$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft File: 1h14JILiVI0iXRvIiINjk97jmBI.mft (raw, json) Hash identifier: 5pkjKyXl3yLx+9tX68iV+JUBGgpj8hqfp51ErM5qYAs= Subject key identifier: 27:10:B7:ED:27:A3:77:16:8D:69:66:5B:D8:C5:22:97:C2:E8:84:0B Authority key identifier: D6:1D:78:24:82:E2:54:8D:22:5D:1B:C8:88:83:63:93:DE:E3:98:12 Certificate issuer: /CN=A91F0A98/serialNumber=D61D782482E2548D225D1BC888836393DEE39812 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft Manifest number: 01ED Signing time: Wed 25 Mar 2026 02:38:31 +0000 Manifest this update: Wed 25 Mar 2026 02:38:31 +0000 Manifest next update: Wed 01 Apr 2026 02:38:31 +0000 Files and hashes: 1: 1h14JILiVI0iXRvIiINjk97jmBI.crl (hash: k6dR4+cv7SXoXzw760WibRUyKz0GClRrzGht9PBNQKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.crl rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:38:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0A98, serialNumber=D61D782482E2548D225D1BC888836393DEE39812 Validity Not Before: Mar 25 02:38:31 2026 GMT Not After : Apr 1 02:38:31 2026 GMT Subject: CN=69c34aa7-96a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:76:47:0f:7b:31:79:02:63:4e:ec:da:92:5f: 28:0f:c6:02:6d:5c:69:41:05:cb:86:81:92:02:dd: 62:cd:c6:de:06:e3:78:87:ed:af:ad:6d:4a:6f:3f: e4:cc:e0:1c:02:4b:f1:be:45:a7:b7:fa:ae:a9:8f: 5c:78:a5:94:e2:ef:f9:a1:b6:5a:84:1b:71:41:8e: a0:fc:0c:c2:87:e9:59:0a:2a:bb:f7:cd:d0:20:d8: 25:af:66:10:ca:23:e6:9a:54:63:a6:91:a3:67:0f: 47:fb:e3:38:6d:98:08:da:ed:f9:71:c1:58:c8:3c: 94:ce:61:24:2a:cf:bd:c2:86:53:fc:92:a7:6d:1f: 21:35:84:cf:4e:76:80:50:b9:f6:4c:b6:10:a1:ea: 8a:77:71:35:41:0c:66:9d:81:b1:2f:43:b2:c1:91: 93:4a:c2:91:70:c3:76:4d:5d:94:c5:4e:f8:a7:80: 55:36:41:99:80:0a:23:cb:6e:f1:72:71:7a:2c:ad: 1c:02:ad:1a:1b:a7:51:fb:53:4e:f0:63:85:df:14: 87:37:de:01:74:ff:2c:7b:c8:6d:bc:38:e3:29:64: 2f:1f:ff:88:50:d1:3a:6c:04:81:06:4e:c5:f5:5e: 4c:b4:86:84:c9:5e:91:ea:29:fc:12:05:18:f3:1c: 8e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:10:B7:ED:27:A3:77:16:8D:69:66:5B:D8:C5:22:97:C2:E8:84:0B X509v3 Authority Key Identifier: keyid:D6:1D:78:24:82:E2:54:8D:22:5D:1B:C8:88:83:63:93:DE:E3:98:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:25:30:d8:df:df:50:f2:5c:d5:ee:b6:ec:f9:8a:b0:cc:2c: 0f:be:e1:24:89:c3:ea:c9:e6:73:ad:25:97:69:15:5a:fc:f9: