$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.mft File: 74sS4pnzyE0UvzVyXwLdxQOxLgE.mft (raw, json) Hash identifier: HA5/PCxxP+uB8KB3gN3lKHREswblRLzwXEMCDUM8ocw= Subject key identifier: F6:61:B3:58:5B:F8:89:04:E6:EE:0C:0B:1B:1D:A5:08:96:B4:D4:D5 Authority key identifier: EF:8B:12:E2:99:F3:C8:4D:14:BF:35:72:5F:02:DD:C5:03:B1:2E:01 Certificate issuer: /CN=A91EC978/serialNumber=EF8B12E299F3C84D14BF35725F02DDC503B12E01 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74sS4pnzyE0UvzVyXwLdxQOxLgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.mft Manifest number: 21 Signing time: Wed 25 Mar 2026 08:05:52 +0000 Manifest this update: Wed 25 Mar 2026 08:05:51 +0000 Manifest next update: Wed 01 Apr 2026 08:05:51 +0000 Files and hashes: 1: 74sS4pnzyE0UvzVyXwLdxQOxLgE.crl (hash: uMP6gpnkhOaaZ5UthMZawTOykf1/Kr2Ww64iGO3mkhk=) 2: F46C6AE2001311F1811932CE406F56BC.roa (hash: MxFfnouduq0AyvPx5Uzbe5lXPlmcgFB0L/5+2A+Av3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.crl rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74sS4pnzyE0UvzVyXwLdxQOxLgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC978, serialNumber=EF8B12E299F3C84D14BF35725F02DDC503B12E01 Validity Not Before: Mar 25 08:05:51 2026 GMT Not After : Apr 1 08:05:51 2026 GMT Subject: CN=69c3975f-7642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3f:dc:cb:94:fa:79:fa:8a:f9:9a:50:88:17: 36:8f:54:b5:87:09:d8:82:a9:53:e6:0f:9a:c0:aa: e7:81:ac:48:fb:3b:ac:f5:6e:04:eb:df:09:ad:72: 5d:76:3d:c6:d6:7f:ed:ca:59:80:61:62:ba:9c:fd: 27:fb:fa:28:93:29:c9:ec:4c:41:b3:e3:4f:8e:4a: 8e:90:f2:74:19:b1:2d:c6:3e:fe:05:4a:47:4b:9b: b7:32:82:37:a5:d0:b3:9d:a4:74:f4:43:c7:d8:0b: c4:c2:f1:47:44:8d:24:81:62:3b:57:c2:ef:35:6b: c4:5a:b9:34:f4:83:41:2b:dc:16:da:80:85:43:fd: f3:08:6e:8a:73:09:85:d8:50:75:0c:23:14:4c:66: 03:72:f7:5a:cf:a2:ef:47:aa:e3:46:15:1b:7b:93: 1a:b3:7c:33:75:6a:c1:26:7e:d4:98:91:b8:79:69: e0:09:f4:5e:08:db:82:f2:2d:0a:a0:12:bb:d4:c9: c0:bd:7b:0e:cc:58:c8:4d:71:03:ae:58:70:14:05: 8d:02:bd:ad:8f:e7:99:eb:cd:85:34:9b:4f:f5:55: 11:2f:ad:e7:e8:47:d8:0d:c1:61:dd:3e:05:9e:f1: 38:bc:00:93:b5:ff:28:38:90:df:c6:41:57:4c:d0: 3a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:61:B3:58:5B:F8:89:04:E6:EE:0C:0B:1B:1D:A5:08:96:B4:D4:D5 X509v3 Authority Key Identifier: keyid:EF:8B:12:E2:99:F3:C8:4D:14:BF:35:72:5F:02:DD:C5:03:B1:2E:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74sS4pnzyE0UvzVyXwLdxQOxLgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e9:34:4f:17:c8:d4:25:d3:27:2a:5b:a4:c7:af:55:d3:c0: