$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft File: 01nlbdoAA8SD861qQMCA6Qy41HI.mft (raw, json) Hash identifier: 3ovyWfwv8/EbGK23rUzCV9mXcW5rt17uGvuyfhpfVZ8= Subject key identifier: C1:6C:AD:05:F2:13:0B:02:F6:E9:62:1C:F6:98:71:D1:C0:59:D2:C1 Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 Certificate issuer: /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft Manifest number: 0145 Signing time: Wed 25 Mar 2026 04:30:40 +0000 Manifest this update: Wed 25 Mar 2026 04:30:40 +0000 Manifest next update: Wed 01 Apr 2026 04:30:40 +0000 Files and hashes: 1: 01nlbdoAA8SD861qQMCA6Qy41HI.crl (hash: nzAoAWJRU14uGV41Q+n1IEkRufTp0wa5RBZFMlwJh0Q=) 2: 573BE4DE3D0811EF84157B26C4F9AE02.roa (hash: 8qsCKXW1PnkeYNlCGo4/GnAMha9Fa7HghDmajg38QjM=) 3: 97530E023D0911EFA33E4A38C4F9AE02.roa (hash: sx9r0ziKeVv3PgPFT0H8V5/JZLvSBe+KHoBiEIdn+3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B1B, serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Validity Not Before: Mar 25 04:30:40 2026 GMT Not After : Apr 1 04:30:40 2026 GMT Subject: CN=69c364f0-7359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1b:c3:a7:02:7a:24:01:f3:68:ba:5a:e4:12: 87:24:7b:05:90:91:bc:fd:fd:b4:ea:4c:b6:ce:cb: f5:03:c7:0d:f7:e2:c0:f6:1c:a8:d7:25:6e:92:58: 6e:d5:37:50:77:72:03:fb:4e:2d:fd:3f:48:64:3b: 57:ea:3a:7e:df:63:0f:1e:f4:f8:71:b4:ef:29:fe: 30:21:06:df:8a:a2:b6:16:d7:38:55:5b:31:ab:85: f9:2f:6d:6a:5b:28:fe:eb:c2:ad:04:05:22:da:83: 77:c2:80:c4:4e:24:06:ee:7e:04:de:43:cd:2d:d4: 66:f7:88:75:72:cd:e6:b5:1a:79:78:e4:69:a3:6e: 9b:98:50:ce:a3:40:81:31:c0:ff:a9:37:01:3c:6c: 08:47:63:45:37:60:bf:39:69:94:40:22:23:00:68: 19:54:f0:a8:fc:1a:b6:67:07:64:59:ff:45:98:4e: 4d:1e:97:5e:b7:74:ba:50:98:25:81:ec:b0:67:7d: 5e:71:c5:a1:89:c6:cd:6e:7a:67:f7:95:11:1e:36: 3e:64:ed:6f:0a:14:1e:57:ed:91:c5:2a:7a:e6:20: 6c:1a:df:e0:eb:f0:dc:19:2f:9f:ba:4f:5b:fd:8f: 21:c7:81:e6:22:f5:34:aa:47:af:57:79:7d:d4:d4: 47:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6C:AD:05:F2:13:0B:02:F6:E9:62:1C:F6:98:71:D1:C0:59:D2:C1 X509v3 Authority Key Identifier: keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:1b:ee:f5:71:55:03:7e:8d:43:d5:b0:18:27:8a:96:4d:8e: 94:a9:52:1f:b2:cf:68:7a:36:0f:36:9f:a4:79:0f:f3:c1:4d: a6:ab:75:9e:a2:cb:dc:ee:14:16:b1:c1:ef:2f:9b:ab:e1:58: 75:b2:00:0d:e0:f2:ce:f5:8b:47:5a:89:87:7b:cc:66:07:bd: 61:3a:1b:8b:b6:45:13:10:7d:cc:0e:8e:b4:e7:01:c7:09:c4: cd:56:90:cc:d0:ab:63:b1:2f:a6:22:b7:a7:7b:8e:84:fe:00: f4:46:a2:f7:86:23:01:82:c4:96:5f:e9:61:9d:0a:f8:48:e1: c4:ae:1f:17:da:40:68:56:b5:3c:2d:b0:92:26:bd:61:da:d6: 0e:6e:2d:84:04:80:f5:1d:ae:c8:ab:1d:6e:d5:2d:dc:ca:78: 7e:e8:4f:10:0d:36:a0:d0:c2:0e:e5:83:bb:6d:be:fd:08:fb: 13:70:b7:ae:70:6b:32:8d:fb:9b:9c:15:21:ff:ae:83:1e:4c: d1:e6:1a:19:a9:9c:5b:e5:64:75:77:53:42:c2:26:f5:e0:6f: fb:80:0b:00:34:7e:64:7a:f3:e6:10:f2:98:d9:35:be:9c:e3: 20:d8:63:80:41:f3:50:d8:a9:0c:e4:9b:0c:c5:b6:7e:14:9f: f7:8b:5f:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlCMUIxMTAvBgNVBAUTKEQzNTlFNTZEREEwMDAzQzQ4M0YzQUQ2QTQwQzA4MEU5 MENCOEQ0NzIwHhcNMjYwMzI1MDQzMDQwWhcNMjYwNDAxMDQzMDQwWjAYMRYwFAYD VQQDEw02OWMzNjRmMC03MzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApBvDpwJ6JAHzaLpa5BKHJHsFkJG8/f206ky2zsv1A8cN9+LA9hyo1yVuklhu 1TdQd3ID+04t/T9IZDtX6jp+32MPHvT4cbTvKf4wIQbfiqK2Ftc4VVsxq4X5L21q Wyj+68KtBAUi2oN3woDETiQG7n4E3kPNLdRm94h1cs3mtRp5eORpo26bmFDOo0CB McD/qTcBPGwIR2NFN2C/OWmUQCIjAGgZVPCo/Bq2ZwdkWf9FmE5NHpdet3S6UJgl geywZ31eccWhicbNbnpn95URHjY+ZO1vChQeV+2RxSp65iBsGt/g6/DcGS+fuk9b /Y8hx4HmIvU0qkevV3l91NRH3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMFsrQXy EwsC9uliHPaYcdHAWdLBMB8GA1UdIwQYMBaAFNNZ5W3aAAPEg/OtakDAgOkMuNRy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUIxQi9GOUZFRTA0NjND RjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4U0Q4NjFxUU1DQTZReTQx SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAxbmxiZG9BQThTRDg2MXFRTUNBNlF5NDFISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUIxQi9GOUZFRTA0NjNDRjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4 U0Q4NjFxUU1DQTZReTQxSEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVRvu9XFVA36NQ9WwGCeKlk2OlKlSH7LPaHo2DzafpHkP88FNpqt1nqLL3O4U FrHB7y+bq+FYdbIADeDyzvWLR1qJh3vMZge9YTobi7ZFExB9zA6OtOcBxwnEzVaQ zNCrY7EvpiK3p3uOhP4A9Eai94YjAYLEll/pYZ0K+EjhxK4fF9pAaFa1PC2wkia9 YdrWDm4thASA9R2uyKsdbtUt3Mp4fuhPEA02oNDCDuWDu22+/Qj7E3C3rnBrMo37 m5wVIf+ugx5M0eYaGamcW+VkdXdTQsIm9eBv+4ALADR+ZHrz5hDymNk1vpzjINhj gEHzUNipDOSbDMW2fhSf94tf5A== -----END CERTIFICATE-----Generated at Thu Mar 26 11:54:13 2026 by rpki-client