$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft File: rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft (raw, json) Hash identifier: /fC89KXbjxW7a+GbnqRgGM5litTvTgcH1J8iCbol64I= Subject key identifier: DB:55:FF:68:99:AD:7E:B1:DB:0E:AF:67:75:3C:D6:D8:8D:C0:9E:B2 Authority key identifier: AE:FD:51:46:4A:79:65:42:D5:64:21:3A:2F:63:AD:5F:8F:C3:00:6D Certificate issuer: /CN=A91ED65C/serialNumber=AEFD51464A796542D564213A2F63AD5F8FC3006D Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft Manifest number: 08 Signing time: Wed 25 Mar 2026 08:21:10 +0000 Manifest this update: Wed 25 Mar 2026 08:21:10 +0000 Manifest next update: Wed 01 Apr 2026 08:21:10 +0000 Files and hashes: 1: rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl (hash: /K8fR7U8DikRSXj7XwbE2iFHvj+9yIzSQTyRdJfwJlo=) 2: 39CF61B81E3F11F196621670303D8C67.roa (hash: zPRyj4utwiTX5jFvUWAD+F2yXKjyPz2qiUDVnqyk25k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED65C, serialNumber=AEFD51464A796542D564213A2F63AD5F8FC3006D Validity Not Before: Mar 25 08:21:10 2026 GMT Not After : Apr 1 08:21:10 2026 GMT Subject: CN=69c39af6-2070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c5:59:40:1f:c7:ca:45:00:8c:42:2e:bb:55: de:e0:de:2c:20:b5:24:1e:11:12:7b:08:9b:45:08: 91:b8:0f:bb:47:76:2c:6b:9e:78:3b:34:32:68:c4: 67:4e:b8:03:d8:81:ed:d2:6c:f3:db:35:b0:c7:d6: d6:c6:df:b1:93:11:43:da:fd:39:74:fb:c3:5f:93: 14:1f:c3:02:18:a9:0c:ad:73:69:5e:f2:de:b5:0a: ac:cc:1b:ca:16:ba:86:f9:3e:98:de:25:ae:d0:fd: 4c:99:a1:4a:9d:a4:2d:58:2a:3b:cb:df:48:56:c0: 6d:b0:71:43:57:f7:f2:22:e8:9f:5c:57:be:62:1d: 04:b2:26:28:b5:c3:25:d0:93:42:99:15:3b:d1:93: e2:3f:07:46:3c:0e:ea:53:c2:59:b2:ad:e9:f6:97: 57:17:3b:99:c1:6c:62:2d:e9:ac:e7:74:dc:20:da: 78:df:ea:42:69:20:43:c8:53:7d:3f:52:9a:69:7d: 61:57:0a:09:2b:96:23:6d:58:b1:ec:7e:a9:21:45: 59:39:81:55:68:e1:66:26:eb:8f:bc:d8:26:bc:d9: fd:1d:03:9b:c3:ed:b3:4c:ca:4c:5c:76:a4:ea:1d: 59:bd:8c:a1:d7:e2:2e:77:dc:1b:26:c6:7f:b1:ce: 3d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:55:FF:68:99:AD:7E:B1:DB:0E:AF:67:75:3C:D6:D8:8D:C0:9E:B2 X509v3 Authority Key Identifier: keyid:AE:FD:51:46:4A:79:65:42:D5:64:21:3A:2F:63:AD:5F:8F:C3:00:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:62:60:b3:4c:2a:96:e7:7a:56:8a:7b:05:ba:2a:24:a4:1b: 