$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft File: h88dAWBFUehsJECeSB2vnGZZS_Q.mft (raw, json) Hash identifier: 2ef/0apjEOSEiwhryiRtwz8R5OqZ2jSZJHAqE5yzAYw= Subject key identifier: 4A:B5:68:34:62:09:78:31:64:FE:B5:90:44:4E:57:AF:22:41:A3:DC Authority key identifier: 87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 Certificate issuer: /CN=A91E2042/serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Certificate serial: 01E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft Manifest number: 01D9 Signing time: Fri 27 Mar 2026 03:07:56 +0000 Manifest this update: Fri 27 Mar 2026 03:07:55 +0000 Manifest next update: Fri 03 Apr 2026 03:07:55 +0000 Files and hashes: 1: h88dAWBFUehsJECeSB2vnGZZS_Q.crl (hash: tuBm4854VT5NAJt8Or29/ygzanlRInWG/1mq3Em6kzk=) 2: A4E0754863B411EEAADB3A7CC4F9AE02.roa (hash: EhYXno6ug4ByU87OUq1wUeh+ctGIsCVZa0SYOR15ZnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 03:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 481 (0x1e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2042, serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Validity Not Before: Mar 27 03:07:55 2026 GMT Not After : Apr 3 03:07:55 2026 GMT Subject: CN=69c5f48c-66c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fe:f0:03:cc:e8:e1:b4:8a:14:88:a8:2a:ba: 00:06:5a:9f:6d:12:d3:3c:13:58:e3:00:10:7e:76: b1:0d:f5:2f:18:74:a5:62:af:29:31:f2:57:85:9f: 05:07:c9:68:c8:fe:50:c1:4c:e5:0e:5c:83:13:a4: 41:1f:67:0d:6f:b0:da:6f:29:5c:3a:c0:6f:69:6a: e4:e5:93:1d:c4:c6:69:dc:f0:3e:42:53:24:3a:bf: 16:c1:2f:11:76:a0:02:1c:ae:83:2d:9a:18:79:95: 1f:a1:e8:bb:ae:bb:6b:b4:60:2a:d3:1e:16:74:44: 90:93:b6:c6:d1:6c:6e:64:f7:fb:7b:c5:07:14:e5: e8:51:d9:1d:c8:ee:e4:8b:19:6e:ca:dc:9e:04:e9: 55:aa:ed:d9:05:e2:b8:26:d9:3f:72:2a:53:7d:e9: 9b:5a:a9:30:68:23:89:bc:25:09:ea:cb:0e:69:83: 9f:71:f3:ff:dd:ec:24:75:11:10:dc:f1:c4:de:65: 87:78:a3:36:8a:7b:cf:fd:98:d6:3f:fd:91:8e:42: fd:11:d2:20:83:1a:d1:2f:8b:42:5f:10:dc:dd:71: 78:e9:37:0e:4a:e8:bd:bd:bd:ab:8b:a5:12:e8:53: 6c:20:c0:76:d6:e6:85:1b:d8:6c:ca:51:63:45:fe: 10:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B5:68:34:62:09:78:31:64:FE:B5:90:44:4E:57:AF:22:41:A3:DC X509v3 Authority Key Identifier: keyid:87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:3c:2f:04:03:f1:2d:79:d2:6e:80:61:8d:4e:b5:28:f4:5f: 46:60:1a:5d:de:0a:21:cf:24:5a:75:c9:09:42:bc:78:60:a5: 81:c9:b8:c0:0f:3b:d2:39:de:3f:03:c0:4d:f3:fb:d0:4b:c0: df:3c:15:73:da:1b:65:70:20:5c:0a:48:f8:f4:38:14:d6:2b: 0b:62:30:0c:0f:d2:35:12:91:37:d8:15:73:52:81:54:e3:1f: 2a:76:83:8f:3a:0f:d9:55:6f:f1:79:d1:2c:39:87:a4:57:fe: a3:03:dc:3c:b3:f5:6c:d8:f8:02:1e:c5:1a:a7:c5:b1:84:b1: b5:fa:f6:b0:d4:45:4f:49:56:26:c8:84:17:26:0e:b3:64:17: bb:bd:37:73:ef:ca:61:80:33:8a:b1:30:6a:75:66:39:a3:48: 08:e8:5c:c8:25:f1:e6:19:f8:c3:c8:cf:b7:0d:0a:ec:35:03: cd:1f:b2:a2:e6:03:7c:74:bf:5d:36:ec:c7:f3:7c:27:cc:37: 0b:89:9c:2a:76:81:0a:2d:c8:d7:95:f7:e8:ca:8c:ac:1b:02: b7:dc:3c:e2:57:63:7e:00:c7:d2:bb:5b:1a:4a:5d:30:79:34: ef:96:0f:c3:61:11:49:e8:b5:18:31:65:55:6a:3b:fa:57:76: 38:dc:c7:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIwNDIxMTAvBgNVBAUTKDg3Q0YxRDAxNjA0NTUxRTg2QzI0NDA5RTQ4MURBRjlD NjY1OTRCRjQwHhcNMjYwMzI3MDMwNzU1WhcNMjYwNDAzMDMwNzU1WjAYMRYwFAYD VQQDEw02OWM1ZjQ4Yy02NmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsv7wA8zo4bSKFIioKroABlqfbRLTPBNY4wAQfnaxDfUvGHSlYq8pMfJXhZ8F B8loyP5QwUzlDlyDE6RBH2cNb7DabylcOsBvaWrk5ZMdxMZp3PA+QlMkOr8WwS8R dqACHK6DLZoYeZUfoei7rrtrtGAq0x4WdESQk7bG0WxuZPf7e8UHFOXoUdkdyO7k ixluytyeBOlVqu3ZBeK4Jtk/cipTfembWqkwaCOJvCUJ6ssOaYOfcfP/3ewkdREQ 3PHE3mWHeKM2invP/ZjWP/2RjkL9EdIggxrRL4tCXxDc3XF46TcOSui9vb2ri6US 6FNsIMB21uaFG9hsylFjRf4Q3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEq1aDRi CXgxZP61kEROV68iQaPcMB8GA1UdIwQYMBaAFIfPHQFgRVHobCRAnkgdr5xmWUv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjA0Mi8wQUVDMUQwQzYz QjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVlaHNKRUNlU0Iydm5HWlpT X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4OGRBV0JGVWVoc0pFQ2VTQjJ2bkdaWlNfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjA0Mi8wQUVDMUQwQzYzQjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVl aHNKRUNlU0Iydm5HWlpTX1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkzwvBAPxLXnSboBhjU61KPRfRmAaXd4KIc8kWnXJCUK8eGClgcm4wA870jne PwPATfP70EvA3zwVc9obZXAgXApI+PQ4FNYrC2IwDA/SNRKRN9gVc1KBVOMfKnaD jzoP2VVv8XnRLDmHpFf+owPcPLP1bNj4Ah7FGqfFsYSxtfr2sNRFT0lWJsiEFyYO s2QXu703c+/KYYAzirEwanVmOaNICOhcyCXx5hn4w8jPtw0K7DUDzR+youYDfHS/ XTbsx/N8J8w3C4mcKnaBCi3I15X36MqMrBsCt9w84ldjfgDH0rtbGkpdMHk075YP w2ERSei1GDFlVWo7+ld2ONzHaA== -----END CERTIFICATE-----Generated at Sat Mar 28 11:47:47 2026 by rpki-client