$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft File: Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft (raw, json) Hash identifier: PRNKcd0AoHZ44SirNrf42uWPR+5PlEQqu9zFf/KcEuI= Subject key identifier: 7A:0E:9C:A8:DB:4A:95:9F:1C:DB:B8:C8:12:8C:BB:BD:62:B5:20:08 Authority key identifier: 0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7 Certificate issuer: /CN=A91D462A/serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft Manifest number: 013A Signing time: Tue 24 Mar 2026 16:14:14 +0000 Manifest this update: Tue 24 Mar 2026 16:14:13 +0000 Manifest next update: Tue 31 Mar 2026 16:14:13 +0000 Files and hashes: 1: Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl (hash: AAkiCeXUVLNaZYbE16p1OB29PHrham058aaP1Xt8Bxs=) 2: 626CA672591911EFAF1F1D23C4F9AE02.roa (hash: 9ayUJbTwLRPcJporlzoTUwIv2h9R8DWkz2gQBFVIj/M=) 3: D5BFBE9E591811EF80AA9F21C4F9AE02.roa (hash: lJ8a2BmLR6pDdgSaGE66enyNc/gqE+gsClVSBRvWGto=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A, serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7 Validity Not Before: Mar 24 16:14:13 2026 GMT Not After : Mar 31 16:14:13 2026 GMT Subject: CN=69c2b856-cdd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a8:60:21:a3:90:78:17:60:cd:c2:d6:a1:68: 19:85:de:84:78:d1:ea:7d:3e:0e:77:7c:0c:05:c1: 43:cf:33:d6:e0:fe:d8:11:0b:fd:25:79:d0:e8:fd: 58:53:bd:18:97:7d:04:7b:2d:0c:39:86:5b:d9:12: ae:41:85:4e:30:05:55:36:3a:ee:0c:e8:b9:e6:4b: 14:af:ef:ed:21:70:93:6a:70:0d:03:4a:41:b8:62: b9:69:a7:f9:db:ee:dd:1c:81:4f:2e:d2:56:b3:13: a1:04:a7:a6:6d:1d:98:86:d3:79:29:04:a4:98:61: 60:8a:c5:86:bd:31:3d:af:38:ac:22:be:ec:4a:0b: 97:dc:7a:6b:e7:05:89:43:8a:16:b5:8e:69:cc:7f: ab:ea:8d:2d:f6:89:2c:f0:0c:6e:26:e5:18:14:b7: f5:7b:f5:e0:d5:d7:0a:cb:b6:76:a0:49:68:4f:c8: 12:93:2d:8b:80:26:a5:9c:5a:79:86:48:95:08:df: 5f:b6:ce:c5:f5:46:14:b2:45:a0:16:20:0d:a2:43: c6:7d:2b:7b:c5:24:44:89:ee:a1:47:f4:81:48:b4: a4:10:da:c0:2b:91:95:ed:f8:63:a7:e2:9d:ac:41: 4f:2b:11:23:ac:82:64:32:26:d9:70:4a:7a:d0:67: 15:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0E:9C:A8:DB:4A:95:9F:1C:DB:B8:C8:12:8C:BB:BD:62:B5:20:08 X509v3 Authority Key Identifier: keyid:0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:7f:28:a5:0a:14:c8:b7:1a:8c:71:f7:c3:69:a7:0e:ea:e1: 3a:65:c2:a0:5f:47:3b:01:25:46:3e:b0:d2:35:b6:1a:60:06: 78:81:81:52:65:56:0e:bc:ee:ae:b1:c6:17:14:fc:46:bc:13: 91:37:5d:3f:f0:61:14:16:6a:d2:dc:f6:0e:36:a5:d4:af:a4: 95:68:8f:c4:d2:53:22:15:4f:6a:0b:84:03:41:9f:e6:4f:b0: e0:c7:76:81:4f:3b:5f:01:96:61:95:cb:0a:a4:d3:81:17:cb: 91:27:05:b1:95:3b:44:fc:94:51:21:1b:39:4d:2f:64:b1:4d: 1a:04:3b:13:62:93:b2:c5:7a:25:83:2b:f8:86:0d:bb:15:e7: 75:44:9d:37:22:fe:e5:a6:d2:38:f8:2e:1f:e8:79:75:b5:50: 78:f9:db:7f:0d:d5:77:69:a1:80:a6:2e:d5:e4:23:73:f1:8a: 0f:c3:02:29:e0:c2:a3:cb:9b:b8:e2:51:15:11:9d:7d:0c:70: 90:a2:cc:15:23:56:e5:c5:b0:b0:c9:3b:75:de:40:b7:ca:b9: c5:f5:ef:a2:43:53:0f:46:39:23:9c:98:13:d3:8e:09:44:76: 85:d7:b0:1e:fe:dd:b6:04:1e:75:41:f5:43:94:1e:ea:4b:0e: 7b:43:26:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKDBEQUY0RjFBQzU4MTk4OTMxQUQ1QzAwMDdGNTI1NUE3 OUREMEU0QzcwHhcNMjYwMzI0MTYxNDEzWhcNMjYwMzMxMTYxNDEzWjAYMRYwFAYD VQQDEw02OWMyYjg1Ni1jZGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjahgIaOQeBdgzcLWoWgZhd6EeNHqfT4Od3wMBcFDzzPW4P7YEQv9JXnQ6P1Y U70Yl30Eey0MOYZb2RKuQYVOMAVVNjruDOi55ksUr+/tIXCTanANA0pBuGK5aaf5 2+7dHIFPLtJWsxOhBKembR2YhtN5KQSkmGFgisWGvTE9rzisIr7sSguX3Hpr5wWJ Q4oWtY5pzH+r6o0t9oks8AxuJuUYFLf1e/Xg1dcKy7Z2oEloT8gSky2LgCalnFp5 hkiVCN9fts7F9UYUskWgFiANokPGfSt7xSREie6hR/SBSLSkENrAK5GV7fhjp+Kd rEFPKxEjrIJkMibZcEp60GcV3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHoOnKjb SpWfHNu4yBKMu71itSAIMB8GA1UdIwQYMBaAFA2vTxrFgZiTGtXAAH9SVaed0OTH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80RUJBODQ2RTU4 NTYxMUVGOTQxNDQ1NUZDNEY5QUUwMi9EYTlQR3NXQm1KTWExY0FBZjFKVnA1M1E1 TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RhOVBHc1dCbUpNYTFjQUFmMUpWcDUzUTVNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80RUJBODQ2RTU4NTYxMUVGOTQxNDQ1NUZDNEY5QUUwMi9EYTlQR3NXQm1K TWExY0FBZjFKVnA1M1E1TWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO38opQoUyLcajHH3w2mnDurhOmXCoF9HOwElRj6w0jW2GmAGeIGBUmVWDrzu rrHGFxT8RrwTkTddP/BhFBZq0tz2Djal1K+klWiPxNJTIhVPaguEA0Gf5k+w4Md2 gU87XwGWYZXLCqTTgRfLkScFsZU7RPyUUSEbOU0vZLFNGgQ7E2KTssV6JYMr+IYN uxXndUSdNyL+5abSOPguH+h5dbVQePnbfw3Vd2mhgKYu1eQjc/GKD8MCKeDCo8ub uOJRFRGdfQxwkKLMFSNW5cWwsMk7dd5At8q5xfXvokNTD0Y5I5yYE9OOCUR2hdew Hv7dtgQedUH1Q5Qe6ksOe0MmFw== -----END CERTIFICATE-----Generated at Thu Mar 26 15:43:49 2026 by rpki-client