$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft File: c4TcZntNSaWs1QpYtIkWoVrCYWs.mft (raw, json) Hash identifier: EH9/r6kZ+9HyL2RurxBc4k3bGMjux2JpoFCVNtD0CBo= Subject key identifier: B1:E7:F7:F1:39:95:97:14:CF:5F:7D:A7:60:B9:C6:31:F2:95:3E:9A Authority key identifier: 73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B Certificate issuer: /CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft Manifest number: 01C9 Signing time: Wed 25 Mar 2026 03:02:30 +0000 Manifest this update: Wed 25 Mar 2026 03:02:29 +0000 Manifest next update: Wed 01 Apr 2026 03:02:29 +0000 Files and hashes: 1: c4TcZntNSaWs1QpYtIkWoVrCYWs.crl (hash: IiOOHVN9MCwkXOoQKFz2QNhkZMakdn9zB7lBmCHgVlk=) 2: F1E9B236718E11EEAF67DB48C4F9AE02.roa (hash: CKnFh68MZ6vWZLs6HZZnzt3hxWfZ7SKFfyFAeNeD5aI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D07, serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Validity Not Before: Mar 25 03:02:29 2026 GMT Not After : Apr 1 03:02:29 2026 GMT Subject: CN=69c35046-cf62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:02:ce:51:40:fe:8b:a3:d1:59:05:e2:ef:34: e7:cd:d2:8a:b1:d8:93:64:ca:da:9b:dd:9f:6f:e0: 17:7a:a0:ed:0c:e5:b9:7e:55:7b:73:da:c1:61:35: 8b:bc:58:7f:ec:d9:02:21:56:14:b0:77:dc:89:0d: 97:37:35:f4:e6:77:fb:36:c0:d9:b0:0b:c9:eb:ae: b9:4d:dd:71:d0:cf:9c:34:5f:86:15:f7:c4:d8:31: da:98:52:61:33:1b:63:e3:e7:8b:46:24:6b:43:06: be:f9:c3:ad:58:61:0b:c7:5e:41:6f:5f:04:00:25: 0d:08:69:fd:c0:44:ce:60:1d:e3:ea:48:86:f0:cb: d9:0b:77:b5:c4:84:dc:c1:b3:1d:d6:21:07:20:22: 43:12:08:bb:1b:36:8d:92:b4:86:88:30:c7:2e:c9: 59:56:74:e7:17:50:78:76:a6:41:a4:d0:2b:97:44: c6:bc:74:8c:93:a0:77:af:e0:5c:64:d2:90:d6:fc: 15:f9:87:8a:f4:4e:c2:1e:b7:b1:0b:0f:70:b5:88: cf:d7:4b:4d:ed:4a:3b:e6:3f:98:ef:e6:27:fd:14: e6:62:78:f5:9f:0f:06:5f:39:ff:bb:f1:16:72:e3: 81:fb:50:ee:ae:f7:5c:ce:d7:76:c3:82:53:ff:39: 42:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E7:F7:F1:39:95:97:14:CF:5F:7D:A7:60:B9:C6:31:F2:95:3E:9A X509v3 Authority Key Identifier: keyid:73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:16:d1:ee:4d:88:6f:3c:01:1e:63:88:22:d9:7b:1d:10:ee: 47:ed:0b:c5:5a:33:52:00:fb:19:4a:a3:e9:67:fb:ee:dd:17: 89:5e:1d:84:6f:c6:2a:9e:c6:e7:db:32:70:cb:30:66:95:c0: a8:b2:1a:bf:74:58:70:6c:91:cb:58:95:df:f2:58:61:39:13: a8:a9:03:a6:3b:b8:fd:d0:c4:4d:35:a3:3a:c8:5d:8f:96:7c: 07:9a:41:1c:ff:b0:1b:82:5e:2d:9e:3b:c9:51:fb:67:70:67: 42:f6:05:df:b6:0d:91:c6:4d:7a:f1:b6:bb:ba:66:98:bf:51: a3:75:3b:f5:9c:04:bd:08:72:1e:1a:a5:82:f1:83:19:53:3b: ea:ba:4a:ee:1b:06:a7:02:d4:a7:31:46:96:75:75:64:e7:51: 9c:4d:38:e5:0d:58:ed:55:72:2e:8a:91:c6:59:c2:89:2c:91: f4:29:0b:f2:1a:4c:0c:c9:55:85:ba:9f:30:48:f9:dc:67:a8: f2:fd:29:83:03:be:ef:29:7c:ad:f0:74:be:9d:80:5a:1f:ff: fb:bb:e4:49:ac:c4:97:91:40:aa:e6:93:a7:b5:21:e9:b5:0a: 38:c8:01:df:e2:aa:e2:8b:6a:20:65:79:5c:26:2b:5e:7b:13: b6:a9:01:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMDcxMTAvBgNVBAUTKDczODREQzY2N0I0RDQ5QTVBQ0Q1MEE1OEI0ODkxNkEx NUFDMjYxNkIwHhcNMjYwMzI1MDMwMjI5WhcNMjYwNDAxMDMwMjI5WjAYMRYwFAYD VQQDEw02OWMzNTA0Ni1jZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuALOUUD+i6PRWQXi7zTnzdKKsdiTZMram92fb+AXeqDtDOW5flV7c9rBYTWL vFh/7NkCIVYUsHfciQ2XNzX05nf7NsDZsAvJ6665Td1x0M+cNF+GFffE2DHamFJh Mxtj4+eLRiRrQwa++cOtWGELx15Bb18EACUNCGn9wETOYB3j6kiG8MvZC3e1xITc wbMd1iEHICJDEgi7GzaNkrSGiDDHLslZVnTnF1B4dqZBpNArl0TGvHSMk6B3r+Bc ZNKQ1vwV+YeK9E7CHrexCw9wtYjP10tN7Uo75j+Y7+Yn/RTmYnj1nw8GXzn/u/EW cuOB+1Durvdcztd2w4JT/zlC4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLHn9/E5 lZcUz199p2C5xjHylT6aMB8GA1UdIwQYMBaAFHOE3GZ7TUmlrNUKWLSJFqFawmFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQwNy81MDU1NjBCNjZF N0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNhV3MxUXBZdElrV29WckNZ V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0VGNabnROU2FXczFRcFl0SWtXb1ZyQ1lXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEQwNy81MDU1NjBCNjZFN0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNh V3MxUXBZdElrV29WckNZV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXxbR7k2IbzwBHmOIItl7HRDuR+0LxVozUgD7GUqj6Wf77t0XiV4dhG/GKp7G 59sycMswZpXAqLIav3RYcGyRy1iV3/JYYTkTqKkDpju4/dDETTWjOshdj5Z8B5pB HP+wG4JeLZ47yVH7Z3BnQvYF37YNkcZNevG2u7pmmL9Ro3U79ZwEvQhyHhqlgvGD GVM76rpK7hsGpwLUpzFGlnV1ZOdRnE045Q1Y7VVyLoqRxlnCiSyR9CkL8hpMDMlV hbqfMEj53Geo8v0pgwO+7yl8rfB0vp2AWh//+7vkSazEl5FAquaTp7Uh6bUKOMgB 3+Kq4otqIGV5XCYrXnsTtqkB8g== -----END CERTIFICATE-----Generated at Thu Mar 26 12:27:22 2026 by rpki-client