$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft File: mG5BZ9azgH9J98JgDWD5wmCacJY.mft (raw, json) Hash identifier: bHYbOSMzX734qPotdf0M82Ff9IzuMo8lPJgedabbU/w= Subject key identifier: 69:09:A4:D5:76:33:B3:7B:84:AD:F3:FB:3F:07:DD:AE:A7:E7:66:4D Authority key identifier: 98:6E:41:67:D6:B3:80:7F:49:F7:C2:60:0D:60:F9:C2:60:9A:70:96 Certificate issuer: /CN=A91F3806/serialNumber=986E4167D6B3807F49F7C2600D60F9C2609A7096 Certificate serial: 0CC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft Manifest number: 0CBA Signing time: Tue 24 Mar 2026 18:15:43 +0000 Manifest this update: Tue 24 Mar 2026 18:15:42 +0000 Manifest next update: Tue 31 Mar 2026 18:15:42 +0000 Files and hashes: 1: mG5BZ9azgH9J98JgDWD5wmCacJY.crl (hash: J44V6pZFzz8AzayP0ZjpcVlrzLo4AT1Fm5CXBqC2c9I=) 2: 4E54AA4C0B7E11EA9D8BA43CC4F9AE02.roa (hash: NdHvCz04ygMhEdy3te9H+OifuIBwvEnTvTRWLq7jQEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.crl rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3267 (0xcc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3806, serialNumber=986E4167D6B3807F49F7C2600D60F9C2609A7096 Validity Not Before: Mar 24 18:15:42 2026 GMT Not After : Mar 31 18:15:42 2026 GMT Subject: CN=69c2d4ce-bb4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bc:e4:49:87:c3:05:a8:80:74:29:a6:cd:1e: 0e:a5:bb:f3:f6:08:90:4e:0b:cb:ff:e7:94:ee:fc: 25:19:cb:df:5f:88:08:21:bd:2e:ca:da:e0:ec:96: eb:c2:d4:eb:0d:fc:16:2f:d3:e9:8c:98:c7:48:46: 1f:a9:75:53:ab:a6:e1:a3:cb:ed:68:cd:b6:62:6a: a8:b1:a1:83:36:db:87:1c:b1:81:4a:e0:3e:e1:9e: 3d:17:2f:31:30:09:6e:a6:e5:6b:46:fe:6b:1a:cc: 95:76:47:c1:42:81:01:c5:db:82:1c:af:19:cd:70: 40:91:71:03:40:c9:8f:8c:c6:76:da:1a:f4:c6:e0: c5:cd:2d:9c:79:19:9f:6a:f4:2b:11:49:fa:14:e6: 05:a9:87:cd:2e:b0:fa:4e:87:f5:0c:64:61:df:d8: 8e:9f:ca:2d:48:22:22:ea:c7:26:04:6d:f7:33:54: 4b:4d:10:99:9c:1d:c8:4e:25:6f:b9:ef:6a:73:63: 49:44:ca:26:7d:92:69:f4:d4:6f:9e:b0:7b:c3:cf: 99:82:49:76:6b:ba:7f:4f:72:1d:75:58:63:32:f4: 2f:f0:c1:12:d8:d5:ac:07:00:4a:f3:5d:e8:f4:85: da:0e:d2:0d:13:6a:b9:11:1f:3b:95:10:64:af:04: 2e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:09:A4:D5:76:33:B3:7B:84:AD:F3:FB:3F:07:DD:AE:A7:E7:66:4D X509v3 Authority Key Identifier: keyid:98:6E:41:67:D6:B3:80:7F:49:F7:C2:60:0D:60:F9:C2:60:9A:70:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:cc:93:8b:52:4f:70:41:ad:5c:ea:5c:68:66:1d:93:a2:e8: 