4b:49:86:61:34:73:95:bd:44:f4:90:9f:e6:6f:1c:9f:4c:ae: 2c:77:ea:dd:53:c6:68:a1:93:2a:2a:f8:6c:70:17:e5:1f:56: 34:3e:65:15:a2:2e:78:be:9f:c4:eb:6f:6d:31:1f:f0:30:64: e7:28:46:4c:36:07:be:88:36:5a:81:c7:8d:b3:9f:b6:41:04: d9:03:08:d5:84:27:10:3f:6e:14:cf:4a:49:43:92:90:32:9d: 85:3b:79:e1:8d:a3:21:54:39:4b:37:1f:bc:27:10:8f:5b:9f: 8d:a6:f7:e8:bf:ff:ed:10:33:44:95:6b:e7:09:ec:75:45:df: c7:27:64:13:91:03:60:ed:e6:a2:52:3c:12:47:d8:1e:ee:b5: 6d:dd:da:f8:1f:59:58:fe:34:5e:49:e6:71:d8:3e:5d:7f:bd: 9d:b6:97:c6:5d:9e:8f:64:5b:43:1d:3c:1d:b3:14:42:f4:dd: 39:4c:ed:2b:ef:db:e6:61:3d:c0:08:1d:aa:a3:a9:01:6e:71: c8:21:57:97:59:e7:70:48:c8:2b:6f:8f:a4:88:c8:97:d4:ca: f4:88:56:60:5b:80:79:6b:a0:7d:e6:6a:72:2e:5e:dc:61:19: c1:9e:76:b5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RDY1QzExMC8GA1UEBRMoQUVGRDUxNDY0QTc5NjU0MkQ1NjQyMTNBMkY2M0FENUY4 RkMzMDA2RDAeFw0yNjAzMjUwODIxMTBaFw0yNjA0MDEwODIxMTBaMBgxFjAUBgNV BAMTDTY5YzM5YWY2LTIwNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2xVlAH8fKRQCMQi67Vd7g3iwgtSQeERJ7CJtFCJG4D7tHdixrnng7NDJoxGdO uAPYge3SbPPbNbDH1tbG37GTEUPa/Tl0+8NfkxQfwwIYqQytc2le8t61CqzMG8oW uob5PpjeJa7Q/UyZoUqdpC1YKjvL30hWwG2wcUNX9/Ii6J9cV75iHQSyJii1wyXQ k0KZFTvRk+I/B0Y8DupTwlmyren2l1cXO5nBbGIt6azndNwg2njf6kJpIEPIU30/ UpppfWFXCgkrliNtWLHsfqkhRVk5gVVo4WYm64+82Ca82f0dA5vD7bNMykxcdqTq HVm9jKHX4i533Bsmxn+xzj09AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU21X/aJmt frHbDq9ndTzW2I3AnrIwHwYDVR0jBBgwFoAUrv1RRkp5ZULVZCE6L2OtX4/DAG0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVENjVDL0Y2MTNFMTI2MUUz QzExRjFCRkI1RUExQzJGM0Q4QzY3L3J2MVJSa3A1WlVMVlpDRTZMMk90WDRfREFH MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcnYxUlJrcDVaVUxWWkNFNkwyT3RYNF9EQUcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVE NjVDL0Y2MTNFMTI2MUUzQzExRjFCRkI1RUExQzJGM0Q4QzY3L3J2MVJSa3A1WlVM VlpDRTZMMk90WDRfREFHMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB3YmCzTCqW53pWinsFuiokpBtLSYZhNHOVvUT0kJ/mbxyfTK4sd+rdU8ZooZMq KvhscBflH1Y0PmUVoi54vp/E629tMR/wMGTnKEZMNge+iDZagceNs5+2QQTZAwjV hCcQP24Uz0pJQ5KQMp2FO3nhjaMhVDlLNx+8JxCPW5+Npvfov//tEDNElWvnCex1 Rd/HJ2QTkQNg7eaiUjwSR9ge7rVt3dr4H1lY/jReSeZx2D5df72dtpfGXZ6PZFtD HTwdsxRC9N05TO0r79vmYT3ACB2qo6kBbnHIIVeXWedwSMgrb4+kiMiX1Mr0iFZg W4B5a6B95mpyLl7cYRnBnna1 -----END CERTIFICATE-----Generated at Thu Mar 26 11:08:21 2026 by rpki-client