$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft File: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft (raw, json) Hash identifier: vHBZiXOfM5nnZPxIMwlHpguXvDxamrDCGszJ5V6igkc= Subject key identifier: 86:8A:24:E4:64:CC:9E:77:00:28:AF:30:29:F9:AB:47:3A:E5:E4:4B Authority key identifier: F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 Certificate issuer: /CN=A91ED571/serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Certificate serial: 0DFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft Manifest number: 0DF5 Signing time: Tue 24 Mar 2026 17:43:02 +0000 Manifest this update: Tue 24 Mar 2026 17:43:02 +0000 Manifest next update: Tue 31 Mar 2026 17:43:02 +0000 Files and hashes: 1: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl (hash: FsvYSIzIcvJgTRWW8OxRdyZnWFvFGBi5kXecBRfCm8U=) 2: C9819022CE7011E98E86DD52C4F9AE02.roa (hash: qKnMxoYQzAYEoqtHJW7SDhxTwL61Wk1XcPGIb5rMW/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3583 (0xdff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED571, serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Validity Not Before: Mar 24 17:43:02 2026 GMT Not After : Mar 31 17:43:02 2026 GMT Subject: CN=69c2cd26-1373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:82:d7:d8:c7:59:07:af:29:e3:b9:98:a1:9e: 81:ab:61:2b:30:b6:40:08:78:c6:ff:6b:6c:6e:8c: d9:b3:03:12:54:48:61:d0:91:1c:12:cd:7e:af:dd: f8:ed:74:9d:99:31:fa:f0:ad:aa:60:1f:12:69:8f: 1b:98:c4:ad:e7:87:06:f6:1d:53:a2:92:57:26:79: f4:3c:93:60:97:77:17:22:20:c3:97:ef:e1:16:62: fa:25:4e:d9:56:20:b6:c1:64:9c:1f:d5:05:b3:21: 7f:c0:58:36:68:1b:fb:50:55:28:fa:c0:71:42:4e: 65:89:c4:5f:25:c5:35:89:2d:e0:7f:f1:e5:45:8c: d9:90:b1:89:18:2c:04:80:fa:af:5c:4c:54:b1:ef: ad:ed:76:fc:c1:88:63:43:75:1c:fd:1b:7c:f2:62: 00:bf:1f:8d:0f:3e:d8:4d:ce:32:52:8b:4c:00:bd: 0e:af:40:7f:aa:73:ca:ed:ec:61:21:2c:12:9d:21: 33:fa:53:88:10:24:5d:f0:02:ef:34:54:7b:49:e3: b9:dd:7b:a8:26:a7:ad:d9:f2:54:12:90:9b:0c:ef: a0:3d:7a:16:67:82:1f:f7:fb:f0:cf:90:99:2c:a2: 86:11:7f:58:18:86:e2:21:89:4c:5c:63:fc:04:8b: 57:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8A:24:E4:64:CC:9E:77:00:28:AF:30:29:F9:AB:47:3A:E5:E4:4B X509v3 Authority Key Identifier: keyid:F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:4f:3f:13:32:6b:25:dc:1f:1b:6d:3e:fa:5d:47:4e:28:01: 8d:37:03:46:b8:13:7f:25:35:4b:2d:00:bf:50:6d:03:b3:66: 96:46:1d:f0:9d:6d:56:c8:6a:95:b1:fa:a2:31:d4:18:b8:4d: 92:9f:e0:6a:74:b9:f0:02:50:74:e8:42:bc:89:bc:68:2c:ce: ff:0e:e6:6f:93:e1:ea:ea:41:67:92:b0:c5:d5:0b:03:ee:c7: 19:92:e1:1a:fc:63:3a:a2:a8:8d:5b:df:d4:1a:9e:31:ce:7a: 3d:4e:93:bb:66:b7:ea:6b:cb:24:89:46:1e:8a:a5:30:f0:95: 08:34:05:0a:ce:91:6f:aa:39:45:89:81:0f:d9:35:74:7f:8e: c3:82:ba:56:45:3e:d7:b3:43:b1:d5:fe:3b:ea:f1:f3:9b:42: e9:00:89:b2:90:d3:d3:b0:cd:b3:32:de:76:a4:67:d8:fe:99: 70:11:6d:7f:05:1a:3f:6c:28:5b:a3:15:10:83:94:b1:29:9a: b9:ff:14:ff:30:0d:b4:9d:f7:a7:f1:ff:d6:3b:2a:42:69:fe: 8e:18:85:3a:57:12:77:21:ff:1c:55:07:8d:df:78:3f:c4:70: 00:a0:fc:79:15:2d:dd:22:28:70:49:e3:32:09:96:e9:e1:d6: 39:bd:20:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1NzExMTAvBgNVBAUTKEY0RjE1QzY3NUVEOUE1QzJEMTk5NUIyN0ZCNTNGRjYw RkYwMjQ5RTAwHhcNMjYwMzI0MTc0MzAyWhcNMjYwMzMxMTc0MzAyWjAYMRYwFAYD VQQDEw02OWMyY2QyNi0xMzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4LX2MdZB68p47mYoZ6Bq2ErMLZACHjG/2tsbozZswMSVEhh0JEcEs1+r934 7XSdmTH68K2qYB8SaY8bmMSt54cG9h1TopJXJnn0PJNgl3cXIiDDl+/hFmL6JU7Z ViC2wWScH9UFsyF/wFg2aBv7UFUo+sBxQk5licRfJcU1iS3gf/HlRYzZkLGJGCwE gPqvXExUse+t7Xb8wYhjQ3Uc/Rt88mIAvx+NDz7YTc4yUotMAL0Or0B/qnPK7exh ISwSnSEz+lOIECRd8ALvNFR7SeO53XuoJqet2fJUEpCbDO+gPXoWZ4If9/vwz5CZ LKKGEX9YGIbiIYlMXGP8BItXEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIaKJORk zJ53ACivMCn5q0c65eRLMB8GA1UdIwQYMBaAFPTxXGde2aXC0ZlbJ/tT/2D/Akng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU3MS9FQ0QyREY5NkNF NkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBjTFJtVnNuLTFQX1lQOENT ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQRmNaMTdacGNMUm1Wc24tMVBfWVA4Q1NlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU3MS9FQ0QyREY5NkNFNkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBj TFJtVnNuLTFQX1lQOENTZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg08/EzJrJdwfG20++l1HTigBjTcDRrgTfyU1Sy0Av1BtA7NmlkYd8J1tVshq lbH6ojHUGLhNkp/ganS58AJQdOhCvIm8aCzO/w7mb5Ph6upBZ5KwxdULA+7HGZLh GvxjOqKojVvf1BqeMc56PU6Tu2a36mvLJIlGHoqlMPCVCDQFCs6Rb6o5RYmBD9k1 dH+Ow4K6VkU+17NDsdX+O+rx85tC6QCJspDT07DNszLedqRn2P6ZcBFtfwUaP2wo W6MVEIOUsSmauf8U/zANtJ33p/H/1jsqQmn+jhiFOlcSdyH/HFUHjd94P8RwAKD8 eRUt3SIocEnjMgmW6eHWOb0g8A== -----END CERTIFICATE-----Generated at Thu Mar 26 07:09:30 2026 by rpki-client