$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft File: mD14MALFTaj4puKVg4ucrwE2Q1g.mft (raw, json) Hash identifier: UkWLDQbNktD0IuBEF88pSMcaVg4ytep2ILcvSUPTdcY= Subject key identifier: 3D:7A:A7:D8:11:85:B6:CA:6F:3B:78:6B:E0:59:58:04:5F:68:CC:D2 Authority key identifier: 98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58 Certificate issuer: /CN=A91CF77D/serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358 Certificate serial: 08D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft Manifest number: 08C5 Signing time: Tue 24 Mar 2026 20:11:45 +0000 Manifest this update: Tue 24 Mar 2026 20:11:45 +0000 Manifest next update: Tue 31 Mar 2026 20:11:45 +0000 Files and hashes: 1: mD14MALFTaj4puKVg4ucrwE2Q1g.crl (hash: c8MkuBqfu8JlLO/MQtp4xm5k+kfMul2Ww5VtFs+aGOg=) 2: D24575B2D22E11EA9D4DDE29C4F9AE02.roa (hash: WjGg/ZejwvG9Siea7F263gfGtLWehGPgmKPNRYmD4sA=) 3: 8FADE73CA49B11EEB19E774BC4F9AE02.roa (hash: 2893HNR31GoP/uh0ScggOWfiNSgjFGwQgJxlawN3n4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2257 (0x8d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF77D, serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358 Validity Not Before: Mar 24 20:11:45 2026 GMT Not After : Mar 31 20:11:45 2026 GMT Subject: CN=69c2f001-8115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:eb:38:ba:b7:fc:02:79:d0:9c:f7:32:6e:d5: a5:ff:96:ac:fb:c6:5c:92:c8:80:07:77:75:15:8c: 18:de:36:ce:7f:ea:50:05:55:5f:42:01:aa:28:2a: 1a:1f:6f:e7:c1:32:ff:f6:24:c0:27:32:45:9e:20: b4:cd:5c:4f:9d:42:67:ff:9f:0b:83:41:43:0b:64: 6e:e3:cf:9b:d2:51:bf:5f:38:db:aa:3b:a1:5d:a7: 42:19:4c:b8:22:1f:46:7d:ec:42:3f:d8:14:57:d4: 8d:f6:96:c0:cf:d3:eb:9c:53:82:c3:78:ee:b0:de: 82:1e:6e:a9:e4:de:ea:a7:bf:10:9a:0c:46:71:67: d9:01:d6:77:98:ee:cc:e9:6e:ab:39:31:f1:36:8c: 3a:d2:ff:72:b4:a8:64:8a:65:36:d6:76:d3:b6:25: 10:91:a0:47:cf:52:b1:a6:78:d7:9e:8c:1e:bb:a8: f2:20:9a:a5:6d:73:25:96:e5:06:ee:36:3e:f9:e8: 18:be:38:80:5a:75:37:b0:27:7e:93:a7:e9:e9:2b: 3a:27:aa:ae:42:8b:98:f6:1f:26:45:af:42:b0:ba: 3e:1e:18:f7:4f:15:24:94:fa:41:01:36:24:e8:81: 4b:7a:9f:79:8e:e1:7e:d5:4e:80:c7:1c:b6:7a:13: fe:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7A:A7:D8:11:85:B6:CA:6F:3B:78:6B:E0:59:58:04:5F:68:CC:D2 X509v3 Authority Key Identifier: keyid:98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:da:03:97:89:21:f2:7f:f2:ee:f9:73:ab:76:37:32:65:9e: