$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft File: tii4qSXEXjrDpxvkEUZimYv0s-A.mft (raw, json) Hash identifier: FlPkqHDVSyZsmf/7eOj4lgccGzOeyH/mI9vnsgDbOso= Subject key identifier: 3D:C8:4D:C8:D2:58:1B:14:3E:5A:A5:E2:64:22:13:86:74:57:47:01 Authority key identifier: B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0 Certificate issuer: /CN=A91CA8EA/serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0 Certificate serial: 053A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft Manifest number: 0528 Signing time: Tue 24 Mar 2026 23:14:59 +0000 Manifest this update: Tue 24 Mar 2026 23:14:59 +0000 Manifest next update: Tue 31 Mar 2026 23:14:59 +0000 Files and hashes: 1: tii4qSXEXjrDpxvkEUZimYv0s-A.crl (hash: zbEtoUX51O144QP0eYPLMx0YICAflVPKRgWSEwdAOmU=) 2: 14A07422D45E11EEB37CB639C4F9AE02.roa (hash: PITcK7XRyy+LMYXHuylhY3+Q/YKqPcRjVZDoGb15cIU=) 3: 207388F2D45E11EE8D29793EC4F9AE02.roa (hash: GZLAqFDcKyRRvVvDeTXr2Kcx2FQWYyo5VaaW0SZn3+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1338 (0x53a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA8EA, serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0 Validity Not Before: Mar 24 23:14:59 2026 GMT Not After : Mar 31 23:14:59 2026 GMT Subject: CN=69c31af3-0a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:55:40:9d:d6:80:38:1f:5b:9e:93:9e:3b:3f: 80:6f:73:7d:93:1c:21:70:5c:75:b8:40:61:95:1a: 98:0f:f1:6e:79:62:8a:05:04:c1:46:92:f4:f5:1a: f5:b5:78:1f:81:68:f3:1b:f1:aa:75:0d:8d:87:ce: 3b:5c:9a:93:3e:5c:ea:2b:39:75:a5:d1:ca:a0:08: f8:da:36:80:95:1f:70:58:b3:27:09:07:b8:7c:77: 0e:57:db:f7:65:2d:4a:10:e9:c2:22:0e:26:44:9f: ed:1e:35:54:71:c7:dd:d4:05:54:e9:26:21:75:d3: 8c:5b:35:5a:01:a0:cf:fa:68:69:d9:ee:eb:68:5d: 4e:11:e9:e2:f6:7e:0c:7e:3b:6c:39:ed:f6:d9:f8: 94:1b:83:c1:7e:89:12:0a:ab:38:8d:43:74:6c:17: c0:00:71:98:a1:2f:48:75:10:6d:e2:ed:c6:47:cd: 00:45:bb:71:2f:72:18:9a:c9:9e:44:83:00:96:a9: a8:bc:88:f3:ef:97:9f:ef:b4:c2:5d:f4:82:c3:aa: 72:9b:ab:ba:b8:0d:b9:bb:22:3f:b8:5f:ae:a0:35: fe:6b:bf:c1:de:ac:6f:fb:4c:01:95:49:76:ba:61: 1a:e5:f3:8e:aa:f1:aa:2d:ae:c1:1c:8f:7c:35:f5: 96:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C8:4D:C8:D2:58:1B:14:3E:5A:A5:E2:64:22:13:86:74:57:47:01 X509v3 Authority Key Identifier: keyid:B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:0e:23:c5:94:4c:fb:5e:2f:09:ce:81:f6:59:52:37:f3:28: 58:97:f6:7d:f7:20:c0:17:44:ad:7b:38:7b:5a:32:1d:71:c1: e5:5a:ed:d7:a7:29:bd:5e:93:72:67:58:3d:6e:aa:fe:8a:e5: 8d:47:f0:57:85:89:95:b8:a6:79:1b:2a:c3:8e:8c:2f:85:f4: 13:3c:81:5d:62:f1:6c:fc:49:2e:ec:cf:cb:ce:4f:bd:f0:0d: 35:77:53:78:b4:ed:8c:87:84:73:b3:5c:90:30:7c:03:c8:b8: 70:52:77:69:b4:dc:9d:b9:f0:fd:15:bc:5c:59:93:61:50:a4: 4d:0a:c7:17:00:46:c5:fb:ed:19:1c:a8:af:b1:cf:58:21:4a: a5:74:9f:86:d7:b5:25:03:dd:98:e8:03:15:fc:0b:04:f6:12: 52:ff:b3:a4:8b:41:97:2b:52:89:c6:fa:05:18:62:21:92:cb: e5:72:0c:11:c2:14:b3:b5:39:a0:d4:f0:13:0f:b3:a6:d4:e6: a1:98:9b:04:ba:f6:ba:56:5c:9c:bf:5a:d3:74:19:b9:8b:9a: 43:5b:c4:dc:c3:e5:23:80:85:4a:45:ed:d3:02:ab:88:da:f9: 53:2c:86:b8:b0:80:83:ee:37:35:59:06:2c:4d:aa:70:6c:27: 0d:2b:5a:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4RUExMTAvBgNVBAUTKEI2MjhCOEE5MjVDNDVFM0FDM0E3MUJFNDExNDY2Mjk5 OEJGNEIzRTAwHhcNMjYwMzI0MjMxNDU5WhcNMjYwMzMxMjMxNDU5WjAYMRYwFAYD VQQDEw02OWMzMWFmMy0wYTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmFVAndaAOB9bnpOeOz+Ab3N9kxwhcFx1uEBhlRqYD/FueWKKBQTBRpL09Rr1 tXgfgWjzG/GqdQ2Nh847XJqTPlzqKzl1pdHKoAj42jaAlR9wWLMnCQe4fHcOV9v3 ZS1KEOnCIg4mRJ/tHjVUccfd1AVU6SYhddOMWzVaAaDP+mhp2e7raF1OEeni9n4M fjtsOe322fiUG4PBfokSCqs4jUN0bBfAAHGYoS9IdRBt4u3GR80ARbtxL3IYmsme RIMAlqmovIjz75ef77TCXfSCw6pym6u6uA25uyI/uF+uoDX+a7/B3qxv+0wBlUl2 umEa5fOOqvGqLa7BHI98NfWWzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD3ITcjS WBsUPlql4mQiE4Z0V0cBMB8GA1UdIwQYMBaAFLYouKklxF46w6cb5BFGYpmL9LPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQThFQS9EOENBMTNDMjQw NDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhqckRweHZrRVVaaW1ZdjBz LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpaTRxU1hFWGpyRHB4dmtFVVppbVl2MHMtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QThFQS9EOENBMTNDMjQwNDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhq ckRweHZrRVVaaW1ZdjBzLUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIg4jxZRM+14vCc6B9llSN/MoWJf2ffcgwBdErXs4e1oyHXHB5Vrt16cpvV6T cmdYPW6q/orljUfwV4WJlbimeRsqw46ML4X0EzyBXWLxbPxJLuzPy85PvfANNXdT eLTtjIeEc7NckDB8A8i4cFJ3abTcnbnw/RW8XFmTYVCkTQrHFwBGxfvtGRyor7HP WCFKpXSfhte1JQPdmOgDFfwLBPYSUv+zpItBlytSicb6BRhiIZLL5XIMEcIUs7U5 oNTwEw+zptTmoZibBLr2ulZcnL9a03QZuYuaQ1vE3MPlI4CFSkXt0wKriNr5UyyG uLCAg+43NVkGLE2qcGwnDSta0w== -----END CERTIFICATE-----Generated at Thu Mar 26 18:57:29 2026 by rpki-client