33:e1:32:9d:2d:24:e4:c3:0f:b4:b0:7c:83:92:fd:61:14:ea: 8a:68:84:46:14:57:63:4e:42:b2:0c:5b:92:fb:66:a9:b8:89: 44:dd:67:d9:5b:a9:b5:7d:23:f2:be:a7:3d:11:bc:9f:7f:70: 55:1c:eb:4f:d9:95:97:dc:46:94:a3:ce:26:41:6e:ce:7a:c2: 65:24:49:f8:77:96:26:18:0d:61:8c:20:24:a6:b4:f7:b3:c6: 35:80:d3:4c:d6:f6:05:21:b5:8d:e1:40:8a:61:42:fc:55:73: 4b:68:45:94:42:e5:77:ce:f0:48:49:72:d4:6d:5f:40:fe:66: 2d:7d:81:1b:c6:e9:7d:b4:1e:13:76:09:77:fd:08:df:3c:44: 1b:41:3c:5b:4a:37:ea:cc:5c:a3:2c:20:3c:91:eb:5b:33:f5: df:a0:a4:20:be:ac:75:5f:82:1f:d1:7f:87:30:10:2c:51:32: 21:6b:a5:ef:55:ad:3a:03:dc:10:ef:33:e0:19:03:59:ff:2f: 67:de:5a:cd:e7:a0:10:d8:ce:e6:7c:89:9e:98:25:bc:8c:d6: 6d:09:b6:3b:77:30:f7:56:c8:0c:99:02:fd:15:4a:a9:64:5c: f3:52:0e:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4MDYxMTAvBgNVBAUTKDk4NkU0MTY3RDZCMzgwN0Y0OUY3QzI2MDBENjBGOUMy NjA5QTcwOTYwHhcNMjYwMzI0MTgxNTQyWhcNMjYwMzMxMTgxNTQyWjAYMRYwFAYD VQQDEw02OWMyZDRjZS1iYjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbzkSYfDBaiAdCmmzR4Opbvz9giQTgvL/+eU7vwlGcvfX4gIIb0uytrg7Jbr wtTrDfwWL9PpjJjHSEYfqXVTq6bho8vtaM22YmqosaGDNtuHHLGBSuA+4Z49Fy8x MAlupuVrRv5rGsyVdkfBQoEBxduCHK8ZzXBAkXEDQMmPjMZ22hr0xuDFzS2ceRmf avQrEUn6FOYFqYfNLrD6Tof1DGRh39iOn8otSCIi6scmBG33M1RLTRCZnB3ITiVv ue9qc2NJRMomfZJp9NRvnrB7w8+Zgkl2a7p/T3IddVhjMvQv8MES2NWsBwBK813o 9IXaDtINE2q5ER87lRBkrwQuNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGkJpNV2 M7N7hK3z+z8H3a6n52ZNMB8GA1UdIwQYMBaAFJhuQWfWs4B/SffCYA1g+cJgmnCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzgwNi9CNDcyRkUyQTBC N0MxMUVBODA4M0U5MzZDNEY5QUUwMi9tRzVCWjlhemdIOUo5OEpnRFdENXdtQ2Fj SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21HNUJaOWF6Z0g5Sjk4SmdEV0Q1d21DYWNKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzgwNi9CNDcyRkUyQTBCN0MxMUVBODA4M0U5MzZDNEY5QUUwMi9tRzVCWjlhemdI OUo5OEpnRFdENXdtQ2FjSlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASsyTi1JPcEGtXOpcaGYdk6LoM+EynS0k5MMPtLB8g5L9YRTqimiERhRXY05C sgxbkvtmqbiJRN1n2VuptX0j8r6nPRG8n39wVRzrT9mVl9xGlKPOJkFuznrCZSRJ +HeWJhgNYYwgJKa097PGNYDTTNb2BSG1jeFAimFC/FVzS2hFlELld87wSEly1G1f QP5mLX2BG8bpfbQeE3YJd/0I3zxEG0E8W0o36sxcoywgPJHrWzP136CkIL6sdV+C H9F/hzAQLFEyIWul71WtOgPcEO8z4BkDWf8vZ95azeegENjO5nyJnpglvIzWbQm2 O3cw91bIDJkC/RVKqWRc81IO7g== -----END CERTIFICATE-----Generated at Thu Mar 26 20:41:35 2026 by rpki-client