b1:40:5e:cc:f2:ab:de:a2:cd:54:fc:f3:bc:12:ef:49:6c:66: dd:44:49:5d:da:24:a1:b7:f2:38:03:9a:8b:2f:8d:47:d6:04: cc:3f:b1:93:aa:6d:37:2a:0c:a1:0d:c4:7f:d1:6f:6d:fb:26: ed:de:77:a1:b7:7c:aa:2e:d7:cc:21:08:ca:3b:1d:bb:5f:6f: 8b:36:40:cf:0c:57:5a:fb:b1:fe:b8:de:10:4b:a2:e8:3c:c8: 18:07:63:fb:8f:dc:7b:6f:d8:2a:63:22:10:b9:f1:a5:21:a0: 75:9a:0c:31:7e:53:c5:0f:0c:96:0a:67:98:94:89:fe:7d:e6: dc:93:cb:39:20:ce:6d:9d:b7:a4:3e:e3:62:db:a2:0b:e7:c5: 10:96:73:60:c5:b7:26:a0:a8:e3:0a:30:a1:3c:ad:df:cd:e0: 9f:78:66:63:84:a6:5d:5d:50:55:ea:6c:ef:40:79:17:3e:3d: 08:67:69:06:7b:61:f2:ac:87:d3:2c:a3:79:38:5d:9d:b6:8d: 4b:65:48:db:ad:e4:66:a0:d6:e7:7e:a9:8a:f4:aa:e9:49:8a: fd:09:93:5d:39:e5:73:2c:e7:e5:ad:35:1a:d4:d2:cf:c7:38: f0:25:97:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3N0QxMTAvBgNVBAUTKDk4M0Q3ODMwMDJDNTREQThGOEE2RTI5NTgzOEI5Q0FG MDEzNjQzNTgwHhcNMjYwMzI0MjAxMTQ1WhcNMjYwMzMxMjAxMTQ1WjAYMRYwFAYD VQQDEw02OWMyZjAwMS04MTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Os4urf8AnnQnPcybtWl/5as+8ZcksiAB3d1FYwY3jbOf+pQBVVfQgGqKCoa H2/nwTL/9iTAJzJFniC0zVxPnUJn/58Lg0FDC2Ru48+b0lG/XzjbqjuhXadCGUy4 Ih9GfexCP9gUV9SN9pbAz9PrnFOCw3jusN6CHm6p5N7qp78QmgxGcWfZAdZ3mO7M 6W6rOTHxNow60v9ytKhkimU21nbTtiUQkaBHz1KxpnjXnoweu6jyIJqlbXMlluUG 7jY++egYvjiAWnU3sCd+k6fp6Ss6J6quQouY9h8mRa9CsLo+Hhj3TxUklPpBATYk 6IFLep95juF+1U6Axxy2ehP+vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD16p9gR hbbKbzt4a+BZWARfaMzSMB8GA1UdIwQYMBaAFJg9eDACxU2o+KbilYOLnK8BNkNY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjc3RC8xMUUyNTlEMEQy MkQxMUVBOEFFNzNEMjdDNEY5QUUwMi9tRDE0TUFMRlRhajRwdUtWZzR1Y3J3RTJR MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21EMTRNQUxGVGFqNHB1S1ZnNHVjcndFMlExZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Rjc3RC8xMUUyNTlEMEQyMkQxMUVBOEFFNzNEMjdDNEY5QUUwMi9tRDE0TUFMRlRh ajRwdUtWZzR1Y3J3RTJRMWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArtoDl4kh8n/y7vlzq3Y3MmWesUBezPKr3qLNVPzzvBLvSWxm3URJXdokobfy OAOaiy+NR9YEzD+xk6ptNyoMoQ3Ef9Fvbfsm7d53obd8qi7XzCEIyjsdu19vizZA zwxXWvux/rjeEEui6DzIGAdj+4/ce2/YKmMiELnxpSGgdZoMMX5TxQ8MlgpnmJSJ /n3m3JPLOSDObZ23pD7jYtuiC+fFEJZzYMW3JqCo4wowoTyt383gn3hmY4SmXV1Q Veps70B5Fz49CGdpBnth8qyH0yyjeThdnbaNS2VI263kZqDW536pivSq6UmK/QmT XTnlcyzn5a01GtTSz8c48CWXPw== -----END CERTIFICATE-----Generated at Thu Mar 26 08:57:47 2026 by rpki-client