$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft File: CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json) Hash identifier: +s/xoSQH/2MpmZOLJMM7XqSrnmFWxOTkxnGLu5BIFmo= Subject key identifier: EC:E8:55:E3:B2:BC:E4:54:13:29:9B:20:AE:E3:CE:4D:21:01:C1:A1 Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 0283 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft Manifest number: 022C Signing time: Wed 25 Mar 2026 02:49:35 +0000 Manifest this update: Wed 25 Mar 2026 02:49:35 +0000 Manifest next update: Wed 01 Apr 2026 02:49:35 +0000 Files and hashes: 1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: CTXPwdZHD9k6a0snKYc/bcVksFzzXh4jLLAsnQkksd0=) 2: FBB6EA4E558B11F082FD5637C4F9AE02.roa (hash: 2FcVuaRaySm31VN4owwphmbBRzz94dcrhBnFrd+vqjo=) 3: F88F98EA55A211F0978C8774C4F9AE02.roa (hash: 1RLy8hwgWzmLWf1HsKCN7QGvSAK8fTD8LT1ZMd/TIQU=) 4: DA6883FC0F8611F0955A002EC4F9AE02.roa (hash: vftcQ5vmTURf7Bgrq+lkXEdW/3ZqSPsCNqTs8qbLsJs=) 5: 935296A6558B11F0BB2DB436C4F9AE02.roa (hash: oQTNR8UezgQA4tGlsLZvjgGgLBz+VcjntBI8Klr+/KA=) 6: 94BE094C7D0B11F0BC79D46DC4F9AE02.roa (hash: NEX3aRxV1Dqk6McmWh2C+0AJV5eYo9XBed68fWDSotg=) 7: D0F8C1B2558E11F0AA71D85AC4F9AE02.roa (hash: 4xwuTIhwlGL5yXXna5at0wbo22dMaJaAc9+Xfqmd1Y8=) 8: BACC6D0A4F7411F0A8124536C4F9AE02.roa (hash: /aJrSzZ6U1lc2HAZFype6jc3RKjfbA/DfLGY0OrC9MU=) 9: E07CB68455A211F0B55F5674C4F9AE02.roa (hash: HGRofWCBztru2v6NUmwkl0HXWbLS28Izp3PDhbuMMv0=) 10: 063FA6B25B2811F09B9A3A54C4F9AE02.roa (hash: COnh5OBflDrTiNerSPEVrAoEkIl/6x/Vx+xkw8ZayhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 643 (0x283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: Mar 25 02:49:35 2026 GMT Not After : Apr 1 02:49:35 2026 GMT Subject: CN=69c34d3f-de0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e7:d7:47:26:29:da:90:96:02:35:c2:48:ec: c1:8d:d6:cf:86:d2:ca:41:ff:46:fe:6d:9c:ac:dd: a7:5f:67:89:18:68:ef:5c:de:c7:65:b8:86:8a:a7: 41:7e:5d:31:8c:56:b9:ad:cc:ae:e7:fe:61:d7:47: 1a:49:01:33:d0:a7:ca:4a:0f:17:43:92:7c:33:31: 55:cc:9e:08:ab:74:a9:8c:2b:a8:5e:45:8a:9f:2d: e6:e7:c4:59:14:95:ec:7b:69:5d:07:0e:2c:a8:1c: 8e:10:4b:07:f8:99:a8:2b:33:46:01:32:74:1e:8b: b5:48:f1:15:ef:f0:99:dd:3a:3b:4b:c7:50:71:08: 4d:d3:94:18:bc:4b:72:4f:66:e3:02:16:0a:f7:6c: 34:1a:47:9d:93:d2:c3:ad:ab:02:c7:04:11:16:68: a8:70:12:2c:c3:db:67:ca:8c:4f:76:0a:51:6f:a6: 2d:b4:e3:01:76:2a:d1:a0:74:4f:37:de:5d:bc:d5: