$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft File: -apja1w-MMegupdDAVtbEhBMt6g.mft (raw, json) Hash identifier: bUYQTAfme3AEXj/uRNIRUqRuxeSubWsTCIJeyuUlN9I= Subject key identifier: 83:36:8B:D6:A8:B4:13:B0:88:DE:1B:78:E7:BE:B6:E2:23:13:EC:45 Authority key identifier: F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8 Certificate issuer: /CN=A91EE099/serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8 Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft Manifest number: 01FE Signing time: Wed 25 Mar 2026 02:35:22 +0000 Manifest this update: Wed 25 Mar 2026 02:35:21 +0000 Manifest next update: Wed 01 Apr 2026 02:35:21 +0000 Files and hashes: 1: -apja1w-MMegupdDAVtbEhBMt6g.crl (hash: OVfpw6JoBXRGmNbenQQOAOFi862PS5Qy0QYj+LQBZVI=) 2: F5AA194CB2C911EF91AE9209C4F9AE02.roa (hash: jsG4A9B1X5RWld/1WjKWMW5kvn6PEfUEqCveLWYyYLU=) 3: 89BDDA4A2F6F11EEB73F3231C4F9AE02.roa (hash: JS/I83lnkJ+yXv//aUKTuv7mn22oJXxijweaV/2/Tbw=) 4: 804FEC802F6711EEB6EECA5BC4F9AE02.roa (hash: eyr8NymwonEMsBAoYqcO5uIS3VzQALB/L7GTWt3kg9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE099, serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8 Validity Not Before: Mar 25 02:35:21 2026 GMT Not After : Apr 1 02:35:21 2026 GMT Subject: CN=69c349ea-8f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1f:35:96:52:4d:1a:0c:27:e7:f8:54:d0:f9: 2d:ee:37:5e:ac:68:0a:11:d0:4e:28:21:4c:80:13: 7b:99:a3:7b:6b:af:eb:e3:d8:cd:c6:8d:96:69:fc: 32:36:fe:9b:9d:ab:d4:89:e4:b3:97:8f:86:11:ab: 95:1e:6b:f7:42:97:3d:90:03:44:f0:92:94:50:3d: 5b:a7:2e:2f:d0:dd:54:7f:35:9e:0a:0d:25:fd:56: 25:2f:44:80:3e:b9:c1:5b:3b:17:75:0c:e5:8f:33: 15:56:c4:60:32:c0:69:23:8e:90:a8:d5:af:d9:a1: 68:f4:b2:ff:2e:24:77:f4:e5:b6:d8:cc:a2:f9:b9: 60:a8:82:4b:fc:90:69:47:ec:d5:10:e5:3f:0a:82: 2a:15:ad:c3:ce:63:92:6a:d5:ec:0d:48:fb:d0:59: 19:5c:18:8e:91:cc:c1:6e:7c:11:30:61:ae:a3:e3: 0e:7f:e7:1c:de:03:b2:a1:72:93:96:e2:ed:83:e6: 4d:c5:c7:ff:ea:01:83:eb:88:f2:8c:55:f4:3c:3d: ed:8f:bb:c4:1c:46:84:7e:1e:f4:d9:23:a6:99:2c: 5e:62:f4:5c:7c:a9:3c:33:42:61:90:36:94:c9:c1: 3c:f9:25:ab:4c:2e:04:1a:d0:4e:f0:7f:e7:cc:6d: 32:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:36:8B:D6:A8:B4:13:B0:88:DE:1B:78:E7:BE:B6:E2:23:13:EC:45 X509v3 Authority Key Identifier: keyid:F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:e7:b4:b4:48:e5:36:50:3c:ae:1d:7c:df:3f:50:7c:7d:a3: af:61:f8:6c:0c:32:fe:2b:8d:e2:ae:55:9b:e8:fc:24:08:da: bc:38:80:ea:44:c2:e3:ba:3d:c5:52:ae:13:ec:ac:96:27:77: 00:ee:c4:da:ec:f5:53:76:7b:71:35:ee:5d:a6:63:63:b2:92: d3:57:35:6b:cb:a7:47:7c:5c:e7:9b:15:c8:96:89:7f:dd:f9: 09:a3:83:e2:84:87:6e:f8:26:65:9c:1e:d6:53:44:dc:fc:53: 18:23:84:de:8b:f8:f1:fc:10:16:f4:21:8c:73:9a:34:71:02: 95:c8:d8:fd:ad:d2:12:59:3b:ab:e1:e8:39:16:c0:a4:3a:a9: 51:c0:52:69:52:b4:e0:4d:47:d4:e7:6a:a1:5c:84:d2:e0:2e: c0:8f:a3:d2:ea:f6:8d:6e:5a:84:4d:06:1f:03:e4:52:d8:3d: 9b:97:8c:c9:70:77:fe:70:b4:41:7b:b8:00:ba:ed:0a:3f:48: 54:7f:e6:38:ba:c8:54:d3:f4:d1:b5:94:b1:77:ac:ed:fd:28: 8a:6d:2c:e3:e9:8a:49:2f:9e:9c:a6:eb:3f:5a:53:00:ee:57: fc:3c:46:48:af:ec:30:70:ae:66:f8:d3:87:a2:91:94:7e:8d: 1f:63:13:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOTkxMTAvBgNVBAUTKEY5QUE2MzZCNUMzRTMwQzdBMEJBOTc0MzAxNUI1QjEy MTA0Q0I3QTgwHhcNMjYwMzI1MDIzNTIxWhcNMjYwNDAxMDIzNTIxWjAYMRYwFAYD VQQDEw02OWMzNDllYS04ZjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAth81llJNGgwn5/hU0Pkt7jderGgKEdBOKCFMgBN7maN7a6/r49jNxo2Wafwy Nv6bnavUieSzl4+GEauVHmv3Qpc9kANE8JKUUD1bpy4v0N1UfzWeCg0l/VYlL0SA PrnBWzsXdQzljzMVVsRgMsBpI46QqNWv2aFo9LL/LiR39OW22Myi+blgqIJL/JBp R+zVEOU/CoIqFa3DzmOSatXsDUj70FkZXBiOkczBbnwRMGGuo+MOf+cc3gOyoXKT luLtg+ZNxcf/6gGD64jyjFX0PD3tj7vEHEaEfh702SOmmSxeYvRcfKk8M0JhkDaU ycE8+SWrTC4EGtBO8H/nzG0y2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIM2i9ao tBOwiN4beOe+tuIjE+xFMB8GA1UdIwQYMBaAFPmqY2tcPjDHoLqXQwFbWxIQTLeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5OS8wMjIxRDdDRTJG NjcxMUVFODI0QURDNTlDNEY5QUUwMi8tYXBqYTF3LU1NZWd1cGREQVZ0YkVoQk10 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1hcGphMXctTU1lZ3VwZERBVnRiRWhCTXQ2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTA5OS8wMjIxRDdDRTJGNjcxMUVFODI0QURDNTlDNEY5QUUwMi8tYXBqYTF3LU1N ZWd1cGREQVZ0YkVoQk10NmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiee0tEjlNlA8rh183z9QfH2jr2H4bAwy/iuN4q5Vm+j8JAjavDiA6kTC47o9 xVKuE+yslid3AO7E2uz1U3Z7cTXuXaZjY7KS01c1a8unR3xc55sVyJaJf935CaOD 4oSHbvgmZZwe1lNE3PxTGCOE3ov48fwQFvQhjHOaNHEClcjY/a3SElk7q+HoORbA pDqpUcBSaVK04E1H1OdqoVyE0uAuwI+j0ur2jW5ahE0GHwPkUtg9m5eMyXB3/nC0 QXu4ALrtCj9IVH/mOLrIVNP00bWUsXes7f0oim0s4+mKSS+enKbrP1pTAO5X/DxG SK/sMHCuZvjTh6KRlH6NH2MTWA== -----END CERTIFICATE-----Generated at Thu Mar 26 14:11:02 2026 by rpki-client