c0:5a:5d:7e:74:f0:7c:59:02:32:c3:a2:d1:77:4c:c2:28:f0: c3:1e:2a:38:63:d5:99:ac:7b:3b:d8:6e:4e:e7:63:23:e2:e9: 39:22:08:5a:d5:df:f1:78:51:35:32:7f:86:3f:66:eb:b8:d2: 65:2b:34:9e:8a:b4:75:a4:8a:f5:fa:15:d2:8c:d1:7f:29:3a: e6:a3:f3:d7:ea:19:41:c4:b9:dd:f3:a2:45:5e:d2:21:eb:7e: 00:eb:36:53:26:7b:f9:fd:40:72:3f:87:27:01:ac:75:23:d1: e1:4d:e8:42:bb:12:4a:17:15:05:da:20:4b:a9:dd:56:38:24: 21:f8:0a:7f:44:64:e5:84:97:7b:c7:d5:81:7b:16:3f:75:2f: f7:47:af:1c:db:04:95:6d:ed:50:69:3e:86:b1:b6:53:9c:7d: 5b:25:87:b2:ec:5c:aa:98:2d:12:ed:8b:a0:a3:dc:9d:de:71: 8a:26:d2:8e:9a:01:87:ea:71:03:db:92:29:28:b3:a9:9d:fd: f0:bc:0e:40:8d:fe:f5:72:24:25:ca:db:46:39:06:85:8a:b9: ec:93:cd:4a:d2:dc:47:a2:92:86:e1:74:7b:e5:34:93:11:9f: d7:43:5c:3f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Qzk3ODExMC8GA1UEBRMoRUY4QjEyRTI5OUYzQzg0RDE0QkYzNTcyNUYwMkREQzUw M0IxMkUwMTAeFw0yNjAzMjUwODA1NTFaFw0yNjA0MDEwODA1NTFaMBgxFjAUBgNV BAMTDTY5YzM5NzVmLTc2NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYP9zLlPp5+or5mlCIFzaPVLWHCdiCqVPmD5rAqueBrEj7O6z1bgTr3wmtcl12 PcbWf+3KWYBhYrqc/Sf7+iiTKcnsTEGz40+OSo6Q8nQZsS3GPv4FSkdLm7cygjel 0LOdpHT0Q8fYC8TC8UdEjSSBYjtXwu81a8RauTT0g0Er3BbagIVD/fMIbopzCYXY UHUMIxRMZgNy91rPou9HquNGFRt7kxqzfDN1asEmftSYkbh5aeAJ9F4I24LyLQqg ErvUycC9ew7MWMhNcQOuWHAUBY0Cva2P55nrzYU0m0/1VREvrefoR9gNwWHdPgWe 8Ti8AJO1/yg4kN/GQVdM0DphAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9mGzWFv4 iQTm7gwLGx2lCJa01NUwHwYDVR0jBBgwFoAU74sS4pnzyE0UvzVyXwLdxQOxLgEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDOTc4L0M1MjZFNjBFMDAx MzExRjFCQzM4QUJDQzQwNkY1NkJDLzc0c1M0cG56eUUwVXZ6VnlYd0xkeFFPeExn RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNzRzUzRwbnp5RTBVdnpWeVh3TGR4UU94TGdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD OTc4L0M1MjZFNjBFMDAxMzExRjFCQzM4QUJDQzQwNkY1NkJDLzc0c1M0cG56eUUw VXZ6VnlYd0xkeFFPeExnRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBA6TRPF8jUJdMnKlukx69V08DAWl1+dPB8WQIyw6LRd0zCKPDDHio4Y9WZrHs7 2G5O52Mj4uk5Igha1d/xeFE1Mn+GP2bruNJlKzSeirR1pIr1+hXSjNF/KTrmo/PX 6hlBxLnd86JFXtIh634A6zZTJnv5/UByP4cnAax1I9HhTehCuxJKFxUF2iBLqd1W OCQh+Ap/RGTlhJd7x9WBexY/dS/3R68c2wSVbe1QaT6GsbZTnH1bJYey7FyqmC0S 7Yugo9yd3nGKJtKOmgGH6nED25IpKLOpnf3wvA5Ajf71ciQlyttGOQaFirnsk81K 0txHopKG4XR75TSTEZ/XQ1w/ -----END CERTIFICATE-----Generated at Thu Mar 26 15:03:16 2026 by rpki-client