$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft File: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft (raw, json) Hash identifier: T/zHzxbOJrT0L+ZnwFRCFXitjBrkRTQKfXxtO30Tzzs= Subject key identifier: 35:B4:E7:89:E7:41:89:00:32:45:E5:3C:6D:A6:C7:44:54:85:2E:62 Authority key identifier: 31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF Certificate issuer: /CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft Manifest number: 010C Signing time: Wed 25 Mar 2026 05:14:12 +0000 Manifest this update: Wed 25 Mar 2026 05:14:12 +0000 Manifest next update: Wed 01 Apr 2026 05:14:12 +0000 Files and hashes: 1: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl (hash: jREquzodNwuh8/78ooekun21yzXuQ9ACSlr8oUaRerY=) 2: D9BE56E2927D11EFB83ACB5CC4F9AE02.roa (hash: nelUbxnLDLGVDrJHYxOmJHcdHhK23+JstFe8bl+1cNY=) 3: BE48D4AA927D11EF9651FC4AC4F9AE02.roa (hash: MMlCyL0Z5gXZRhtwZCT1rQU/h+kkk4XV7uk2akYMz9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8203, serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Validity Not Before: Mar 25 05:14:12 2026 GMT Not After : Apr 1 05:14:12 2026 GMT Subject: CN=69c36f24-7fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:85:35:37:a5:58:cb:f9:65:85:7d:dd:8c:7e: 4e:cc:e8:df:fc:de:50:c1:2f:eb:6d:ea:1a:25:cc: d1:a4:b1:56:5c:62:b0:ee:e6:7d:a6:9f:c7:35:50: ce:45:9c:5b:e9:2c:56:fa:24:9f:90:87:de:f9:05: 5a:d1:1f:48:d0:f3:5d:82:15:16:5e:69:02:ea:37: e7:e7:9c:06:d4:bc:4d:e1:f2:95:5e:61:10:b3:ef: e1:c9:79:cc:4c:d9:94:a6:70:a1:90:ff:fe:71:88: f9:e3:b5:c2:1e:df:da:64:21:ed:8f:d5:78:b4:c0: de:f7:db:1a:b6:b2:e8:38:de:0e:f5:ae:f3:3b:4e: 9b:f2:9e:56:b0:d5:b6:e0:5a:fb:82:dd:2c:05:2e: 97:59:2b:f1:5f:a6:d7:2d:82:fc:63:8b:3e:44:36: 78:41:75:9d:69:39:2c:e4:09:c2:97:b7:54:0d:25: c4:86:08:79:9a:4e:f2:33:4a:89:cc:f6:b1:e1:a9: 28:c2:63:66:24:e2:2b:85:ce:a5:33:1c:55:c5:a6: 92:6b:2c:42:21:8b:92:94:c2:eb:31:8f:0f:af:ae: d5:f2:e3:2e:30:73:c3:7a:8d:f1:47:e4:f1:66:81: 58:fd:55:00:29:65:86:56:df:85:2c:28:a1:0a:59: 0b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B4:E7:89:E7:41:89:00:32:45:E5:3C:6D:A6:C7:44:54:85:2E:62 X509v3 Authority Key Identifier: keyid:31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:73:a6:7c:a6:f2:d6:1a:11:cb:80:9e:fc:3d:da:9f:f8:8f: 2e:04:68:26:82:f0:de:a0:7c:1f:11:3b:e6:5d:77:ff:da:37: 63:53:84:4d:95:7a:e0:d9:f9:ea:f4:bb:08:93:4e:da:18:6b: 1a:1f:3d:a3:b8:ea:cf:18:28:16:5a:7a:35:62:1c:58:bc:a4: 24:c7:a3:e1:82:e4:a6:78:ce:1c:9c:e5:40:b5:b9:d1:6d:de: b8:74:ea:2a:5f:17:d0:f0:c6:b0:b0:f2:af:5d:07:7c:50:f5: ab:ae:51:22:0b:85:3e:d2:11:b5:ab:91:6b:9c:1a:38:34:9e: 10:56:43:9b:f7:69:b3:ac:31:bb:35:e0:7a:c8:9f:c3:e4:31: fb:46:6e:5c:43:31:c8:08:65:fc:9b:5e:24:41:1b:f0:d9:56: 3c:ef:cb:38:6b:51:f0:27:e0:1c:3b:34:f6:85:a9:2f:34:77: aa:ef:2c:1e:a9:5c:15:e9:60:f3:c1:70:19:fa:0a:8e:e9:1f: a5:3d:b2:fc:26:b7:a7:cc:2f:6f:ff:bf:52:e4:42:52:2d:37: 40:77:01:b5:ce:96:e7:52:6c:2a:ce:27:4b:dd:9c:f2:72:12: f1:19:41:2d:4b:75:75:80:f0:66:13:a8:50:21:b8:65:f8:25: f7:19:84:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMDMxMTAvBgNVBAUTKDMxRDIxRDVDRUU1RkFDREVGM0M4QzFDODdEMEQ3Mzkx RjlGNzNBRkYwHhcNMjYwMzI1MDUxNDEyWhcNMjYwNDAxMDUxNDEyWjAYMRYwFAYD VQQDEw02OWMzNmYyNC03ZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYU1N6VYy/llhX3djH5OzOjf/N5QwS/rbeoaJczRpLFWXGKw7uZ9pp/HNVDO RZxb6SxW+iSfkIfe+QVa0R9I0PNdghUWXmkC6jfn55wG1LxN4fKVXmEQs+/hyXnM TNmUpnChkP/+cYj547XCHt/aZCHtj9V4tMDe99satrLoON4O9a7zO06b8p5WsNW2 4Fr7gt0sBS6XWSvxX6bXLYL8Y4s+RDZ4QXWdaTks5AnCl7dUDSXEhgh5mk7yM0qJ zPax4akowmNmJOIrhc6lMxxVxaaSayxCIYuSlMLrMY8Pr67V8uMuMHPDeo3xR+Tx ZoFY/VUAKWWGVt+FLCihClkLnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDW054nn QYkAMkXlPG2mx0RUhS5iMB8GA1UdIwQYMBaAFDHSHVzuX6ze88jByH0Nc5H59zr/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIwMy9CQzUxNURBQTky N0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJON3p5TUhJZlExemtmbjNP djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kSWRYTzVmck43enlNSElmUTF6a2ZuM092OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIwMy9CQzUxNURBQTkyN0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJO N3p5TUhJZlExemtmbjNPdjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqXOmfKby1hoRy4Ce/D3an/iPLgRoJoLw3qB8HxE75l13/9o3Y1OETZV64Nn5 6vS7CJNO2hhrGh89o7jqzxgoFlp6NWIcWLykJMej4YLkpnjOHJzlQLW50W3euHTq Kl8X0PDGsLDyr10HfFD1q65RIguFPtIRtauRa5waODSeEFZDm/dps6wxuzXgesif w+Qx+0ZuXEMxyAhl/JteJEEb8NlWPO/LOGtR8CfgHDs09oWpLzR3qu8sHqlcFelg 88FwGfoKjukfpT2y/Ca3p8wvb/+/UuRCUi03QHcBtc6W51JsKs4nS92c8nIS8RlB LUt1dYDwZhOoUCG4Zfgl9xmEZA== -----END CERTIFICATE-----Generated at Thu Mar 26 00:53:28 2026 by rpki-client