$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft File: phNuUOlJjgSdC00vGGf6GxiRxO8.mft (raw, json) Hash identifier: OojpVE3k981kiw/YS+nXqQRKvx6QFwHbHcDVAdvxqYI= Subject key identifier: AB:FF:3E:52:43:DB:95:14:F4:47:FF:E2:77:59:CB:8A:4C:73:F0:45 Authority key identifier: A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF Certificate issuer: /CN=A91EC5DE/serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft Manifest number: 7C Signing time: Wed 25 Mar 2026 07:00:40 +0000 Manifest this update: Wed 25 Mar 2026 07:00:40 +0000 Manifest next update: Wed 01 Apr 2026 07:00:40 +0000 Files and hashes: 1: phNuUOlJjgSdC00vGGf6GxiRxO8.crl (hash: 0YleJCqw8a8SKoKs4l+D2csINWKR1IQMaALF0XkcTSo=) 2: C3CEEDC47DF011F097DBDD12C4F9AE02.roa (hash: UAqsRf7T5xk/tW0W7gNLXY7xtnRSTJeiphCUdFbB9X0=) 3: 46DAB9387DF011F0A392A111C4F9AE02.roa (hash: AQcKmsJt9IJs5jIdeC1sHVoe6SkebbETdV2pwOULpzc=) 4: F8E93410A85C11F0A2A48E76C4F9AE02.roa (hash: zwjQpeKdJOSFl0zaBPDuSlSa1uw+y3+L/xCcosdfy9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC5DE, serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF Validity Not Before: Mar 25 07:00:40 2026 GMT Not After : Apr 1 07:00:40 2026 GMT Subject: CN=69c38818-52e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a3:5d:4a:17:d5:f0:04:6b:b6:3d:94:17:e2: b6:0a:49:11:4e:9a:3f:27:f6:cd:84:47:06:24:60: f2:d4:a2:90:0c:03:a7:fb:d6:be:da:8a:7f:23:13: 3d:48:ae:5c:db:6d:5c:fa:37:4e:94:97:e0:91:7d: 6e:88:42:41:64:00:8e:87:e4:06:29:43:6c:2a:f6: 74:8c:a4:53:1e:d7:82:fb:00:84:1d:34:13:13:d4: 04:6f:4f:89:b5:57:9e:46:67:22:56:10:ac:64:df: 0a:bf:27:e9:97:f7:99:2b:a6:6c:81:87:b6:75:da: 5e:34:5d:16:49:45:41:a4:b6:a6:b2:9f:ab:a6:27: 18:40:3f:e9:52:db:6e:93:16:a7:48:27:53:d2:3b: 64:69:05:ed:26:33:87:af:3a:c5:ee:5d:c6:6b:12: f9:73:fb:40:da:e1:a1:0d:90:36:af:67:45:06:02: 7f:4b:ce:8e:d1:e3:42:bf:77:76:47:b8:82:b8:b7: 3f:a1:c8:7a:50:72:7b:3c:76:ef:42:3f:d5:5d:83: 2a:d9:69:3c:36:ef:24:9c:33:e2:db:95:f9:20:60: 18:3b:79:fb:e5:90:d6:bf:5f:cd:3c:48:28:3c:37: 40:a9:52:4c:2c:e9:8b:e2:87:1e:71:37:1f:d4:93: 9d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FF:3E:52:43:DB:95:14:F4:47:FF:E2:77:59:CB:8A:4C:73:F0:45 X509v3 Authority Key Identifier: keyid:A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2d:e8:af:82:8c:55:31:2e:1a:20:33:be:09:5a:bb:26:0b: 