$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft File: oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft (raw, json) Hash identifier: bVujLNbQk7dCS/h9TlcvRN7Ms+L32KFsWfdL6P5ntAk= Subject key identifier: 49:52:CE:63:FF:A9:03:FF:55:A6:AC:68:52:45:9C:06:35:0B:21:5C Authority key identifier: A0:0E:02:DC:78:3F:90:84:02:1D:F9:4F:75:86:26:4E:C4:7D:34:38 Certificate issuer: /CN=A91EE5E5/serialNumber=A00E02DC783F9084021DF94F7586264EC47D3438 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft Manifest number: FA Signing time: Fri 27 Mar 2026 05:47:26 +0000 Manifest this update: Fri 27 Mar 2026 05:47:26 +0000 Manifest next update: Fri 03 Apr 2026 05:47:26 +0000 Files and hashes: 1: oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl (hash: GvlgNFU1HILmr2SBVw48qTJP8ftjkGT7lBfu4tLcrVI=) 2: 5D5CEDCEAFC011EFAA2E3455C4F9AE02.roa (hash: swU/cIT55IB6CLXX7olyaDaVghm9dVy0OQ1HquSKmXw=) 3: 1597CAC6B00711EF863A582EC4F9AE02.roa (hash: Pjr/Al+ZFffNus+aH+TIpueq22icnlUqNTg+gkHkCcw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 05:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE5E5, serialNumber=A00E02DC783F9084021DF94F7586264EC47D3438 Validity Not Before: Mar 27 05:47:26 2026 GMT Not After : Apr 3 05:47:26 2026 GMT Subject: CN=69c619ee-71b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:72:da:8b:7b:6b:05:e3:37:19:8b:d1:c8:11: 67:39:0b:b6:73:7e:de:cb:4d:ef:2c:42:32:58:5e: 3b:39:d4:5a:86:74:7b:9d:4a:09:d4:16:47:aa:03: db:e8:52:64:82:14:56:57:87:fa:5b:c6:d0:3c:98: 74:d5:92:cb:f8:70:9f:c3:ff:7c:27:ec:6f:66:1b: 54:1c:d0:60:c6:0a:52:ab:99:24:6b:0d:2b:f9:55: c2:5c:11:ee:82:f6:90:cf:e5:4e:ad:ee:54:24:b1: f8:ec:de:5b:59:19:e2:2d:3d:f0:1b:5d:bd:61:22: 63:0d:43:18:99:c2:d5:58:f2:b6:8f:9a:c7:22:96: 61:4c:70:9f:0b:b4:1f:97:5d:a1:d0:9f:e1:9f:17: c1:28:f0:b9:7d:2d:ec:b6:f2:ab:e0:d0:b0:32:2b: 49:bb:9d:09:45:f8:f4:3d:1e:c3:46:50:44:62:36: 0d:fb:12:f4:17:5c:bf:aa:86:63:8f:79:0a:74:68: 89:42:d6:12:f6:52:fd:ba:49:58:ba:c1:7a:84:30: 0c:6b:ea:9b:9e:d5:e4:ce:77:1d:e2:30:c6:8f:10: 98:72:ea:38:2c:a6:f4:2c:53:73:95:66:27:8c:a2: 1e:31:fd:97:c3:d2:e5:be:b3:55:68:92:4e:ff:be: c4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:52:CE:63:FF:A9:03:FF:55:A6:AC:68:52:45:9C:06:35:0B:21:5C X509v3 Authority Key Identifier: keyid:A0:0E:02:DC:78:3F:90:84:02:1D:F9:4F:75:86:26:4E:C4:7D:34:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:cf:e2:b5:73:e6:6f:61:1e:eb:8d:80:ea:5d:47:18:1b:24: 