$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft File: 0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft (raw, json) Hash identifier: p8wwyMvTgVzLQhzcN726NgwvTIhs42Kg1exTfzl+IMM= Subject key identifier: EE:E5:70:1C:54:C6:0A:38:BF:1B:BC:AD:9D:A5:20:9A:4B:A2:05:94 Authority key identifier: D2:C4:67:BC:3C:62:6B:C5:E6:AE:1B:2A:4D:23:57:11:D8:19:CA:E4 Certificate issuer: /CN=A91D6C43/serialNumber=D2C467BC3C626BC5E6AE1B2A4D235711D819CAE4 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft Manifest number: 17 Signing time: Wed 25 Mar 2026 08:13:10 +0000 Manifest this update: Wed 25 Mar 2026 08:13:10 +0000 Manifest next update: Wed 01 Apr 2026 08:13:10 +0000 Files and hashes: 1: 0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl (hash: CnsCYu9wKps0xt+mSpQhVhBe/4/iEnzfFSclWvH1KDw=) 2: DF277BF6108811F191FBC4DC323D8C67.roa (hash: kvVPZoMA2NCQIEL7Qt23JRtXW0EGzPWXpSZ3FwVtIdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:13:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6C43, serialNumber=D2C467BC3C626BC5E6AE1B2A4D235711D819CAE4 Validity Not Before: Mar 25 08:13:10 2026 GMT Not After : Apr 1 08:13:10 2026 GMT Subject: CN=69c39916-2d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6f:56:c9:7b:60:5f:0d:03:56:6d:fc:7a:17: 0a:7e:05:45:17:a3:9e:99:01:e0:29:19:46:4d:50: 08:2a:b8:e2:33:9b:92:5a:b8:dd:8b:e7:57:59:9b: d0:7f:c9:20:d1:d2:25:87:91:71:04:f9:9a:19:a4: c9:ce:49:b2:d7:0c:13:01:87:18:b0:45:f4:cf:c6: 86:f2:d3:81:4c:af:cb:67:55:e5:66:fa:e2:e3:9d: fc:d2:64:c5:9c:ad:e5:52:2a:f2:29:2e:c6:4a:9b: d2:1e:e2:6d:ce:74:db:5c:7a:49:e7:df:07:d6:42: bf:03:97:a8:41:72:69:72:0f:92:4e:c8:81:cb:f2: dc:3a:3f:67:26:ee:f4:eb:46:05:f3:b6:71:9c:4d: 6b:38:2a:8c:a8:45:0e:34:c4:36:dc:af:85:0e:56: e0:f4:66:06:ea:07:6d:b4:27:e7:a9:c6:24:a1:a3: 62:cd:1b:17:bf:41:2f:cc:ad:76:09:b6:0f:87:a3: 85:11:6f:ee:b0:09:77:58:ba:c1:ac:db:7f:94:30: bb:1a:31:42:e0:d6:52:ee:92:00:5e:94:60:89:39: 0c:76:90:f4:d1:02:26:5f:2a:83:d8:9d:5d:b1:3e: 7d:71:e8:bf:c9:6b:c5:d0:03:bf:c5:9a:3e:d2:69: f9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E5:70:1C:54:C6:0A:38:BF:1B:BC:AD:9D:A5:20:9A:4B:A2:05:94 X509v3 Authority Key Identifier: keyid:D2:C4:67:BC:3C:62:6B:C5:E6:AE:1B:2A:4D:23:57:11:D8:19:CA:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:e9:4f:bc:eb:22:6d:e6:09:73:6d:d3:66:67:1a:63:90:ca: 