$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft File: E72mTG8bWiwzOUc2NU6ejmvK4lY.mft (raw, json) Hash identifier: VknZXDB6eTnCH7OZbN6GP+QwTK06Qp8Q394H6G/sLjs= Subject key identifier: 25:26:E9:3D:AC:A0:72:51:7B:D8:4B:A7:BD:2D:54:45:FC:03:11:D2 Authority key identifier: 13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 Certificate issuer: /CN=A91F1C8C/serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Certificate serial: 08AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft Manifest number: 089E Signing time: Tue 24 Mar 2026 20:17:01 +0000 Manifest this update: Tue 24 Mar 2026 20:17:00 +0000 Manifest next update: Tue 31 Mar 2026 20:17:00 +0000 Files and hashes: 1: E72mTG8bWiwzOUc2NU6ejmvK4lY.crl (hash: 2MdNpsJ8AtCtOA00SyKD9wvb5BcIxEqVP1+y7EcyoWw=) 2: FA870AFA94E011EDB701A974C4F9AE02.roa (hash: cBxkgJsthKBviRSkPw5GD8Pfh6SKDkyp5oP6Tqej7Fc=) 3: F8C3E4EA94E011EDB701A974C4F9AE02.roa (hash: xUz8CM0rwzNbwUJqreXLQ7ha+Fr0ZDfUr6Mhc66h53Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2221 (0x8ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1C8C, serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Validity Not Before: Mar 24 20:17:00 2026 GMT Not After : Mar 31 20:17:00 2026 GMT Subject: CN=69c2f13d-90c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ca:e7:b2:3e:97:a6:98:c6:a6:ff:f7:95:03: 6e:78:7a:f7:b1:5e:46:4d:b4:85:60:60:ba:c3:27: 6f:0f:4e:65:d3:d0:5d:b6:a0:52:76:35:c2:c2:eb: ad:b8:b5:00:b5:c4:a0:69:73:c8:82:d0:0d:6f:ab: 06:4e:fd:72:1e:3a:f5:1c:ff:ea:af:a2:3a:e8:8c: 5d:c1:7c:a0:7f:bb:31:44:2b:3a:e8:00:0c:62:b4: 14:a1:79:dc:96:f4:11:62:69:77:69:62:b8:ce:8e: 60:1c:b0:dc:13:cb:26:bf:9a:c4:f3:1f:8e:42:9d: 35:e2:d0:1c:7b:b4:08:4d:db:86:e4:ac:3e:75:64: ab:bf:9a:28:a0:56:cc:16:90:fa:f7:76:e0:b4:18: 21:54:b1:f3:c8:02:dd:35:1e:07:d5:88:74:33:6d: 85:91:f8:9d:fd:3e:18:c9:58:d7:cc:24:a7:9f:46: fc:3b:f4:13:e7:e2:5e:0d:8c:d0:2c:7c:c3:5b:7e: 49:a4:8c:75:24:2b:db:49:24:e8:a2:fb:d4:6d:13: 8e:60:cf:90:f7:61:86:d6:f9:44:06:13:e3:d7:7d: ae:62:aa:71:c4:89:c4:27:36:b8:bf:ed:bd:03:c2: ac:0a:8e:d2:85:7c:f1:bb:81:8c:3a:25:c4:45:d2: 85:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:26:E9:3D:AC:A0:72:51:7B:D8:4B:A7:BD:2D:54:45:FC:03:11:D2 X509v3 Authority Key Identifier: keyid:13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:58:12:ac:04:16:57:81:bb:40:25:33:53:4d:32:88:29:39: