c:87:8a:f4:1c:49:75:ba:8c:93:5a:8b: 78:b9:7e:fa:93:21:2e:25:3f:94:ad:8f:d7:39:0d: e9:ac:f1:5c:bd:47:ed:bb:52:0d:4f:ac:9a:3a:3d: 51:3f:20:46:c2:5e:d2:59:57:ae:80:d2:a0:47:dc: 85:bc:52:80:0d:40:bb:77:70:30:7d:63:cf:23:46: 27:e0:28:7e:e1:0a:f0:dc:2e:46:f1:f5:7b:18:a6: 94:c7:9d:a2:82:d0:00:36:25:e6:88:80:28:dd:cc: b8:3b:df:72:c3:66:82:09:8e:fa:a7:5e:77:6e:cd: 3f:a8:ea:7a:4b:b3:71:97:54:09:53:51:7c:86:8e: 9e:cf:c6:d9:24:71:a8:4e:b2:d7:79:15:13:00:b1: af:b8:8d:82:6c:11:7a:b9:13:f1:8e:b8:cd:a6:92: e0:37:5e:56:cf:21:05:67:92:d9:14:30:82:33:c2: b1:62:ab:72:ae:14:d3:c2:6b:0d:ca:ab:11:be:fe: e2:b1:99:1f:3b:70:4d:bc:ef:92:97:3d:c5:aa:1f: e0:4f:56:00:cc:0c:83:2a:ee:f0:cd:73:68:32:75: ea:07:67:e1:92:c0:41:97:68:46:ba:50:1c:44:05: 4a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DB:35:35:87:92:11:21:4E:F5:43:0C:15:0D:09:E0:6B:49:D2:BE X509v3 Authority Key Identifier: keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e8:f7:26:fe:5f:2e:8e:71:1c:08:3f:8a:3b:ee:81:62:cf: b3:f1:7c:bf:2b:56:ef:5e:d1:4b:25:e6:51:b8:d2:49:f5:bc: f7:8a:ec:53:ee:70:c6:61:cd:eb:a6:ad:75:21:67:9c:84:91: a8:9b:14:bc:95:86:cc:6c:11:9a:c1:0e:90:51:f3:3e:6a:ad: e2:a7:2c:cc:22:7c:ad:d1:ba:ab:55:e0:82:28:cc:28:f1:00: 6f:dc:6f:94:46:1f:7f:1f:bc:41:a6:02:08:c8:f2:54:aa:7d: 1c:71:7a:1b:78:50:90:1b:e5:02:8e:1c:6e:b5:8f:cf:70:c5: 46:9a:52:76:69:82:3e:13:7e:2b:f1:5c:3d:cc:c4:bc:f4:19: da:ba:1d:dc:54:95:4d:16:02:30:07:e6:fb:7d:82:d0:08:e5: a1:59:a8:2d:cf:b5:8a:f7:5d:13:1e:93:10:28:97:16:02:18: 3d:08:60:b3:65:68:ab:4e:b4:3d:e4:7b:a9:f3:aa:16:a9:41: 10:33:4e:0b:95:51:44:c0:f0:25:d2:c7:d9:50:bc:e3:fd:f9: 6d:10:eb:e5:86:c6:72:3a:ce:37:a7:08:81:10:c0:54:7e:32: 66:ec:3f:6f:56:2c:27:5a:32:f6:12:3e:b2:3f:9a:e5:d0:23: e2:4d:6d:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCRjAxMTAvBgNVBAUTKDdEMjNFNzVDMTBERjY1NzFCRUFDMTdGMzU1NUUxQjk5 ODM4MTQyMjUwHhcNMjYwMzI0MTczNTQ2WhcNMjYwMzMxMTczNTQ2WjAYMRYwFAYD VQQDEw02OWMyY2I3Mi00MDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dpbxZdJo04sl3TkWN6+x2wch4r0HEl1uoyTWot4uX76kyEuJT+UrY/XOQ3p rPFcvUftu1INT6yaOj1RPyBGwl7SWVeugNKgR9yFvFKADUC7d3AwfWPPI0Yn4Ch+ 4Qrw3C5G8fV7GKaUx52igtAANiXmiIAo3cy4O99yw2aCCY76p153bs0/qOp6S7Nx l1QJU1F8ho6ez8bZJHGoTrLXeRUTALGvuI2CbBF6uRPxjrjNppLgN15WzyEFZ5LZ FDCCM8KxYqtyrhTTwmsNyqsRvv7isZkfO3BNvO+Slz3Fqh/gT1YAzAyDKu7wzXNo MnXqB2fhksBBl2hGulAcRAVKxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMHbNTWH khEhTvVDDBUNCeBrSdK+MB8GA1UdIwQYMBaAFH0j51wQ32VxvqwX81VeG5mDgUIl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJGMC8xNDkxOTc0QUFF QkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpYRy1yQmZ6VlY0Ym1ZT0JR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTUG5YQkRmWlhHLXJCZnpWVjRibVlPQlFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJGMC8xNDkxOTc0QUFFQkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpY Ry1yQmZ6VlY0Ym1ZT0JRaVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP+j3Jv5fLo5xHAg/ijvugWLPs/F8vytW717RSyXmUbjSSfW894rsU+5wxmHN 66atdSFnnISRqJsUvJWGzGwRmsEOkFHzPmqt4qcszCJ8rdG6q1XggijMKPEAb9xv lEYffx+8QaYCCMjyVKp9HHF6G3hQkBvlAo4cbrWPz3DFRppSdmmCPhN+K/FcPczE vPQZ2rod3FSVTRYCMAfm+32C0AjloVmoLc+1ivddEx6TECiXFgIYPQhgs2Voq060 PeR7qfOqFqlBEDNOC5VRRMDwJdLH2VC84/35bRDr5YbGcjrON6cIgRDAVH4yZuw/ b1YsJ1oy9hI+sj+a5dAj4k1t3w== -----END CERTIFICATE-----Generated at Thu Mar 26 02:50:44 2026 by rpki-client