$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft File: sRoiVto9XbOPPn6bWct0YsnnsqY.mft (raw, json) Hash identifier: kaQj8La5jV3FR1hZ7pi7tL0cCMLk2BS24jISObu5mQw= Subject key identifier: 10:30:8B:7E:97:56:B8:19:F6:89:68:07:EB:2A:7A:F6:1D:AE:34:7D Authority key identifier: B1:1A:22:56:DA:3D:5D:B3:8F:3E:7E:9B:59:CB:74:62:C9:E7:B2:A6 Certificate issuer: /CN=A91CCCF4/serialNumber=B11A2256DA3D5DB38F3E7E9B59CB7462C9E7B2A6 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sRoiVto9XbOPPn6bWct0YsnnsqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft Manifest number: 28 Signing time: Wed 25 Mar 2026 07:57:18 +0000 Manifest this update: Wed 25 Mar 2026 07:57:17 +0000 Manifest next update: Wed 01 Apr 2026 07:57:17 +0000 Files and hashes: 1: sRoiVto9XbOPPn6bWct0YsnnsqY.crl (hash: AzByVHUMnZBx4EcONAM/9QLDQCWVq9yc/lZmlS9QVoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.crl rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sRoiVto9XbOPPn6bWct0YsnnsqY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCF4, serialNumber=B11A2256DA3D5DB38F3E7E9B59CB7462C9E7B2A6 Validity Not Before: Mar 25 07:57:17 2026 GMT Not After : Apr 1 07:57:17 2026 GMT Subject: CN=69c3955d-26a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1b:f6:f7:8a:b0:a1:f1:72:21:cc:24:1f:9d: 48:1a:f1:c6:80:f1:dd:9e:2d:a6:c8:cb:ee:3c:ed: 6a:cf:2c:06:23:3e:68:fc:3d:b4:9a:d1:11:96:f2: 17:87:99:cc:ff:7d:3a:7d:42:16:42:44:c8:f8:3c: 84:44:a2:10:8e:74:d9:3b:7b:a6:73:8c:f6:ed:5e: 52:de:9d:3a:ee:09:36:df:ee:55:1d:be:64:99:84: c3:81:cd:39:3c:75:ce:5a:a8:a5:d4:da:74:3e:e1: d7:85:dd:0d:24:39:99:e6:ab:ce:0c:bf:66:0f:ac: 53:14:1b:54:5d:0a:77:4f:c3:3d:e9:0a:83:b3:af: e0:17:2f:ef:5b:e2:51:be:96:e3:c5:7d:eb:29:7c: db:d0:ed:06:9d:d3:13:3d:db:37:52:83:c2:0c:09: 0a:41:c3:83:17:bd:72:40:29:3d:27:59:9d:7e:fa: 2b:e7:49:91:66:44:48:bd:c0:11:ee:7b:b3:55:89: 61:2b:30:58:f5:dc:de:f5:83:c6:99:4a:86:3a:99: 8a:c8:2d:f2:f6:4d:bc:d4:37:75:f4:1f:d9:96:68: 42:6d:e4:6f:5b:9c:cd:70:1d:ca:20:5a:68:74:62: 71:7c:f3:8c:d4:fe:e4:14:a9:3e:07:04:da:7e:7f: 04:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:30:8B:7E:97:56:B8:19:F6:89:68:07:EB:2A:7A:F6:1D:AE:34:7D X509v3 Authority Key Identifier: keyid:B1:1A:22:56:DA:3D:5D:B3:8F:3E:7E:9B:59:CB:74:62:C9:E7:B2:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sRoiVto9XbOPPn6bWct0YsnnsqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:8f:bb:61:de:c5:f5:be:10:d8:c3:79:48:0c:43:97:b4:e1: