$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft File: SokSJxJpPqAI66ehAaxiJpX67CQ.mft (raw, json) Hash identifier: i5Emw4gVieZ+tGkS+fHprMiXo9W18+Vwrup5EmWLeQM= Subject key identifier: 67:56:73:E1:C1:73:6A:3E:2E:B6:52:91:7C:B9:AB:DD:97:06:7C:3D Authority key identifier: 4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 Certificate issuer: /CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Certificate serial: 0512 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft Manifest number: 0504 Signing time: Tue 24 Mar 2026 23:22:43 +0000 Manifest this update: Tue 24 Mar 2026 23:22:42 +0000 Manifest next update: Tue 31 Mar 2026 23:22:42 +0000 Files and hashes: 1: SokSJxJpPqAI66ehAaxiJpX67CQ.crl (hash: cVvk1fSJuCAQfTGNpBwD5GKriG2TodvjkZYxHQlKafo=) 2: 178FCB6AE8AC11F0B6F09D7D576F56BC.roa (hash: uo0O5iMqmXBY9eNhFbE9nAU1PqFbkE1Yki+rMiTnIkk=) 3: 05F05A76D07B11F08779390AC4F9AE02.roa (hash: vYbquqIITIw2ttWYVfnYgoYEL08nDVMuIyeHY1P7sck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1298 (0x512) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF20, serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Validity Not Before: Mar 24 23:22:42 2026 GMT Not After : Mar 31 23:22:42 2026 GMT Subject: CN=69c31cc3-eb06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:67:ca:85:59:94:c2:78:29:99:06:08:96:d1: 2a:de:75:55:1a:db:f4:6a:a7:69:21:6a:8d:a4:ae: 3c:f0:c1:23:58:fa:7b:11:a8:08:85:6a:0f:bd:ab: 41:0d:5b:3a:13:c4:4f:5f:d6:58:bc:ba:33:2e:02: fb:8a:04:38:c2:05:be:5c:fa:98:ae:40:eb:93:c4: f8:bd:a6:e5:21:d6:3b:1a:2e:8a:83:a8:1e:44:54: bb:50:e0:0c:b8:90:eb:ef:73:1f:6d:f6:89:5e:0a: ca:f9:b8:9b:97:a7:e9:7c:de:53:27:d0:ab:a5:65: 0c:d4:39:99:06:b4:69:d1:65:d8:a4:4f:38:85:d8: 2b:56:1c:c4:01:ab:e8:21:61:d8:bc:91:72:dc:af: d1:ff:54:a0:1e:84:b1:ca:ea:1d:8d:b2:1d:9f:27: 3b:1b:76:51:71:70:21:35:98:0f:c9:22:ca:ca:01: 7c:24:cd:fd:63:ac:a4:f1:69:4e:6e:66:5f:0c:5c: 56:8c:3e:d5:de:a3:fc:65:2f:27:7f:21:75:ec:06: 66:25:20:c9:dd:99:5c:fd:ff:ef:75:95:74:8e:d0: da:08:b3:eb:e6:90:7b:46:5d:97:fe:65:40:17:0f: 19:9a:67:51:d7:77:1a:7e:46:6c:20:ed:bb:5f:8b: 89:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:56:73:E1:C1:73:6A:3E:2E:B6:52:91:7C:B9:AB:DD:97:06:7C:3D X509v3 Authority Key Identifier: keyid:4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:7d:59:bc:36:4c:b2:0f:ac:63:85:b7:59:42:79:69:37:a5: fc:c7:37:a6:5f:21:67:d7:97:56:1f:fb:fb:1b:c4:a1:71:d8: 4c:fd:6e:f3:c8:5f:e5:68:61:18:0b:5e:c2:90:4e:41:4e:de: 05:4d:31:a0:81:52:77:e2:ee:1f:c5:de:24:34:0f:0b:b2:bd: fa:22:84:13:7a:c4:f5:a0:78:b6:87:09:92:9f:58:47:4b:46: e9:5c:2b:7a:f7:fa:0b:b2:56:7d:3c:62:39:12:5e:24:22:a4: b3:99:a5:40:6c:6b:85:36:a1:09:20:da:56:91:ed:d7:ab:3f: 74:a0:50:00:59:ba:e2:fb:8f:88:77:33:93:46:9e:42:01:5a: 7c:07:72:88:af:ee:d9:82:90:41:ec:cc:c3:57:80:32:4d:c1: fd:cb:27:a7:8f:bc:d3:d8:7b:0e:c4:07:65:f7:fa:29:09:e0: d9:4c:cb:79:4a:99:33:20:44:76:54:d9:18:79:4f:1f:8b:75: 73:c2:d2:4c:5c:68:08:63:44:c7:dc:e3:e9:45:1c:ed:e8:f9: 97:17:9c:5e:f2:2b:77:a2:80:9b:c3:d5:6f:6d:81:d7:b3:b2: 61:f7:a6:92:68:0e:6b:5a:86:92:06:3b:64:2e:d5:6b:09:b7: 77:03:ca:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGMjAxMTAvBgNVBAUTKDRBODkxMjI3MTI2OTNFQTAwOEVCQTdBMTAxQUM2MjI2 OTVGQUVDMjQwHhcNMjYwMzI0MjMyMjQyWhcNMjYwMzMxMjMyMjQyWjAYMRYwFAYD VQQDEw02OWMzMWNjMy1lYjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkWfKhVmUwngpmQYIltEq3nVVGtv0aqdpIWqNpK488MEjWPp7EagIhWoPvatB DVs6E8RPX9ZYvLozLgL7igQ4wgW+XPqYrkDrk8T4vablIdY7Gi6Kg6geRFS7UOAM uJDr73MfbfaJXgrK+bibl6fpfN5TJ9CrpWUM1DmZBrRp0WXYpE84hdgrVhzEAavo IWHYvJFy3K/R/1SgHoSxyuodjbIdnyc7G3ZRcXAhNZgPySLKygF8JM39Y6yk8WlO bmZfDFxWjD7V3qP8ZS8nfyF17AZmJSDJ3Zlc/f/vdZV0jtDaCLPr5pB7Rl2X/mVA Fw8ZmmdR13cafkZsIO27X4uJKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGdWc+HB c2o+LrZSkXy5q92XBnw9MB8GA1UdIwQYMBaAFEqJEicSaT6gCOunoQGsYiaV+uwk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYyMC9GMjY3MTVCMjRG NUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBxQUk2NmVoQWF4aUpwWDY3 Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nva1NKeEpwUHFBSTY2ZWhBYXhpSnBYNjdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYyMC9GMjY3MTVCMjRGNUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBx QUk2NmVoQWF4aUpwWDY3Q1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaH1ZvDZMsg+sY4W3WUJ5aTel/Mc3pl8hZ9eXVh/7+xvEoXHYTP1u88hf5Whh GAtewpBOQU7eBU0xoIFSd+LuH8XeJDQPC7K9+iKEE3rE9aB4tocJkp9YR0tG6Vwr evf6C7JWfTxiORJeJCKks5mlQGxrhTahCSDaVpHt16s/dKBQAFm64vuPiHczk0ae QgFafAdyiK/u2YKQQezMw1eAMk3B/csnp4+809h7DsQHZff6KQng2UzLeUqZMyBE dlTZGHlPH4t1c8LSTFxoCGNEx9zj6UUc7ej5lxecXvIrd6KAm8PVb22B17OyYfem kmgOa1qGkgY7ZC7Vawm3dwPKWA== -----END CERTIFICATE-----Generated at Fri Mar 27 00:55:51 2026 by rpki-client