$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft File: RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft (raw, json) Hash identifier: oBco4FWCUCOn0q81cLn/BbOOoS8cOLlnyVAG2+h4anI= Subject key identifier: 65:65:86:6D:08:C6:57:8E:0F:93:80:30:A8:31:17:E4:0C:09:E6:97 Authority key identifier: 46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0 Certificate issuer: /CN=A91DF31D/serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0 Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft Manifest number: 01CB Signing time: Wed 25 Mar 2026 03:08:17 +0000 Manifest this update: Wed 25 Mar 2026 03:08:17 +0000 Manifest next update: Wed 01 Apr 2026 03:08:17 +0000 Files and hashes: 1: RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl (hash: TJwh1k39cVkvYSE/WrNVX1CX+Y5A2YjvdzJubOnYzYI=) 2: FA272BC67EBE11EEABD00B4DC4F9AE02.roa (hash: BKYUsrSTsEZZhJsjvVOhMg6+a6SrCr1C6umPKzfjlnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF31D, serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0 Validity Not Before: Mar 25 03:08:17 2026 GMT Not After : Apr 1 03:08:17 2026 GMT Subject: CN=69c351a1-42d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ed:d7:10:1d:db:a3:ad:cc:23:60:b3:23:88: f1:21:51:08:fa:6b:d4:13:cf:67:8b:75:18:df:f0: 6e:06:1d:d0:9f:d3:33:2e:cc:65:4d:31:b1:13:60: 5c:b7:c5:35:cb:38:de:6a:5a:8b:f3:66:f4:38:f4: 6d:23:45:ea:06:59:d7:fb:10:f1:de:7a:5d:20:0f: 51:db:fb:8e:a0:d6:81:d2:a1:0b:46:48:23:61:2d: 2d:35:a8:a8:35:e8:06:2a:e2:31:34:cd:7a:15:f0: 8f:ef:e8:73:55:0e:2e:b9:45:21:84:a5:5e:f6:f0: 2e:9c:26:9f:78:d2:41:a0:0e:03:d6:1a:92:20:b4: e6:d9:96:d2:60:ef:74:f9:a1:81:60:7a:25:35:9e: c1:79:ee:8b:f5:21:6e:45:d8:20:48:ad:64:a7:5d: 04:fe:f5:75:19:e4:5a:92:a0:bc:51:d0:63:ca:cb: df:2b:2f:e2:fa:19:9c:a2:20:6f:12:c4:69:38:63: 0d:e1:9c:37:3e:19:26:a6:f1:2e:29:5a:3c:b6:c3: ac:c5:30:bb:a0:73:1d:ab:5e:aa:c1:2b:08:dc:66: a3:37:1f:5c:e0:5c:86:df:f0:3c:77:e5:58:56:fb: 23:70:b2:62:41:b3:41:64:90:1d:3d:26:5a:cc:d5: 7f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:65:86:6D:08:C6:57:8E:0F:93:80:30:A8:31:17:E4:0C:09:E6:97 X509v3 Authority Key Identifier: keyid:46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:54:07:49:1f:d8:c4:ca:36:cf:58:f9:57:93:ba:a8:fb:3a: 4f:d4:5c:12:35:04:0f:07:fd:47:90:0a:ba:b6:55:9c:19:4c: d4:2b:a8:49:d1:51:1b:fe:22:b2:df:65:5d:5a:68:3d:ca:73: d3:de:f9:5d:bc:d2:be:bc:0d:ac:5c:91:ad:7d:62:c4:ac:c4: f2:65:82:a7:17:b9:8a:fc:d2:c9:72:5b:a0:ed:aa:4e:b9:87: db:5e:37:9a:d7:da:7e:31:c4:ae:6c:83:38:32:e9:63:8f:e1: 67:6e:9c:13:cb:c2:73:d5:be:59:67:99:cd:79:30:1b:f5:5a: 3a:d1:66:3a:fb:8d:7d:1c:c4:ce:92:db:ac:9d:3b:78:e1:f8: e4:4a:ed:28:bf:82:c8:d9:2c:b1:d0:54:46:ef:1e:e4:9c:d9: 42:93:91:c7:66:5d:40:58:ac:29:81:c2:fb:fe:41:85:c3:b0: f5:ae:7f:a0:64:da:82:e9:30:7c:ae:3d:ef:4c:46:13:1b:e0: 4f:27:62:62:af:c2:9a:7d:64:26:0c:93:0e:af:4a:78:37:7c: 8a:e5:98:3a:c2:82:9c:3c:57:69:8b:d8:7c:87:20:42:f0:e3: 20:10:43:90:e0:46:0b:ef:aa:29:51:ab:83:0c:10:9a:26:f0: a9:2e:37:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYzMUQxMTAvBgNVBAUTKDQ2MDBDMThENjJDNkY3MjRENUM5NTUwNkY0MUI4Qzk1 RkMzOTBEQzAwHhcNMjYwMzI1MDMwODE3WhcNMjYwNDAxMDMwODE3WjAYMRYwFAYD VQQDEw02OWMzNTFhMS00MmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+3XEB3bo63MI2CzI4jxIVEI+mvUE89ni3UY3/BuBh3Qn9MzLsxlTTGxE2Bc t8U1yzjealqL82b0OPRtI0XqBlnX+xDx3npdIA9R2/uOoNaB0qELRkgjYS0tNaio NegGKuIxNM16FfCP7+hzVQ4uuUUhhKVe9vAunCafeNJBoA4D1hqSILTm2ZbSYO90 +aGBYHolNZ7Bee6L9SFuRdggSK1kp10E/vV1GeRakqC8UdBjysvfKy/i+hmcoiBv EsRpOGMN4Zw3PhkmpvEuKVo8tsOsxTC7oHMdq16qwSsI3GajNx9c4FyG3/A8d+VY VvsjcLJiQbNBZJAdPSZazNV/rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGVlhm0I xleOD5OAMKgxF+QMCeaXMB8GA1UdIwQYMBaAFEYAwY1ixvck1clVBvQbjJX8OQ3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjMxRC8wNTVBQjU0NDdE RjcxMUVFODdCN0Q0MzBDNEY5QUUwMi9SZ0RCaldMRzl5VFZ5VlVHOUJ1TWxmdzVE Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JnREJqV0xHOXlUVnlWVUc5QnVNbGZ3NURjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjMxRC8wNTVBQjU0NDdERjcxMUVFODdCN0Q0MzBDNEY5QUUwMi9SZ0RCaldMRzl5 VFZ5VlVHOUJ1TWxmdzVEY0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF1QHSR/YxMo2z1j5V5O6qPs6T9RcEjUEDwf9R5AKurZVnBlM1CuoSdFRG/4i st9lXVpoPcpz0975XbzSvrwNrFyRrX1ixKzE8mWCpxe5ivzSyXJboO2qTrmH2143 mtfafjHErmyDODLpY4/hZ26cE8vCc9W+WWeZzXkwG/VaOtFmOvuNfRzEzpLbrJ07 eOH45ErtKL+CyNkssdBURu8e5JzZQpORx2ZdQFisKYHC+/5BhcOw9a5/oGTagukw fK4970xGExvgTydiYq/Cmn1kJgyTDq9KeDd8iuWYOsKCnDxXaYvYfIcgQvDjIBBD kOBGC++qKVGrgwwQmibwqS43jg== -----END CERTIFICATE-----Generated at Thu Mar 26 13:22:32 2026 by rpki-client