ad:d5:52:f5:1c:dc:c4:7d:eb:e3:2c:ba:8c:cc:4c:73:05:11: e4:39:e7:16:a0:7a:80:ef:63:94:29:24:6c:b7:2d:16:8c:05: e2:a3:f2:db:cb:ef:db:d2:10:e5:d7:af:8e:f1:5c:c2:b1:1f: 13:c6:4d:14:bd:e3:e3:c1:5b:9c:d9:bc:8f:71:93:6d:4a:a7: 50:fc:76:c0:12:e3:41:68:f4:6b:29:9c:9b:5f:90:31:01:e8: 7b:0a:9a:f9:40:ab:b4:4b:8d:5f:e7:08:dc:04:3e:71:5e:3e: ca:c7:6a:e4:29:20:8c:b6:91:98:f9:2d:40:c7:10:5e:0a:e9: 60:0b:b2:52:f5:dc:04:c3:2e:36:ab:64:00:62:33:59:a7:64: c0:9f:f9:a2:ae:a3:ec:0a:da:2a:0b:47:aa:10:5b:77:38:e1: ef:be:f0:8f:4d:44:a1:c5:0a:a3:15:55:b7:82:49:63:a8:8f: d3:0d:9f:33:d5:f3:b4:ad:ff:01:54:f5:40:92:e3:49:db:7d: d9:0e:37:bc:bf:f7:9d:31:20:9b:83:1d:74:f9:94:95:d0:12: b6:11:f7:98:0f:7d:d7:66:23:ae:e6:7c:79:23:cf:c2:90:bc: 54:97:95:ba -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0NGNDExMC8GA1UEBRMoQjExQTIyNTZEQTNENURCMzhGM0U3RTlCNTlDQjc0NjJD OUU3QjJBNjAeFw0yNjAzMjUwNzU3MTdaFw0yNjA0MDEwNzU3MTdaMBgxFjAUBgNV BAMTDTY5YzM5NTVkLTI2YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0G/b3irCh8XIhzCQfnUga8caA8d2eLabIy+487WrPLAYjPmj8PbSa0RGW8heH mcz/fTp9QhZCRMj4PIREohCOdNk7e6ZzjPbtXlLenTruCTbf7lUdvmSZhMOBzTk8 dc5aqKXU2nQ+4deF3Q0kOZnmq84Mv2YPrFMUG1RdCndPwz3pCoOzr+AXL+9b4lG+ luPFfespfNvQ7Qad0xM92zdSg8IMCQpBw4MXvXJAKT0nWZ1++ivnSZFmREi9wBHu e7NViWErMFj13N71g8aZSoY6mYrILfL2TbzUN3X0H9mWaEJt5G9bnM1wHcogWmh0 YnF884zU/uQUqT4HBNp+fwSHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEDCLfpdW uBn2iWgH6yp69h2uNH0wHwYDVR0jBBgwFoAUsRoiVto9XbOPPn6bWct0YsnnsqYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQ0Y0L0EyNDQxQkQ4RjBG MTExRjBCRDZERjU1NTQzNkY1NkJDL3NSb2lWdG85WGJPUFBuNmJXY3QwWXNubnNx WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc1JvaVZ0bzlYYk9QUG42YldjdDBZc25uc3FZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND Q0Y0L0EyNDQxQkQ4RjBGMTExRjBCRDZERjU1NTQzNkY1NkJDL3NSb2lWdG85WGJP UFBuNmJXY3QwWXNubnNxWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDIj7th3sX1vhDYw3lIDEOXtOGt1VL1HNzEfevjLLqMzExzBRHkOecWoHqA72OU KSRsty0WjAXio/Lby+/b0hDl16+O8VzCsR8Txk0UvePjwVuc2byPcZNtSqdQ/HbA EuNBaPRrKZybX5AxAeh7Cpr5QKu0S41f5wjcBD5xXj7Kx2rkKSCMtpGY+S1AxxBe CulgC7JS9dwEwy42q2QAYjNZp2TAn/mirqPsCtoqC0eqEFt3OOHvvvCPTUShxQqj FVW3gkljqI/TDZ8z1fO0rf8BVPVAkuNJ233ZDje8v/edMSCbgx10+ZSV0BK2EfeY D33XZiOu5nx5I8/CkLxUl5W6 -----END CERTIFICATE-----Generated at Thu Mar 26 20:36:36 2026 by rpki-client