$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft File: _D97sEVCVvMfJcoAhkvDpr11X5Y.mft (raw, json) Hash identifier: 0kLzeaei2VlvV7UYQMBKf96HYWeiRGrz5Zfon4sxZ5o= Subject key identifier: 9A:3C:DB:8A:2A:65:26:F8:5F:95:2A:86:23:C3:B5:96:91:A8:5D:27 Authority key identifier: FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96 Certificate issuer: /CN=A91CE2DE/serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96 Certificate serial: 02AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft Manifest number: 02A8 Signing time: Fri 27 Mar 2026 01:13:41 +0000 Manifest this update: Fri 27 Mar 2026 01:13:41 +0000 Manifest next update: Fri 03 Apr 2026 01:13:41 +0000 Files and hashes: 1: _D97sEVCVvMfJcoAhkvDpr11X5Y.crl (hash: h827WZzt8u5zYT5MLTbwkQj88Z17efoGlIA0luMvAWg=) 2: 97B4F5603B3D11ED822BB46CC4F9AE02.roa (hash: qWq9FBfV0TlO+Nnhl0xmqfZ2SJgk0It8nQYA3EDnxXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 01:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE2DE, serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96 Validity Not Before: Mar 27 01:13:41 2026 GMT Not After : Apr 3 01:13:41 2026 GMT Subject: CN=69c5d9c5-6b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6c:8f:c8:79:bc:0c:cb:a2:8d:f0:59:8e:2a: 91:f7:63:86:83:33:49:5e:6a:17:f2:3d:66:63:8a: b1:14:e3:b0:f0:68:55:dd:25:2a:61:2c:67:90:d0: 3c:49:e2:94:fe:8e:da:5f:ec:27:6f:8e:2e:92:e9: c4:0b:59:f2:12:d6:81:e1:06:d0:7a:ac:0c:59:69: 2e:44:d6:94:f5:e9:e9:53:6f:ad:2f:37:61:e3:1f: 09:6e:a2:99:1a:ba:77:83:e8:fc:db:6c:59:7d:04: 4d:e8:bd:66:6f:39:20:9e:56:97:bb:6f:68:28:1f: 62:d4:59:61:d7:c3:5a:3e:5a:ea:ca:3a:0c:94:f0: a3:a4:16:3c:1b:65:da:50:3b:a4:aa:3c:c0:08:fa: 03:f4:55:b2:3f:66:7e:35:0a:b8:3f:d3:c9:e2:fa: 16:22:71:af:8d:27:79:13:b1:03:a5:a7:62:a0:50: b6:48:56:8d:8c:f3:b4:08:70:88:f9:dd:00:e3:91: 6a:e5:d2:3d:48:42:17:31:61:29:b7:50:54:c2:9e: 6b:19:5a:f1:19:95:5b:79:a9:33:26:8c:c2:98:81: 30:e7:2a:d8:e2:83:14:ce:20:3b:cc:1e:87:58:61: 8e:6e:cf:07:a3:43:70:8b:4f:47:3a:46:b5:c7:32: c2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3C:DB:8A:2A:65:26:F8:5F:95:2A:86:23:C3:B5:96:91:A8:5D:27 X509v3 Authority Key Identifier: keyid:FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:52:ba:52:af:8d:93:d6:63:dc:a7:74:5f:e2:83:9a:d7:cc: 94:3f:01:25:18:cf:1d:ae:7d:7d:06:74:99:0d:2d:2d:f9:83: 44:93:58:e3:5f:43:44:8b:68:62:71:25:56:a5:5c:83:d2:45: 79:64:b4:49:cf:02:2a:8b:f0:eb:aa:07:ea:51:b2:a4:f3:cd: d3:cf:1c:3a:fc:82:a8:04:16:4e:ac:ee:df:65:87:58:13:db: d7:1d:c8:7c:3c:f2:fa:49:02:3c:f2:be:5d:ea:0b:6b:8c:f8: 72:6a:20:9a:13:ba:61:32:6e:f3:c5:9e:e3:7d:7c:3f:9b:2c: aa:61:15:99:7a:71:5a:87:d3:a5:8c:ed:96:3d:5f:c4:0f:d6: 10:74:94:79:19:82:8c:80:d3:03:af:7b:b7:16:41:c1:a5:1e: 28:e4:8f:d7:b7:40:41:e6:8d:4f:ba:ff:0e:de:07:fd:be:3b: 81:45:ef:33:b7:10:60:a7:8e:75:69:8c:56:d6:3c:de:b7:33: aa:29:c5:d4:78:31:95:f7:ba:a3:99:e8:7e:39:5e:66:e7:6b: c4:fa:01:8e:de:bc:d6:a4:d2:3d:e4:a7:cf:62:8d:d8:2e:c2: 6c:a2:7b:77:94:0c:6e:64:cc:72:e2:69:0e:34:12:58:da:ef: 76:86:53:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UyREUxMTAvBgNVBAUTKEZDM0Y3QkIwNDU0MjU2RjMxRjI1Q0EwMDg2NEJDM0E2 QkQ3NTVGOTYwHhcNMjYwMzI3MDExMzQxWhcNMjYwNDAzMDExMzQxWjAYMRYwFAYD VQQDEw02OWM1ZDljNS02YjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjmyPyHm8DMuijfBZjiqR92OGgzNJXmoX8j1mY4qxFOOw8GhV3SUqYSxnkNA8 SeKU/o7aX+wnb44ukunEC1nyEtaB4QbQeqwMWWkuRNaU9enpU2+tLzdh4x8JbqKZ Grp3g+j822xZfQRN6L1mbzkgnlaXu29oKB9i1Flh18NaPlrqyjoMlPCjpBY8G2Xa UDukqjzACPoD9FWyP2Z+NQq4P9PJ4voWInGvjSd5E7EDpadioFC2SFaNjPO0CHCI +d0A45Fq5dI9SEIXMWEpt1BUwp5rGVrxGZVbeakzJozCmIEw5yrY4oMUziA7zB6H WGGObs8Ho0Nwi09HOka1xzLCvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJo824oq ZSb4X5UqhiPDtZaRqF0nMB8GA1UdIwQYMBaAFPw/e7BFQlbzHyXKAIZLw6a9dV+W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTJERS9BQkRFRTg3QTM3 RTYxMUVEQjUxRTFENDVDNEY5QUUwMi9fRDk3c0VWQ1Z2TWZKY29BaGt2RHByMTFY NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19EOTdzRVZDVnZNZkpjb0Foa3ZEcHIxMVg1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTJERS9BQkRFRTg3QTM3RTYxMUVEQjUxRTFENDVDNEY5QUUwMi9fRDk3c0VWQ1Z2 TWZKY29BaGt2RHByMTFYNVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmlK6Uq+Nk9Zj3Kd0X+KDmtfMlD8BJRjPHa59fQZ0mQ0tLfmDRJNY419DRIto YnElVqVcg9JFeWS0Sc8CKovw66oH6lGypPPN088cOvyCqAQWTqzu32WHWBPb1x3I fDzy+kkCPPK+XeoLa4z4cmogmhO6YTJu88We4318P5ssqmEVmXpxWofTpYztlj1f xA/WEHSUeRmCjIDTA697txZBwaUeKOSP17dAQeaNT7r/Dt4H/b47gUXvM7cQYKeO dWmMVtY83rczqinF1Hgxlfe6o5nofjleZudrxPoBjt681qTSPeSnz2KN2C7CbKJ7 d5QMbmTMcuJpDjQSWNrvdoZTxQ== -----END CERTIFICATE-----Generated at Sat Mar 28 10:40:35 2026 by rpki-client