$ rpki-client -vvf rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft File: aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft (raw, json) Hash identifier: tm/neGKQE7aeaVJ7iQL59BR4S6hz1AfI2nEMBlCcGPE= Subject key identifier: 88:4E:E7:59:C9:E5:90:9B:D6:B3:6E:90:3D:A9:F1:49:7A:7A:24:C8 Authority key identifier: 68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56 Certificate issuer: /CN=A91F231C/serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft Manifest number: 4B Signing time: Wed 25 Mar 2026 07:32:52 +0000 Manifest this update: Wed 25 Mar 2026 07:32:52 +0000 Manifest next update: Wed 01 Apr 2026 07:32:52 +0000 Files and hashes: 1: aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl (hash: P4Z77cEGRcO8JEyFo6rkQ7Rxg0QU18wcwEvZIHVccBw=) 2: 7F29585EC43011F09039384AC4F9AE02.roa (hash: RzqxKvmQcOshBo/Ug1Mj842tyGjNfSYs0TkOvcUwxSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F231C, serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56 Validity Not Before: Mar 25 07:32:52 2026 GMT Not After : Apr 1 07:32:52 2026 GMT Subject: CN=69c38fa4-a185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2f:0d:c8:eb:ae:84:0b:23:a8:ef:ce:b9:e4: c0:f9:05:1a:d1:aa:81:62:8d:44:0a:bd:d4:82:4f: d2:4d:65:0d:c7:0b:6f:a9:be:fa:25:bd:00:5b:98: 97:b1:09:f2:0c:24:1e:47:79:6f:fa:9d:1b:17:b8: 06:fd:de:f8:07:fb:4f:44:f5:3d:14:c7:c4:6b:b8: 44:49:7c:5d:89:db:81:fd:28:61:bd:cd:10:21:d8: f2:f5:53:76:e8:dc:f5:3b:c4:66:82:a1:cb:80:d9: 6b:b5:38:e7:47:27:bf:83:3b:9a:c2:30:b5:05:a3: 94:df:86:73:73:25:f3:18:2a:65:0b:0f:81:d9:04: 5b:8e:5d:66:17:68:0d:1e:d1:01:37:ee:8e:cf:ba: 85:0a:96:71:37:fa:a6:8c:ce:8f:ae:72:f9:ce:ef: f8:d9:fb:ea:37:7b:d7:00:2b:b3:60:99:2b:73:48: b9:d5:7b:a0:23:45:73:8e:e6:3d:77:93:6a:4f:0f: 20:e3:6a:88:6e:a8:f1:b3:f1:ab:90:ea:35:97:c6: 0e:62:09:78:39:b2:51:d3:23:3f:0b:8d:fc:52:16: d7:4b:bb:b7:bc:da:f3:4e:ca:4e:be:d5:7e:00:4a: 9c:93:77:89:62:99:41:5b:af:26:db:46:23:1b:30: a1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4E:E7:59:C9:E5:90:9B:D6:B3:6E:90:3D:A9:F1:49:7A:7A:24:C8 X509v3 Authority Key Identifier: keyid:68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:1c:72:c8:41:4b:db:dc:e8:7b:df:f0:32:35:76:b4:6f:e5: 74:c4:fa:39:9e:8b:fc:75:eb:fb:5c:e8:b2:96:02:30:bd:a0: 44:00:57:6b:61:14:eb:4f:de:a9:3c:05:5d:19:07:61:3b:88: a4:19:19:d2:4d:d2:27:91:47:8a:d1:53:20:8b:20:b4:6d:47: dd:49:85:ec:54:bd:f3:59:10:22:11:da:8d:03:4d:27:e7:04: 50:cc:b8:31:ef:75:50:f9:57:1b:f1:62:01:5c:cd:c7:f4:29: ed:45:9b:56:8c:fe:ea:e8:8d:d3:e8:05:c8:ee:e7:94:80:b2: 19:46:9c:9d:01:51:dc:57:27:2f:06:49:5a:15:b1:f2:94:6c: 86:0f:9c:00:d7:c3:18:d4:3d:86:39:e6:1e:54:af:f6:34:a2: 76:ab:0e:8e:8b:4a:be:ff:7f:14:31:30:e5:be:79:65:7e:05: b4:48:8e:74:94:73:b4:9c:db:1e:82:e8:21:71:22:61:43:5e: 19:61:1c:9e:d9:dd:22:1d:72:3b:9b:68:78:a1:78:35:b6:b8: b9:02:97:a0:8d:ee:be:bb:ed:64:e8:35:0f:0d:f6:34:3a:5c: 25:e5:98:fb:cf:ea:1c:72:9e:d2:f8:b9:6d:60:63:82:ad:36: 62:a1:52:be -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MjMxQzExMC8GA1UEBRMoNjhEMTQ2NjQzMzk1ODQxNkREODFBN0Q0QUJGMkIyNDNF RTdEOEI1NjAeFw0yNjAzMjUwNzMyNTJaFw0yNjA0MDEwNzMyNTJaMBgxFjAUBgNV BAMTDTY5YzM4ZmE0LWExODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+Lw3I666ECyOo78655MD5BRrRqoFijUQKvdSCT9JNZQ3HC2+pvvolvQBbmJex CfIMJB5HeW/6nRsXuAb93vgH+09E9T0Ux8RruERJfF2J24H9KGG9zRAh2PL1U3bo 3PU7xGaCocuA2Wu1OOdHJ7+DO5rCMLUFo5TfhnNzJfMYKmULD4HZBFuOXWYXaA0e 0QE37o7PuoUKlnE3+qaMzo+ucvnO7/jZ++o3e9cAK7NgmStzSLnVe6AjRXOO5j13 k2pPDyDjaohuqPGz8auQ6jWXxg5iCXg5slHTIz8LjfxSFtdLu7e82vNOyk6+1X4A SpyTd4limUFbrybbRiMbMKFNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiE7nWcnl kJvWs26QPanxSXp6JMgwHwYDVR0jBBgwFoAUaNFGZDOVhBbdgafUq/KyQ+59i1Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyMzFDLzI4RTgzRTZBQzQz MDExRjA5NkNFOUM0OUM0RjlBRTAyL2FORkdaRE9WaEJiZGdhZlVxX0t5US01OWkx WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYU5GR1pET1ZoQmJkZ2FmVXFfS3lRLTU5aTFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy MzFDLzI4RTgzRTZBQzQzMDExRjA5NkNFOUM0OUM0RjlBRTAyL2FORkdaRE9WaEJi ZGdhZlVxX0t5US01OWkxWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBVHHLIQUvb3Oh73/AyNXa0b+V0xPo5nov8dev7XOiylgIwvaBEAFdrYRTrT96p PAVdGQdhO4ikGRnSTdInkUeK0VMgiyC0bUfdSYXsVL3zWRAiEdqNA00n5wRQzLgx 73VQ+Vcb8WIBXM3H9CntRZtWjP7q6I3T6AXI7ueUgLIZRpydAVHcVycvBklaFbHy lGyGD5wA18MY1D2GOeYeVK/2NKJ2qw6Oi0q+/38UMTDlvnllfgW0SI50lHO0nNse gughcSJhQ14ZYRye2d0iHXI7m2h4oXg1tri5Apegje6+u+1k6DUPDfY0Olwl5Zj7 z+occp7S+LltYGOCrTZioVK+ -----END CERTIFICATE-----Generated at Thu Mar 26 12:05:45 2026 by rpki-client