eb:7f:26:41:9b:82:8e:8b:b8:b5:08:5c:a7:41:33:a4:50:37: 69:d9:76:5e:20:04:5a:0b:5c:9f:42:ed:73:81:72:bb:d0:ed: f1:84:d1:40:2e:f3:8a:9e:af:1f:15:df:f4:b8:fc:d1:7b:38: 73:b3:ab:2e:6d:c6:46:66:51:78:69:46:aa:fe:36:b5:12:a0: 65:a5:58:79:cf:47:70:df:85:e3:2c:ca:ab:06:9b:27:d8:04: 51:97:b8:18:8a:4a:fb:db:fc:87:80:77:a3:15:8e:24:11:8a: c1:35:1a:f3:8e:07:9d:ea:a5:2b:6e:44:05:de:33:82:96:a5: eb:c2:43:8f:6c:61:82:c6:c9:7c:3b:21:7b:6c:c6:3f:8f:c6: fd:8d:4b:11:05:af:02:1b:6e:76:08:09:11:87:98:e3:41:0b: 7a:2c:f3:63:39:c5:1b:a0:f8:81:c9:2d:98:49:74:21:97:b8: 3d:4b:55:fa:6c:1c:d3:8f:8a:85:05:d6:ce:aa:26:1c:21:21: bd:65:9e:d2:03:a0:30:18:af:ed:bc:cf:c2:00:5e:85:81:55: ce:b0:6a:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBBOTgxMTAvBgNVBAUTKEQ2MUQ3ODI0ODJFMjU0OEQyMjVEMUJDODg4ODM2Mzkz REVFMzk4MTIwHhcNMjYwMzI1MDIzODMxWhcNMjYwNDAxMDIzODMxWjAYMRYwFAYD VQQDEw02OWMzNGFhNy05NmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5HZHD3sxeQJjTuzakl8oD8YCbVxpQQXLhoGSAt1izcbeBuN4h+2vrW1Kbz/k zOAcAkvxvkWnt/quqY9ceKWU4u/5obZahBtxQY6g/AzCh+lZCiq7983QINglr2YQ yiPmmlRjppGjZw9H++M4bZgI2u35ccFYyDyUzmEkKs+9woZT/JKnbR8hNYTPTnaA ULn2TLYQoeqKd3E1QQxmnYGxL0OywZGTSsKRcMN2TV2UxU74p4BVNkGZgAojy27x cnF6LK0cAq0aG6dR+1NO8GOF3xSHN94BdP8se8htvDjjKWQvH/+IUNE6bASBBk7F 9V5MtIaEyV6R6in8EgUY8xyOyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCcQt+0n o3cWjWlmW9jFIpfC6IQLMB8GA1UdIwQYMBaAFNYdeCSC4lSNIl0byIiDY5Pe45gS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEE5OC84RjQ4NjRFQTM1 RTAxMUVFODdDMkE2NzBDNEY5QUUwMi8xaDE0SklMaVZJMGlYUnZJaUlOams5N2pt QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFoMTRKSUxpVkkwaVhSdklpSU5qazk3am1CSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEE5OC84RjQ4NjRFQTM1RTAxMUVFODdDMkE2NzBDNEY5QUUwMi8xaDE0SklMaVZJ MGlYUnZJaUlOams5N2ptQkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIyUw2N/fUPJc1e627PmKsMwsD77hJInD6snmc60ll2kVWvz5638mQZuCjou4 tQhcp0EzpFA3adl2XiAEWgtcn0Ltc4Fyu9Dt8YTRQC7zip6vHxXf9Lj80Xs4c7Or Lm3GRmZReGlGqv42tRKgZaVYec9HcN+F4yzKqwabJ9gEUZe4GIpK+9v8h4B3oxWO JBGKwTUa844HneqlK25EBd4zgpal68JDj2xhgsbJfDshe2zGP4/G/Y1LEQWvAhtu dggJEYeY40ELeizzYznFG6D4gcktmEl0IZe4PUtV+mwc04+KhQXWzqomHCEhvWWe 0gOgMBiv7bzPwgBehYFVzrBq8w== -----END CERTIFICATE-----Generated at Thu Mar 26 17:08:52 2026 by rpki-client