$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft File: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft (raw, json) Hash identifier: kQPfLemsewnQXo9kryoOEBEu3wEXLrCVupr7Jj5C6AE= Subject key identifier: D8:5B:FD:8B:F8:4C:E3:DC:54:21:E2:EB:35:E6:6D:DD:E9:6E:62:D5 Authority key identifier: 02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD Certificate issuer: /CN=A91D2FC0/serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Certificate serial: 0BA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft Manifest number: 0B90 Signing time: Tue 24 Mar 2026 18:55:34 +0000 Manifest this update: Tue 24 Mar 2026 18:55:34 +0000 Manifest next update: Tue 31 Mar 2026 18:55:34 +0000 Files and hashes: 1: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl (hash: I0AiKYEtxwn4l54Rg45+86JxyXNWpprHXOiwqinzTU0=) 2: 81D0374C475111EA82F8B821C4F9AE02.roa (hash: TOj5s+aNQC9Z5ZqVlC2yt7q1plWezfus1BZx0sUNSs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:55:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2976 (0xba0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2FC0, serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Validity Not Before: Mar 24 18:55:34 2026 GMT Not After : Mar 31 18:55:34 2026 GMT Subject: CN=69c2de26-e8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:38:17:2c:9e:1c:24:94:1b:48:5e:56:a2:e1: 10:e9:0d:f5:67:0e:c7:f6:17:ae:49:bd:8d:4c:c0: 6e:63:d4:3a:e1:30:eb:7e:fa:b7:15:f7:da:a0:29: 7f:18:9b:4e:ba:51:90:db:7e:f2:63:8e:fa:aa:78: e3:bb:fa:bd:da:24:5f:15:9e:71:4a:fb:e8:5c:9c: 38:0c:ad:ba:69:cd:b0:61:77:b1:7b:a4:61:0f:c6: f2:88:d5:63:26:31:a2:e4:a9:da:30:2a:1e:2b:42: 5f:5e:ba:d3:0a:66:59:03:45:6e:98:f3:f5:0a:e8: 93:fb:2c:d2:61:80:4e:e3:98:e4:7e:e9:c8:0f:15: b1:f6:dc:cb:a0:d3:e1:93:66:8d:70:08:dc:8a:de: bd:3e:f1:43:b7:3e:fe:d0:22:85:04:43:07:a5:6c: e0:44:b4:94:c4:1e:e2:9e:22:6b:b4:87:c5:9c:48: e2:9c:b5:cc:1f:ba:e3:fb:49:06:e2:de:62:c1:4a: 98:49:65:8e:7b:1c:7e:eb:02:1b:33:51:3b:7c:30: c4:5f:c4:7c:d2:b3:2c:4a:27:e9:e0:ed:c6:ce:f8: ee:38:52:53:4f:c3:50:15:05:0a:b7:51:8f:01:2f: b2:6a:5f:a2:b6:76:37:1c:c3:a7:51:9a:9b:99:ab: 17:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5B:FD:8B:F8:4C:E3:DC:54:21:E2:EB:35:E6:6D:DD:E9:6E:62:D5 X509v3 Authority Key Identifier: keyid:02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:cf:13:6c:de:a9:be:06:ea:88:fa:de:26:54:56:1c:ea:22: 16:c9:1a:7a:71:79:5d:b7:75:8d:da:0b:18:91:9a:7a:66:a4: a6:a2:3e:c6:c4:20:9c:e4:39:34:08:8d:c5:83:44:18:05:51: 29:7f:95:c0:58:91:78:92:ed:5d:31:b6:85:c0:fa:24:13:9e: 20:5b:b7:17:ee:3e:b8:c1:2a:1d:c5:fc:80:55:83:0e:b0:85: 04:ef:1d:9d:59:77:2c:bd:c8:35:e8:19:ea:8c:69:2a:7e:82: 38:9e:cb:68:6c:c7:7b:32:bb:66:51:9a:81:f5:c7:5e:a8:55: 12:44:d0:63:17:58:1c:20:a8:38:bb:e6:b2:3d:7f:81:6c:6e: 5d:6d:e3:a4:8b:4c:78:4e:29:df:64:ef:9e:6e:1b:d6:87:0f: 29:a3:b9:8e:73:2d:5a:c0:d2:b3:01:b1:27:38:d6:3e:7d:98: f0:fb:48:c7:11:78:74:e3:6e:00:4b:8d:28:60:f7:44:a8:e6: 96:f3:89:72:05:2b:35:9f:7b:9a:0a:47:52:50:42:0c:26:63: 96:ea:bf:16:2e:68:bf:ac:78:3b:dd:ef:d2:26:98:ef:34:26: b5:31:90:6a:b0:70:bc:0e:a4:d0:5a:f1:5a:79:63:d2:58:b0: 92:12:0a:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJGQzAxMTAvBgNVBAUTKDAyOUY4MjEyNDMwQThERDdFNzk1NEZFQzMxM0YxNURB NDdDQjQ0REQwHhcNMjYwMzI0MTg1NTM0WhcNMjYwMzMxMTg1NTM0WjAYMRYwFAYD VQQDEw02OWMyZGUyNi1lOGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTgXLJ4cJJQbSF5WouEQ6Q31Zw7H9heuSb2NTMBuY9Q64TDrfvq3FffaoCl/ GJtOulGQ237yY476qnjju/q92iRfFZ5xSvvoXJw4DK26ac2wYXexe6RhD8byiNVj JjGi5KnaMCoeK0JfXrrTCmZZA0VumPP1CuiT+yzSYYBO45jkfunIDxWx9tzLoNPh k2aNcAjcit69PvFDtz7+0CKFBEMHpWzgRLSUxB7iniJrtIfFnEjinLXMH7rj+0kG 4t5iwUqYSWWOexx+6wIbM1E7fDDEX8R80rMsSifp4O3GzvjuOFJTT8NQFQUKt1GP AS+yal+itnY3HMOnUZqbmasXsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNhb/Yv4 TOPcVCHi6zXmbd3pbmLVMB8GA1UdIwQYMBaAFAKfghJDCo3X55VP7DE/FdpHy0Td MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkZDMC8yQTgxNUEwODQ3 NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pkZm5sVV9zTVQ4VjJrZkxS TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FwLUNFa01LamRmbmxVX3NNVDhWMmtmTFJOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkZDMC8yQTgxNUEwODQ3NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pk Zm5sVV9zTVQ4VjJrZkxSTjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApc8TbN6pvgbqiPreJlRWHOoiFskaenF5Xbd1jdoLGJGaemakpqI+xsQgnOQ5 NAiNxYNEGAVRKX+VwFiReJLtXTG2hcD6JBOeIFu3F+4+uMEqHcX8gFWDDrCFBO8d nVl3LL3INegZ6oxpKn6COJ7LaGzHezK7ZlGagfXHXqhVEkTQYxdYHCCoOLvmsj1/ gWxuXW3jpItMeE4p32Tvnm4b1ocPKaO5jnMtWsDSswGxJzjWPn2Y8PtIxxF4dONu AEuNKGD3RKjmlvOJcgUrNZ97mgpHUlBCDCZjluq/Fi5ov6x4O93v0iaY7zQmtTGQ arBwvA6k0FrxWnlj0liwkhIKFQ== -----END CERTIFICATE-----Generated at Thu Mar 26 14:07:56 2026 by rpki-client