$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.mft File: 1929C75jT2f_WMtqZhL6rTP4cEc.mft (raw, json) Hash identifier: 7r/e4ZZGn/phsvKDr2NWbeU7Ms8B30f3xoRnaDMJGEg= Subject key identifier: C1:F3:E2:5F:B9:54:70:1B:93:45:CB:52:BD:74:21:56:70:E3:0B:E1 Authority key identifier: D7:DD:BD:0B:BE:63:4F:67:FF:58:CB:6A:66:12:FA:AD:33:F8:70:47 Certificate issuer: /CN=A91DA5F7/serialNumber=D7DDBD0BBE634F67FF58CB6A6612FAAD33F87047 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1929C75jT2f_WMtqZhL6rTP4cEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.mft Manifest number: 27 Signing time: Wed 25 Mar 2026 07:58:22 +0000 Manifest this update: Wed 25 Mar 2026 07:58:21 +0000 Manifest next update: Wed 01 Apr 2026 07:58:21 +0000 Files and hashes: 1: 1929C75jT2f_WMtqZhL6rTP4cEc.crl (hash: L7DokwYbyArw9n02TZTZW6BJDO8fRYVR+OXC/88Kwmc=) 2: 3061C022F1F211F0B442E9B1456F56BC.roa (hash: yVZM9wIf/Y6hAa7HZ+B2izj2yBzbhyTFipocbEptqMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.crl rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1929C75jT2f_WMtqZhL6rTP4cEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA5F7, serialNumber=D7DDBD0BBE634F67FF58CB6A6612FAAD33F87047 Validity Not Before: Mar 25 07:58:21 2026 GMT Not After : Apr 1 07:58:21 2026 GMT Subject: CN=69c3959d-f1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c3:db:3e:70:7f:96:ed:12:e4:52:70:0b:fc: ed:15:e3:47:82:d1:35:12:e4:f4:c4:05:9f:84:81: bd:80:3b:8d:ba:2d:06:d2:69:7a:22:ca:71:c8:8b: 02:70:0d:e2:d6:c5:9a:b2:8b:49:27:04:4e:29:33: ea:ce:46:de:93:c9:8d:f3:a9:2a:ee:09:b3:08:f8: e8:fa:7a:09:cb:55:89:c4:78:06:94:62:5b:ce:3b: 22:fc:1b:ad:2c:6c:79:30:86:d7:c3:38:95:49:46: 6d:78:29:a9:2e:bb:91:91:2b:5f:e8:a8:f5:58:cc: 76:dd:a7:17:9d:f5:06:2d:c4:5d:bd:69:7a:38:63: 6a:94:b3:7f:57:ef:77:94:0e:f3:fd:2e:b0:8e:72: 17:ff:ae:5e:1b:b5:71:e0:ce:39:97:19:2d:81:2b: 67:41:05:3d:31:3a:ce:9e:7c:b4:92:ad:60:f4:17: d9:3b:7c:37:05:75:b5:76:4e:00:f8:cd:6d:30:c8: 35:2c:65:bb:18:57:5b:19:c5:88:21:f8:a1:91:11: 24:12:e8:d7:89:d6:f9:52:e3:c2:e3:66:7b:c6:8e: 3b:55:10:52:08:cb:ff:0a:bf:87:5e:fe:74:79:3e: 92:44:4f:8a:04:6b:0b:d9:8a:46:8a:27:00:76:6e: a3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F3:E2:5F:B9:54:70:1B:93:45:CB:52:BD:74:21:56:70:E3:0B:E1 X509v3 Authority Key Identifier: keyid:D7:DD:BD:0B:BE:63:4F:67:FF:58:CB:6A:66:12:FA:AD:33:F8:70:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1929C75jT2f_WMtqZhL6rTP4cEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:85:8a:46:97:bb:a4:c3:f9:e3:39:5b:7e:15:25:72:92:73: 