$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft File: rQUyxqhtSiMdAK5R-tgo9qK2qos.mft (raw, json) Hash identifier: jAsUa4YKVmh65RB+N4Re3BX/WypRmM0H4kdkKe/KAN4= Subject key identifier: 3B:B6:AA:F4:3F:A5:B7:4D:84:0E:22:D8:D4:62:AB:B6:0F:15:11:EB Authority key identifier: AD:05:32:C6:A8:6D:4A:23:1D:00:AE:51:FA:D8:28:F6:A2:B6:AA:8B Certificate issuer: /CN=A91DE334/serialNumber=AD0532C6A86D4A231D00AE51FAD828F6A2B6AA8B Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft Manifest number: 36 Signing time: Wed 25 Mar 2026 07:52:20 +0000 Manifest this update: Wed 25 Mar 2026 07:52:20 +0000 Manifest next update: Wed 01 Apr 2026 07:52:20 +0000 Files and hashes: 1: rQUyxqhtSiMdAK5R-tgo9qK2qos.crl (hash: z8tao164tl68He5TFdlTmhrjeoLN/6KzNh/R5PU8R4U=) 2: 38D21898F49411F08DD0DDBA746F56BC.roa (hash: 2TmQLP3BLhtpTJZcn16jZ9UXy19wv2rakTfjxerLpXo=) 3: 81346F96F49411F0BFEF52BD746F56BC.roa (hash: KtQdT3wKXi5XLWS0IbUBySou/W4dYxSu83urtoPZVvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.crl rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE334, serialNumber=AD0532C6A86D4A231D00AE51FAD828F6A2B6AA8B Validity Not Before: Mar 25 07:52:20 2026 GMT Not After : Apr 1 07:52:20 2026 GMT Subject: CN=69c39434-8eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:50:cd:48:d3:15:7d:8e:a5:3d:91:77:7b:d7: 32:c5:29:87:3d:e4:1f:fa:8a:12:76:65:79:34:23: 89:6a:11:59:0e:e7:12:7e:ff:c4:dc:f3:4f:8a:e5: c3:73:3b:03:17:8b:e7:d4:03:ca:10:4d:1f:4b:2c: 66:5e:fb:91:0b:f1:13:12:65:9e:67:33:d9:cb:1f: bc:0f:cc:1d:7f:e0:47:3b:c4:43:c3:d7:fb:98:7b: 6a:37:8f:18:95:f7:51:3c:44:e9:81:22:87:c0:de: 90:1d:e9:84:f0:6d:4b:06:7a:e6:8a:42:0e:d8:f9: 76:32:0e:d3:d4:7a:5f:63:4a:df:c1:a5:b4:22:8b: 5c:0c:45:ca:fb:54:be:36:5e:39:f6:e7:fb:11:af: 63:7a:f4:1f:8f:f4:b6:ae:15:51:53:01:78:32:e7: 23:75:c3:92:4f:b3:91:24:ce:0e:77:d1:08:75:90: 70:15:48:13:f0:c9:ec:ee:0f:3b:61:73:7c:89:8d: 8d:3b:2d:72:7a:e4:e2:6f:ca:75:3a:ed:47:7b:32: ce:68:9b:a9:d6:61:62:ff:9b:95:d2:02:d2:09:ca: 9c:c7:ac:e6:46:32:4d:7f:b6:7e:80:83:45:34:40: 0a:66:4a:8c:c5:f6:71:34:8e:83:94:34:5d:67:a3: c2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B6:AA:F4:3F:A5:B7:4D:84:0E:22:D8:D4:62:AB:B6:0F:15:11:EB X509v3 Authority Key Identifier: keyid:AD:05:32:C6:A8:6D:4A:23:1D:00:AE:51:FA:D8:28:F6:A2:B6:AA:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:f7:5f:8d:eb:46:45:ab:b8:27:12:2d:5a:9b:1c:f0:6b:38: 