60:4f:c8:ed:fc:47:6f:ba:3e:b4:12:df:0d:d5:6a:9d:f2:47: 2f:fd:13:d0:9c:b3:af:29:ac:ce:f3:9d:da:1e:b9:86:1e:8a: 67:1a:2e:75:12:5c:6b:df:4e:df:3e:c6:68:7e:ca:23:4b:9a: 47:d1:14:f5:05:ee:6e:b5:2f:76:cd:43:b3:48:ef:34:07:bf: fc:7a:92:e8:68:08:19:65:96:65:f2:23:8b:9f:c6:95:91:cd: 97:da:9b:c2:03:59:5e:d2:9e:82:e0:d5:29:d4:64:5c:4e:98: fa:64:e8:70:b1:0a:ae:4c:aa:5e:ad:31:69:d7:99:cc:50:c4: 3c:6b:70:00:b9:d1:ed:bc:e3:9c:4f:33:c2:2b:a4:ae:c1:de: 01:14:8f:87:7f:e9:5e:d1:6c:96:19:bc:e7:d5:a5:ca:48:81: 18:22:b5:d7:a2:89:6b:8a:91:66:f2:96:de:e8:82:d7:b5:6c: ec:bb:9a:6d:c8:b4:c8:87:24:be:68:c9:ea:1a:7e:e0:bd:58: 45:8c:09:72:82:16:37:92:d7:b3:43:5a:4c:57:de:74:55:69: 8a:0a:9b:9d:2c:53:bc:f9:5f:09:06:fd:b4:37:e2:fb:3d:eb: b4:d6:b5:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM1REUxMTAvBgNVBAUTKEE2MTM2RTUwRTk0OThFMDQ5RDBCNEQyRjE4NjdGQTFC MTg5MUM0RUYwHhcNMjYwMzI1MDcwMDQwWhcNMjYwNDAxMDcwMDQwWjAYMRYwFAYD VQQDEw02OWMzODgxOC01MmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KNdShfV8ARrtj2UF+K2CkkRTpo/J/bNhEcGJGDy1KKQDAOn+9a+2op/IxM9 SK5c221c+jdOlJfgkX1uiEJBZACOh+QGKUNsKvZ0jKRTHteC+wCEHTQTE9QEb0+J tVeeRmciVhCsZN8Kvyfpl/eZK6ZsgYe2ddpeNF0WSUVBpLamsp+rpicYQD/pUttu kxanSCdT0jtkaQXtJjOHrzrF7l3GaxL5c/tA2uGhDZA2r2dFBgJ/S86O0eNCv3d2 R7iCuLc/och6UHJ7PHbvQj/VXYMq2Wk8Nu8knDPi25X5IGAYO3n75ZDWv1/NPEgo PDdAqVJMLOmL4ocecTcf1JOdvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKv/PlJD 25UU9Ef/4ndZy4pMc/BFMB8GA1UdIwQYMBaAFKYTblDpSY4EnQtNLxhn+hsYkcTv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzVERS84NzYyQ0QxQTc0 MjIxMUYwODc1Q0FDMzNDNEY5QUUwMi9waE51VU9sSmpnU2RDMDB2R0dmNkd4aVJ4 TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BoTnVVT2xKamdTZEMwMHZHR2Y2R3hpUnhPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzVERS84NzYyQ0QxQTc0MjIxMUYwODc1Q0FDMzNDNEY5QUUwMi9waE51VU9sSmpn U2RDMDB2R0dmNkd4aVJ4TzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWy3or4KMVTEuGiAzvglauyYLYE/I7fxHb7o+tBLfDdVqnfJHL/0T0Jyzryms zvOd2h65hh6KZxoudRJca99O3z7GaH7KI0uaR9EU9QXubrUvds1Ds0jvNAe//HqS 6GgIGWWWZfIji5/GlZHNl9qbwgNZXtKeguDVKdRkXE6Y+mTocLEKrkyqXq0xadeZ zFDEPGtwALnR7bzjnE8zwiukrsHeARSPh3/pXtFslhm859WlykiBGCK116KJa4qR ZvKW3uiC17Vs7Luabci0yIckvmjJ6hp+4L1YRYwJcoIWN5LXs0NaTFfedFVpigqb nSxTvPlfCQb9tDfi+z3rtNa1xg== -----END CERTIFICATE-----Generated at Thu Mar 26 11:34:41 2026 by rpki-client