$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft File: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft (raw, json) Hash identifier: jt6WgkQRcYfs+Ff7JKPDD4Z3UhGDgWkzlsSlGKmBlAU= Subject key identifier: 10:EA:B8:D9:88:76:44:0A:D5:C0:55:F2:F5:83:19:19:C2:9B:8A:C4 Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 Certificate issuer: /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft Manifest number: 017A Signing time: Wed 25 Mar 2026 03:58:00 +0000 Manifest this update: Wed 25 Mar 2026 03:58:00 +0000 Manifest next update: Wed 01 Apr 2026 03:58:00 +0000 Files and hashes: 1: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl (hash: 04xP9VNovGFfKpap44C1xygsEKa2SdeIsTJIbF5xbFs=) 2: 38556AC6ED7711EEA7B2AF12C4F9AE02.roa (hash: mVKVwUNodXC2dILmuSgM+YaGamOWVYaoYaJr0bNv0L4=) 3: 03BA6992ED7711EE9998FC11C4F9AE02.roa (hash: 4ltPjkJAsX+6JN5WYsYcJkqkB/QGduq8OB4qSY5kFTc=) 4: 99244E94FE0211EEB1F40344C4F9AE02.roa (hash: AhKlMEv2PuM9Bfvy73cb9Wj3F7xu3e3qXO027TlJaIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE959, serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Validity Not Before: Mar 25 03:58:00 2026 GMT Not After : Apr 1 03:58:00 2026 GMT Subject: CN=69c35d48-ec40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d5:4b:20:85:76:88:cd:26:e8:69:c4:20:a1: 90:36:d2:b7:a7:ef:a2:7c:90:a1:b1:71:64:d1:2c: a8:b9:4c:02:2d:79:0f:dc:dc:b9:b3:a1:74:7f:bd: 75:02:91:df:e5:4a:4c:37:38:30:8b:dc:01:01:7a: 72:30:58:a7:bd:de:b7:01:2b:2d:e8:4c:b8:6a:17: 60:f0:c8:9a:46:65:40:f2:bf:ec:4b:68:f4:59:f6: 2f:42:55:0c:95:ea:62:1e:99:06:ac:19:86:d6:3a: a9:25:2b:e3:d2:9c:d9:2c:be:9c:12:25:db:8c:9b: 24:d6:28:d3:4d:b7:66:8c:44:be:d5:32:7d:e5:22: c7:34:20:3f:a8:04:e6:27:c5:4c:f3:0e:58:4f:f7: 98:9e:50:39:39:8f:d1:ed:30:86:19:50:36:5d:30: ea:ea:92:de:29:8f:5a:8d:53:a3:92:30:72:af:73: 32:bc:55:79:b9:d4:af:b6:aa:97:ba:f2:9a:c4:4e: f3:e1:d5:99:01:7c:26:22:d2:f7:5a:4c:d6:00:27: b5:45:18:c6:3e:b4:42:0d:ea:37:52:36:dd:a7:f4: c7:e7:12:bc:6f:58:8b:51:a9:ac:b4:91:4e:77:b5: 39:d5:49:39:4a:fe:f3:52:77:e6:b9:6a:b6:90:a3: e8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EA:B8:D9:88:76:44:0A:D5:C0:55:F2:F5:83:19:19:C2:9B:8A:C4 X509v3 Authority Key Identifier: keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:38:32:85:16:3e:c1:ee:db:9c:89:2a:68:b3:24:4a:d6:7f: ee:52:ab:be:9b:9c:74:0f:d5:9a:90:41:9c:bf:1e:81:f2:7a: 85:0b:cb:34:64:aa:7a:6f:0e:b4:3e:45:96:5c:a7:54:3f:ed: 64:a0:e1:64:47:c7:f4:74:f7:09:bb:3d:34:45:e7:3f:c8:d6: 73:c1:26:92:45:42:4e:8c:46:92:d1:7f:af:e3:67:2a:71:f7: b6:e3:ed:41:2f:7d:d0:6f:6a:ce:ac:27:fa:bc:6b:b1:c8:5e: b5:2f:8b:bf:3e:23:e0:88:54:dc:4f:52:fe:ba:57:3b:22:13: fb:72:aa:f0:fc:10:29:8e:ee:72:9d:0c:1a:d4:c7:a7:e4:b6: 70:2a:ef:c3:1b:54:16:4f:e1:a7:d6:b4:9e:ab:84:d8:90:89: d2:0a:2b:5d:9d:9e:0b:1a:c8:d5:16:0e:14:a4:6c:93:62:d7: b2:93:cf:1a:b0:9f:49:d2:4c:51:75:3b:02:ef:de:2c:31:12: 0d:02:3e:73:5e:25:aa:0c:50:9f:a7:27:c1:e7:fa:50:15:27: 97:56:b8:63:55:75:14:99:ab:23:e4:86:17:65:73:39:02:2e: aa:c9:1b:d8:92:11:90:91:80:9d:dd:b1:0c:60:35:8b:77:10: 90:f9:ee:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5NTkxMTAvBgNVBAUTKEQ2RUMyMkE3M0E1OUQyQUE5NTU5OTc0NzAyNzlDNjYy RDExMDg4RjIwHhcNMjYwMzI1MDM1ODAwWhcNMjYwNDAxMDM1ODAwWjAYMRYwFAYD VQQDEw02OWMzNWQ0OC1lYzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4NVLIIV2iM0m6GnEIKGQNtK3p++ifJChsXFk0SyouUwCLXkP3Ny5s6F0f711 ApHf5UpMNzgwi9wBAXpyMFinvd63ASst6Ey4ahdg8MiaRmVA8r/sS2j0WfYvQlUM lepiHpkGrBmG1jqpJSvj0pzZLL6cEiXbjJsk1ijTTbdmjES+1TJ95SLHNCA/qATm J8VM8w5YT/eYnlA5OY/R7TCGGVA2XTDq6pLeKY9ajVOjkjByr3MyvFV5udSvtqqX uvKaxE7z4dWZAXwmItL3WkzWACe1RRjGPrRCDeo3Ujbdp/TH5xK8b1iLUamstJFO d7U51Uk5Sv7zUnfmuWq2kKPo0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBDquNmI dkQK1cBV8vWDGRnCm4rEMB8GA1UdIwQYMBaAFNbsIqc6WdKqlVmXRwJ5xmLREIjy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk1OS9BQTRDNzdFQ0VE NzYxMUVFQUQ4NzFBMTFDNEY5QUUwMi8xdXdpcHpwWjBxcVZXWmRIQW5uR1l0RVFp UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF1d2lwenBaMHFxVldaZEhBbm5HWXRFUWlQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTk1OS9BQTRDNzdFQ0VENzYxMUVFQUQ4NzFBMTFDNEY5QUUwMi8xdXdpcHpwWjBx cVZXWmRIQW5uR1l0RVFpUEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAATgyhRY+we7bnIkqaLMkStZ/7lKrvpucdA/VmpBBnL8egfJ6hQvLNGSqem8O tD5FllynVD/tZKDhZEfH9HT3Cbs9NEXnP8jWc8EmkkVCToxGktF/r+NnKnH3tuPt QS990G9qzqwn+rxrschetS+Lvz4j4IhU3E9S/rpXOyIT+3Kq8PwQKY7ucp0MGtTH p+S2cCrvwxtUFk/hp9a0nquE2JCJ0gorXZ2eCxrI1RYOFKRsk2LXspPPGrCfSdJM UXU7Au/eLDESDQI+c14lqgxQn6cnwef6UBUnl1a4Y1V1FJmrI+SGF2VzOQIuqskb 2JIRkJGAnd2xDGA1i3cQkPnuMg== -----END CERTIFICATE-----Generated at Thu Mar 26 04:41:43 2026 by rpki-client