$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft File: g4L2GIxKbdZpVNVxij2cz5uL-JU.mft (raw, json) Hash identifier: f7V9roklMumvmhqovJuC1nKDMBXx1guBB8ldmLqU10w= Subject key identifier: B3:4A:97:51:00:4C:0F:34:29:97:13:DA:63:5A:AA:6F:AB:67:5D:A3 Authority key identifier: 83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95 Certificate issuer: /CN=A91CB8BA/serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895 Certificate serial: 0888 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft Manifest number: 087B Signing time: Tue 24 Mar 2026 19:56:32 +0000 Manifest this update: Tue 24 Mar 2026 19:56:31 +0000 Manifest next update: Tue 31 Mar 2026 19:56:31 +0000 Files and hashes: 1: g4L2GIxKbdZpVNVxij2cz5uL-JU.crl (hash: ry6iq3HI85a8m1N8UkaAhDaIKyW9R3x9n0WjB80JdT0=) 2: 21B96F2E7BC911EBABCF472DC4F9AE02.roa (hash: i37T+miB19JllsQUkIFRFN9qItWKSwoaTSynWV3QKsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:56:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2184 (0x888) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA, serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895 Validity Not Before: Mar 24 19:56:31 2026 GMT Not After : Mar 31 19:56:31 2026 GMT Subject: CN=69c2ec6f-703c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6a:0d:97:9d:1d:d9:44:89:cc:c2:d4:da:87: ee:86:c1:dc:67:62:1b:2f:23:8b:8a:d2:0c:2f:8a: 85:62:17:27:31:c0:11:36:dd:06:28:21:2b:d2:42: f3:98:fc:69:ee:16:d6:62:6c:cc:a3:d6:74:f1:b6: ff:71:ab:59:65:ac:ee:23:6b:36:ca:2a:86:5e:e8: f7:8a:e7:93:75:d2:3f:1c:a9:bf:11:c3:da:52:d5: 9d:96:f7:bc:12:eb:5d:3a:8e:ca:9b:77:ae:ca:f2: eb:0a:80:bf:fd:4a:f6:64:7d:87:9e:3f:ea:23:86: 8a:aa:5f:48:1d:72:41:f8:29:89:fb:e9:c4:d1:69: 61:1d:a4:46:38:41:76:37:d0:71:48:d3:05:8c:68: 95:1b:a2:dc:f0:bd:4c:36:b6:05:a8:54:ad:d0:76: 80:87:6c:4b:d1:2c:1d:2f:45:4f:47:35:cb:46:d5: 4e:22:2a:93:35:9f:20:d6:77:7b:4f:b0:ac:cb:1c: 73:f4:6f:35:ba:07:f9:c0:c1:7d:0b:64:ad:48:a0: 31:09:16:d1:53:53:1f:c3:d1:f8:e5:cd:99:0f:1d: 6a:1a:a1:2f:65:e4:16:0e:4b:aa:ef:aa:d1:02:0b: 8d:1b:4e:97:3d:f0:a9:ee:5a:0e:7e:d8:d9:0c:3f: 61:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4A:97:51:00:4C:0F:34:29:97:13:DA:63:5A:AA:6F:AB:67:5D:A3 X509v3 Authority Key Identifier: keyid:83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:20:30:80:04:6b:ed:a5:d5:37:ee:09:95:2f:9e:c7:e1:7d: 92:bc:cd:f9:6d:ee:d5:a8:48:2f:ef:2a:61:c9:91:de:df:3c: 9b:a1:0f:f1:01:46:77:79:d5:96:75:33:f6:3a:c7:0d:19:8c: 6e:b7:63:03:5d:2f:bf:3a:92:03:87:99:cc:06:84:08:5f:c9: 26:de:a0:6a:c8:42:dc:d9:4b:81:84:ab:26:07:22:af:c1:21: 7f:c7:a2:36:61:58:7b:c9:af:b3:b0:65:dd:34:7f:d0:91:2e: 0f:a7:0c:2f:31:c3:eb:50:57:3b:fc:63:16:7a:4b:27:b4:c8: 65:73:ac:66:31:f6:bc:96:8a:c5:04:ea:01:8a:43:cb:7d:18: c0:2f:65:67:7f:9d:0d:e0:03:c3:ec:1f:28:57:f4:58:52:31: c8:ad:f5:7d:e2:f1:4f:aa:f7:05:50:ba:ec:e5:20:25:4a:97: f6:54:2e:7c:56:0b:1a:25:66:81:3b:9b:8b:a2:4e:68:9c:63: f3:09:63:b7:a3:b4:19:78:26:14:02:25:30:08:74:4a:ef:e5: 3b:45:b5:d1:45:c7:0a:b7:95:78:d6:a4:73:70:df:da:cb:92: 8c:20:c2:69:36:83:1b:5e:8b:11:e2:21:ef:0f:31:4f:4d:57: 45:8e:b7:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDgzODJGNjE4OEM0QTZERDY2OTU0RDU3MThBM0Q5Q0NG OUI4QkY4OTUwHhcNMjYwMzI0MTk1NjMxWhcNMjYwMzMxMTk1NjMxWjAYMRYwFAYD VQQDEw02OWMyZWM2Zi03MDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmoNl50d2USJzMLU2ofuhsHcZ2IbLyOLitIML4qFYhcnMcARNt0GKCEr0kLz mPxp7hbWYmzMo9Z08bb/catZZazuI2s2yiqGXuj3iueTddI/HKm/EcPaUtWdlve8 EutdOo7Km3euyvLrCoC//Ur2ZH2Hnj/qI4aKql9IHXJB+CmJ++nE0WlhHaRGOEF2 N9BxSNMFjGiVG6Lc8L1MNrYFqFSt0HaAh2xL0SwdL0VPRzXLRtVOIiqTNZ8g1nd7 T7Csyxxz9G81ugf5wMF9C2StSKAxCRbRU1Mfw9H45c2ZDx1qGqEvZeQWDkuq76rR AguNG06XPfCp7loOftjZDD9hJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLNKl1EA TA80KZcT2mNaqm+rZ12jMB8GA1UdIwQYMBaAFIOC9hiMSm3WaVTVcYo9nM+bi/iV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8yNTEwQjRFNkYw RkMxMUVBQjk4NUZBNUZDNEY5QUUwMi9nNEwyR0l4S2JkWnBWTlZ4aWoyY3o1dUwt SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2c0TDJHSXhLYmRacFZOVnhpajJjejV1TC1KVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhCQS8yNTEwQjRFNkYwRkMxMUVBQjk4NUZBNUZDNEY5QUUwMi9nNEwyR0l4S2Jk WnBWTlZ4aWoyY3o1dUwtSlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHyAwgARr7aXVN+4JlS+ex+F9krzN+W3u1ahIL+8qYcmR3t88m6EP8QFGd3nV lnUz9jrHDRmMbrdjA10vvzqSA4eZzAaECF/JJt6gashC3NlLgYSrJgcir8Ehf8ei NmFYe8mvs7Bl3TR/0JEuD6cMLzHD61BXO/xjFnpLJ7TIZXOsZjH2vJaKxQTqAYpD y30YwC9lZ3+dDeADw+wfKFf0WFIxyK31feLxT6r3BVC67OUgJUqX9lQufFYLGiVm gTubi6JOaJxj8wljt6O0GXgmFAIlMAh0Su/lO0W10UXHCreVeNakc3Df2suSjCDC aTaDG16LEeIh7w8xT01XRY631A== -----END CERTIFICATE-----Generated at Thu Mar 26 00:55:24 2026 by rpki-client