b2:77:61:a6:af:f0:e7:50:98:09:74:c4:b5:3c:49: 8b:f5:31:2e:fe:ca:20:65:c9:9c:a6:5f:d4:ec:ce: 86:a7:12:ee:41:9e:6c:b3:d4:ab:f5:02:db:0c:62: 0c:c4:a1:1b:85:c2:91:89:3c:03:f5:8d:58:a2:ac: 64:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E8:55:E3:B2:BC:E4:54:13:29:9B:20:AE:E3:CE:4D:21:01:C1:A1 X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:5a:a4:90:ec:d9:84:d9:6b:33:bb:a4:36:e5:ef:2d:71:fa: 20:15:1e:56:47:4d:55:c5:e7:17:71:73:9b:3e:0e:c8:e4:5d: 2f:46:c0:18:a3:dc:47:b5:5b:94:a1:b6:1c:67:ca:05:7b:5c: 67:bb:6f:8a:91:a4:d4:8e:63:f6:59:c7:db:5f:66:82:54:bd: ef:f3:10:64:57:1e:d6:8d:14:75:66:75:ce:37:bf:23:e9:1a: 95:23:d6:56:66:e1:6d:19:66:a1:7e:54:6e:08:f5:b6:fa:4e: ce:39:e1:34:2a:4a:7c:2a:02:9b:a8:7e:a2:d8:76:a6:0c:8b: b5:18:84:d3:84:a2:6e:a2:e7:ce:8d:fd:77:d0:f3:61:1b:75: f8:26:0f:34:0e:e7:77:7c:2a:72:5d:e5:85:db:d6:1d:35:cf: 08:d9:66:76:7a:a7:6b:57:08:c7:29:f0:1c:51:ad:83:53:6c: 90:56:28:d4:18:7d:3a:2d:2d:21:9a:70:89:39:eb:ff:57:0f: 7d:d8:59:36:11:d4:38:ac:0f:05:ee:af:ac:73:d8:f9:97:ea: 11:58:e2:2e:38:25:31:eb:9a:82:92:b6:6f:db:36:1d:44:7f: 84:f0:bd:cb:96:61:e6:e6:50:36:cb:cc:a6:7d:c6:ae:3b:16: 49:4d:1b:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjYwMzI1MDI0OTM1WhcNMjYwNDAxMDI0OTM1WjAYMRYwFAYD VQQDEw02OWMzNGQzZi1kZTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuefXRyYp2pCWAjXCSOzBjdbPhtLKQf9G/m2crN2nX2eJGGjvXN7HZbiGiqdB fl0xjFa5rcyu5/5h10caSQEz0KfKSg8XQ5J8MzFVzJ4Iq3SpjCuoXkWKny3m58RZ FJXse2ldBw4sqByOEEsH+JmoKzNGATJ0Hou1SPEV7/CZ3To7S8dQcQhN05QYvEty T2bjAhYK92w0Gkedk9LDrasCxwQRFmiocBIsw9tnyoxPdgpRb6YttOMBdirRoHRP N95dvNWyd2Gmr/DnUJgJdMS1PEmL9TEu/sogZcmcpl/U7M6GpxLuQZ5ss9Sr9QLb DGIMxKEbhcKRiTwD9Y1YoqxkmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOzoVeOy vORUEymbIK7jzk0hAcGhMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdBQS80MUYwRjk3RTUyQjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFw SVZkUXBJdkFNYTJwSnU5bTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeFqkkOzZhNlrM7ukNuXvLXH6IBUeVkdNVcXnF3Fzmz4OyORdL0bAGKPcR7Vb lKG2HGfKBXtcZ7tvipGk1I5j9lnH219mglS97/MQZFce1o0UdWZ1zje/I+kalSPW VmbhbRlmoX5Ubgj1tvpOzjnhNCpKfCoCm6h+oth2pgyLtRiE04SibqLnzo39d9Dz YRt1+CYPNA7nd3wqcl3lhdvWHTXPCNlmdnqna1cIxynwHFGtg1NskFYo1Bh9Oi0t IZpwiTnr/1cPfdhZNhHUOKwPBe6vrHPY+ZfqEVjiLjglMeuagpK2b9s2HUR/hPC9 y5Zh5uZQNsvMpn3GrjsWSU0b0Q== -----END CERTIFICATE-----Generated at Thu Mar 26 11:55:53 2026 by rpki-client