$ rpki-client -vvf rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft File: _IC0m1BzMv1MnJLdXiei38qAZNo.mft (raw, json) Hash identifier: cJ+cgWtIm/x+e9fnDutNTHQKuOKSFOlW/Y7lrqgWti4= Subject key identifier: 07:1E:FA:61:EB:C7:88:93:5D:B5:08:3D:2F:0E:97:90:CD:2D:7C:5E Authority key identifier: FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA Certificate issuer: /CN=A91E13D0/serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA Certificate serial: 05C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft Manifest number: 05B7 Signing time: Tue 24 Mar 2026 22:50:01 +0000 Manifest this update: Tue 24 Mar 2026 22:50:01 +0000 Manifest next update: Tue 31 Mar 2026 22:50:01 +0000 Files and hashes: 1: _IC0m1BzMv1MnJLdXiei38qAZNo.crl (hash: FsYACnW/J/MZY1lFC2w1457Z3eOK6iFOFgh6vRtuXqw=) 2: E86C4B1E04AE11EC92C8D079C4F9AE02.roa (hash: wf2a4w67T5LlxEVDGfGnefxaFfP9ax9DaJiTme9ygjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1472 (0x5c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E13D0, serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA Validity Not Before: Mar 24 22:50:01 2026 GMT Not After : Mar 31 22:50:01 2026 GMT Subject: CN=69c31519-cb93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:fa:6c:88:1b:bc:78:a4:ef:36:13:3a:9f: 1c:7f:68:bc:6f:d2:a4:f6:60:ce:c7:bd:00:14:ee: 89:7a:1a:d3:e4:e3:af:53:1b:9f:0a:b0:48:00:a4: 83:b0:bc:46:e1:4f:1b:8a:f0:66:5f:0a:91:2f:07: f6:20:c0:ad:3d:34:0f:bd:a6:62:f4:50:2e:26:d2: 23:dc:30:3e:f2:5b:3c:1c:1b:54:f7:c5:e3:69:35: df:8b:72:4c:65:6e:24:88:04:e3:68:19:56:08:1d: ea:d4:5f:49:8a:53:b0:9f:df:da:08:f7:e1:5e:d2: d7:74:fa:30:4f:ff:4f:29:85:05:ae:d8:b4:a5:29: 7f:3d:1b:92:16:22:84:dc:3f:18:05:25:b6:7a:eb: 71:74:36:16:54:6b:25:b4:31:60:c4:7a:2f:dd:c5: 7f:31:39:e8:d9:9e:4b:3e:b0:07:f1:14:5b:25:30: f7:2b:b2:cd:46:f8:33:db:5d:7d:0e:52:f6:5e:10: e6:94:f4:e5:ad:f1:4a:a0:53:3d:fb:f6:95:2b:36: f6:a8:6f:ec:2d:91:33:6f:49:4f:b4:ce:5f:b0:8d: 92:9f:0e:c9:fd:b6:58:d2:4e:b6:66:08:ba:32:e3: 36:68:74:da:98:e4:5c:01:0e:c6:54:89:94:65:85: fa:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:1E:FA:61:EB:C7:88:93:5D:B5:08:3D:2F:0E:97:90:CD:2D:7C:5E X509v3 Authority Key Identifier: keyid:FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:5a:0f:73:f7:11:eb:d6:67:4b:c8:20:10:14:dd:fd:0b:3f: f3:46:6d:0b:d0:35:c0:ca:3f:2e:ab:37:ce:25:56:18:f6:01: 0a:d0:89:4f:9b:48:15:da:f3:fe:0a:39:12:cc:e8:10:e3:01: dd:91:f6:32:77:3d:20:a5:35:d9:02:3e:f8:24:c2:f0:70:0e: f5:a6:51:b3:bd:cc:fc:7c:39:8a:e0:37:da:0a:78:5a:71:fe: c5:8a:be:3e:b9:b5:88:ce:05:e1:33:28:8d:bb:a2:ad:e2:d8: 92:2a:10:0a:7e:bf:4f:4f:60:b6:f1:d4:9d:ca:10:ec:4b:ab: 05:e8:fe:34:7c:3a:70:1f:b3:18:a1:a2:31:61:69:47:34:a6: e3:df:60:b9:6e:1b:8d:c8:81:2b:7e:79:4b:4b:76:68:fa:36: dc:ba:59:30:4c:09:5b:b3:d1:80:c1:96:2c:db:f5:e3:82:3f: 82:bf:ec:57:8b:b2:8f:b8:15:76:c5:92:b9:c6:33:a6:bb:3e: da:a1:97:5c:5b:5b:b5:c3:65:2f:71:35:d8:41:93:be:18:bb: 3d:c3:43:89:75:aa:04:1a:a3:21:b2:59:e4:68:49:4f:c1:ec: fe:9b:97:47:3f:23:6d:fc:a3:23:cb:e5:0c:62:76:11:b4:eb: bf:a7:c4:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEzRDAxMTAvBgNVBAUTKEZDODBCNDlCNTA3MzMyRkQ0QzlDOTJERDVFMjdBMkRG Q0E4MDY0REEwHhcNMjYwMzI0MjI1MDAxWhcNMjYwMzMxMjI1MDAxWjAYMRYwFAYD VQQDEw02OWMzMTUxOS1jYjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwM36bIgbvHik7zYTOp8cf2i8b9Kk9mDOx70AFO6JehrT5OOvUxufCrBIAKSD sLxG4U8bivBmXwqRLwf2IMCtPTQPvaZi9FAuJtIj3DA+8ls8HBtU98XjaTXfi3JM ZW4kiATjaBlWCB3q1F9JilOwn9/aCPfhXtLXdPowT/9PKYUFrti0pSl/PRuSFiKE 3D8YBSW2eutxdDYWVGsltDFgxHov3cV/MTno2Z5LPrAH8RRbJTD3K7LNRvgz2119 DlL2XhDmlPTlrfFKoFM9+/aVKzb2qG/sLZEzb0lPtM5fsI2Snw7J/bZY0k62Zgi6 MuM2aHTamORcAQ7GVImUZYX6JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAce+mHr x4iTXbUIPS8Ol5DNLXxeMB8GA1UdIwQYMBaAFPyAtJtQczL9TJyS3V4not/KgGTa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTNEMC9EN0E0QkI1NjA0 QUMxMUVDQkVCNTBDNzlDNEY5QUUwMi9fSUMwbTFCek12MU1uSkxkWGllaTM4cUFa Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JQzBtMUJ6TXYxTW5KTGRYaWVpMzhxQVpOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTNEMC9EN0E0QkI1NjA0QUMxMUVDQkVCNTBDNzlDNEY5QUUwMi9fSUMwbTFCek12 MU1uSkxkWGllaTM4cUFaTm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK1oPc/cR69ZnS8ggEBTd/Qs/80ZtC9A1wMo/Lqs3ziVWGPYBCtCJT5tIFdrz /go5EszoEOMB3ZH2Mnc9IKU12QI++CTC8HAO9aZRs73M/Hw5iuA32gp4WnH+xYq+ Prm1iM4F4TMojbuireLYkioQCn6/T09gtvHUncoQ7EurBej+NHw6cB+zGKGiMWFp RzSm499guW4bjciBK355S0t2aPo23LpZMEwJW7PRgMGWLNv144I/gr/sV4uyj7gV dsWSucYzprs+2qGXXFtbtcNlL3E12EGTvhi7PcNDiXWqBBqjIbJZ5GhJT8Hs/puX Rz8jbfyjI8vlDGJ2EbTrv6fECA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:44:55 2026 by rpki-client