2b:39:43:d1:2b:d9:44:27:6b:19:a3:d4:8d:4c:15:e1:04:79: 5b:73:85:32:0c:7d:78:35:2c:7b:19:19:db:db:9b:44:3b:79: 9a:36:b1:d6:d1:98:5b:a8:83:4e:b0:95:58:4a:2f:68:b7:30: 2c:34:2a:89:e4:d3:02:62:5d:be:fa:42:bc:69:13:f7:fc:c3: c2:e8:f8:f5:3f:d7:d6:0c:03:85:20:b7:11:40:53:33:ca:48: 3f:65:f1:0e:f0:13:8e:a0:ed:72:13:3b:8d:3b:b0:7e:38:63: 4b:08:66:fe:98:cd:ee:e1:b9:4d:1e:44:ed:e2:fe:52:2d:29: 3c:65:72:84:e4:92:9e:58:6b:91:06:f2:4f:76:75:58:91:1a: c5:ce:61:c4:3b:23:80:ac:72:38:6c:ff:0f:3f:30:79:6b:59: 65:a5:6a:4f:dd:3d:36:87:3e:0d:34:e9:0d:f7:86:49:83:5b: 01:ab:dc:1a:62:6a:bd:9d:0c:34:d1:fb:42:13:e2:08:96:26: d7:5c:b0:1f:28:28:19:52:6f:90:a1:b4:49:0a:90:4d:de:e4: ae:ad:17:db:f9:21:93:59:56:27:1b:00:e9:81:6b:46:61:56: b0:33:7c:0f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QTVGNzExMC8GA1UEBRMoRDdEREJEMEJCRTYzNEY2N0ZGNThDQjZBNjYxMkZBQUQz M0Y4NzA0NzAeFw0yNjAzMjUwNzU4MjFaFw0yNjA0MDEwNzU4MjFaMBgxFjAUBgNV BAMTDTY5YzM5NTlkLWYxYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCww9s+cH+W7RLkUnAL/O0V40eC0TUS5PTEBZ+Egb2AO426LQbSaXoiynHIiwJw DeLWxZqyi0knBE4pM+rORt6TyY3zqSruCbMI+Oj6egnLVYnEeAaUYlvOOyL8G60s bHkwhtfDOJVJRm14Kakuu5GRK1/oqPVYzHbdpxed9QYtxF29aXo4Y2qUs39X73eU DvP9LrCOchf/rl4btXHgzjmXGS2BK2dBBT0xOs6efLSSrWD0F9k7fDcFdbV2TgD4 zW0wyDUsZbsYV1sZxYgh+KGRESQS6NeJ1vlS48LjZnvGjjtVEFIIy/8Kv4de/nR5 PpJET4oEawvZikaKJwB2bqO5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwfPiX7lU cBuTRctSvXQhVnDjC+EwHwYDVR0jBBgwFoAU1929C75jT2f/WMtqZhL6rTP4cEcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBNUY3L0Q2REY1QURDRjFG MTExRjBBQjIxRjkzQjQ1NkY1NkJDLzE5MjlDNzVqVDJmX1dNdHFaaEw2clRQNGNF Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTkyOUM3NWpUMmZfV010cVpoTDZyVFA0Y0VjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB NUY3L0Q2REY1QURDRjFGMTExRjBBQjIxRjkzQjQ1NkY1NkJDLzE5MjlDNzVqVDJm X1dNdHFaaEw2clRQNGNFYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBThYpGl7ukw/njOVt+FSVyknMrOUPRK9lEJ2sZo9SNTBXhBHlbc4UyDH14NSx7 GRnb25tEO3maNrHW0ZhbqINOsJVYSi9otzAsNCqJ5NMCYl2++kK8aRP3/MPC6Pj1 P9fWDAOFILcRQFMzykg/ZfEO8BOOoO1yEzuNO7B+OGNLCGb+mM3u4blNHkTt4v5S LSk8ZXKE5JKeWGuRBvJPdnVYkRrFzmHEOyOArHI4bP8PPzB5a1llpWpP3T02hz4N NOkN94ZJg1sBq9waYmq9nQw00ftCE+IIlibXXLAfKCgZUm+QobRJCpBN3uSurRfb +SGTWVYnGwDpgWtGYVawM3wP -----END CERTIFICATE-----Generated at Thu Mar 26 09:39:34 2026 by rpki-client