$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft File: PinOb2p9uUttCRM7c_7VLd7hLas.mft (raw, json) Hash identifier: clBbeusa4Sy6NVhE9FOwPXiPlAXjQLYffefdjFP5wKo= Subject key identifier: 68:FC:AD:80:E7:B0:F7:BB:CA:47:C1:0F:EA:B0:AE:E3:24:3B:65:C4 Authority key identifier: 3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB Certificate issuer: /CN=A91CF285/serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Certificate serial: 1128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft Manifest number: 1112 Signing time: Tue 24 Mar 2026 17:09:16 +0000 Manifest this update: Tue 24 Mar 2026 17:09:15 +0000 Manifest next update: Tue 31 Mar 2026 17:09:15 +0000 Files and hashes: 1: PinOb2p9uUttCRM7c_7VLd7hLas.crl (hash: NyadXlRCzjVYyX1BMO8PqQd6n4Mef4y2TwU9hTYyTSA=) 2: DC83478EEB0311ED875DD72EC4F9AE02.roa (hash: ZgmeeVqm3Wnlajga6cIlcqeVmJlA7Tq6XrbJ7SjwrkM=) 3: 073BC4F4ED3B11EDB5A01A46C4F9AE02.roa (hash: kDdsp4iSvLckrdY4wTu1OLUE3EtatMjtMPduF3y0gxY=) 4: AB731B004B2A11EFAAFCC92CC4F9AE02.roa (hash: Qof8TRE4aGZ+awtau2DmuMHWzwauOGLSt/MWNgJ6+M4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4392 (0x1128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF285, serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Validity Not Before: Mar 24 17:09:15 2026 GMT Not After : Mar 31 17:09:15 2026 GMT Subject: CN=69c2c53b-bc73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:95:ac:8d:aa:ab:37:8e:fb:55:b0:06:aa:c4: b9:3b:b5:e1:06:30:3d:9e:5f:d3:e5:cb:ea:0d:7c: 39:f9:7b:e5:a5:04:cd:45:ed:3a:ae:e9:37:cf:2f: ee:68:e5:95:ac:c1:dc:c0:ea:a7:11:ae:5e:85:02: ad:7f:b9:ff:b6:f0:ed:18:3a:d3:fe:17:e3:b0:f9: 44:5d:df:9d:fe:48:78:7a:09:90:d0:1e:70:99:1f: b5:17:d6:b3:b1:f8:50:98:26:69:69:3e:4d:9c:a3: a4:14:ef:02:a1:b8:bd:9d:76:ed:9a:e0:d8:fd:a9: 93:fd:73:76:c4:f8:61:50:34:98:87:7d:98:6b:a1: cc:b3:f4:46:e9:0c:fe:c5:c1:cf:75:9a:6b:e4:cb: 9b:85:b3:1f:5b:58:fd:fe:68:b5:d7:e1:5b:96:c2: cb:7d:66:5a:61:dd:4f:e6:56:f1:b0:d2:59:09:85: a9:5e:21:4a:f6:6f:9e:61:64:7c:81:75:7a:33:74: 3a:90:e1:22:bf:bf:43:a1:57:a7:4c:3b:17:40:a5: 78:47:ca:6e:ed:d3:f2:68:61:cf:28:3c:9f:2c:83: 63:ec:a6:ec:11:15:6a:ed:ca:5a:3e:dd:66:a5:31: 7c:65:04:c9:fc:aa:43:c3:09:9c:3c:12:85:0b:bd: ef:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FC:AD:80:E7:B0:F7:BB:CA:47:C1:0F:EA:B0:AE:E3:24:3B:65:C4 X509v3 Authority Key Identifier: keyid:3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:16:24:46:44:8a:9c:56:14:9c:e5:35:f5:3a:9d:7e:03:cb: 