$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft File: c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft (raw, json) Hash identifier: IkeQSHDYYVGGVpMQ1sGBbd+TGx4y3iVb6lgPoyde9vg= Subject key identifier: 46:13:A3:76:DA:20:AC:3C:AC:FD:F1:6A:A5:65:58:37:BB:0C:A3:CD Authority key identifier: 73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2 Certificate issuer: /CN=A91DE2B2/serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2 Certificate serial: 353C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft Manifest number: 352F Signing time: Thu 26 Mar 2026 15:01:09 +0000 Manifest this update: Thu 26 Mar 2026 15:01:08 +0000 Manifest next update: Thu 02 Apr 2026 15:01:08 +0000 Files and hashes: 1: c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl (hash: oMr0KQA67kaeZxmGloQ5JczGAUn/JCVKsGud+HGqtcw=) 2: 991B38BC44E811F0968D8B30C4F9AE02.roa (hash: Ey46KUiipWBFHMSvJf1iTaWHEkjjgiOERViTlngdL/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 15:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13628 (0x353c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2B2, serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2 Validity Not Before: Mar 26 15:01:08 2026 GMT Not After : Apr 2 15:01:08 2026 GMT Subject: CN=69c54a35-6f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:53:10:89:42:05:d5:33:fb:32:73:48:45:7a: 0b:ed:54:d1:74:cc:61:fe:5d:d4:0b:82:d8:33:8b: c6:8d:9b:bc:00:0c:7e:0f:4a:86:f6:05:3e:19:29: 55:83:7a:4c:4e:e8:f9:a9:da:d5:e2:13:8a:0b:00: a1:c0:e4:47:cd:c9:30:ba:88:00:81:7d:77:6b:d0: 8f:21:0b:0c:4d:17:31:7b:9d:fc:e3:83:18:38:75: b9:65:e3:44:b1:d6:bb:f6:b6:db:d0:9f:14:c4:61: 53:4d:66:17:c2:6e:b3:1d:0d:34:48:9c:dc:e1:55: 1b:62:d1:a7:84:bd:4e:9b:41:bd:5e:cf:4f:14:18: ea:00:87:0f:c4:4b:b5:05:a8:75:e5:bf:72:11:51: 28:c0:e7:e6:19:cc:69:d9:b4:9d:90:5d:ff:cb:94: 9b:a2:99:d3:0f:e5:13:7a:a4:0f:c0:3d:cb:b1:79: 5d:14:5b:aa:7c:bf:88:f9:bf:1f:9a:6b:5f:fa:35: 79:68:ec:ca:ee:7b:b1:81:7f:45:aa:71:16:a5:ef: 2f:c4:af:fc:3d:76:c2:87:fd:20:db:b8:ea:a7:66: 53:49:36:c1:54:f3:2d:d1:fb:17:9e:77:a3:ea:4d: 05:c4:44:92:ba:1b:c4:9d:3c:5c:35:ab:0e:5d:68: 0e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:13:A3:76:DA:20:AC:3C:AC:FD:F1:6A:A5:65:58:37:BB:0C:A3:CD X509v3 Authority Key Identifier: keyid:73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:7f:5a:2d:6b:cb:96:f6:93:5b:5f:79:0a:e8:ae:43:c7:c6: 22:a5:4e:d4:de:a9:1d:4c:8c:c8:45:fc:c0:7b:d5:9f:e0:ee: b6:ac:8a:73:49:0f:e1:38:fd:de:91:32:cf:ec:98:98:8c:98: 17:b9:99:8d:59:a1:2c:e3:f2:ec:03:b8:3a:d8:d4:ad:00:e2: 8e:1a:6e:a5:cc:68:2d:8a:5c:d5:ca:1b:ad:69:c3:c1:55:3f: 0d:82:7c:56:b9:27:68:a7:aa:40:89:cf:e9:05:aa:39:8c:dd: c3:37:c6:8a:28:1d:de:15:e7:e4:1c:e9:42:a9:02:a5:04:32: 98:f0:3c:8c:4b:34:ba:3f:58:1a:b8:48:e2:51:f5:e9:5a:91: a0:87:59:34:1d:6b:c9:3f:0d:67:c5:80:c8:da:7e:85:85:9c: 49:d4:f5:ff:09:ed:c8:88:eb:64:de:38:c9:23:63:49:c1:3a: 88:3e:e7:04:e1:26:84:e7:66:d8:4f:58:bf:32:9a:2d:50:cc: 11:22:bc:f9:80:18:88:cf:1b:26:9a:c7:d5:59:57:79:6f:79: e3:c3:11:6c:03:8d:fa:f9:84:5f:ac:d3:a8:89:52:3c:e2:1a: fe:b9:f6:aa:81:10:c4:39:50:19:d8:66:45:50:32:b1:14:3a: fa:41:99:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQjIxMTAvBgNVBAUTKDczQ0UxMjc0Q0RERjE3QzMwREEzQUJDRkY4MUZEOUYx MkZEMUI0RjIwHhcNMjYwMzI2MTUwMTA4WhcNMjYwNDAyMTUwMTA4WjAYMRYwFAYD VQQDEw02OWM1NGEzNS02ZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lMQiUIF1TP7MnNIRXoL7VTRdMxh/l3UC4LYM4vGjZu8AAx+D0qG9gU+GSlV g3pMTuj5qdrV4hOKCwChwORHzckwuogAgX13a9CPIQsMTRcxe53844MYOHW5ZeNE sda79rbb0J8UxGFTTWYXwm6zHQ00SJzc4VUbYtGnhL1Om0G9Xs9PFBjqAIcPxEu1 Bah15b9yEVEowOfmGcxp2bSdkF3/y5SbopnTD+UTeqQPwD3LsXldFFuqfL+I+b8f mmtf+jV5aOzK7nuxgX9FqnEWpe8vxK/8PXbCh/0g27jqp2ZTSTbBVPMt0fsXnnej 6k0FxESSuhvEnTxcNasOXWgOXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEYTo3ba IKw8rP3xaqVlWDe7DKPNMB8GA1UdIwQYMBaAFHPOEnTN3xfDDaOrz/gf2fEv0bTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJCMi81M0NBNDYyQTFE OUQxMUUyQUY0NTZEOEMwOEIwMkNEMi9jODRTZE0zZkY4TU5vNnZQLUJfWjhTX1J0 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4NFNkTTNmRjhNTm82dlAtQl9aOFNfUnRQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJCMi81M0NBNDYyQTFEOUQxMUUyQUY0NTZEOEMwOEIwMkNEMi9jODRTZE0zZkY4 TU5vNnZQLUJfWjhTX1J0UEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABn9aLWvLlvaTW195CuiuQ8fGIqVO1N6pHUyMyEX8wHvVn+DutqyKc0kP4Tj9 3pEyz+yYmIyYF7mZjVmhLOPy7AO4OtjUrQDijhpupcxoLYpc1cobrWnDwVU/DYJ8 VrknaKeqQInP6QWqOYzdwzfGiigd3hXn5BzpQqkCpQQymPA8jEs0uj9YGrhI4lH1 6VqRoIdZNB1ryT8NZ8WAyNp+hYWcSdT1/wntyIjrZN44ySNjScE6iD7nBOEmhOdm 2E9YvzKaLVDMESK8+YAYiM8bJprH1VlXeW9548MRbAON+vmEX6zTqIlSPOIa/rn2 qoEQxDlQGdhmRVAysRQ6+kGZrA== -----END CERTIFICATE-----Generated at Sat Mar 28 08:44:47 2026 by rpki-client