$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft File: _vLBxOoJZEd1FMGqlG5sQXeNBr8.mft (raw, json) Hash identifier: YSFtorDzdX9slsLiGRS8ruSCuj++y7C+0ryQVzoc7Y8= Subject key identifier: A3:FD:5D:32:36:30:EF:88:4D:8E:FA:9B:14:3F:90:63:52:2E:7F:1D Authority key identifier: FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF Certificate issuer: /CN=A91D298D/serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF Certificate serial: 091F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft Manifest number: 08D7 Signing time: Thu 26 Mar 2026 20:32:32 +0000 Manifest this update: Thu 26 Mar 2026 20:32:31 +0000 Manifest next update: Thu 02 Apr 2026 20:32:31 +0000 Files and hashes: 1: _vLBxOoJZEd1FMGqlG5sQXeNBr8.crl (hash: roNZ31SsIl5E1HgBoFStvjqYFFMhOVLNN5313u6wubw=) 2: 01BB1B8E7C0411EFB0D29158C4F9AE02.roa (hash: Bo7KfSmgopE09z8Ii/6iDq4ZBQOfTMw5H36AojNCI5M=) 3: 65519ACC506C11EC99354984C4F9AE02.roa (hash: cyYmW2mjaeVZhYJ/t/F5yjmvt3AgL3H5/RwI/7ZyO5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 20:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2335 (0x91f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D298D, serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF Validity Not Before: Mar 26 20:32:31 2026 GMT Not After : Apr 2 20:32:31 2026 GMT Subject: CN=69c597df-5461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e8:22:0e:62:11:44:4b:7c:30:41:1b:bd:a2: 53:29:a2:d1:9e:a3:ba:d0:6e:92:9b:4b:63:05:b3: 0a:eb:b0:2c:38:82:69:66:2c:12:6d:0b:2c:7e:66: a9:90:be:04:66:01:b0:2a:dd:db:75:b1:00:05:69: 6c:3e:42:08:b2:cc:3f:cd:ec:5a:68:72:db:27:9d: 4b:71:42:63:53:a6:e2:82:01:1e:ef:39:f4:11:d7: 7a:b0:3c:ef:f9:af:02:56:40:a3:a9:46:cf:a4:c0: 6a:57:c3:cd:3b:63:ff:25:22:71:63:c8:7f:6a:b6: 08:27:37:53:0e:3f:33:4f:cf:f7:78:16:91:18:fb: 93:fc:5c:d8:03:6e:b7:b1:7b:e2:bf:65:61:78:38: 46:c4:d8:f9:6f:a6:80:e6:fe:89:24:4f:15:4b:93: ec:46:48:a8:0c:bc:30:9c:b3:a1:2e:41:95:98:75: 9a:6b:27:a2:4b:e1:25:c4:b3:25:82:aa:ca:7f:a8: 77:ba:bf:ba:4d:16:ad:bc:fb:43:d7:af:02:a5:2b: fb:04:c0:1f:88:3d:f9:b2:32:54:fe:a9:8b:f2:2c: b3:05:62:a7:f0:18:1d:e9:4e:75:1f:1b:8c:d3:e6: c5:cd:05:43:a3:bc:aa:52:07:81:f6:14:38:19:d5: c8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FD:5D:32:36:30:EF:88:4D:8E:FA:9B:14:3F:90:63:52:2E:7F:1D X509v3 Authority Key Identifier: keyid:FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:7a:bc:dd:d8:51:48:7e:4a:a3:b7:8a:bc:09:d7:0a:c6:54: a5:4d:d8:67:50:6e:de:bb:98:3b:d1:36:bc:62:6d:21:ba:93: 89:cf:0d:f1:2f:2c:39:e3:11:1f:d0:39:a2:d2:94:8b:0f:e4: 22:23:65:8b:83:b1:4f:a5:07:75:66:b3:8b:d7:81:38:42:18: fd:39:38:28:b4:3f:93:50:5c:3a:5d:18:03:ff:6e:e4:1c:bb: 19:20:f1:51:0b:73:81:b5:dd:f0:47:69:61:ad:18:f1:d3:69: 02:e7:86:f1:51:10:e0:e7:15:62:6e:ad:70:fb:fd:99:b6:91: e0:58:54:44:30:60:de:2e:10:86:69:a4:62:ca:95:d7:00:94: 22:8a:47:1f:d2:cf:bf:7d:6a:e0:5a:f0:21:48:21:fa:34:08: 57:0d:b4:2c:f9:91:fb:22:3e:af:5f:7c:9d:05:75:27:37:65: d0:72:2a:6c:54:0c:39:26:ef:46:68:a2:9b:9e:9e:37:74:52: d0:7b:0d:8e:43:71:d9:08:de:e2:93:94:da:8a:66:65:48:fe: aa:d8:79:aa:d7:7f:08:e7:6d:de:f7:7b:32:08:c9:04:ee:6c: 2f:e2:ac:56:be:6f:c0:50:a3:7b:2e:59:d1:eb:72:d5:cf:55: 99:46:48:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI5OEQxMTAvBgNVBAUTKEZFRjJDMUM0RUEwOTY0NDc3NTE0QzFBQTk0NkU2QzQx Nzc4RDA2QkYwHhcNMjYwMzI2MjAzMjMxWhcNMjYwNDAyMjAzMjMxWjAYMRYwFAYD VQQDEw02OWM1OTdkZi01NDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+giDmIRREt8MEEbvaJTKaLRnqO60G6Sm0tjBbMK67AsOIJpZiwSbQssfmap kL4EZgGwKt3bdbEABWlsPkIIssw/zexaaHLbJ51LcUJjU6biggEe7zn0Edd6sDzv +a8CVkCjqUbPpMBqV8PNO2P/JSJxY8h/arYIJzdTDj8zT8/3eBaRGPuT/FzYA263 sXviv2VheDhGxNj5b6aA5v6JJE8VS5PsRkioDLwwnLOhLkGVmHWaayeiS+ElxLMl gqrKf6h3ur+6TRatvPtD168CpSv7BMAfiD35sjJU/qmL8iyzBWKn8Bgd6U51HxuM 0+bFzQVDo7yqUgeB9hQ4GdXInQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKP9XTI2 MO+ITY76mxQ/kGNSLn8dMB8GA1UdIwQYMBaAFP7ywcTqCWRHdRTBqpRubEF3jQa/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjk4RC8zMzdBNjQzMkYx QTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpFZDFGTUdxbEc1c1FYZU5C cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192TEJ4T29KWkVkMUZNR3FsRzVzUVhlTkJyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mjk4RC8zMzdBNjQzMkYxQTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpF ZDFGTUdxbEc1c1FYZU5CcjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhXq83dhRSH5Ko7eKvAnXCsZUpU3YZ1Bu3ruYO9E2vGJtIbqTic8N8S8sOeMR H9A5otKUiw/kIiNli4OxT6UHdWazi9eBOEIY/Tk4KLQ/k1BcOl0YA/9u5By7GSDx UQtzgbXd8EdpYa0Y8dNpAueG8VEQ4OcVYm6tcPv9mbaR4FhURDBg3i4QhmmkYsqV 1wCUIopHH9LPv31q4FrwIUgh+jQIVw20LPmR+yI+r198nQV1Jzdl0HIqbFQMOSbv Rmiim56eN3RS0HsNjkNx2Qje4pOU2opmZUj+qth5qtd/COdt3vd7MgjJBO5sL+Ks Vr5vwFCjey5Z0ety1c9VmUZI8w== -----END CERTIFICATE-----Generated at Fri Mar 27 11:47:27 2026 by rpki-client