$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft File: 4V0TCwuymA4b8RwBvMt1O0loSoA.mft (raw, json) Hash identifier: JleKcCC+cRx4m1Hv5ahc8o9HJvfeSRWcE+VmUBSNTA0= Subject key identifier: FC:52:62:55:53:30:7F:C9:1F:53:4B:20:D5:8E:1F:D7:B0:69:E6:4B Authority key identifier: E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80 Certificate issuer: /CN=A91CE7BD/serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80 Certificate serial: 06AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft Manifest number: 06A5 Signing time: Tue 24 Mar 2026 22:07:05 +0000 Manifest this update: Tue 24 Mar 2026 22:07:05 +0000 Manifest next update: Tue 31 Mar 2026 22:07:05 +0000 Files and hashes: 1: 4V0TCwuymA4b8RwBvMt1O0loSoA.crl (hash: yMSdgHFQmDC2gOPKE9Snal+EZBj6mdm6dpVxyyc1v38=) 2: 6AE1616AA3F711EBBA757063C4F9AE02.roa (hash: 7pa2URbMwRRXzMA50+PGHDb/krBWLrMS0fjPxhWy67U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:07:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1707 (0x6ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7BD, serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80 Validity Not Before: Mar 24 22:07:05 2026 GMT Not After : Mar 31 22:07:05 2026 GMT Subject: CN=69c30b09-fb31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e4:fc:c6:99:5a:bb:d4:3f:51:0d:bb:17:76: 43:1a:23:bb:11:26:9c:45:8c:2d:79:bd:0d:a2:f4: 76:14:bc:73:72:6f:07:03:1c:e9:8c:a8:31:70:fa: 63:7b:e8:21:65:51:23:bf:c3:3b:df:7e:a8:ca:9b: e5:ce:36:62:cb:7c:f9:9a:82:40:e7:cb:5f:31:77: 18:08:93:cb:33:10:b9:d1:5c:41:0f:3e:d7:68:25: c7:70:ec:5a:c8:de:aa:61:ba:34:5c:f2:53:9e:21: 78:46:6a:19:5b:8e:0f:5e:d8:77:7c:b2:87:f7:94: be:d8:27:a5:a1:cf:36:ac:6b:1f:09:1f:13:f6:94: 4f:2a:40:a6:be:30:34:77:fe:0e:0a:f8:10:cd:f7: 57:f2:f3:33:ed:24:b5:7f:b9:1b:0c:04:61:2f:c9: 88:4f:d7:64:12:a1:fc:b9:3c:3e:c2:c0:c5:79:80: 0a:00:5a:99:41:42:60:e7:87:95:e0:34:6c:a1:1c: 33:b8:58:05:2e:e2:00:d0:e6:82:a1:67:55:06:dd: ad:ec:b9:8f:80:ee:76:a2:a8:f9:b7:7c:78:02:f7: 84:fe:04:ea:0a:15:eb:76:53:ad:6e:0a:12:45:3b: eb:3a:49:f0:62:fc:db:8a:76:dd:5c:f4:0a:89:b6: 35:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:52:62:55:53:30:7F:C9:1F:53:4B:20:D5:8E:1F:D7:B0:69:E6:4B X509v3 Authority Key Identifier: keyid:E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:99:b6:b8:66:05:d3:91:79:ee:e7:31:3e:7a:eb:5f:27:e2: 