17:07:21:20:50:62:02:ba:ec:ce:51:06:80:1b:78:63:27:49: 87:c6:01:7c:03:2c:a1:97:f0:39:4b:dc:42:e5:4e:f4:af:6c: c3:f1:06:7f:83:2b:9b:1e:3b:b2:03:11:31:15:55:24:de:39: 89:7d:c8:68:00:76:b5:f9:06:d3:d4:c8:90:ba:49:b2:5e:a9: 51:5c:2a:36:58:f9:be:a1:45:80:59:b9:7c:95:e0:6c:c7:d1: 04:09:3a:c1:b7:6a:21:57:30:70:18:04:75:e2:28:76:15:80: f6:09:d1:e1:e0:38:b8:a4:1a:a2:45:23:22:0e:4a:6c:62:c0: e4:7e:86:14:86:72:b0:c4:eb:ed:21:97:38:79:47:d2:2b:c4: 27:98:99:bd:86:32:44:32:9c:19:56:67:eb:d3:e7:f8:38:84: 16:68:8c:89:84:b1:8f:2b:20:f3:08:f9:82:08:98:23:c7:1c: 51:3d:22:85:81:bb:34:82:74:24:4e:09:35:d6:84:69:4d:e7: d4:46:eb:bf:01:d9:2f:ff:34:67:19:4f:b9:7f:43:a3:a4:e4: 94:0f:d6:45:cc:89:fd:42:07:39:51:53:e8:24:77:2b:e2:f6: 7d:b7:8e:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU1RTUxMTAvBgNVBAUTKEEwMEUwMkRDNzgzRjkwODQwMjFERjk0Rjc1ODYyNjRF QzQ3RDM0MzgwHhcNMjYwMzI3MDU0NzI2WhcNMjYwNDAzMDU0NzI2WjAYMRYwFAYD VQQDEw02OWM2MTllZS03MWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAonLai3trBeM3GYvRyBFnOQu2c37ey03vLEIyWF47OdRahnR7nUoJ1BZHqgPb 6FJkghRWV4f6W8bQPJh01ZLL+HCfw/98J+xvZhtUHNBgxgpSq5kkaw0r+VXCXBHu gvaQz+VOre5UJLH47N5bWRniLT3wG129YSJjDUMYmcLVWPK2j5rHIpZhTHCfC7Qf l12h0J/hnxfBKPC5fS3stvKr4NCwMitJu50JRfj0PR7DRlBEYjYN+xL0F1y/qoZj j3kKdGiJQtYS9lL9uklYusF6hDAMa+qbntXkzncd4jDGjxCYcuo4LKb0LFNzlWYn jKIeMf2Xw9LlvrNVaJJO/77EJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFElSzmP/ qQP/VaasaFJFnAY1CyFcMB8GA1UdIwQYMBaAFKAOAtx4P5CEAh35T3WGJk7EfTQ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTVFNS9GOTdCQzMwMkFG QkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9vQTRDM0hnX2tJUUNIZmxQZFlZbVRzUjlO RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29BNEMzSGdfa0lRQ0hmbFBkWVltVHNSOU5EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTVFNS9GOTdCQzMwMkFGQkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9vQTRDM0hnX2tJ UUNIZmxQZFlZbVRzUjlORGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWM/itXPmb2Ee642A6l1HGBskFwchIFBiArrszlEGgBt4YydJh8YBfAMsoZfw OUvcQuVO9K9sw/EGf4Mrmx47sgMRMRVVJN45iX3IaAB2tfkG09TIkLpJsl6pUVwq Nlj5vqFFgFm5fJXgbMfRBAk6wbdqIVcwcBgEdeIodhWA9gnR4eA4uKQaokUjIg5K bGLA5H6GFIZysMTr7SGXOHlH0ivEJ5iZvYYyRDKcGVZn69Pn+DiEFmiMiYSxjysg 8wj5ggiYI8ccUT0ihYG7NIJ0JE4JNdaEaU3n1EbrvwHZL/80ZxlPuX9Do6TklA/W RcyJ/UIHOVFT6CR3K+L2fbeOFA== -----END CERTIFICATE-----Generated at Sat Mar 28 12:08:16 2026 by rpki-client