$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft File: m505clsn1CAoE4UWNJL_dfFRE9o.mft (raw, json) Hash identifier: eJgPIYNDPREcd1roa7L8/lGHvblhMW9BRd0cVmflH9c= Subject key identifier: 67:01:C3:B4:90:A8:3A:1F:79:48:6E:DA:6C:45:A7:B4:EE:01:80:6B Authority key identifier: 9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA Certificate issuer: /CN=A91C7EF2/serialNumber=9B9D39725B27D420281385163492FF75F15113DA Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft Manifest number: 95 Signing time: Wed 25 Mar 2026 06:54:18 +0000 Manifest this update: Wed 25 Mar 2026 06:54:18 +0000 Manifest next update: Wed 01 Apr 2026 06:54:18 +0000 Files and hashes: 1: m505clsn1CAoE4UWNJL_dfFRE9o.crl (hash: kLY+z7hsTPDSgI//iVIbkIx+bamURd+TNEJBLlQdWQs=) 2: C4BE139C1AE211F1803B92B5413D8C67.roa (hash: VzCemJ05XamlG2jC7L0XFu1bU7etE5348AhdfPH2ivQ=) 3: C3DF78B21AE211F1803B92B5413D8C67.roa (hash: f0xjufQzH23hX++xN0IK4TKpbvdzfPVrSADqxwu7+Kw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7EF2, serialNumber=9B9D39725B27D420281385163492FF75F15113DA Validity Not Before: Mar 25 06:54:18 2026 GMT Not After : Apr 1 06:54:18 2026 GMT Subject: CN=69c3869a-40d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f8:84:d0:9d:44:ad:52:62:55:a2:1a:97:a4: 18:d8:c2:8c:af:0f:9d:be:8a:be:3d:ae:8c:af:7d: 76:61:01:97:67:c1:65:e0:ec:26:14:06:85:57:32: 3f:32:a5:0a:ec:12:ac:01:02:c3:7a:cc:8d:d7:41: 7f:f0:bc:64:ea:9c:8c:3b:a0:ef:cb:03:89:d3:90: 00:c4:d3:e7:77:f3:a1:ad:aa:d1:0b:30:e9:4e:aa: 6d:1f:12:d9:14:0c:6b:7c:d3:1e:63:22:39:4e:ed: 35:94:51:34:84:0f:03:1f:a6:7b:71:b0:1b:86:2e: 84:21:68:ae:7f:f0:6e:9f:d7:1d:95:c5:4f:b5:e2: 18:da:8a:b8:b4:8a:59:de:a7:22:3f:24:fe:5a:1d: d0:41:47:47:31:cd:8e:30:5e:7d:f8:4d:c5:ee:11: 07:1f:0b:bf:80:8f:ee:fe:8c:96:85:3f:60:a9:3f: f7:bf:4f:24:7a:1b:0b:da:b5:2e:6c:35:bc:ee:94: ca:35:73:f6:54:1c:47:91:f2:7d:a4:cb:36:3e:53: 95:04:1f:5e:83:45:ee:98:b1:3c:bd:5e:03:97:1c: 26:d6:cb:1f:cb:c9:58:4a:6c:38:a0:e7:e1:74:88: 99:96:00:27:01:2b:8e:03:97:9c:25:3d:a6:02:05: 37:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:01:C3:B4:90:A8:3A:1F:79:48:6E:DA:6C:45:A7:B4:EE:01:80:6B X509v3 Authority Key Identifier: keyid:9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:eb:09:1e:a7:38:1a:d2:ab:aa:d1:30:f6:d3:40:e4:0c:c7: 