$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft File: mPVq6odEo9Few5KtBtYIN3BGJUE.mft (raw, json) Hash identifier: C/fPcDHdWaQcY2wyvis7HpNfcgJpeRxhBcm83kpc5Fw= Subject key identifier: 0B:9B:3D:7B:98:D4:33:19:48:A5:CE:92:33:21:C7:16:E1:50:F2:31 Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 Certificate issuer: /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Certificate serial: 0538 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft Manifest number: 0524 Signing time: Tue 24 Mar 2026 23:17:40 +0000 Manifest this update: Tue 24 Mar 2026 23:17:39 +0000 Manifest next update: Tue 31 Mar 2026 23:17:39 +0000 Files and hashes: 1: mPVq6odEo9Few5KtBtYIN3BGJUE.crl (hash: owSsOW4HfP/xwwO3xT7yD5iWMip148h4Y+ENPoZgRE8=) 2: CB7E6CF0DBEF11EF9FC5007CC4F9AE02.roa (hash: VJgHTQOVu03GlBSuXPQzuVHdwrsQzGniIaHaw00H0Kk=) 3: 30B8A186DBEF11EFAF6FF37AC4F9AE02.roa (hash: VIlx0l5j7GQ7Beoam2Qgv31QWbO2E+gcDdeVz2IPgAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1336 (0x538) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D774B, serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Validity Not Before: Mar 24 23:17:39 2026 GMT Not After : Mar 31 23:17:39 2026 GMT Subject: CN=69c31b94-4059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:39:e8:72:7a:ff:d6:be:ae:b0:44:1f:58:f7: 82:63:ec:5c:4a:73:61:1d:9e:8f:c0:ce:aa:c9:99: 01:94:6f:8c:b1:a2:7f:f0:2f:66:0d:85:59:4d:ce: 5f:38:19:a4:52:05:59:b6:2c:7c:0e:80:cb:16:4a: 0b:27:55:87:dd:32:44:01:03:38:55:63:ed:f4:63: 65:bb:a0:cd:aa:c7:c2:1f:00:5d:ff:4e:8a:f9:a8: 7e:91:7b:70:8e:b8:3f:e4:6b:fc:c1:9c:8d:c0:38: 42:9f:7e:c3:60:a5:44:6c:8d:e6:64:04:74:af:24: 6d:d4:23:4b:5c:13:b7:8f:68:6f:dc:ea:96:72:f4: 89:d4:d4:18:01:2d:f5:9e:cf:8b:e5:ef:c8:e5:35: 22:22:13:71:4d:30:9b:b0:e3:35:20:92:8e:8e:cd: cc:94:fc:3e:5a:d4:04:8f:00:61:d5:ba:b3:b4:51: 3d:e2:01:f1:5c:97:58:d7:22:2a:7b:ae:a0:91:b6: 75:27:7c:5f:bf:a7:66:e1:ad:2c:2f:02:56:5f:79: a9:d0:f0:23:79:5e:42:9d:91:34:b3:11:4b:86:47: 41:f0:11:44:fc:6e:a6:e7:c5:6e:c2:65:9d:8d:18: bb:bc:45:9a:4f:23:58:73:c4:ab:82:28:5a:2e:21: b9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:9B:3D:7B:98:D4:33:19:48:A5:CE:92:33:21:C7:16:E1:50:F2:31 X509v3 Authority Key Identifier: keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:46:9a:ae:09:fb:af:02:53:1d:7f:f6:f5:b4:36:05:a3:69: da:26:eb:b5:ac:27:60:8a:ef:1a:ce:d1:16:89:88:fa:20:cc: 4c:9c:b5:c1:80:8e:e9:7a:4e:0c:8a:d9:79:e1:03:05:ba:22: 5f:ab:0e:9e:74:38:35:45:b5:21:7b:11:51:ac:a8:8e:96:e8: d8:9e:e4:d5:e6:f5:c1:8e:1c:f3:e9:1f:1e:29:5d:9f:6b:ed: e4:1f:ec:25:24:69:5d:00:86:ad:04:73:11:f1:a6:5f:f0:1d: e0:ec:7f:cb:db:0e:7a:f7:5e:ab:b1:d1:3b:b3:95:0c:17:34: 4a:36:86:3c:ff:79:29:4d:d8:a0:b4:fd:5f:5f:ef:1e:70:f7: 72:68:d1:89:5f:62:b2:82:aa:04:03:31:6d:c1:48:c1:fd:5e: b3:f7:5f:df:82:ea:7e:89:87:77:2b:71:c4:d7:ca:29:17:d4: dc:a6:4c:39:0f:da:ed:90:6b:64:5c:3c:22:40:c4:02:42:05: 12:f6:b3:87:3b:73:76:42:31:aa:59:10:92:e5:83:97:4c:cb: f0:fa:5c:b9:6a:76:d4:af:9b:e6:87:ae:ef:ce:e2:df:6d:9e: 8b:79:be:7f:ed:10:be:4e:af:e2:27:4b:a2:9c:38:df:ab:13: ba:67:76:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc3NEIxMTAvBgNVBAUTKDk4RjU2QUVBODc0NEEzRDE1RUMzOTJBRDA2RDYwODM3 NzA0NjI1NDEwHhcNMjYwMzI0MjMxNzM5WhcNMjYwMzMxMjMxNzM5WjAYMRYwFAYD VQQDEw02OWMzMWI5NC00MDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoznocnr/1r6usEQfWPeCY+xcSnNhHZ6PwM6qyZkBlG+MsaJ/8C9mDYVZTc5f OBmkUgVZtix8DoDLFkoLJ1WH3TJEAQM4VWPt9GNlu6DNqsfCHwBd/06K+ah+kXtw jrg/5Gv8wZyNwDhCn37DYKVEbI3mZAR0ryRt1CNLXBO3j2hv3OqWcvSJ1NQYAS31 ns+L5e/I5TUiIhNxTTCbsOM1IJKOjs3MlPw+WtQEjwBh1bqztFE94gHxXJdY1yIq e66gkbZ1J3xfv6dm4a0sLwJWX3mp0PAjeV5CnZE0sxFLhkdB8BFE/G6m58VuwmWd jRi7vEWaTyNYc8SrgihaLiG5ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAubPXuY 1DMZSKXOkjMhxxbhUPIxMB8GA1UdIwQYMBaAFJj1auqHRKPRXsOSrQbWCDdwRiVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc0Qi84RkFCMjE2NjQz QjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85RmV3NUt0QnRZSU4zQkdK VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21QVnE2b2RFbzlGZXc1S3RCdFlJTjNCR0pVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzc0Qi84RkFCMjE2NjQzQjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85 RmV3NUt0QnRZSU4zQkdKVUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAREaargn7rwJTHX/29bQ2BaNp2ibrtawnYIrvGs7RFomI+iDMTJy1wYCO6XpO DIrZeeEDBboiX6sOnnQ4NUW1IXsRUayojpbo2J7k1eb1wY4c8+kfHildn2vt5B/s JSRpXQCGrQRzEfGmX/Ad4Ox/y9sOevdeq7HRO7OVDBc0SjaGPP95KU3YoLT9X1/v HnD3cmjRiV9isoKqBAMxbcFIwf1es/df34LqfomHdytxxNfKKRfU3KZMOQ/a7ZBr ZFw8IkDEAkIFEvazhztzdkIxqlkQkuWDl0zL8PpcuWp21K+b5oeu787i322ei3m+ f+0Qvk6v4idLopw436sTumd2CQ== -----END CERTIFICATE-----Generated at Thu Mar 26 04:45:44 2026 by rpki-client