$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft File: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft (raw, json) Hash identifier: S0rR2Qjgv0wlsOeyiv8+9gHcCjGHu1xkCeNPaMCaf00= Subject key identifier: AD:5E:00:CB:8F:DF:1D:6C:6F:89:90:53:79:78:EF:B6:1C:0D:09:95 Authority key identifier: 44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47 Certificate issuer: /CN=A91F3C11/serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447 Certificate serial: 0A20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft Manifest number: 0A20 Signing time: Tue 24 Mar 2026 14:58:08 +0000 Manifest this update: Tue 24 Mar 2026 14:58:07 +0000 Manifest next update: Tue 31 Mar 2026 14:58:07 +0000 Files and hashes: 1: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl (hash: D5jTvbO5MtNQAqA96dhFAlYxtf90liCchEDliDPYw2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2592 (0xa20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3C11, serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447 Validity Not Before: Mar 24 14:58:07 2026 GMT Not After : Mar 31 14:58:07 2026 GMT Subject: CN=69c2a680-f96b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8d:13:0f:d0:c4:0b:81:91:21:04:83:9c:f7: 86:8b:83:3f:4e:84:5a:ac:8e:23:e7:6c:2d:6f:43: b6:d5:cb:53:f6:91:1f:a4:e5:29:ca:d8:36:7c:10: 02:94:69:85:8e:93:c2:34:69:ab:4d:b2:56:0b:81: 6f:8c:c4:2c:79:21:90:0c:12:ee:e6:3e:70:59:d1: 95:1b:b8:10:0d:78:f0:59:e8:f8:e1:7b:3b:f6:f3: 6a:3a:52:ab:1d:53:56:21:0f:73:dd:3b:50:a5:56: 09:23:b0:63:c4:b7:89:83:96:ec:c5:11:3e:b4:0d: 0c:ed:fe:7b:ae:7a:19:65:73:3a:dd:39:51:2a:10: a3:63:d9:91:17:06:a5:d1:1c:d6:38:c7:62:5e:6c: c3:90:74:57:63:53:f9:39:96:2c:d7:f0:aa:6f:8b: e1:a1:f7:af:fd:07:70:ef:0a:e1:e7:ae:b9:6f:5c: 3c:94:3b:1d:3b:c0:b3:7f:83:a0:18:00:ca:95:06: d0:e7:64:50:f7:9e:81:17:86:cf:84:88:1f:fb:dc: e4:88:f7:b1:fb:06:29:e5:f5:ed:44:97:a6:4e:9d: e4:9b:5b:40:e7:9f:35:9b:44:1d:b0:8e:ca:f8:a9: 57:76:4e:43:9f:55:c5:36:2c:49:2c:e7:82:8a:16: a4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5E:00:CB:8F:DF:1D:6C:6F:89:90:53:79:78:EF:B6:1C:0D:09:95 X509v3 Authority Key Identifier: keyid:44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:7d:f9:e6:df:09:4b:e0:5d:24:57:3e:b2:93:24:b6:e8:cc: 37:d4:19:4e:af:7b:96:87:94:68:25:ec:aa:f1:fc:9a:a6:dc: 0d:b4:3a:68:ef:8d:54:af:30:ea:1a:89:bb:41:38:90:b3:86: 2c:2b:01:c9:a7:28:8b:bc:6a:31:26:74:35:89:ae:12:33:3d: 2a:db:b6:98:87:28:8e:6e:e8:94:d9:99:dc:d1:98:3e:54:96: ec:bf:52:f0:6c:22:2a:1d:76:94:7e:18:96:06:eb:78:78:6a: fd:3e:2d:8f:fc:f2:99:3c:58:96:5d:a0:ec:b5:32:67:36:f4: 5d:25:f6:6b:e8:c9:79:08:dd:d1:c6:65:48:e4:fc:67:3d:9f: c6:bb:69:52:d0:83:56:87:8b:c6:5d:bc:20:2c:fa:81:6d:0d: a5:60:a8:2f:fc:3a:08:2f:e2:1c:91:1e:e0:70:77:fe:d3:73: 54:d6:86:d7:e9:a0:21:58:ab:37:97:57:4f:b1:70:fb:2f:2f: 4a:73:4e:d6:95:52:4a:ba:99:62:a5:d8:c8:a1:91:a7:8e:49: 9e:74:e5:c0:9f:5c:35:9e:ec:ab:78:64:e4:0f:04:c8:33:c3: d7:5b:b3:56:df:82:aa:17:da:33:1e:d4:cc:91:7c:db:90:e0: 0b:53:5e:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDMTExMTAvBgNVBAUTKDQ0RjhEMTUzQjc3QjA5MkIxMUVERjAwQTkzRTRCQjY0 MDkxQzI0NDcwHhcNMjYwMzI0MTQ1ODA3WhcNMjYwMzMxMTQ1ODA3WjAYMRYwFAYD VQQDEw02OWMyYTY4MC1mOTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1I0TD9DEC4GRIQSDnPeGi4M/ToRarI4j52wtb0O21ctT9pEfpOUpytg2fBAC lGmFjpPCNGmrTbJWC4FvjMQseSGQDBLu5j5wWdGVG7gQDXjwWej44Xs79vNqOlKr HVNWIQ9z3TtQpVYJI7BjxLeJg5bsxRE+tA0M7f57rnoZZXM63TlRKhCjY9mRFwal 0RzWOMdiXmzDkHRXY1P5OZYs1/Cqb4vhofev/Qdw7wrh5665b1w8lDsdO8Czf4Og GADKlQbQ52RQ956BF4bPhIgf+9zkiPex+wYp5fXtRJemTp3km1tA5581m0QdsI7K +KlXdk5Dn1XFNixJLOeCihakvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK1eAMuP 3x1sb4mQU3l477YcDQmVMB8GA1UdIwQYMBaAFET40VO3ewkrEe3wCpPku2QJHCRH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0MxMS81MTk4RkI5NjhG N0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NTc1I3ZkFLay1TN1pBa2NK RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JQalJVN2Q3Q1NzUjdmQUtrLVM3WkFrY0pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0MxMS81MTk4RkI5NjhGN0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NT c1I3ZkFLay1TN1pBa2NKRWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd3355t8JS+BdJFc+spMktujMN9QZTq97loeUaCXsqvH8mqbcDbQ6aO+NVK8w 6hqJu0E4kLOGLCsByacoi7xqMSZ0NYmuEjM9Ktu2mIcojm7olNmZ3NGYPlSW7L9S 8GwiKh12lH4YlgbreHhq/T4tj/zymTxYll2g7LUyZzb0XSX2a+jJeQjd0cZlSOT8 Zz2fxrtpUtCDVoeLxl28ICz6gW0NpWCoL/w6CC/iHJEe4HB3/tNzVNaG1+mgIVir N5dXT7Fw+y8vSnNO1pVSSrqZYqXYyKGRp45JnnTlwJ9cNZ7sq3hk5A8EyDPD11uz Vt+CqhfaMx7UzJF825DgC1NeAA== -----END CERTIFICATE-----Generated at Thu Mar 26 06:51:55 2026 by rpki-client