$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft File: Soo5XlVsx_Garmqwav8GeUSVa0Y.mft (raw, json) Hash identifier: mzSDWCHEpMlsknwOD0ngUQdh0ierylwJXucxx+hCE9U= Subject key identifier: A4:22:7F:37:EE:CF:EB:AD:AE:2E:69:F5:0D:C7:7E:1A:EB:49:DC:E6 Authority key identifier: 4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46 Certificate issuer: /CN=A91CFD5A/serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft Manifest number: 01A0 Signing time: Wed 25 Mar 2026 03:34:47 +0000 Manifest this update: Wed 25 Mar 2026 03:34:47 +0000 Manifest next update: Wed 01 Apr 2026 03:34:47 +0000 Files and hashes: 1: Soo5XlVsx_Garmqwav8GeUSVa0Y.crl (hash: VA6DDlCO0YlWd8W1wMdPTl9HWOC+02oo5uNd/CBMouQ=) 2: D60B1BCCB9AF11EE97EEDB49C4F9AE02.roa (hash: wK1+Edckckm18V5hHREZQkXgnFJR1vbGMuvkctbUg7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD5A, serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46 Validity Not Before: Mar 25 03:34:47 2026 GMT Not After : Apr 1 03:34:47 2026 GMT Subject: CN=69c357d7-cb53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a6:e8:4a:85:1f:95:61:0d:d6:f3:f1:27:54: 91:5c:09:cf:c6:db:20:27:01:06:57:cd:05:ad:9c: db:f3:f9:39:67:16:d9:8a:4a:7c:f4:f3:d6:12:dc: 8e:92:71:54:0b:84:74:5c:c5:0a:8d:80:af:84:e0: 39:d9:58:43:23:e0:37:e2:6e:d8:bd:ee:7b:22:07: 87:f5:10:9f:bd:dd:60:55:1c:e8:b7:11:06:9d:c9: aa:85:14:8b:e0:ff:fb:c4:8a:75:e8:b9:0e:a6:65: 2b:99:49:72:42:87:e5:0d:00:7c:5f:9b:ca:be:66: c1:8b:06:e3:35:f5:c6:87:4b:53:64:60:90:87:37: a0:09:ac:bb:15:17:2e:df:7d:a6:95:00:cc:96:34: 32:59:2f:ff:15:b5:a4:93:61:3e:ac:ac:12:cd:28: 0a:78:42:b9:9a:b4:a7:da:ea:48:2b:40:92:1b:ad: 8d:af:c6:ec:05:05:74:f2:80:e6:71:c2:e7:c2:17: 68:39:47:d9:a4:36:e0:f8:c3:96:27:c7:17:a4:cb: 1b:79:d2:2f:3b:1b:87:06:5c:26:eb:15:ff:85:b1: dd:19:8e:a7:30:0c:5f:25:79:33:89:3b:ea:3b:65: 0c:7e:93:6b:50:52:ef:3f:4e:b7:51:08:e8:47:4a: 86:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:22:7F:37:EE:CF:EB:AD:AE:2E:69:F5:0D:C7:7E:1A:EB:49:DC:E6 X509v3 Authority Key Identifier: keyid:4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:d6:a1:90:c0:6c:93:76:a8:45:53:f1:fe:3d:77:fb:27:b3: 12:e5:e5:c2:80:da:76:d1:a7:7f:92:dd:38:b3:f5:a7:80:ec: b3:1c:92:48:df:01:eb:ea:46:0b:c3:71:71:d0:a9:39:f2:4d: 92:ba:8e:e7:68:ba:65:92:a7:e3:52:65:86:95:c7:13:c3:09: 58:f5:b0:4e:ba:29:8a:c5:08:18:96:68:b1:71:31:a0:68:e8: 36:4d:35:53:73:3f:ba:5a:d9:cb:4c:3e:a4:7c:77:72:bb:7d: e8:b9:c0:bb:87:b8:58:bc:c6:1d:51:79:2c:58:3a:bd:8a:07: e8:5b:ba:fb:e6:47:6b:a5:a2:aa:20:47:f5:20:65:92:58:7d: fb:d4:70:3e:4f:57:90:86:da:c0:20:d7:4f:46:ae:28:29:51: b0:d3:a3:0a:53:19:8a:0a:82:84:60:5b:bf:29:26:64:0e:d6: b5:66:fb:a3:13:2d:2a:df:17:fa:16:af:6c:43:cd:96:b2:4f: 73:07:d2:fc:a9:d9:f8:a6:15:a4:8e:b7:91:8e:9d:85:c0:60: 9f:62:00:d1:b4:6d:a6:39:ca:4b:cc:0a:f2:97:7b:ab:ec:df: 6b:2f:a6:c5:4a:25:fd:6f:e2:21:19:1c:ce:a2:97:19:3e:23: f9:33:9e:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENUExMTAvBgNVBAUTKDRBOEEzOTVFNTU2Q0M3RjE5QUFFNkFCMDZBRkYwNjc5 NDQ5NTZCNDYwHhcNMjYwMzI1MDMzNDQ3WhcNMjYwNDAxMDMzNDQ3WjAYMRYwFAYD VQQDEw02OWMzNTdkNy1jYjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6boSoUflWEN1vPxJ1SRXAnPxtsgJwEGV80FrZzb8/k5ZxbZikp89PPWEtyO knFUC4R0XMUKjYCvhOA52VhDI+A34m7Yve57IgeH9RCfvd1gVRzotxEGncmqhRSL 4P/7xIp16LkOpmUrmUlyQoflDQB8X5vKvmbBiwbjNfXGh0tTZGCQhzegCay7FRcu 332mlQDMljQyWS//FbWkk2E+rKwSzSgKeEK5mrSn2upIK0CSG62Nr8bsBQV08oDm ccLnwhdoOUfZpDbg+MOWJ8cXpMsbedIvOxuHBlwm6xX/hbHdGY6nMAxfJXkziTvq O2UMfpNrUFLvP063UQjoR0qGDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKQifzfu z+utri5p9Q3HfhrrSdzmMB8GA1UdIwQYMBaAFEqKOV5VbMfxmq5qsGr/BnlElWtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ1QS8yMzc1QjMwNkI5 NDUxMUVFQkI4MTg4MzRDNEY5QUUwMi9Tb281WGxWc3hfR2FybXF3YXY4R2VVU1Zh MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NvbzVYbFZzeF9HYXJtcXdhdjhHZVVTVmEwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkQ1QS8yMzc1QjMwNkI5NDUxMUVFQkI4MTg4MzRDNEY5QUUwMi9Tb281WGxWc3hf R2FybXF3YXY4R2VVU1ZhMFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMNahkMBsk3aoRVPx/j13+yezEuXlwoDadtGnf5LdOLP1p4DssxySSN8B6+pG C8NxcdCpOfJNkrqO52i6ZZKn41JlhpXHE8MJWPWwTropisUIGJZosXExoGjoNk01 U3M/ulrZy0w+pHx3crt96LnAu4e4WLzGHVF5LFg6vYoH6Fu6++ZHa6WiqiBH9SBl klh9+9RwPk9XkIbawCDXT0auKClRsNOjClMZigqChGBbvykmZA7WtWb7oxMtKt8X +havbEPNlrJPcwfS/KnZ+KYVpI63kY6dhcBgn2IA0bRtpjnKS8wK8pd7q+zfay+m xUol/W/iIRkczqKXGT4j+TOeBQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:58:07 2026 by rpki-client