$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft File: acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json) Hash identifier: ++69xc68yzjlvgE28hk2nsmuGV3LmgjSCgSpEPb1klg= Subject key identifier: 69:92:CC:DD:99:15:68:28:61:9F:D8:37:1F:DE:52:7F:90:25:D2:D0 Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C Certificate issuer: /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C Certificate serial: 0BFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft Manifest number: 0BE8 Signing time: Tue 24 Mar 2026 18:42:31 +0000 Manifest this update: Tue 24 Mar 2026 18:42:30 +0000 Manifest next update: Tue 31 Mar 2026 18:42:30 +0000 Files and hashes: 1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: hrJVtvu4AZeJiPYegr5NC5AWX0DQ0MiHMJbsa5vsP5U=) 2: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: rY5KQkYqT1Rwo0jw8gQc5MX066+hkbql7YzRhVJVrdg=) 3: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: JigB1dsNqwo8gCWVoZ8/GvwlkCn4qNmRbXh+o9s81zY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3070 (0xbfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C Validity Not Before: Mar 24 18:42:30 2026 GMT Not After : Mar 31 18:42:30 2026 GMT Subject: CN=69c2db17-f0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7b:85:56:0b:fc:83:e1:1c:f4:e0:9f:b2:3e: a0:f9:1d:29:15:59:bf:cf:d6:eb:da:0a:26:42:cc: 28:36:bf:87:95:7f:27:b7:49:34:a7:38:ed:49:74: d7:0b:b1:3b:de:51:dd:29:11:ab:fe:35:c2:20:b4: 96:35:d7:a5:d4:fe:2a:f1:a9:c4:c9:f0:02:d3:01: f8:79:c9:da:15:e0:5c:7c:f5:42:d0:29:c5:d3:8a: 69:e8:6d:d6:1a:d3:f5:30:bd:c8:0d:0b:2d:bf:3d: d4:47:a7:57:29:80:3b:8d:65:65:cf:74:89:6c:04: af:fb:b7:81:f2:20:85:91:96:b6:a7:44:68:da:3b: 4f:3c:8e:63:05:6e:c5:6c:ec:e1:97:4c:e9:77:e9: 7d:80:2d:c5:d1:73:df:c9:b3:bc:5d:06:66:90:4d: c8:0c:1d:44:63:09:fe:39:b5:c4:5b:cb:ed:3b:67: dd:e8:ca:cd:4b:d9:0c:4b:b6:96:62:53:f6:e5:5e: 29:87:f1:a7:07:72:17:60:e5:3e:cf:c9:ed:a2:6d: 85:b4:c5:c7:b2:8d:51:c9:4d:68:f4:98:aa:21:1d: 8c:b8:78:ad:63:32:31:76:c9:43:86:31:56:79:bf: 08:df:cd:bd:e1:f2:bf:61:6a:9d:b2:ba:e8:73:1a: 13:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:92:CC:DD:99:15:68:28:61:9F:D8:37:1F:DE:52:7F:90:25:D2:D0 X509v3 Authority Key Identifier: keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:d9:e4:81:2c:eb:44:c6:4d:67:e9:05:1d:b8:6d:bf:06:10: 20:fc:8c:d4:39:f7:fc:07:7e:d7:18:e5:44:54:ab:aa:6a:ba: 24:59:e3:cd:44:a2:b9:3f:0e:dd:2e:84:eb:83:0e:67:e5:38: ee:76:33:c5:4c:60:cb:f7:f7:a6:9b:d8:fc:40:be:fa:7f:0f: 4e:2c:9b:62:8e:46:ae:0a:2e:85:2d:ff:80:d7:5a:54:08:ad: 46:f7:05:44:7b:62:d9:b5:62:0d:d5:c1:a7:56:b4:85:5d:a2: 7b:5e:6e:ee:3e:a0:eb:fb:76:3a:c6:d0:11:70:70:02:ce:d4: 8d:fb:fb:44:7b:8e:ca:67:80:1f:e6:ec:0b:ec:94:41:b5:d6: 76:e4:1c:12:67:b8:b9:4d:2e:e0:3b:6b:c8:78:1b:22:37:71: 2e:d5:fd:ab:f9:af:9c:8e:32:ae:7c:e6:48:e4:e7:66:5e:e8: e3:aa:dc:4b:18:79:c2:91:9f:25:62:c6:84:ca:9a:a1:b9:7c: 04:99:93:19:68:5e:f1:9f:07:08:f3:36:f6:b6:a2:99:e3:3e: 77:0b:05:31:c0:29:02:70:ef:f0:ce:b9:e1:bd:df:44:87:10: 41:d0:fd:02:a8:04:ad:c7:e9:73:eb:50:ee:90:60:45:78:47: 8e:a0:89:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRGNjYxMTAvBgNVBAUTKDY5QzgxOThCREEzRkQwOTA1M0Y0MjU1M0Q3M0VFQTE1 MTIxRDI0MUMwHhcNMjYwMzI0MTg0MjMwWhcNMjYwMzMxMTg0MjMwWjAYMRYwFAYD VQQDEw02OWMyZGIxNy1mMGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HuFVgv8g+Ec9OCfsj6g+R0pFVm/z9br2gomQswoNr+HlX8nt0k0pzjtSXTX C7E73lHdKRGr/jXCILSWNdel1P4q8anEyfAC0wH4ecnaFeBcfPVC0CnF04pp6G3W GtP1ML3IDQstvz3UR6dXKYA7jWVlz3SJbASv+7eB8iCFkZa2p0Ro2jtPPI5jBW7F bOzhl0zpd+l9gC3F0XPfybO8XQZmkE3IDB1EYwn+ObXEW8vtO2fd6MrNS9kMS7aW YlP25V4ph/GnB3IXYOU+z8ntom2FtMXHso1RyU1o9JiqIR2MuHitYzIxdslDhjFW eb8I38294fK/YWqdsrrocxoTUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGmSzN2Z FWgoYZ/YNx/eUn+QJdLQMB8GA1UdIwQYMBaAFGnIGYvaP9CQU/QlU9c+6hUSHSQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEY2Ni9FNUY2NThBQTM2 OEExMUVBQjU3NDkyNzJDNEY5QUUwMi9hY2daaTlvXzBKQlQ5Q1ZUMXo3cUZSSWRK QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FjZ1ppOW9fMEpCVDlDVlQxejdxRlJJZEpCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEY2Ni9FNUY2NThBQTM2OEExMUVBQjU3NDkyNzJDNEY5QUUwMi9hY2daaTlvXzBK QlQ5Q1ZUMXo3cUZSSWRKQncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZtnkgSzrRMZNZ+kFHbhtvwYQIPyM1Dn3/Ad+1xjlRFSrqmq6JFnjzUSiuT8O 3S6E64MOZ+U47nYzxUxgy/f3ppvY/EC++n8PTiybYo5GrgouhS3/gNdaVAitRvcF RHti2bViDdXBp1a0hV2ie15u7j6g6/t2OsbQEXBwAs7Ujfv7RHuOymeAH+bsC+yU QbXWduQcEme4uU0u4DtryHgbIjdxLtX9q/mvnI4yrnzmSOTnZl7o46rcSxh5wpGf JWLGhMqaobl8BJmTGWhe8Z8HCPM29raimeM+dwsFMcApAnDv8M654b3fRIcQQdD9 AqgErcfpc+tQ7pBgRXhHjqCJGA== -----END CERTIFICATE-----Generated at Thu Mar 26 00:53:36 2026 by rpki-client