67:57:dd:a6:76:98:59:92:b2:ca:1d:c5:48:49:91:e0:b5:e1: 19:60:f7:bc:16:51:66:e2:48:d5:fb:08:ee:51:dd:23:e5:53: 62:e6:a5:d1:09:f9:7b:6a:f4:2e:73:f9:54:31:0e:03:ac:ea: 98:ce:b4:1b:76:41:02:6b:d6:7c:00:c6:71:7c:78:b9:b7:62: 0a:30:2c:e1:99:7f:3f:5b:ef:2a:e2:3a:2e:00:b4:91:ce:48: 76:be:46:3f:f2:b1:0b:c8:6f:29:e8:ef:79:77:b0:5c:5a:80: 3f:31:21:9d:f1:e9:9d:48:02:20:cd:b0:92:c3:9b:75:0e:59: 50:be:37:e2:fc:c6:dc:13:62:02:c0:22:5f:0e:f3:34:3d:8a: e5:bc:53:ea:e0:37:10:93:1d:2b:5d:bd:52:60:2c:5f:44:0e: e1:d3:1b:b7:d4:9e:3a:c3:b3:5c:88:f8:dc:b0:92:1b:42:a1: eb:4d:b4:8d:6c:99:8b:fd:a8:24:84:43:80:b3:bf:66:a1:6f: b8:c5:cc:ae:9d:fd:ef:2b:b4:99:b5:d6:fc:13:43:98:b4:6c: fd:e1:35:89:ab:2b:69:14:11:c2:34:54:6c:37:f5:d4:63:9f: 4e:2c:73:b8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RTMzNDExMC8GA1UEBRMoQUQwNTMyQzZBODZENEEyMzFEMDBBRTUxRkFEODI4RjZB MkI2QUE4QjAeFw0yNjAzMjUwNzUyMjBaFw0yNjA0MDEwNzUyMjBaMBgxFjAUBgNV BAMTDTY5YzM5NDM0LThlYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIUM1I0xV9jqU9kXd71zLFKYc95B/6ihJ2ZXk0I4lqEVkO5xJ+/8Tc80+K5cNz OwMXi+fUA8oQTR9LLGZe+5EL8RMSZZ5nM9nLH7wPzB1/4Ec7xEPD1/uYe2o3jxiV 91E8ROmBIofA3pAd6YTwbUsGeuaKQg7Y+XYyDtPUel9jSt/BpbQii1wMRcr7VL42 Xjn25/sRr2N69B+P9LauFVFTAXgy5yN1w5JPs5Ekzg530Qh1kHAVSBPwyezuDzth c3yJjY07LXJ65OJvynU67Ud7Ms5om6nWYWL/m5XSAtIJypzHrOZGMk1/tn6Ag0U0 QApmSozF9nE0joOUNF1no8IFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUO7aq9D+l t02EDiLY1GKrtg8VEeswHwYDVR0jBBgwFoAUrQUyxqhtSiMdAK5R+tgo9qK2qosw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMzM0L0JDNUI0QkJFRTU3 OTExRjA4MzZFRUFBMTQxNkY1NkJDL3JRVXl4cWh0U2lNZEFLNVItdGdvOXFLMnFv cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvclFVeXhxaHRTaU1kQUs1Ui10Z285cUsycW9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF MzM0L0JDNUI0QkJFRTU3OTExRjA4MzZFRUFBMTQxNkY1NkJDL3JRVXl4cWh0U2lN ZEFLNVItdGdvOXFLMnFvcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA091+N60ZFq7gnEi1amxzwazhnV92mdphZkrLKHcVISZHgteEZYPe8FlFm4kjV +wjuUd0j5VNi5qXRCfl7avQuc/lUMQ4DrOqYzrQbdkECa9Z8AMZxfHi5t2IKMCzh mX8/W+8q4jouALSRzkh2vkY/8rELyG8p6O95d7BcWoA/MSGd8emdSAIgzbCSw5t1 DllQvjfi/MbcE2ICwCJfDvM0PYrlvFPq4DcQkx0rXb1SYCxfRA7h0xu31J46w7Nc iPjcsJIbQqHrTbSNbJmL/agkhEOAs79moW+4xcyunf3vK7SZtdb8E0OYtGz94TWJ qytpFBHCNFRsN/XUY59OLHO4 -----END CERTIFICATE-----Generated at Thu Mar 26 21:19:57 2026 by rpki-client