$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft File: 74BCtCGhAXh1OrlTjaNDuJh4nbs.mft (raw, json) Hash identifier: dy5CmNo925Xay8ES5yTjrfB9bEF83MSCAnUlJ2z4YnQ= Subject key identifier: EC:E5:C5:66:07:64:42:DC:48:57:91:A4:A8:02:5D:F2:D5:54:E7:E4 Authority key identifier: EF:80:42:B4:21:A1:01:78:75:3A:B9:53:8D:A3:43:B8:98:78:9D:BB Certificate issuer: /CN=A91D8157/serialNumber=EF8042B421A10178753AB9538DA343B898789DBB Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74BCtCGhAXh1OrlTjaNDuJh4nbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft Manifest number: 14 Signing time: Wed 25 Mar 2026 08:14:13 +0000 Manifest this update: Wed 25 Mar 2026 08:14:12 +0000 Manifest next update: Wed 01 Apr 2026 08:14:12 +0000 Files and hashes: 1: 74BCtCGhAXh1OrlTjaNDuJh4nbs.crl (hash: DoRZpk/t2Ijwpu6vUZquvxWHC3h+W3IlUMcDMkD1CDk=) 2: 46C3253C114511F187FE79C5213D8C67.roa (hash: d5jss6YgiDgyamXt9/dxf7fL1qrUfpWSSJLZZ7FjVz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.crl rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74BCtCGhAXh1OrlTjaNDuJh4nbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:14:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8157, serialNumber=EF8042B421A10178753AB9538DA343B898789DBB Validity Not Before: Mar 25 08:14:12 2026 GMT Not After : Apr 1 08:14:12 2026 GMT Subject: CN=69c39955-d683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:65:1e:88:b7:54:1d:0a:17:1a:3b:91:77:9b: 40:0c:11:b3:0b:ef:7e:c3:c4:b2:ab:2b:90:ef:66: 82:dd:97:ea:db:5f:68:b1:66:34:73:fc:db:bf:98: 7a:b5:0b:22:c0:66:5a:0f:b9:8d:f5:0d:fd:13:b8: b1:4e:ac:11:1c:58:45:ca:7c:97:20:ad:20:40:11: 3e:4c:ba:65:83:36:50:a0:29:d7:72:5a:ae:de:b3: 2f:c6:12:70:52:0d:95:41:bd:46:29:4a:4d:92:87: cb:e1:26:78:0b:79:c0:6f:c2:45:74:0c:7d:ea:d1: 1e:1b:c0:f6:2c:72:e8:df:a5:8e:d2:5a:e8:47:c5: ae:e1:5a:af:b9:17:25:1d:c4:2c:b1:bb:ec:eb:33: ba:54:23:be:e2:13:40:4e:5e:19:bb:9f:c2:1f:6d: a4:d6:d5:ae:ab:8e:07:d1:78:b3:8e:1a:1c:72:34: 3c:b8:47:b4:f0:04:ad:c3:0c:d0:d4:a4:c4:9f:9e: 41:07:f6:f4:8c:1f:81:3a:e8:32:17:63:46:4a:c7: 18:c4:41:e6:1c:74:b3:56:f2:1e:63:df:95:c2:53: 0f:79:83:ca:1a:f0:c5:06:3f:dd:b8:fe:00:79:44: 36:43:e9:75:80:a9:2e:af:d6:2d:e2:50:75:a2:f5: 63:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E5:C5:66:07:64:42:DC:48:57:91:A4:A8:02:5D:F2:D5:54:E7:E4 X509v3 Authority Key Identifier: