$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft File: 75XL1Zg1JkDUKwqsYABBBltNxEI.mft (raw, json) Hash identifier: 3qk7mdxJeKy1U/ngALo+AJQM6zj5LsIMRlbDQuVgPlM= Subject key identifier: A6:01:BD:D2:BE:CD:3E:82:F8:C6:0F:3E:10:6E:02:3D:62:9C:F6:55 Authority key identifier: EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 Certificate issuer: /CN=A91DE8C5/serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Certificate serial: 0D07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft Manifest number: 0CF4 Signing time: Thu 26 Mar 2026 18:06:27 +0000 Manifest this update: Thu 26 Mar 2026 18:06:27 +0000 Manifest next update: Thu 02 Apr 2026 18:06:27 +0000 Files and hashes: 1: 75XL1Zg1JkDUKwqsYABBBltNxEI.crl (hash: yh2gBxN99uGVzuiEEiwoHDLlWlEORx5klbXD0hllEJ0=) 2: 44B3B572011611EA972FFC57C4F9AE02.roa (hash: 3w1ZCU5DBe8qob2yfo+1JFPIsMpuEFgSBiA3mSkvjmQ=) 3: 452DDFB4011611EA972FFC57C4F9AE02.roa (hash: UvXINsVdmgJ+8axZ9DhL372u1E0J1vH5XbDCRfLraeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 18:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3335 (0xd07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE8C5, serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Validity Not Before: Mar 26 18:06:27 2026 GMT Not After : Apr 2 18:06:27 2026 GMT Subject: CN=69c575a3-32a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6a:ce:fc:97:77:a4:cc:ff:03:d8:77:77:3b: d8:ee:9e:bb:91:e9:b2:f6:07:6d:60:a1:86:4a:13: e8:ad:62:bf:c9:de:9e:73:db:cd:ab:30:1d:c5:f5: 24:30:ae:15:7e:75:88:ca:d9:0e:8a:18:48:73:ac: d6:65:79:f3:b5:ea:80:88:fc:8a:68:ef:63:3e:0d: 27:66:d0:24:e2:19:a3:51:22:31:e9:0f:83:06:5b: b9:06:e5:e3:58:fa:9c:94:77:b7:e3:4e:de:42:7f: a1:95:e5:2a:4d:19:b9:af:c9:68:1a:32:51:ce:3b: 97:8f:4c:e3:7d:24:41:72:c5:43:9f:3c:fd:92:a7: b6:89:00:78:eb:1f:93:0a:41:84:28:fb:6d:52:dc: 98:7b:73:a9:00:4b:c5:89:d4:37:64:4d:28:b9:af: c4:0e:5d:cc:14:58:db:92:c1:ff:7c:1e:2f:fc:f7: 32:38:db:0f:e6:be:af:97:70:5d:6f:98:1f:f5:2f: a8:50:52:15:db:be:ed:3a:37:24:c7:3d:a0:f1:38: 93:cd:8b:6a:95:92:2c:b0:61:c9:79:5d:8a:fb:be: a8:af:5f:92:7a:bd:51:bd:9d:c3:af:16:39:08:71: ab:39:48:de:54:69:18:fd:55:52:76:86:d4:a1:72: 07:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:01:BD:D2:BE:CD:3E:82:F8:C6:0F:3E:10:6E:02:3D:62:9C:F6:55 X509v3 Authority Key Identifier: keyid:EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:65:b1:ce:34:6c:5e:76:ef:bf:36:b3:e9:2a:cd:df:02:9c: 2d:18:05:c8:8f:ed:cd:2d:1e:1c:e3:ee:59:8b:70:8c:ce:d2: e7:99:1d:7a:9c:18:03:f6:48:77:7b:91:39:5c:f5:32:20:86: fb:2e:20:33:11:74:7c:e9:eb:ff:11:c9:53:83:39:84:38:fd: db:28:d6:24:9d:d5:61:88:07:fd:64:77:86:dc:2b:69:2a:0b: 58:06:9e:f2:50:d9:ca:ed:fe:d8:8b:67:dc:34:cc:ba:a1:43: 52:89:72:1a:c2:92:98:dd:3f:32:bf:ec:7e:ec:6c:5e:74:82: ef:39:fc:f8:50:db:42:b9:ab:8a:73:8f:43:8c:1d:be:bd:1c: 27:cb:99:b5:e8:bc:ee:b9:36:ab:f4:94:26:16:7e:0f:74:3e: 6a:eb:d4:74:89:72:7a:3a:17:51:6e:20:21:91:7d:94:a9:5f: 39:18:37:c6:26:3a:ca:b1:bd:02:65:c4:d2:d2:4f:c0:8a:9c: ed:a5:ba:80:b5:26:fc:15:9d:72:b5:aa:16:c2:8f:cf:5e:ff: 3b:3e:a2:5b:c6:4f:d6:6d:72:c4:14:b7:49:94:32:5b:e3:d4: 45:b9:98:45:7d:fb:27:d5:64:0e:6c:eb:c9:b0:2c:26:32:87: b7:99:eb:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU4QzUxMTAvBgNVBAUTKEVGOTVDQkQ1OTgzNTI2NDBENDJCMEFBQzYwMDA0MTA2 NUI0REM0NDIwHhcNMjYwMzI2MTgwNjI3WhcNMjYwNDAyMTgwNjI3WjAYMRYwFAYD VQQDEw02OWM1NzVhMy0zMmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGrO/Jd3pMz/A9h3dzvY7p67kemy9gdtYKGGShPorWK/yd6ec9vNqzAdxfUk MK4VfnWIytkOihhIc6zWZXnzteqAiPyKaO9jPg0nZtAk4hmjUSIx6Q+DBlu5BuXj WPqclHe3407eQn+hleUqTRm5r8loGjJRzjuXj0zjfSRBcsVDnzz9kqe2iQB46x+T CkGEKPttUtyYe3OpAEvFidQ3ZE0oua/EDl3MFFjbksH/fB4v/PcyONsP5r6vl3Bd b5gf9S+oUFIV277tOjckxz2g8TiTzYtqlZIssGHJeV2K+76or1+Ser1RvZ3DrxY5 CHGrOUjeVGkY/VVSdobUoXIHEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKYBvdK+ zT6C+MYPPhBuAj1inPZVMB8GA1UdIwQYMBaAFO+Vy9WYNSZA1CsKrGAAQQZbTcRC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERThDNS8wNTJDODRGQzAx MTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUprRFVLd3FzWUFCQkJsdE54 RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1WEwxWmcxSmtEVUt3cXNZQUJCQmx0TnhFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RThDNS8wNTJDODRGQzAxMTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUpr RFVLd3FzWUFCQkJsdE54RUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApmWxzjRsXnbvvzaz6SrN3wKcLRgFyI/tzS0eHOPuWYtwjM7S55kdepwYA/ZI d3uROVz1MiCG+y4gMxF0fOnr/xHJU4M5hDj92yjWJJ3VYYgH/WR3htwraSoLWAae 8lDZyu3+2Itn3DTMuqFDUolyGsKSmN0/Mr/sfuxsXnSC7zn8+FDbQrmrinOPQ4wd vr0cJ8uZtei87rk2q/SUJhZ+D3Q+auvUdIlyejoXUW4gIZF9lKlfORg3xiY6yrG9 AmXE0tJPwIqc7aW6gLUm/BWdcrWqFsKPz17/Oz6iW8ZP1m1yxBS3SZQyW+PURbmY RX37J9VkDmzrybAsJjKHt5nrqA== -----END CERTIFICATE-----Generated at Fri Mar 27 03:51:17 2026 by rpki-client