$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft File: M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft (raw, json) Hash identifier: i0hGL1JeEp3lmJF/FBIzXcGTEceLnBPkwzaFxT+Nvlk= Subject key identifier: 72:C7:19:67:47:9D:6A:00:30:F8:57:FF:6F:C1:F9:FD:87:D4:F0:43 Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98 Certificate issuer: /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98 Certificate serial: 0186 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft Manifest number: 0173 Signing time: Wed 25 Mar 2026 04:00:06 +0000 Manifest this update: Wed 25 Mar 2026 04:00:05 +0000 Manifest next update: Wed 01 Apr 2026 04:00:05 +0000 Files and hashes: 1: M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl (hash: aYlUvzcrX/70zsJFND/mFLEdcPTQMw4oUCLCIoKleO8=) 2: 07258E36F3C611EE807A6F3EC4F9AE02.roa (hash: 9ddaJnb2vB/K5havaxcmrS9aclGiXpdtn6ykn2Lek+o=) 3: 1698D0A4F3C511EEA51BD730C4F9AE02.roa (hash: eAadD5v+l/HQoMCel3Oba4UPEsg3F4rOQLerPh1yclk=) 4: 069E7950F3C611EE807A6F3EC4F9AE02.roa (hash: 3lew0eWd1qOFTsxVuUp/2jEVgW6mEPimb05KX288f8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98 Validity Not Before: Mar 25 04:00:05 2026 GMT Not After : Apr 1 04:00:05 2026 GMT Subject: CN=69c35dc6-02c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c6:6b:7a:aa:a0:ec:d7:53:d6:09:8c:8c:c0: 57:d0:9a:cc:77:45:00:5d:6a:31:98:cc:70:1c:07: 4d:92:f9:13:3c:f7:9f:87:72:73:0d:d9:1b:27:81: 5a:35:d1:d8:6d:00:10:21:be:b7:ed:a9:1a:0a:c9: bd:7d:24:aa:48:f2:84:33:ad:8f:79:82:a7:11:a2: 72:d0:04:10:17:b0:04:53:2d:5a:45:c5:46:55:1d: 03:15:30:38:53:21:c8:fc:4a:5a:ef:c8:30:ef:36: c9:38:75:ee:7e:c6:89:63:7b:e3:58:2d:c2:1e:a3: a1:78:a2:22:fd:cb:aa:bd:e8:80:54:f3:dd:ba:eb: 93:0f:37:72:54:8b:e9:02:4a:1b:b2:b5:51:55:89: d5:e4:ba:ed:5c:61:f8:8e:b2:7c:86:93:ed:bc:ce: 12:3e:80:db:18:35:e2:41:c7:d2:fd:7c:45:18:e3: 1f:3e:95:81:11:47:97:6c:22:59:b0:03:05:10:fd: 97:a8:08:22:e2:58:6f:14:2f:a7:c8:8f:fc:bb:d2: db:59:d4:07:df:31:81:f2:e2:6e:cf:c4:42:00:2b: b5:28:b8:fe:73:99:2f:6e:7e:c9:0b:e5:dc:69:ae: c7:2e:f0:1c:1b:53:e1:90:ab:a1:b3:c7:52:d7:1a: 21:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C7:19:67:47:9D:6A:00:30:F8:57:FF:6F:C1:F9:FD:87:D4:F0:43 X509v3 Authority Key Identifier: keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d3:31:d1:84:e5:5b:62:08:4a:56:a2:1d:c0:d0:f8:55:c9: 0b:7d:fd:30:f9:2f:7c:1d:81:89:63:dc:c2:59:37:d1:89:b6: 28:04:84:70:c2:a5:67:f6:3c:0d:a8:33:c0:fb:02:ab:d2:20: f5:b4:da:73:ab:da:c7:04:b0:be:00:3b:f0:18:c5:fa:ef:c4: b1:31:fb:42:71:95:7a:ce:f3:13:3c:4b:63:d8:fb:97:6d:04: 65:b8:84:f6:4d:46:f7:fb:ca:36:b9:11:06:66:89:2b:c5:95: 4b:9f:cf:ad:13:a6:fc:7b:fe:27:50:0f:1d:fa:24:e0:bb:d8: 5b:f1:bd:f7:70:24:a0:fa:43:de:c8:50:52:11:c7:53:91:19: 84:4f:54:73:68:fb:dd:5f:08:17:e6:ae:f7:46:ea:3f:0b:cf: 0b:cd:08:fe:e3:12:bc:64:e7:bb:fe:04:40:7e:3b:6f:80:22: 75:52:7e:96:d5:17:f5:cc:40:f2:f4:57:69:8a:15:21:38:e1: 9f:d2:cf:21:c8:2f:a8:8a:aa:27:b8:c8:57:ae:0d:b2:6d:f6: 72:6e:38:1e:db:e1:01:fa:7a:3b:90:0d:9a:6e:c7:a9:97:07: 37:f3:7b:ee:b1:85:18:e2:27:a7:58:b8:62:d9:1d:92:0d:a1: a1:8e:d8:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVGNDExMTAvBgNVBAUTKDMzNkRERTdFQzMyODA0OTk5NjQzNzFDQUVFMjYyMEZC RkNBQ0RDOTgwHhcNMjYwMzI1MDQwMDA1WhcNMjYwNDAxMDQwMDA1WjAYMRYwFAYD VQQDEw02OWMzNWRjNi0wMmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkcZreqqg7NdT1gmMjMBX0JrMd0UAXWoxmMxwHAdNkvkTPPefh3JzDdkbJ4Fa NdHYbQAQIb637akaCsm9fSSqSPKEM62PeYKnEaJy0AQQF7AEUy1aRcVGVR0DFTA4 UyHI/Epa78gw7zbJOHXufsaJY3vjWC3CHqOheKIi/cuqveiAVPPduuuTDzdyVIvp AkobsrVRVYnV5LrtXGH4jrJ8hpPtvM4SPoDbGDXiQcfS/XxFGOMfPpWBEUeXbCJZ sAMFEP2XqAgi4lhvFC+nyI/8u9LbWdQH3zGB8uJuz8RCACu1KLj+c5kvbn7JC+Xc aa7HLvAcG1PhkKuhs8dS1xohhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHLHGWdH nWoAMPhX/2/B+f2H1PBDMB8GA1UdIwQYMBaAFDNt3n7DKASZlkNxyu4mIPv8rNyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUY0MS9DNzVEQTEzMkYy RkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JKbVdRM0hLN2lZZy1feXMz SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yM2Vmc01vQkptV1EzSEs3aVlnLV95czNKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUY0MS9DNzVEQTEzMkYyRkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JK bVdRM0hLN2lZZy1feXMzSmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe9Mx0YTlW2IISlaiHcDQ+FXJC339MPkvfB2BiWPcwlk30Ym2KASEcMKlZ/Y8 DagzwPsCq9Ig9bTac6vaxwSwvgA78BjF+u/EsTH7QnGVes7zEzxLY9j7l20EZbiE 9k1G9/vKNrkRBmaJK8WVS5/PrROm/Hv+J1APHfok4LvYW/G993AkoPpD3shQUhHH U5EZhE9Uc2j73V8IF+au90bqPwvPC80I/uMSvGTnu/4EQH47b4AidVJ+ltUX9cxA 8vRXaYoVITjhn9LPIcgvqIqqJ7jIV64Nsm32cm44HtvhAfp6O5ANmm7HqZcHN/N7 7rGFGOInp1i4Ytkdkg2hoY7YPg== -----END CERTIFICATE-----Generated at Thu Mar 26 10:06:20 2026 by rpki-client