$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft File: 9-88h0KVuB-hDxQP61W8nFzt-dk.mft (raw, json) Hash identifier: PNjz580KXlcpHIirq20wThQz5rIgPQJyo+DEWqTS1QU= Subject key identifier: E7:C5:0B:34:66:BC:4A:CC:96:A8:3F:3B:D3:78:B8:DB:40:42:09:0F Authority key identifier: F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9 Certificate issuer: /CN=A91D8218/serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft Manifest number: 4E Signing time: Wed 25 Mar 2026 07:26:28 +0000 Manifest this update: Wed 25 Mar 2026 07:26:27 +0000 Manifest next update: Wed 01 Apr 2026 07:26:27 +0000 Files and hashes: 1: 9-88h0KVuB-hDxQP61W8nFzt-dk.crl (hash: HkH5cWX6zsDfsAfMFb3bIaHOimO9mbN0BxG/Cg8/w94=) 2: E1F27B12B4A611F0927EAF76C4F9AE02.roa (hash: KPsklehDxHE/6tXZuvBqXZaukbJh52cwiwX6QhSLfDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.crl rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8218, serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9 Validity Not Before: Mar 25 07:26:27 2026 GMT Not After : Apr 1 07:26:27 2026 GMT Subject: CN=69c38e23-a831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2e:ff:87:6e:68:d3:da:32:21:a5:f7:26:fd: d4:b4:5f:9f:c2:aa:7f:22:db:08:4c:c8:7d:ac:c6: 98:eb:8c:1a:c9:69:9b:96:62:1e:52:a0:f6:6a:64: 30:bf:ae:8a:a3:65:a0:b2:f7:16:6f:0f:3e:db:bd: 74:94:4f:8b:3b:2d:8a:d6:59:bc:62:50:70:29:5a: 7d:a0:53:76:5e:4e:a6:77:d1:8d:01:85:68:bd:d9: cb:58:1e:e2:f2:f7:7a:8b:7a:9c:36:f6:4d:2f:2f: 46:df:cb:e8:6b:d2:63:86:7e:da:8c:36:7d:8e:e5: 91:70:79:b0:ae:85:d6:71:5e:6e:33:11:7f:78:1f: 3a:8b:6a:a1:93:d1:c4:66:a4:78:0b:09:59:80:63: 5c:09:49:2f:ab:de:bc:b9:34:25:b0:c6:99:36:b5: 44:bc:88:b2:f1:91:34:9f:f6:0b:1e:50:04:a8:65: 28:e6:f5:ff:43:07:64:3c:4e:d7:25:13:59:1a:ca: 3b:f7:f8:9c:8e:e7:0a:fb:43:b4:11:6f:a5:c0:62: bf:29:a2:9e:2d:2e:a3:4d:0d:c3:fa:e4:3b:88:c5: 26:d4:e1:99:60:f4:d7:c3:43:a3:7b:67:58:5e:ba: 01:9f:da:a6:74:86:3c:36:e6:b3:5c:da:03:dd:db: a0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C5:0B:34:66:BC:4A:CC:96:A8:3F:3B:D3:78:B8:DB:40:42:09:0F X509v3 Authority Key Identifier: keyid:F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a3:da:4d:01:40:3b:5f:4c:2c:2b:9a:6f:9b:37:f5:4e:bb: 55:2f:8b:30:1c:bc:6e:02:8d:5c:68:0a:c2:72:6f:19:7f:86: a9:7a:47:61:f1:e1:86:7f:fd:f8:70:82:92:1d:b4:80:59:86: a0:63:e3:2e:75:8f:6b:1f:58:67:13:3b:4f:8e:b7:40:e9:a7: 3c:7d:a0:70:53:60:ff:c2:8f:ae:cf:08:d4:e2:3e:e6:30:a9: 20:90:5d:21:51:4d:b1:f7:52:eb:dd:3a:95:38:bf:14:70:68: 18:b1:82:57:15:01:ab:3c:f5:bf:2f:9a:98:23:3e:36:0f:90: c0:04:29:db:3e:68:c8:ed:3d:d0:26:4e:d8:6d:2b:c0:c0:53: 19:69:8b:3e:e9:5a:d3:c7:1d:71:9b:58:4a:02:05:b1:dc:e2: 76:0f:80:c9:6a:aa:37:ff:29:87:bb:f6:f4:e9:22:81:a0:ed: 5c:d2:dc:7c:19:a0:b3:f9:1c:4e:e1:2e:ed:87:c5:1c:1e:f2: 94:dd:d1:14:d0:69:dd:6e:38:4b:93:98:5d:82:79:f8:4f:d2: 7e:2e:99:ee:62:e7:58:80:30:05:08:f9:96:1a:fc:d3:31:bd: 9d:25:9e:32:db:58:71:59:36:44:0a:a6:ba:22:ee:22:aa:d4: 08:08:f5:8a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODIxODExMC8GA1UEBRMoRjdFRjNDODc0Mjk1QjgxRkExMEYxNDBGRUI1NUJDOUM1 Q0VERjlEOTAeFw0yNjAzMjUwNzI2MjdaFw0yNjA0MDEwNzI2MjdaMBgxFjAUBgNV BAMTDTY5YzM4ZTIzLWE4MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbLv+HbmjT2jIhpfcm/dS0X5/Cqn8i2whMyH2sxpjrjBrJaZuWYh5SoPZqZDC/ roqjZaCy9xZvDz7bvXSUT4s7LYrWWbxiUHApWn2gU3ZeTqZ30Y0BhWi92ctYHuLy 93qLepw29k0vL0bfy+hr0mOGftqMNn2O5ZFwebCuhdZxXm4zEX94HzqLaqGT0cRm pHgLCVmAY1wJSS+r3ry5NCWwxpk2tUS8iLLxkTSf9gseUASoZSjm9f9DB2Q8Ttcl E1kayjv3+JyO5wr7Q7QRb6XAYr8pop4tLqNNDcP65DuIxSbU4Zlg9NfDQ6N7Z1he ugGf2qZ0hjw25rNc2gPd26D5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU58ULNGa8 SsyWqD8703i420BCCQ8wHwYDVR0jBBgwFoAU9+88h0KVuB+hDxQP61W8nFzt+dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MjE4LzRFMjQwRjIyQjRB NjExRjA4QUQzQjA3NUM0RjlBRTAyLzktODhoMEtWdUItaER4UVA2MVc4bkZ6dC1k ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOS04OGgwS1Z1Qi1oRHhRUDYxVzhuRnp0LWRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MjE4LzRFMjQwRjIyQjRBNjExRjA4QUQzQjA3NUM0RjlBRTAyLzktODhoMEtWdUIt aER4UVA2MVc4bkZ6dC1kay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBKo9pNAUA7X0wsK5pvmzf1TrtVL4swHLxuAo1caArCcm8Zf4apekdh8eGGf/34 cIKSHbSAWYagY+MudY9rH1hnEztPjrdA6ac8faBwU2D/wo+uzwjU4j7mMKkgkF0h UU2x91Lr3TqVOL8UcGgYsYJXFQGrPPW/L5qYIz42D5DABCnbPmjI7T3QJk7YbSvA wFMZaYs+6VrTxx1xm1hKAgWx3OJ2D4DJaqo3/ymHu/b06SKBoO1c0tx8GaCz+RxO 4S7th8UcHvKU3dEU0GndbjhLk5hdgnn4T9J+LpnuYudYgDAFCPmWGvzTMb2dJZ4y 21hxWTZECqa6Iu4iqtQICPWK -----END CERTIFICATE-----Generated at Thu Mar 26 17:10:23 2026 by rpki-client