08:bc:fe:39:2f:17:9a:af:71:d4:d6:c3:9b:17:ba:a3:c2:7b: 8b:40:45:d4:05:37:27:1a:c0:a9:52:d1:76:1c:6a:d6:1b:42: 65:c0:d9:07:c0:9a:02:15:1a:6f:ba:a2:af:f1:1f:14:b7:5c: 5f:09:bd:ea:5f:5e:ff:0f:47:f3:cd:d7:d9:12:cd:ca:65:3a: d3:99:7c:1e:a0:43:f3:1a:dd:46:32:ff:8f:10:78:b1:36:a7: 85:a8:6c:41:9c:47:b4:c7:01:56:56:44:bf:18:61:ad:4d:ab: fc:28:08:cf:7d:a2:d0:27:d5:4c:df:0a:7c:68:c3:3b:71:30: f1:41:f8:71:ca:92:86:bd:b8:59:c5:da:66:7b:2f:09:a2:a8: a2:b7:b0:3e:f1:32:18:36:45:4b:95:cd:7b:e6:d0:e1:98:d5: dc:ef:b1:10:ee:71:8a:67:8c:fb:d1:2f:7d:1b:4d:26:3e:dc: 7a:dd:05:b4:db:8f:7c:43:32:a6:2c:97:7b:17:9b:36:2b:74: b1:b7:fe:59:a4:d2:77:54:4d:41:e7:0d:2e:f1:a3:c6:bc:4b: 9a:44:7f:d2:b6:bb:ae:c5:06:82:01:90:da:87:f3:b4:70:c5: fc:f6:6f:0e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NkM0MzExMC8GA1UEBRMoRDJDNDY3QkMzQzYyNkJDNUU2QUUxQjJBNEQyMzU3MTFE ODE5Q0FFNDAeFw0yNjAzMjUwODEzMTBaFw0yNjA0MDEwODEzMTBaMBgxFjAUBgNV BAMTDTY5YzM5OTE2LTJkODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCLb1bJe2BfDQNWbfx6Fwp+BUUXo56ZAeApGUZNUAgquOIzm5JauN2L51dZm9B/ ySDR0iWHkXEE+ZoZpMnOSbLXDBMBhxiwRfTPxoby04FMr8tnVeVm+uLjnfzSZMWc reVSKvIpLsZKm9Ie4m3OdNtceknn3wfWQr8Dl6hBcmlyD5JOyIHL8tw6P2cm7vTr RgXztnGcTWs4KoyoRQ40xDbcr4UOVuD0ZgbqB220J+epxiSho2LNGxe/QS/MrXYJ tg+Ho4URb+6wCXdYusGs23+UMLsaMULg1lLukgBelGCJOQx2kPTRAiZfKoPYnV2x Pn1x6L/Ja8XQA7/Fmj7SafkxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7uVwHFTG Cji/G7ytnaUgmkuiBZQwHwYDVR0jBBgwFoAU0sRnvDxia8XmrhsqTSNXEdgZyuQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2QzQzL0M4MDlCOEYwMTA4 NjExRjFBMTk0N0Y3MjMxM0Q4QzY3LzBzUm52RHhpYThYbXJoc3FUU05YRWRnWnl1 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMHNSbnZEeGlhOFhtcmhzcVRTTlhFZGdaeXVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2 QzQzL0M4MDlCOEYwMTA4NjExRjFBMTk0N0Y3MjMxM0Q4QzY3LzBzUm52RHhpYThY bXJoc3FUU05YRWRnWnl1US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC66U+86yJt5glzbdNmZxpjkMoIvP45Lxear3HU1sObF7qjwnuLQEXUBTcnGsCp UtF2HGrWG0JlwNkHwJoCFRpvuqKv8R8Ut1xfCb3qX17/D0fzzdfZEs3KZTrTmXwe oEPzGt1GMv+PEHixNqeFqGxBnEe0xwFWVkS/GGGtTav8KAjPfaLQJ9VM3wp8aMM7 cTDxQfhxypKGvbhZxdpmey8Joqiit7A+8TIYNkVLlc175tDhmNXc77EQ7nGKZ4z7 0S99G00mPtx63QW02498QzKmLJd7F5s2K3Sxt/5ZpNJ3VE1B5w0u8aPGvEuaRH/S truuxQaCAZDah/O0cMX89m8O -----END CERTIFICATE-----Generated at Thu Mar 26 05:03:21 2026 by rpki-client