$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft File: RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft (raw, json) Hash identifier: lYHm276ohPD5aVnM774eGHpP0IF4u3fjn86kJH7SUNs= Subject key identifier: D5:3C:F5:65:6F:BE:73:26:FC:9C:04:96:A9:B1:0D:C8:31:D9:43:12 Authority key identifier: 45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E Certificate issuer: /CN=A91EE92F/serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft Manifest number: 0121 Signing time: Wed 25 Mar 2026 04:57:43 +0000 Manifest this update: Wed 25 Mar 2026 04:57:43 +0000 Manifest next update: Wed 01 Apr 2026 04:57:43 +0000 Files and hashes: 1: RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl (hash: avzNxGDBgTxAcQghwM4KWNZDSE1pzDrgKysaI3p6ptA=) 2: 2DFD4A1E740C11EFB881CE37C4F9AE02.roa (hash: IInDuG92MgBM/R/1sWNASwByUg/xqTFX5MGgVtF2hko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE92F, serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E Validity Not Before: Mar 25 04:57:43 2026 GMT Not After : Apr 1 04:57:43 2026 GMT Subject: CN=69c36b47-a767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9e:5b:f9:6e:10:a6:8f:fa:bd:d9:d3:41:9f: ab:48:b8:9d:10:57:c3:8f:7e:bb:d3:79:22:16:54: 7e:6b:39:e6:36:da:f1:2e:df:1f:91:6a:33:9f:8f: 89:2b:ca:60:17:62:0f:00:d8:54:8a:4c:c1:70:3a: 68:17:80:7c:76:83:e1:20:95:b1:26:d6:37:57:dd: b3:39:fa:35:80:d4:3f:ac:83:1f:63:15:88:26:eb: 20:02:fb:c0:45:53:d4:0d:f1:9d:4d:10:37:90:42: ed:14:a6:d8:81:c8:7a:92:8a:b7:2a:59:0d:6d:99: 96:23:12:80:0b:8e:69:a5:b7:a2:3d:4a:ec:5d:0b: a4:17:7b:84:4d:9b:50:c8:c4:3d:a5:3d:60:78:57: d7:89:37:77:b5:31:85:54:88:2c:0e:21:e2:55:0d: 12:06:2a:06:eb:c1:63:c2:82:0b:bc:1a:71:17:0b: 04:33:da:3b:04:2f:11:6b:99:a5:32:91:a1:27:37: 68:0c:87:80:b4:95:23:f1:f9:e8:72:c1:e1:82:88: c1:cf:93:a6:49:bd:34:b8:24:43:06:76:3c:c2:89: 27:f4:06:56:6f:75:01:d2:37:cc:bd:fa:bb:10:b9: 06:7c:0a:fa:d0:e7:8a:21:ae:1a:76:25:3e:a3:11: 8b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3C:F5:65:6F:BE:73:26:FC:9C:04:96:A9:B1:0D:C8:31:D9:43:12 X509v3 Authority Key Identifier: keyid:45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:7d:f4:d7:b8:87:c5:e5:be:47:ed:67:52:2d:12:52:44:bc: 4b:d7:bc:6c:87:dc:cb:f1:dd:5c:25:46:2f:9f:ec:df:1c:e0: 84:5b:41:b7:2b:b0:3c:2c:1b:a3:71:3f:6c:cc:43:46:3b:7a: a9:cc:f9:dd:0a:4c:6b:57:1f:2e:59:5c:7f:a2:37:c4:33:2b: ca:05:b5:2b:52:71:1d:9d:6b:a6:8c:8b:1f:b9:a3:8f:1d:86: 8f:05:7d:fc:69:c2:17:58:c4:f0:f1:e0:77:82:7e:97:0d:b3: e1:93:18:f7:f3:aa:9f:d0:cf:3b:fb:4b:ed:66:c8:12:a6:2a: 04:ed:f2:c0:ad:2b:6e:8d:0b:b4:cf:59:f4:ff:4e:0d:5d:30: a7:de:ec:e9:66:33:97:19:81:37:f2:39:fc:86:13:60:33:77: c4:b6:aa:3b:9c:67:f9:df:96:0f:63:06:24:58:36:48:06:14: ed:fb:95:04:38:10:e7:28:c9:4a:87:c5:cb:1d:e1:1d:a6:e9: 29:76:62:47:b9:d5:1b:47:c0:1d:44:eb:b2:1e:ae:5a:d4:d4: e6:2b:48:3e:c2:1c:50:cb:8b:e7:83:4e:a4:ba:40:8e:e4:e6: 3c:c0:cf:a1:53:0a:70:4e:c3:7b:c3:22:b5:29:5e:16:5b:9c: 04:d6:79:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU5MkYxMTAvBgNVBAUTKDQ1N0RCNzY2RTFCMEQ2QTREQ0M3RjlBRUNEMjg3RDRE QzNFNzBDOUUwHhcNMjYwMzI1MDQ1NzQzWhcNMjYwNDAxMDQ1NzQzWjAYMRYwFAYD VQQDEw02OWMzNmI0Ny1hNzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx55b+W4Qpo/6vdnTQZ+rSLidEFfDj36703kiFlR+aznmNtrxLt8fkWozn4+J K8pgF2IPANhUikzBcDpoF4B8doPhIJWxJtY3V92zOfo1gNQ/rIMfYxWIJusgAvvA RVPUDfGdTRA3kELtFKbYgch6koq3KlkNbZmWIxKAC45ppbeiPUrsXQukF3uETZtQ yMQ9pT1geFfXiTd3tTGFVIgsDiHiVQ0SBioG68FjwoILvBpxFwsEM9o7BC8Ra5ml MpGhJzdoDIeAtJUj8fnocsHhgojBz5OmSb00uCRDBnY8wokn9AZWb3UB0jfMvfq7 ELkGfAr60OeKIa4adiU+oxGLjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNU89WVv vnMm/JwElqmxDcgx2UMSMB8GA1UdIwQYMBaAFEV9t2bhsNak3Mf5rs0ofU3D5wye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTkyRi8xMjA4NUQxODc0 MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi9SWDIzWnVHdzFxVGN4X211elNoOVRjUG5E SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JYMjNadUd3MXFUY3hfbXV6U2g5VGNQbkRKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTkyRi8xMjA4NUQxODc0MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi9SWDIzWnVHdzFx VGN4X211elNoOVRjUG5ESjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhn3017iHxeW+R+1nUi0SUkS8S9e8bIfcy/HdXCVGL5/s3xzghFtBtyuwPCwb o3E/bMxDRjt6qcz53QpMa1cfLllcf6I3xDMrygW1K1JxHZ1rpoyLH7mjjx2GjwV9 /GnCF1jE8PHgd4J+lw2z4ZMY9/Oqn9DPO/tL7WbIEqYqBO3ywK0rbo0LtM9Z9P9O DV0wp97s6WYzlxmBN/I5/IYTYDN3xLaqO5xn+d+WD2MGJFg2SAYU7fuVBDgQ5yjJ SofFyx3hHabpKXZiR7nVG0fAHUTrsh6uWtTU5itIPsIcUMuL54NOpLpAjuTmPMDP oVMKcE7De8MitSleFlucBNZ5CQ== -----END CERTIFICATE-----Generated at Thu Mar 26 19:29:46 2026 by rpki-client