$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft File: FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft (raw, json) Hash identifier: dwhs/ENyXfVDLxpRYt80rc2N4rG6c8/P3mJHC9a7JKI= Subject key identifier: 1F:CA:4E:32:D9:B7:B9:60:28:4E:69:CF:8E:14:7E:90:5E:1D:8C:DE Authority key identifier: 16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 Certificate issuer: /CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004 Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft Manifest number: 0A9C Signing time: Tue 24 Mar 2026 20:04:17 +0000 Manifest this update: Tue 24 Mar 2026 20:04:17 +0000 Manifest next update: Tue 31 Mar 2026 20:04:17 +0000 Files and hashes: 1: FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl (hash: svOYlyiMdVn01jEWWNmdP3qp7c3q84naTmimdAh76Ss=) 2: C483C80CDE4011EFB4A11D5CC4F9AE02.roa (hash: 39L0tuk++HvgBqoCLQnzcqUrTZqQJu3YDe0GGFe9LNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=16C662726F4A009133D6591664239E00C681A004 Validity Not Before: Mar 24 20:04:17 2026 GMT Not After : Mar 31 20:04:17 2026 GMT Subject: CN=69c2ee41-4546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9e:be:d3:18:26:f1:eb:b5:16:20:42:03:88: 6c:16:2f:bc:b0:39:2d:ac:21:d9:a8:a9:bf:bf:05: d5:ed:3c:0e:29:06:e9:ba:29:94:fd:ee:d5:c3:b8: 1f:7f:f2:29:38:fa:c4:95:42:88:6e:4b:58:9c:8f: 88:44:2c:69:48:6c:98:dc:94:de:e7:fb:ed:9a:26: 31:69:f7:35:32:30:e4:ee:8e:9d:c0:aa:a5:e1:5b: b9:32:fd:d0:af:e2:44:16:1b:b3:21:31:10:ea:7b: 60:4a:8e:07:53:cb:77:e6:2a:ce:8f:a0:1e:5c:cb: f6:2e:2b:4f:6e:38:fb:ec:a8:a0:36:a9:39:bf:6d: a1:d8:39:48:53:90:a0:f1:df:a0:18:69:1c:77:04: a8:f2:b7:96:4b:8e:00:16:76:e6:56:f8:90:8d:ad: fc:ce:8f:b4:c3:31:f4:31:de:9f:10:d6:1d:6f:50: 58:3f:76:11:93:93:f6:06:0e:9b:45:0d:02:f1:34: 5e:ef:30:54:23:ca:66:14:6e:11:dc:e9:9b:f1:b6: 92:d6:e7:52:30:e1:5c:82:93:0d:ec:c8:1c:4c:5a: 35:fe:e0:59:0f:41:93:f0:c8:9a:3d:8a:48:92:42: 76:2e:f1:b4:a1:79:ff:c2:a6:1a:2b:34:fb:ed:77: 40:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:CA:4E:32:D9:B7:B9:60:28:4E:69:CF:8E:14:7E:90:5E:1D:8C:DE X509v3 Authority Key Identifier: keyid:16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e7:74:02:c8:dc:67:d6:55:ad:5f:f5:26:f4:ae:b0:4d:58: 68:c1:fc:de:c1:28:a3:31:78:db:9e:b9:f6:95:3b:9a:97:2b: 22:4a:13:ef:00:b8:ab:73:b7:5a:fe:16:0c:f3:55:2a:c8:6a: c2:29:09:52:4d:02:22:f0:37:f5:3c:b9:2e:e7:69:da:6c:ea: 86:bb:4d:94:69:82:65:22:f4:8a:6f:ed:4e:f4:3c:6f:79:5b: fe:9d:06:56:cb:9c:73:90:b8:d9:04:7f:13:ed:cd:26:24:8a: 89:fd:c1:dd:ac:9e:9e:5d:75:c7:69:ed:9e:f6:ea:c7:b0:a0: 53:86:bf:18:15:a8:99:27:50:43:7b:f5:b2:aa:de:6c:89:f8: 5c:39:8c:f3:72:f5:30:2b:a2:d6:b7:10:0f:73:da:48:5b:ff: a2:21:08:87:1a:79:62:7e:67:2e:52:8a:ce:8e:0b:b7:a4:a3: b1:94:ef:b8:c0:e8:a5:41:78:5c:0f:72:58:45:9d:08:78:f2: a5:6f:51:85:08:8f:fe:f7:2d:ef:95:0f:4d:20:36:d9:6f:a9: de:34:ae:06:92:32:d2:32:c2:e0:60:80:f0:b1:af:20:cb:f7: a4:aa:87:20:91:d8:27:38:81:9e:5e:5c:56:d1:d5:ca:ad:d8: 0b:e1:e3:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDE2QzY2MjcyNkY0QTAwOTEzM0Q2NTkxNjY0MjM5RTAw QzY4MUEwMDQwHhcNMjYwMzI0MjAwNDE3WhcNMjYwMzMxMjAwNDE3WjAYMRYwFAYD VQQDEw02OWMyZWU0MS00NTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmJ6+0xgm8eu1FiBCA4hsFi+8sDktrCHZqKm/vwXV7TwOKQbpuimU/e7Vw7gf f/IpOPrElUKIbktYnI+IRCxpSGyY3JTe5/vtmiYxafc1MjDk7o6dwKql4Vu5Mv3Q r+JEFhuzITEQ6ntgSo4HU8t35irOj6AeXMv2LitPbjj77KigNqk5v22h2DlIU5Cg 8d+gGGkcdwSo8reWS44AFnbmVviQja38zo+0wzH0Md6fENYdb1BYP3YRk5P2Bg6b RQ0C8TRe7zBUI8pmFG4R3Omb8baS1udSMOFcgpMN7MgcTFo1/uBZD0GT8MiaPYpI kkJ2LvG0oXn/wqYaKzT77XdADQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/KTjLZ t7lgKE5pz44UfpBeHYzeMB8GA1UdIwQYMBaAFBbGYnJvSgCRM9ZZFmQjngDGgaAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FKRXoxbGtXWkNPZUFNYUJv QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzWmljbTlLQUpFejFsa1daQ09lQU1hQm9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FK RXoxbGtXWkNPZUFNYUJvQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQOd0AsjcZ9ZVrV/1JvSusE1YaMH83sEoozF425659pU7mpcrIkoT7wC4q3O3 Wv4WDPNVKshqwikJUk0CIvA39Ty5Ludp2mzqhrtNlGmCZSL0im/tTvQ8b3lb/p0G Vsucc5C42QR/E+3NJiSKif3B3ayenl11x2ntnvbqx7CgU4a/GBWomSdQQ3v1sqre bIn4XDmM83L1MCui1rcQD3PaSFv/oiEIhxp5Yn5nLlKKzo4Lt6SjsZTvuMDopUF4 XA9yWEWdCHjypW9RhQiP/vct75UPTSA22W+p3jSuBpIy0jLC4GCA8LGvIMv3pKqH IJHYJziBnl5cVtHVyq3YC+Hj5Q== -----END CERTIFICATE-----Generated at Thu Mar 26 12:55:11 2026 by rpki-client