$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json) Hash identifier: LvOLGBngfcecAi2Lo7y1Sd1IA/UfEACcLNGhif+AAy0= Subject key identifier: 6E:18:11:45:CC:CC:38:D6:B4:CE:17:C3:40:13:4A:FB:4D:83:B2:B5 Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 3573 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft Manifest number: 353D Signing time: Tue 24 Mar 2026 14:53:45 +0000 Manifest this update: Tue 24 Mar 2026 14:53:44 +0000 Manifest next update: Tue 31 Mar 2026 14:53:44 +0000 Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: OnsCbEEmO6p2Fd+vZUu/OCmTB9OMZq+pkTEiJ0F9Aeg=) 2: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: 0N8+UfH8NuaA9qjC81UIdofpt+ivc/1OzKhyAWBOmEo=) 3: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: 6rBcARPDFtZ25ZUjJ6KXnh4+h4VHUuegYqgFp9CrpCA=) 4: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: 4UFHtr4XeXNnq7KTZknkybZI+zmVWrMYnwFvfLsG+uw=) 5: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: u2Ar2PlNEkyQ2SuYxInhQURzKf5tXQUSrdtG0Brtz4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13683 (0x3573) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Mar 24 14:53:44 2026 GMT Not After : Mar 31 14:53:44 2026 GMT Subject: CN=69c2a579-fc45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:26:b4:e3:1a:ea:42:68:ae:17:53:fd:49:04: e8:10:01:d4:7b:d5:84:ed:b0:df:52:80:c4:a9:d6: c9:36:f1:20:4b:c0:d8:c0:6d:5d:17:77:ba:f1:57: 82:06:a9:b0:44:e1:66:d5:b2:c6:ae:89:fb:c5:57: 01:51:c2:a0:56:7c:0c:2e:67:5c:a9:81:67:0f:9e: 77:4b:bb:28:b8:d6:69:2a:bf:2d:f0:b8:99:2d:83: 3c:69:ab:1f:55:8d:83:a5:3a:40:7f:f6:4a:a3:45: a2:26:98:24:e9:36:fe:66:83:25:e3:3c:2f:bc:c0: a8:c7:14:5f:99:ce:b3:c8:dd:9f:fb:59:a2:67:75: 52:fd:35:41:6d:58:9d:a5:f4:1f:73:1d:47:a9:ad: d4:fd:10:60:b2:41:74:16:2c:2f:dc:17:28:fd:d4: a3:72:ec:28:39:96:46:f5:0b:67:33:84:87:47:0b: 77:14:45:11:d0:56:4e:d7:f7:e8:89:ba:8e:33:82: c5:73:1a:e3:7a:aa:9d:c7:a4:2b:b3:be:cd:5e:d0: 28:c8:c9:35:58:ef:57:09:e7:fc:72:27:67:e0:64: 33:6b:29:bd:c1:a2:4c:f7:ba:71:79:c5:ae:8f:e4: 0b:e5:06:9e:63:a2:67:c0:a9:95:71:30:d8:b9:74: 80:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:18:11:45:CC:CC:38:D6:B4:CE:17:C3:40:13:4A:FB:4D:83:B2:B5 X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8d:6f:70:61:29:b2:de:ef:86:7a:52:33:7a:d6:b6:91:23: ac:38:5e:8a:85:68:69:87:d6:55:f4:8f:a8:4e:f2:d5:59:21: 27:c2:62:c7:75:22:4b:79:49:27:4a:0e:91:fa:0b:e6:fc:30: f0:44:2b:0d:c4:f3:38:41:df:d2:2e:e4:d1:1b:b5:e0:9d:ab: 5c:5a:19:b2:8b:99:ff:93:d8:19:b7:59:41:88:ea:ee:66:61: 37:7b:28:41:13:80:f1:4f:09:e3:3c:98:00:e1:d7:8b:98:34: 2c:1d:99:f1:5d:d2:9c:77:a5:de:a6:f2:e0:40:8e:fd:3d:1b: bb:80:8c:54:3b:1d:31:af:a6:02:47:5d:52:74:1e:cf:f7:32: 75:5e:e0:b5:81:46:74:ef:5a:2e:78:84:3f:76:76:bb:72:70: f9:b3:76:60:d1:12:4d:a5:c5:16:5d:ee:23:92:c7:92:b3:cb: db:f8:58:ab:8a:fc:4b:e1:bf:63:e5:2d:96:40:b0:ac:46:0b: 4a:6a:d0:9c:db:1c:42:9f:fb:f9:f3:65:b1:63:ea:56:11:fa: 6c:28:42:c6:2f:47:fc:d0:54:66:79:97:38:c5:c5:aa:67:55: 63:34:fe:b6:d6:14:25:d3:74:5f:8b:7a:e7:bb:f9:9b:b2:f4: e9:19:3e:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjYwMzI0MTQ1MzQ0WhcNMjYwMzMxMTQ1MzQ0WjAYMRYwFAYD VQQDEw02OWMyYTU3OS1mYzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ia04xrqQmiuF1P9SQToEAHUe9WE7bDfUoDEqdbJNvEgS8DYwG1dF3e68VeC BqmwROFm1bLGron7xVcBUcKgVnwMLmdcqYFnD553S7souNZpKr8t8LiZLYM8aasf VY2DpTpAf/ZKo0WiJpgk6Tb+ZoMl4zwvvMCoxxRfmc6zyN2f+1miZ3VS/TVBbVid pfQfcx1Hqa3U/RBgskF0Fiwv3Bco/dSjcuwoOZZG9QtnM4SHRwt3FEUR0FZO1/fo ibqOM4LFcxrjeqqdx6Qrs77NXtAoyMk1WO9XCef8cidn4GQzaym9waJM97pxecWu j+QL5QaeY6JnwKmVcTDYuXSALwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG4YEUXM zDjWtM4Xw0ATSvtNg7K1MB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl WFJTNnpDMnhCU3N1TElKY2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfI1vcGEpst7vhnpSM3rWtpEjrDheioVoaYfWVfSPqE7y1VkhJ8Jix3UiS3lJ J0oOkfoL5vww8EQrDcTzOEHf0i7k0Ru14J2rXFoZsouZ/5PYGbdZQYjq7mZhN3so QROA8U8J4zyYAOHXi5g0LB2Z8V3SnHel3qby4ECO/T0bu4CMVDsdMa+mAkddUnQe z/cydV7gtYFGdO9aLniEP3Z2u3Jw+bN2YNESTaXFFl3uI5LHkrPL2/hYq4r8S+G/ Y+UtlkCwrEYLSmrQnNscQp/7+fNlsWPqVhH6bChCxi9H/NBUZnmXOMXFqmdVYzT+ ttYUJdN0X4t657v5m7L06Rk+xw== -----END CERTIFICATE-----Generated at Thu Mar 26 14:12:52 2026 by rpki-client