d9:a2:4f:87:26:8d:5a:8c:1e:e3:eb:40:17:67:32:2e:4f:4d: 51:97:eb:f8:87:01:04:e3:1d:c6:40:61:a0:80:29:7a:4d:4f: 9b:c6:13:c1:e9:2b:30:bd:c6:e7:46:01:5c:b2:a6:ee:cb:b4: cb:ba:f1:54:1c:27:d4:7d:ec:f0:d7:db:b5:d2:82:51:ff:f3: e1:d6:91:4c:7c:37:04:c1:a9:0f:40:f3:13:8c:25:11:03:96: 52:a6:37:85:e7:8e:5c:e6:97:ee:e2:46:f1:99:a7:8d:56:44: 2a:ca:1e:a0:5f:84:3e:90:be:c1:4a:6e:70:fd:a4:3a:9f:f1: 83:cb:4b:a1:d3:c9:2a:dc:11:0d:d5:ce:6e:f1:1d:a6:12:54: 66:4c:57:e4:c8:b0:2f:c4:a5:6b:5d:c2:62:4b:4d:45:91:27: ec:7f:63:8f:7b:4a:61:0c:73:fc:ad:7f:96:3a:d4:3b:60:b2: 89:b1:f4:3b:aa:76:07:98:72:89:68:39:e7:01:8e:14:39:d2: 63:10:25:41:c3:76:a8:00:a1:9b:b6:c6:9c:5b:fd:c0:97:c6: 8a:a5:c2:9b:c6:d4:9c:7c:50:be:2a:3d:4d:65:c6:83:ed:90: 15:cc:7e:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFDOEMxMTAvBgNVBAUTKDEzQkRBNjRDNkYxQjVBMkMzMzM5NDczNjM1NEU5RThF NkJDQUUyNTYwHhcNMjYwMzI0MjAxNzAwWhcNMjYwMzMxMjAxNzAwWjAYMRYwFAYD VQQDEw02OWMyZjEzZC05MGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnMrnsj6XppjGpv/3lQNueHr3sV5GTbSFYGC6wydvD05l09BdtqBSdjXCwuut uLUAtcSgaXPIgtANb6sGTv1yHjr1HP/qr6I66IxdwXygf7sxRCs66AAMYrQUoXnc lvQRYml3aWK4zo5gHLDcE8smv5rE8x+OQp014tAce7QITduG5Kw+dWSrv5oooFbM FpD693bgtBghVLHzyALdNR4H1Yh0M22Fkfid/T4YyVjXzCSnn0b8O/QT5+JeDYzQ LHzDW35JpIx1JCvbSSToovvUbROOYM+Q92GG1vlEBhPj132uYqpxxInEJza4v+29 A8KsCo7ShXzxu4GMOiXERdKF+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCUm6T2s oHJRe9hLp70tVEX8AxHSMB8GA1UdIwQYMBaAFBO9pkxvG1osMzlHNjVOno5ryuJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUM4Qy8yM0U1RDVERURG OTkxMUVBOUY4NUQ5ODJDNEY5QUUwMi9FNzJtVEc4Yldpd3pPVWMyTlU2ZWptdks0 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3Mm1URzhiV2l3ek9VYzJOVTZlam12SzRsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUM4Qy8yM0U1RDVERURGOTkxMUVBOUY4NUQ5ODJDNEY5QUUwMi9FNzJtVEc4Yldp d3pPVWMyTlU2ZWptdks0bFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYFgSrAQWV4G7QCUzU00yiCk52aJPhyaNWowe4+tAF2cyLk9NUZfr+IcBBOMd xkBhoIApek1Pm8YTwekrML3G50YBXLKm7su0y7rxVBwn1H3s8NfbtdKCUf/z4daR THw3BMGpD0DzE4wlEQOWUqY3heeOXOaX7uJG8ZmnjVZEKsoeoF+EPpC+wUpucP2k Op/xg8tLodPJKtwRDdXObvEdphJUZkxX5MiwL8Sla13CYktNRZEn7H9jj3tKYQxz /K1/ljrUO2CyibH0O6p2B5hyiWg55wGOFDnSYxAlQcN2qAChm7bGnFv9wJfGiqXC m8bUnHxQvio9TWXGg+2QFcx+Vw== -----END CERTIFICATE-----Generated at Thu Mar 26 00:51:07 2026 by rpki-client