$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft File: raez5kKEQOUk2gaDhqHt8yH4gR4.mft (raw, json) Hash identifier: vvfASQU+QTSLPDCCiInr75k3INOBq5YFmyHbDTbWK60= Subject key identifier: D8:11:7E:C0:D7:8F:8B:4D:B1:1F:26:F2:A0:9D:43:59:F8:8B:08:2C Authority key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E Certificate issuer: /CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft Manifest number: 01E6 Signing time: Wed 25 Mar 2026 02:43:01 +0000 Manifest this update: Wed 25 Mar 2026 02:43:01 +0000 Manifest next update: Wed 01 Apr 2026 02:43:01 +0000 Files and hashes: 1: raez5kKEQOUk2gaDhqHt8yH4gR4.crl (hash: EjnfrYw1keum4swlvgScpzbNxzGUE02et1ddEeeSNIc=) 2: 1E35039C42D511EEAE5F803AC4F9AE02.roa (hash: 5dJP/M//lcF+sbSnEZ913U8w49zktTAz2tqR2Ha8qBs=) 3: EFB54FEC42D211EE9D8A0832C4F9AE02.roa (hash: aOgdwHx4RJqFv06ROzYFXUkAb7MKRRzbQI1IYFIaGUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7103, serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Validity Not Before: Mar 25 02:43:01 2026 GMT Not After : Apr 1 02:43:01 2026 GMT Subject: CN=69c34bb5-07f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d5:fb:ba:0d:40:6a:b6:e6:61:89:b6:b5:1f: 01:af:92:fe:54:0b:e4:11:14:b7:e7:dd:eb:35:3c: f3:ca:9d:37:6a:64:4d:32:4e:e8:93:2b:31:0e:04: 9c:af:95:8f:a0:e2:e0:90:46:ab:b3:83:22:8d:bf: 2c:bd:01:e6:0f:db:7d:1b:17:29:b7:ff:b8:1d:dc: cc:90:0d:83:3c:2f:e9:74:72:d6:94:cf:5e:e0:67: 8d:55:76:8c:26:10:94:b4:ed:8f:e7:37:1d:82:a4: ed:f6:a8:e5:a2:3c:86:97:28:81:b4:ff:6c:be:c7: 54:ea:21:9e:63:2b:79:70:b4:04:b3:e3:90:82:3d: f9:1d:7d:40:e0:1b:a3:2e:5e:dd:91:d8:8e:8c:10: 84:5d:d7:f0:db:1a:4c:4b:36:18:ba:12:8e:61:8a: a3:44:3b:68:59:9b:0c:1f:ca:6f:49:ff:cc:29:36: d6:16:f1:a4:92:78:57:83:a9:e9:3c:82:a9:cf:dc: 12:89:0b:a6:be:e7:9d:7d:da:8e:d3:b5:f2:9c:23: 58:0c:67:07:8d:31:0c:9f:89:23:7d:15:0a:f2:ea: 1e:30:2f:b6:9e:a3:23:4e:a3:47:be:14:30:03:37: be:f1:be:98:8e:16:b5:2f:24:5c:75:80:46:9b:b2: 5c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:11:7E:C0:D7:8F:8B:4D:B1:1F:26:F2:A0:9D:43:59:F8:8B:08:2C X509v3 Authority Key Identifier: keyid:AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:6d:09:68:0d:de:db:a6:7a:3f:ac:6f:b6:eb:b5:3a:c5:9a: 51:6e:69:55:ba:97:0a:18:9b:62:33:72:c7:2a:82:09:a6:69: 69:c8:11:eb:d7:a0:72:ec:e4:af:bf:ca:85:61:79:87:69:0b: 31:de:73:9d:2d:ad:2b:a5:2b:e2:02:90:fb:0b:52:9e:09:5d: 6b:25:50:21:59:66:97:81:3b:5c:35:eb:8a:d0:11:6d:05:c9: fa:f8:04:7d:43:74:d1:16:9d:ea:5b:0e:dd:eb:f6:74:b1:90: 7f:24:04:a1:e6:1d:af:33:5b:ea:64:9e:ae:14:3f:32:d0:8c: b6:1f:d0:85:45:ad:5f:16:70:b5:9e:65:73:50:fe:48:5d:05: c2:f2:3c:fe:ad:10:f4:21:33:a5:d9:1a:2f:ea:5a:3f:af:65: 3c:69:7d:72:67:3a:c3:8e:2e:30:ec:71:1f:22:02:22:f0:0e: 43:34:98:85:eb:4d:8b:a7:a2:df:48:26:dd:33:4b:c2:d6:37: e4:d8:3b:33:08:44:2a:5d:55:92:22:65:cd:f6:4b:e6:78:e9: 60:90:62:dd:40:e0:9c:49:68:7d:d5:ba:2d:a9:78:6f:78:89: 8c:4a:b3:1f:db:ca:a9:76:69:8e:4b:85:7e:01:c2:1d:4f:2c: 56:6e:90:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcxMDMxMTAvBgNVBAUTKEFEQTdCM0U2NDI4NDQwRTUyNERBMDY4Mzg2QTFFREYz MjFGODgxMUUwHhcNMjYwMzI1MDI0MzAxWhcNMjYwNDAxMDI0MzAxWjAYMRYwFAYD VQQDEw02OWMzNGJiNS0wN2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgtX7ug1AarbmYYm2tR8Br5L+VAvkERS3593rNTzzyp03amRNMk7okysxDgSc r5WPoOLgkEars4Mijb8svQHmD9t9Gxcpt/+4HdzMkA2DPC/pdHLWlM9e4GeNVXaM JhCUtO2P5zcdgqTt9qjlojyGlyiBtP9svsdU6iGeYyt5cLQEs+OQgj35HX1A4Buj Ll7dkdiOjBCEXdfw2xpMSzYYuhKOYYqjRDtoWZsMH8pvSf/MKTbWFvGkknhXg6np PIKpz9wSiQumvuedfdqO07XynCNYDGcHjTEMn4kjfRUK8uoeMC+2nqMjTqNHvhQw Aze+8b6Yjha1LyRcdYBGm7JcewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNgRfsDX j4tNsR8m8qCdQ1n4iwgsMB8GA1UdIwQYMBaAFK2ns+ZChEDlJNoGg4ah7fMh+IEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzEwMy83QUI4MTEyQTQy RDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFPVWsyZ2FEaHFIdDh5SDRn UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JhZXo1a0tFUU9VazJnYURocUh0OHlINGdSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzEwMy83QUI4MTEyQTQyRDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFP VWsyZ2FEaHFIdDh5SDRnUjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMW0JaA3e26Z6P6xvtuu1OsWaUW5pVbqXChibYjNyxyqCCaZpacgR69egcuzk r7/KhWF5h2kLMd5znS2tK6Ur4gKQ+wtSngldayVQIVlml4E7XDXritARbQXJ+vgE fUN00Rad6lsO3ev2dLGQfyQEoeYdrzNb6mSerhQ/MtCMth/QhUWtXxZwtZ5lc1D+ SF0FwvI8/q0Q9CEzpdkaL+paP69lPGl9cmc6w44uMOxxHyICIvAOQzSYhetNi6ei 30gm3TNLwtY35Ng7MwhEKl1VkiJlzfZL5njpYJBi3UDgnElofdW6Lal4b3iJjEqz H9vKqXZpjkuFfgHCHU8sVm6Q4g== -----END CERTIFICATE-----Generated at Thu Mar 26 07:37:14 2026 by rpki-client