91:1f:85:cd:c0:5d:a7:f4:48:70:9c:2c:87:10:f8:1b:e6:d1: 7f:bc:b8:4d:37:5f:5b:bf:cd:66:6a:9c:d1:80:9a:c5:a3:4d: 9c:0b:1f:fb:cf:a8:ec:18:4a:14:dd:24:cc:d4:b0:4c:bd:a4: 56:4a:c5:1c:f5:7a:80:75:ef:ba:15:79:7b:ab:8c:50:a4:e1: d7:e4:13:eb:80:ec:ad:bb:3e:d1:8a:61:96:dd:a0:52:cb:9c: 3b:b7:bb:59:21:c3:79:8d:54:d3:41:e1:bd:5d:2c:e2:28:c2: c2:3c:ea:30:8b:bc:16:5b:5c:b6:d8:7b:ba:10:90:95:97:48: 55:77:27:94:bc:dc:d4:01:e7:8b:d5:29:ba:a9:bf:f5:bb:94: 8d:70:5f:ba:3f:51:81:68:21:da:d4:a9:66:ef:ce:fa:79:d8: 90:a0:11:5f:9b:6d:ef:e8:b1:f5:d8:29:63:5d:cb:74:ef:66: 4f:28:40:83:d4:a7:ef:7c:15:f1:f2:68:32:f3:69:af:73:76: b7:a8:01:5e:1a:7d:54:65:07:91:29:8a:32:bf:b6:a9:34:6b: e0:bf:10:08:d9:87:28:19:85:28:34:e1:e6:df:17:b2:71:cf: ad:76:a4:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U3QkQxMTAvBgNVBAUTKEUxNUQxMzBCMEJCMjk4MEUxQkYxMUMwMUJDQ0I3NTNC NDk2ODRBODAwHhcNMjYwMzI0MjIwNzA1WhcNMjYwMzMxMjIwNzA1WjAYMRYwFAYD VQQDEw02OWMzMGIwOS1mYjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweT8xplau9Q/UQ27F3ZDGiO7ESacRYwteb0NovR2FLxzcm8HAxzpjKgxcPpj e+ghZVEjv8M7336oypvlzjZiy3z5moJA58tfMXcYCJPLMxC50VxBDz7XaCXHcOxa yN6qYbo0XPJTniF4RmoZW44PXth3fLKH95S+2Celoc82rGsfCR8T9pRPKkCmvjA0 d/4OCvgQzfdX8vMz7SS1f7kbDARhL8mIT9dkEqH8uTw+wsDFeYAKAFqZQUJg54eV 4DRsoRwzuFgFLuIA0OaCoWdVBt2t7LmPgO52oqj5t3x4AveE/gTqChXrdlOtbgoS RTvrOknwYvzbinbdXPQKibY1fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPxSYlVT MH/JH1NLINWOH9ewaeZLMB8GA1UdIwQYMBaAFOFdEwsLspgOG/EcAbzLdTtJaEqA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTdCRC9EMzAyNjAzNEEz RjUxMUVCOTJGOUM1NjFDNEY5QUUwMi80VjBUQ3d1eW1BNGI4UndCdk10MU8wbG9T b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWMFRDd3V5bUE0YjhSd0J2TXQxTzBsb1NvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTdCRC9EMzAyNjAzNEEzRjUxMUVCOTJGOUM1NjFDNEY5QUUwMi80VjBUQ3d1eW1B NGI4UndCdk10MU8wbG9Tb0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU5m2uGYF05F57ucxPnrrXyfikR+FzcBdp/RIcJwshxD4G+bRf7y4TTdfW7/N Zmqc0YCaxaNNnAsf+8+o7BhKFN0kzNSwTL2kVkrFHPV6gHXvuhV5e6uMUKTh1+QT 64Dsrbs+0Yphlt2gUsucO7e7WSHDeY1U00HhvV0s4ijCwjzqMIu8Fltctth7uhCQ lZdIVXcnlLzc1AHni9Upuqm/9buUjXBfuj9RgWgh2tSpZu/O+nnYkKARX5tt7+ix 9dgpY13LdO9mTyhAg9Sn73wV8fJoMvNpr3N2t6gBXhp9VGUHkSmKMr+2qTRr4L8Q CNmHKBmFKDTh5t8XsnHPrXakjA== -----END CERTIFICATE-----Generated at Thu Mar 26 04:12:06 2026 by rpki-client