$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft File: N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft (raw, json) Hash identifier: ONNAjzY2jyKd8SSZVCKCVhfyuasJfitGwf+9c6QW78Y= Subject key identifier: 1D:CC:24:C7:72:E7:F1:87:7A:FF:1B:E8:EC:24:B1:EF:6D:AF:6C:42 Authority key identifier: 37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB Certificate issuer: /CN=A91F3256/serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft Manifest number: 38 Signing time: Wed 25 Mar 2026 07:46:31 +0000 Manifest this update: Wed 25 Mar 2026 07:46:31 +0000 Manifest next update: Wed 01 Apr 2026 07:46:31 +0000 Files and hashes: 1: N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl (hash: sJevTdy7VeDo2ojEu07oHIDrWe9dKmjXZHPk18S2JYQ=) 2: BED8B2621D1B11F1B6F055AB103D8C67.roa (hash: EjJ1CDCwau1fKrzrYHxK/Qrh8GUA8jF4SY+Z2pjXM+w=) 3: 33EB881ED9A011F08EC1CA9167D3641D.roa (hash: BgD9Nozy6YrPBl3k/LaQh1iksmIlumLLGLfxZ8EsuWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3256, serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB Validity Not Before: Mar 25 07:46:31 2026 GMT Not After : Apr 1 07:46:31 2026 GMT Subject: CN=69c392d7-ed38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4a:d8:73:2e:c6:9a:47:fb:c0:52:49:59:44: 98:79:44:4e:2f:0e:ca:32:56:76:83:af:1f:8c:eb: 71:21:c7:37:ad:bb:ff:01:90:ad:a8:98:95:82:d3: 26:d5:85:b9:11:f6:58:3b:cc:13:65:19:5e:e3:c5: 4a:ea:8f:34:91:d8:54:c2:cd:03:3c:8d:30:93:0f: 47:37:99:97:3e:c2:c9:75:3f:96:65:5a:54:99:df: 9b:b0:ab:1b:aa:68:b5:ed:da:17:ae:3f:42:ca:c3: 95:eb:1c:55:43:a8:bf:3b:42:26:06:16:43:00:e4: e5:75:7b:79:e9:a3:a9:fe:da:59:57:06:48:e4:f9: b9:b8:e6:92:9a:1e:d4:56:a0:fe:8f:df:31:a4:fd: 9c:e7:07:84:3a:6a:90:9e:0e:03:81:93:47:f6:6f: 8d:f5:a7:b6:aa:99:a8:40:23:c8:80:da:1b:c9:ec: 4f:6b:6d:cd:33:00:e7:65:be:f1:1f:74:12:e7:7d: d0:08:b7:3a:cd:3a:27:92:03:70:37:d4:cf:c9:cc: 2f:07:ee:22:5d:4d:0e:4b:35:1b:a3:65:d8:30:ee: 2e:3f:1a:e5:33:63:94:98:03:16:ad:28:8f:3b:8c: 5d:c3:8c:15:65:a0:be:dd:59:fe:4f:6e:8c:92:5b: 40:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:CC:24:C7:72:E7:F1:87:7A:FF:1B:E8:EC:24:B1:EF:6D:AF:6C:42 X509v3 Authority Key Identifier: keyid:37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:59:d1:d3:8f:e1:fc:8b:c9:ea:72:f2:56:8a:a2:2d:71:5d: ae:b2:57:63:3a:c9:dc:3f:8a:32:73:94:07:eb:9f:63:97:c3: e2:bd:2f:92:1d:8d:4d:26:95:d8:40:dc:49:bb:76:65:b8:89: 76:d4:bd:4c:8e:6e:63:ec:4c:96:0c:ac:3f:0b:75:fc:da:a2: 58:88:0d:51:16:c0:b4:77:fb:01:36:2b:08:23:da:06:a6:f7: 47:c4:3f:b4:3d:22:36:d7:60:ce:52:75:bf:d3:18:13:8b:52: b7:fc:0f:15:ce:66:be:25:d0:0e:b7:e6:cf:7a:e7:ec:84:71: 45:f2:b5:55:6b:1a:87:8a:a9:99:3c:3c:7d:15:26:13:77:bb: fb:16:36:c6:51:f9:ea:4c:1e:d0:0e:1f:1f:27:4e:74:51:45: 6d:e1:ed:18:6d:5f:e0:e0:f5:71:95:80:ac:d1:27:69:72:65: b6:99:56:c2:12:72:57:fb:cb:6f:5c:35:40:dd:c5:64:c9:67: ad:ed:38:4e:d7:4b:e5:cc:dc:c8:1e:04:a2:c4:4a:b7:78:de: d5:af:09:ec:18:14:01:37:31:40:2a:77:c9:c4:07:34:5c:c5: 2d:ab:e1:4d:02:13:7f:12:46:2e:48:95:e1:07:7a:be:46:69: d0:f5:38:c9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzI1NjExMC8GA1UEBRMoMzdDRDlCQjA4NkVGMEFGNUEzMkJEODg1NDc0Njg2ODA2 RDkwOTZGQjAeFw0yNjAzMjUwNzQ2MzFaFw0yNjA0MDEwNzQ2MzFaMBgxFjAUBgNV BAMTDTY5YzM5MmQ3LWVkMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvSthzLsaaR/vAUklZRJh5RE4vDsoyVnaDrx+M63Ehxzetu/8BkK2omJWC0ybV hbkR9lg7zBNlGV7jxUrqjzSR2FTCzQM8jTCTD0c3mZc+wsl1P5ZlWlSZ35uwqxuq aLXt2heuP0LKw5XrHFVDqL87QiYGFkMA5OV1e3npo6n+2llXBkjk+bm45pKaHtRW oP6P3zGk/ZznB4Q6apCeDgOBk0f2b431p7aqmahAI8iA2hvJ7E9rbc0zAOdlvvEf dBLnfdAItzrNOieSA3A31M/JzC8H7iJdTQ5LNRujZdgw7i4/GuUzY5SYAxatKI87 jF3DjBVloL7dWf5PboySW0BBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHcwkx3Ln 8Yd6/xvo7CSx722vbEIwHwYDVR0jBBgwFoAUN82bsIbvCvWjK9iFR0aGgG2Qlvsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMjU2LzFCNTVENzM4RDk5 RjExRjA5N0VGQkVGOTY2RDM2NDFEL044MmJzSWJ2Q3ZXaks5aUZSMGFHZ0cyUWx2 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjgyYnNJYnZDdldqSzlpRlIwYUdnRzJRbHZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz MjU2LzFCNTVENzM4RDk5RjExRjA5N0VGQkVGOTY2RDM2NDFEL044MmJzSWJ2Q3ZX aks5aUZSMGFHZ0cyUWx2cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQChWdHTj+H8i8nqcvJWiqItcV2usldjOsncP4oyc5QH659jl8PivS+SHY1NJpXY QNxJu3ZluIl21L1Mjm5j7EyWDKw/C3X82qJYiA1RFsC0d/sBNisII9oGpvdHxD+0 PSI212DOUnW/0xgTi1K3/A8Vzma+JdAOt+bPeufshHFF8rVVaxqHiqmZPDx9FSYT d7v7FjbGUfnqTB7QDh8fJ050UUVt4e0YbV/g4PVxlYCs0SdpcmW2mVbCEnJX+8tv XDVA3cVkyWet7ThO10vlzNzIHgSixEq3eN7VrwnsGBQBNzFAKnfJxAc0XMUtq+FN AhN/EkYuSJXhB3q+RmnQ9TjJ -----END CERTIFICATE-----Generated at Thu Mar 26 00:54:16 2026 by rpki-client