05:a3:85:06:1b:a4:21:6b:2f:37:a3:67:5a:70:21:ca:53:3f: d2:c7:9e:42:af:f3:75:f6:3e:b5:b2:28:bb:28:6d:db:71:fd: 2a:b3:17:8b:57:c0:7d:5f:90:24:c3:6a:93:f8:1f:84:36:3f: e6:8a:b8:1c:b1:88:58:62:ee:ed:33:95:cf:6c:10:96:0e:32: 63:e2:63:61:77:84:cd:d1:b1:e9:76:0e:31:2b:14:31:1e:76: 66:19:c5:6d:3e:20:88:63:a5:66:75:2a:ae:29:e9:11:93:ad: d5:a9:e1:05:0f:63:c8:40:fa:94:df:55:5e:29:f3:07:13:03: 5f:8d:34:65:0f:3d:09:c6:f0:b7:e3:8c:0e:e3:70:41:44:6c: d9:dc:52:3c:1b:14:b5:50:62:40:d4:4d:2c:9f:3a:9f:4e:0f: 35:06:26:04:6d:a5:1e:ed:a3:2c:15:8c:ba:5f:20:ab:03:fe: ec:a3:39:83:8e:87:cc:8d:46:84:7b:ff:f9:d5:e5:d3:2b:0b: a1:dd:76:94:16:30:94:22:f9:f7:de:a9:1f:97:fa:0b:c9:1d: 71:c2:c3:53:01:36:35:57:1c:79:a5:be:4a:14:30:94:11:ca: 14:de:c3:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICESgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyODUxMTAvBgNVBAUTKDNFMjlDRTZGNkE3REI5NEI2RDA5MTMzQjczRkVENTJE REVFMTJEQUIwHhcNMjYwMzI0MTcwOTE1WhcNMjYwMzMxMTcwOTE1WjAYMRYwFAYD VQQDEw02OWMyYzUzYi1iYzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZWsjaqrN477VbAGqsS5O7XhBjA9nl/T5cvqDXw5+XvlpQTNRe06ruk3zy/u aOWVrMHcwOqnEa5ehQKtf7n/tvDtGDrT/hfjsPlEXd+d/kh4egmQ0B5wmR+1F9az sfhQmCZpaT5NnKOkFO8Cobi9nXbtmuDY/amT/XN2xPhhUDSYh32Ya6HMs/RG6Qz+ xcHPdZpr5MubhbMfW1j9/mi11+FblsLLfWZaYd1P5lbxsNJZCYWpXiFK9m+eYWR8 gXV6M3Q6kOEiv79DoVenTDsXQKV4R8pu7dPyaGHPKDyfLINj7KbsERVq7cpaPt1m pTF8ZQTJ/KpDwwmcPBKFC73vPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGj8rYDn sPe7ykfBD+qwruMkO2XEMB8GA1UdIwQYMBaAFD4pzm9qfblLbQkTO3P+1S3e4S2r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI4NS9GRDY0RjBCODM0 MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVVdHRDUk03Y183VkxkN2hM YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Bpbk9iMnA5dVV0dENSTTdjXzdWTGQ3aExhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjI4NS9GRDY0RjBCODM0MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVV dHRDUk03Y183VkxkN2hMYXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABRYkRkSKnFYUnOU19TqdfgPLBaOFBhukIWsvN6NnWnAhylM/0seeQq/zdfY+ tbIouyht23H9KrMXi1fAfV+QJMNqk/gfhDY/5oq4HLGIWGLu7TOVz2wQlg4yY+Jj YXeEzdGx6XYOMSsUMR52ZhnFbT4giGOlZnUqrinpEZOt1anhBQ9jyED6lN9VXinz BxMDX400ZQ89Ccbwt+OMDuNwQURs2dxSPBsUtVBiQNRNLJ86n04PNQYmBG2lHu2j LBWMul8gqwP+7KM5g46HzI1GhHv/+dXl0ysLod12lBYwlCL5996pH5f6C8kdccLD UwE2NVcceaW+ShQwlBHKFN7Dwg== -----END CERTIFICATE-----Generated at Thu Mar 26 10:02:57 2026 by rpki-client