$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft File: 64sK0sB2YghSy8N4kOZK1Aa0ieg.mft (raw, json) Hash identifier: QhbJn1FCs/fKyEuJTpF0QZTKeUQHqmpa5Nn1/Lw8vuA= Subject key identifier: 8B:A5:DE:BD:DB:3A:71:C0:F3:E6:26:C1:23:DD:33:1A:52:61:88:26 Authority key identifier: EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 Certificate issuer: /CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Certificate serial: 0DB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft Manifest number: 0DA8 Signing time: Tue 24 Mar 2026 17:47:21 +0000 Manifest this update: Tue 24 Mar 2026 17:47:21 +0000 Manifest next update: Tue 31 Mar 2026 17:47:21 +0000 Files and hashes: 1: 64sK0sB2YghSy8N4kOZK1Aa0ieg.crl (hash: iR/Fd/5Gqqam87+kWPKA4ix/CQdAI1gs5eZ+9Z7j754=) 2: 6714424C3C9111EA9416CA78C4F9AE02.roa (hash: wM4jTVSXdRa49wS3QCPAkcV9PaMIwDAgOcfWtEI5Jsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3509 (0xdb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72B1, serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Validity Not Before: Mar 24 17:47:21 2026 GMT Not After : Mar 31 17:47:21 2026 GMT Subject: CN=69c2ce29-d6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fb:f0:55:40:2f:bb:fe:41:b1:1f:70:c4:06: 49:a5:a6:b6:f5:ad:ed:77:15:36:3c:34:35:ac:c5: 0a:28:4c:1c:e5:44:85:1e:22:21:7c:58:39:47:41: a4:4b:11:b4:02:c4:7d:60:b2:d9:f6:f4:67:1f:47: 55:b8:7f:92:76:62:6c:b9:c5:00:ec:00:52:ed:43: a1:b1:3f:39:91:ed:48:00:19:e4:4c:f6:64:e9:c1: 9d:fd:4f:6f:eb:68:6a:84:66:bb:c3:ee:3d:2e:2c: df:d6:47:8d:31:f9:a9:27:43:fe:da:91:8e:87:d9: 28:1c:1c:db:08:ef:cc:0f:05:81:74:bc:32:09:c8: 75:fc:ff:15:ea:f5:3c:5d:e3:cb:d5:31:45:67:0b: 06:7a:1b:d7:dd:fa:a5:41:7c:61:8a:54:b2:85:8e: 3a:24:c6:c8:2e:0b:24:2a:ec:9d:1a:cf:ce:40:87: cf:e0:74:17:7e:c4:cd:b0:1e:56:af:60:20:a4:bd: a9:31:72:d9:a1:38:57:b3:1b:b9:2a:e8:f6:11:62: fa:30:b3:77:ba:c6:3f:56:df:01:72:5b:ae:58:42: 18:e3:4e:37:20:e8:58:46:f8:eb:e5:4d:d9:d9:ee: 53:cc:41:90:dd:94:de:bd:36:76:f7:48:ce:97:bf: 11:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A5:DE:BD:DB:3A:71:C0:F3:E6:26:C1:23:DD:33:1A:52:61:88:26 X509v3 Authority Key Identifier: keyid:EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:4a:8d:84:d4:34:88:33:52:b1:d5:bc:33:ad:0e:26:2f:4d: 1a:c8:3e:0b:7b:7f:10:e9:48:37:bd:46:c9:c7:53:0e:c1:f1: b3:8e:b9:39:24:c0:e7:69:37:ea:69:8e:6d:82:3e:19:5d:65: 5c:6c:a5:28:12:0e:71:e1:13:5d:bc:38:41:d3:85:c3:d2:f8: 23:f7:c2:8b:34:de:9d:e0:2b:4a:5f:54:f6:d0:56:f1:64:9a: f5:63:d6:2c:17:4a:36:83:73:49:06:ea:56:59:cd:0f:f0:95: bf:b5:8b:81:09:7a:15:8b:ab:41:c8:23:91:a5:18:7e:2f:1a: e4:3c:30:02:f4:b2:f5:f5:11:cb:cf:ec:64:84:49:0a:6a:20: 95:c9:2e:8f:76:94:e8:82:c8:a4:96:68:87:3d:dc:6e:32:d0: 4b:81:8b:f6:9b:e6:86:1e:e1:4d:3e:aa:1c:d5:40:79:f7:ba: 66:d6:e7:de:f6:04:ed:21:8a:e6:f3:b2:a4:60:c6:44:26:e1: 33:d5:d9:b5:42:d7:1b:63:59:ea:38:a1:55:d0:d0:7d:c2:0d: 28:6a:cd:b4:4f:6c:83:bc:6c:22:b0:9d:6f:97:d1:bb:93:47: 71:b5:91:ce:47:14:39:eb:39:9a:f6:af:c4:48:25:0b:3d:82: ad:60:5c:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyQjExMTAvBgNVBAUTKEVCOEIwQUQyQzA3NjYyMDg1MkNCQzM3ODkwRTY0QUQ0 MDZCNDg5RTgwHhcNMjYwMzI0MTc0NzIxWhcNMjYwMzMxMTc0NzIxWjAYMRYwFAYD VQQDEw02OWMyY2UyOS1kNmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnvvwVUAvu/5BsR9wxAZJpaa29a3tdxU2PDQ1rMUKKEwc5USFHiIhfFg5R0Gk SxG0AsR9YLLZ9vRnH0dVuH+SdmJsucUA7ABS7UOhsT85ke1IABnkTPZk6cGd/U9v 62hqhGa7w+49Lizf1keNMfmpJ0P+2pGOh9koHBzbCO/MDwWBdLwyCch1/P8V6vU8 XePL1TFFZwsGehvX3fqlQXxhilSyhY46JMbILgskKuydGs/OQIfP4HQXfsTNsB5W r2AgpL2pMXLZoThXsxu5Kuj2EWL6MLN3usY/Vt8BcluuWEIY4043IOhYRvjr5U3Z 2e5TzEGQ3ZTevTZ290jOl78R5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIul3r3b OnHA8+YmwSPdMxpSYYgmMB8GA1UdIwQYMBaAFOuLCtLAdmIIUsvDeJDmStQGtIno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJCMS8yQTQ1Rjk4MERF QzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMllnaFN5OE40a09aSzFBYTBp ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0c0swc0IyWWdoU3k4TjRrT1pLMUFhMGllZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJCMS8yQTQ1Rjk4MERFQzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMlln aFN5OE40a09aSzFBYTBpZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAEqNhNQ0iDNSsdW8M60OJi9NGsg+C3t/EOlIN71GycdTDsHxs465OSTA52k3 6mmObYI+GV1lXGylKBIOceETXbw4QdOFw9L4I/fCizTeneArSl9U9tBW8WSa9WPW LBdKNoNzSQbqVlnND/CVv7WLgQl6FYurQcgjkaUYfi8a5DwwAvSy9fURy8/sZIRJ Cmoglckuj3aU6ILIpJZohz3cbjLQS4GL9pvmhh7hTT6qHNVAefe6Ztbn3vYE7SGK 5vOypGDGRCbhM9XZtULXG2NZ6jihVdDQfcINKGrNtE9sg7xsIrCdb5fRu5NHcbWR zkcUOes5mvavxEglCz2CrWBcNQ== -----END CERTIFICATE-----Generated at Thu Mar 26 08:57:57 2026 by rpki-client