$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft File: esDADw_KR57kZeT39UXoyUmT1hw.mft (raw, json) Hash identifier: ayXyBXkL3EMGCOozCvt2A4fAqjPBxPdj9G7hPpkq4Mk= Subject key identifier: 84:49:D6:78:A1:22:C5:5A:F8:FA:9A:4D:32:92:F5:D2:4B:EA:81:C8 Authority key identifier: 7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C Certificate issuer: /CN=A91D1691/serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C Certificate serial: 24F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft Manifest number: 24C2 Signing time: Thu 26 Mar 2026 15:47:25 +0000 Manifest this update: Thu 26 Mar 2026 15:47:25 +0000 Manifest next update: Thu 02 Apr 2026 15:47:25 +0000 Files and hashes: 1: esDADw_KR57kZeT39UXoyUmT1hw.crl (hash: KLB/z2RCswoqMyf/eYyxO0vIxWgCmri7Gr0xRHRyg3U=) 2: D2AD822AF2A711F0B86D5E54726F56BC.roa (hash: M07o/4Se0WQ0x98V4EyKF0kElpzcSvmr2bEcsLBgAM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9462 (0x24f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C Validity Not Before: Mar 26 15:47:25 2026 GMT Not After : Apr 2 15:47:25 2026 GMT Subject: CN=69c5550d-c309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e0:1c:a8:12:76:ad:b2:d1:05:ff:07:6a:c5: 09:0a:4e:af:de:ce:ea:a6:ac:04:6f:42:67:39:e6: 8e:ad:b9:19:25:b7:aa:99:2b:ff:8e:b7:c1:dc:72: 95:67:e9:c2:c4:1d:e9:ad:a4:0e:c5:c6:83:b5:33: 3d:b5:da:d1:29:0d:28:1a:42:28:cc:13:2c:e8:17: 1a:3d:b8:20:95:94:65:1f:d6:b5:b5:e2:ab:46:ef: 39:25:1e:f6:3e:45:c8:dd:e9:65:8f:b8:44:c6:ad: bd:df:c8:36:99:27:70:dd:82:30:2a:56:ff:84:1f: c2:8b:1c:a8:37:0d:87:39:af:92:76:ab:cd:3c:e2: 11:55:34:3c:64:8c:31:ba:be:85:5a:0a:55:2e:e1: 8d:3f:67:f3:67:07:a0:37:1b:90:44:93:12:95:33: 75:a4:fd:0a:fb:6a:cb:c1:19:6f:56:3d:02:d0:1c: e2:25:80:1b:2a:74:11:d7:a5:ee:49:ff:fa:81:26: bb:58:f3:c5:ad:16:f8:d6:4d:f5:31:77:2e:c5:67: 79:3f:9f:56:7c:4d:72:37:60:89:95:0e:14:62:e3: be:4f:e2:bc:07:0b:3f:6d:32:1d:5c:db:f7:83:21: d6:e0:b7:73:c5:40:4c:2d:88:88:b8:84:8c:a6:e8: aa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:49:D6:78:A1:22:C5:5A:F8:FA:9A:4D:32:92:F5:D2:4B:EA:81:C8 X509v3 Authority Key Identifier: keyid:7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:bd:4f:18:4a:f3:4e:a1:36:3e:5d:e1:13:9d:4e:37:d7:7e: 8c:45:0c:ec:1b:b3:23:af:74:4b:fe:81:73:1a:16:a8:07:d1: 48:ba:b3:7e:87:fa:db:ac:2d:1c:a3:e2:2e:c0:c3:25:6e:c3: fc:0a:26:d6:46:2a:29:38:44:d7:1b:2f:e6:ef:29:49:5f:15: 1a:50:56:9f:be:b3:23:fb:14:95:0e:20:b8:71:10:3f:5a:2f: 24:96:11:d6:ef:11:1d:26:e5:c2:2b:5a:a9:60:75:1b:9b:b0: bc:83:e7:5f:df:34:0f:d7:ef:2a:f2:52:5e:db:94:fb:a3:b0: 62:ae:20:28:e3:ca:5d:5a:2b:24:c2:f9:d7:ce:a1:30:f1:ec: a3:3d:a4:19:0e:75:aa:70:2c:12:ff:e0:94:5e:06:40:79:1d: 81:84:4a:c7:84:9d:92:02:ff:c2:34:cd:96:29:6f:98:19:f7: aa:62:da:88:32:8f:54:7c:e1:9c:aa:ee:d5:32:38:a7:1f:b8: f9:bc:b1:8a:89:a9:75:bf:0e:97:e3:0b:04:10:9f:6a:14:61: 14:69:02:b4:f3:6f:4d:02:40:65:61:d6:e8:5c:a6:16:e8:19: 3a:00:10:1c:4a:56:de:ba:33:a8:c7:3d:26:5d:3f:8e:44:4e: f8:b2:86:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKDdBQzBDMDBGMEZDQTQ3OUVFNDY1RTRGN0Y1NDVFOEM5 NDk5M0Q2MUMwHhcNMjYwMzI2MTU0NzI1WhcNMjYwNDAyMTU0NzI1WjAYMRYwFAYD VQQDEw02OWM1NTUwZC1jMzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreAcqBJ2rbLRBf8HasUJCk6v3s7qpqwEb0JnOeaOrbkZJbeqmSv/jrfB3HKV Z+nCxB3praQOxcaDtTM9tdrRKQ0oGkIozBMs6BcaPbgglZRlH9a1teKrRu85JR72 PkXI3ellj7hExq2938g2mSdw3YIwKlb/hB/CixyoNw2HOa+SdqvNPOIRVTQ8ZIwx ur6FWgpVLuGNP2fzZwegNxuQRJMSlTN1pP0K+2rLwRlvVj0C0BziJYAbKnQR16Xu Sf/6gSa7WPPFrRb41k31MXcuxWd5P59WfE1yN2CJlQ4UYuO+T+K8Bws/bTIdXNv3 gyHW4LdzxUBMLYiIuISMpuiqdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIRJ1nih IsVa+PqaTTKS9dJL6oHIMB8GA1UdIwQYMBaAFHrAwA8Pykee5GXk9/VF6MlJk9Yc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS81QUZDMjY5MjY1 MkIxMUU1OTdBODY4ODFDNEY5QUUwMi9lc0RBRHdfS1I1N2taZVQzOVVYb3lVbVQx aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzREFEd19LUjU3a1plVDM5VVhveVVtVDFody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS81QUZDMjY5MjY1MkIxMUU1OTdBODY4ODFDNEY5QUUwMi9lc0RBRHdfS1I1 N2taZVQzOVVYb3lVbVQxaHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMb1PGErzTqE2Pl3hE51ON9d+jEUM7BuzI690S/6BcxoWqAfRSLqzfof626wt HKPiLsDDJW7D/Aom1kYqKThE1xsv5u8pSV8VGlBWn76zI/sUlQ4guHEQP1ovJJYR 1u8RHSblwitaqWB1G5uwvIPnX980D9fvKvJSXtuU+6OwYq4gKOPKXVorJML5186h MPHsoz2kGQ51qnAsEv/glF4GQHkdgYRKx4SdkgL/wjTNlilvmBn3qmLaiDKPVHzh nKru1TI4px+4+byxiompdb8Ol+MLBBCfahRhFGkCtPNvTQJAZWHW6FymFugZOgAQ HEpW3rozqMc9Jl0/jkRO+LKG8A== -----END CERTIFICATE-----Generated at Thu Mar 26 19:31:55 2026 by rpki-client