09:ea:8c:a6:5c:be:dd:dc:4a:3f:e5:db:4e:06:8b:9d:1d:4c: bc:12:e3:ab:24:92:87:fa:dd:2b:20:d6:96:f2:d2:f2:69:24: 41:8b:27:99:c1:af:c0:02:8c:c4:bd:31:32:ab:23:f2:8a:95: 00:e7:b0:c4:fb:35:60:d3:10:2a:0e:9d:25:95:1f:ef:bf:73: 41:ab:f2:75:c5:d0:b9:11:1c:a2:91:f5:9e:f6:cc:04:b5:bf: e2:fa:03:34:a7:d0:b3:d4:30:67:a4:cf:3e:74:85:c3:28:6d: 7a:f7:6c:d4:9d:5f:fb:85:63:b5:df:d3:4a:73:4f:30:b2:b2: 92:73:c5:0a:07:92:6b:0d:9a:10:f4:a8:0a:8b:71:3a:f6:2d: 8b:1c:81:b0:93:38:df:f8:b0:95:19:39:14:2e:7f:85:5e:13: ab:0b:9c:95:6c:ee:d2:45:f2:99:19:20:92:f8:e5:e4:cd:1d: 25:d1:54:ac:d8:96:ad:73:8a:95:50:8e:0d:a2:d8:59:5e:2a: a5:13:ca:9d:34:e5:f6:27:a0:d8:06:22:1f:77:97:56:3f:83: 5b:47:a7:46:d2:b1:e7:da:3b:9e:8b:65:e9:f5:c2:cd:bf:06: e3:3f:51:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdFRjIxMTAvBgNVBAUTKDlCOUQzOTcyNUIyN0Q0MjAyODEzODUxNjM0OTJGRjc1 RjE1MTEzREEwHhcNMjYwMzI1MDY1NDE4WhcNMjYwNDAxMDY1NDE4WjAYMRYwFAYD VQQDEw02OWMzODY5YS00MGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPiE0J1ErVJiVaIal6QY2MKMrw+dvoq+Pa6Mr312YQGXZ8Fl4OwmFAaFVzI/ MqUK7BKsAQLDesyN10F/8Lxk6pyMO6DvywOJ05AAxNPnd/OhrarRCzDpTqptHxLZ FAxrfNMeYyI5Tu01lFE0hA8DH6Z7cbAbhi6EIWiuf/Bun9cdlcVPteIY2oq4tIpZ 3qciPyT+Wh3QQUdHMc2OMF59+E3F7hEHHwu/gI/u/oyWhT9gqT/3v08kehsL2rUu bDW87pTKNXP2VBxHkfJ9pMs2PlOVBB9eg0XumLE8vV4Dlxwm1ssfy8lYSmw4oOfh dIiZlgAnASuOA5ecJT2mAgU3SwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGcBw7SQ qDofeUhu2mxFp7TuAYBrMB8GA1UdIwQYMBaAFJudOXJbJ9QgKBOFFjSS/3XxURPa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0VGMi82MjI2QzkzNjYz ODExMUYwQTMzRDIzNjRDNEY5QUUwMi9tNTA1Y2xzbjFDQW9FNFVXTkpMX2RmRlJF OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL201MDVjbHNuMUNBb0U0VVdOSkxfZGZGUkU5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0VGMi82MjI2QzkzNjYzODExMUYwQTMzRDIzNjRDNEY5QUUwMi9tNTA1Y2xzbjFD QW9FNFVXTkpMX2RmRlJFOW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATesJHqc4GtKrqtEw9tNA5AzHCeqMply+3dxKP+XbTgaLnR1MvBLjqySSh/rd KyDWlvLS8mkkQYsnmcGvwAKMxL0xMqsj8oqVAOewxPs1YNMQKg6dJZUf779zQavy dcXQuREcopH1nvbMBLW/4voDNKfQs9QwZ6TPPnSFwyhtevds1J1f+4Vjtd/TSnNP MLKyknPFCgeSaw2aEPSoCotxOvYtixyBsJM43/iwlRk5FC5/hV4TqwuclWzu0kXy mRkgkvjl5M0dJdFUrNiWrXOKlVCODaLYWV4qpRPKnTTl9ieg2AYiH3eXVj+DW0en RtKx59o7notl6fXCzb8G4z9R0g== -----END CERTIFICATE-----Generated at Thu Mar 26 14:12:48 2026 by rpki-client