$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft File: tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft (raw, json) Hash identifier: WZ7t1euYlmnLYCIFlahh324/s19HuVvlRmVZLXL+lJQ= Subject key identifier: 97:B5:E6:7E:D4:BE:9B:5A:9C:E4:AD:30:05:EA:68:26:DF:AC:C5:73 Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Certificate serial: 0D89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft Manifest number: 0D86 Signing time: Tue 24 Mar 2026 17:48:46 +0000 Manifest this update: Tue 24 Mar 2026 17:48:45 +0000 Manifest next update: Tue 31 Mar 2026 17:48:45 +0000 Files and hashes: 1: tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl (hash: FY8gdcMRRVIgOtiJx+Uc3unmAOrK274R7i2LGw8xHgM=) 2: 3F6AC59EB27A11F095B9C63DC4F9AE02.roa (hash: DNZsoV57+rQGIAJrL+CwAovCV4qI5UyFXg2qYhLRO4o=) 3: 97EA257424D611F1948C90B8AB833773.roa (hash: x7ThlrbpRobxp6D+qx/sidRoN6DyIJk6KWUPxoCM1O0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3465 (0xd89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Validity Not Before: Mar 24 17:48:45 2026 GMT Not After : Mar 31 17:48:45 2026 GMT Subject: CN=69c2ce7d-36d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:62:6e:93:04:ad:a9:79:d6:eb:8e:bb:60:59: 6d:14:dd:e4:ec:6e:d2:dd:f0:69:7f:7a:84:fb:56: 30:5d:34:ac:c5:31:71:af:e6:12:04:43:54:3a:94: f9:76:12:9a:f4:6f:ba:aa:4b:6e:de:eb:72:b8:c6: a1:5f:d0:bb:3b:ab:67:22:b5:91:88:bb:80:11:3d: cc:66:32:e4:de:9f:7d:08:fb:eb:ca:e1:17:a5:7c: 18:61:9a:f4:e9:df:e8:28:db:31:fb:e7:12:a6:fb: e4:55:ef:36:92:11:77:39:6a:1a:03:43:3e:15:9e: 0f:ec:1e:6d:57:bb:45:f9:77:9f:43:95:ed:06:71: 32:e3:ad:d2:a6:b7:4c:e8:e5:57:b2:cb:19:8e:5d: db:f5:9a:9f:7b:d3:07:51:a7:e2:56:60:4d:3b:37: 14:1d:48:56:37:6e:42:8d:70:59:eb:d6:8b:07:14: 77:d4:4a:0f:97:5c:dc:fc:8c:9d:a6:1f:9d:37:7f: 6a:37:15:82:4c:dd:d5:cb:22:40:20:ae:0b:41:a3: ea:4c:f0:48:51:69:54:63:b0:bc:01:de:4e:d6:38: a4:3c:e7:01:2b:2d:30:27:eb:7d:ab:3a:3f:19:65: d7:fc:24:4f:f0:8f:4e:ef:92:ad:4b:9b:48:04:83: 88:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B5:E6:7E:D4:BE:9B:5A:9C:E4:AD:30:05:EA:68:26:DF:AC:C5:73 X509v3 Authority Key Identifier: keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:71:d3:a5:4a:e6:f7:a6:f0:45:f2:af:32:7a:9d:71:91:43: a0:fe:ac:44:16:f0:a4:28:e9:8a:7c:3c:11:f3:92:e1:1e:70: 5e:6a:e4:dc:a5:df:f2:5c:67:d0:87:f0:b1:a3:8d:4a:10:b2: 44:e4:b9:3d:50:31:cf:e2:6f:30:08:33:41:85:f0:55:a8:99: 87:41:10:41:76:56:5d:7c:5f:a6:58:ea:0c:b0:f3:db:2f:58: e7:1a:9f:28:35:b9:d7:bb:7a:98:c8:60:f8:06:f0:f6:96:03: 81:40:ad:36:29:be:1b:a4:cf:16:27:ee:ce:8a:f6:60:ec:30: 62:48:4a:24:1b:09:38:d1:54:42:c1:b2:d9:7a:6c:a5:66:10: 8e:25:05:11:a8:61:d2:b0:9e:86:90:e3:37:57:93:e4:d7:8f: 6e:d6:af:99:07:12:d5:45:f3:06:3e:33:5a:f1:d5:72:18:54: c9:1d:8e:2b:c8:e3:38:01:3c:86:5f:4d:b7:82:9d:79:e6:22: e5:e5:f1:4d:bb:03:61:8c:0d:a6:2f:28:f7:40:3d:0e:86:a0: a6:90:d9:33:a1:41:82:b1:b3:04:ea:31:f1:b4:d9:13:30:d2: be:83:bf:bf:fe:6f:20:11:87:0e:06:d9:b5:de:6d:42:85:b0: 85:21:2f:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0 MTg5QUYxOTgwHhcNMjYwMzI0MTc0ODQ1WhcNMjYwMzMxMTc0ODQ1WjAYMRYwFAYD VQQDEw02OWMyY2U3ZC0zNmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2JukwStqXnW6467YFltFN3k7G7S3fBpf3qE+1YwXTSsxTFxr+YSBENUOpT5 dhKa9G+6qktu3utyuMahX9C7O6tnIrWRiLuAET3MZjLk3p99CPvryuEXpXwYYZr0 6d/oKNsx++cSpvvkVe82khF3OWoaA0M+FZ4P7B5tV7tF+XefQ5XtBnEy463SprdM 6OVXsssZjl3b9Zqfe9MHUafiVmBNOzcUHUhWN25CjXBZ69aLBxR31EoPl1zc/Iyd ph+dN39qNxWCTN3VyyJAIK4LQaPqTPBIUWlUY7C8Ad5O1jikPOcBKy0wJ+t9qzo/ GWXX/CRP8I9O75KtS5tIBIOIEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJe15n7U vptanOStMAXqaCbfrMVzMB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU1MS9EQkY2RTFENEUyRTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNX clFDWm1uV1IteUJCaWE4WmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO3HTpUrm96bwRfKvMnqdcZFDoP6sRBbwpCjpinw8EfOS4R5wXmrk3KXf8lxn 0IfwsaONShCyROS5PVAxz+JvMAgzQYXwVaiZh0EQQXZWXXxfpljqDLDz2y9Y5xqf KDW517t6mMhg+Abw9pYDgUCtNim+G6TPFifuzor2YOwwYkhKJBsJONFUQsGy2Xps pWYQjiUFEahh0rCehpDjN1eT5NePbtavmQcS1UXzBj4zWvHVchhUyR2OK8jjOAE8 hl9Nt4KdeeYi5eXxTbsDYYwNpi8o90A9DoagppDZM6FBgrGzBOox8bTZEzDSvoO/ v/5vIBGHDgbZtd5tQoWwhSEvNw== -----END CERTIFICATE-----Generated at Wed Mar 25 23:22:34 2026 by rpki-client