keyid:EF:80:42:B4:21:A1:01:78:75:3A:B9:53:8D:A3:43:B8:98:78:9D:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74BCtCGhAXh1OrlTjaNDuJh4nbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:df:50:97:a9:de:33:c7:0e:7a:94:3a:6b:5a:8b:19:c1:d6: c9:bf:1a:3a:36:a3:7e:d9:36:75:81:dc:46:ce:e2:50:46:fe: b5:26:2b:75:7e:ee:5a:f2:2e:47:bc:e2:1f:d4:12:b3:9c:de: 44:c5:11:94:14:68:10:65:f4:59:04:b7:98:96:7c:b3:a0:08: f2:1c:93:71:0a:73:96:c1:60:8c:06:45:00:32:58:26:13:fd: a7:0f:23:c7:90:b6:41:fa:10:9c:98:f2:ef:a0:53:d5:b3:91: e3:e5:2e:54:f6:74:ed:28:e5:40:7a:49:d9:de:03:37:e7:b5: 21:6b:86:84:f9:6f:41:2e:f1:33:76:a3:d3:af:9b:2f:d5:4b: d6:2d:a7:30:34:57:c1:e9:5b:95:39:5d:e8:79:06:a8:d9:d4: 01:79:54:b1:14:e8:63:e5:d1:9d:45:3b:cc:06:a1:45:06:bd: 9e:0c:3e:7d:9b:dd:f0:74:8e:f4:5e:dc:d8:eb:2c:31:01:72: f5:e2:40:58:f7:45:b1:b0:26:60:8e:18:a3:77:fc:d3:7c:7b: da:9e:d3:f7:6d:13:99:62:23:2a:8a:ac:8e:de:55:08:a2:23: fb:a0:50:8f:6c:e1:00:d8:9c:ed:36:0b:2b:a7:c7:83:67:eb: 53:da:c2:7e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODE1NzExMC8GA1UEBRMoRUY4MDQyQjQyMUExMDE3ODc1M0FCOTUzOERBMzQzQjg5 ODc4OURCQjAeFw0yNjAzMjUwODE0MTJaFw0yNjA0MDEwODE0MTJaMBgxFjAUBgNV BAMTDTY5YzM5OTU1LWQ2ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgZR6It1QdChcaO5F3m0AMEbML737DxLKrK5DvZoLdl+rbX2ixZjRz/Nu/mHq1 CyLAZloPuY31Df0TuLFOrBEcWEXKfJcgrSBAET5MumWDNlCgKddyWq7esy/GEnBS DZVBvUYpSk2Sh8vhJngLecBvwkV0DH3q0R4bwPYscujfpY7SWuhHxa7hWq+5FyUd xCyxu+zrM7pUI77iE0BOXhm7n8IfbaTW1a6rjgfReLOOGhxyNDy4R7TwBK3DDNDU pMSfnkEH9vSMH4E66DIXY0ZKxxjEQeYcdLNW8h5j35XCUw95g8oa8MUGP924/gB5 RDZD6XWAqS6v1i3iUHWi9WMJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7OXFZgdk QtxIV5GkqAJd8tVU5+QwHwYDVR0jBBgwFoAU74BCtCGhAXh1OrlTjaNDuJh4nbsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MTU3LzBBNzkwQkU0MTE0 MjExRjE5RDM3NjI4RjIxM0Q4QzY3Lzc0QkN0Q0doQVhoMU9ybFRqYU5EdUpoNG5i cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNzRCQ3RDR2hBWGgxT3JsVGphTkR1Smg0bmJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MTU3LzBBNzkwQkU0MTE0MjExRjE5RDM3NjI4RjIxM0Q4QzY3Lzc0QkN0Q0doQVho MU9ybFRqYU5EdUpoNG5icy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCY31CXqd4zxw56lDprWosZwdbJvxo6NqN+2TZ1gdxGzuJQRv61Jit1fu5a8i5H vOIf1BKznN5ExRGUFGgQZfRZBLeYlnyzoAjyHJNxCnOWwWCMBkUAMlgmE/2nDyPH kLZB+hCcmPLvoFPVs5Hj5S5U9nTtKOVAeknZ3gM357Uha4aE+W9BLvEzdqPTr5sv 1UvWLacwNFfB6VuVOV3oeQao2dQBeVSxFOhj5dGdRTvMBqFFBr2eDD59m93wdI70 XtzY6ywxAXL14kBY90WxsCZgjhijd/zTfHvantP3bROZYiMqiqyO3lUIoiP7oFCP bOEA2JztNgsrp8eDZ+tT2sJ+ -----END CERTIFICATE-----Generated at Thu Mar 26 00:28:12 2026 by rpki-client