$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json) Hash identifier: ds4s+/FcwTmbDuN8D0eO4marC8vUq5s9m1TUKTZjJMo= Subject key identifier: B2:4C:E1:D6:21:B1:6F:0E:4A:A2:6F:9E:22:60:DA:20:86:43:48:3A Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Certificate serial: 05FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft Manifest number: 05A2 Signing time: Tue 24 Mar 2026 23:01:35 +0000 Manifest this update: Tue 24 Mar 2026 23:01:35 +0000 Manifest next update: Tue 31 Mar 2026 23:01:35 +0000 Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: 8tyCY8RoBvo+rpikVgvNHEMpdXWVqU3a5ARSGnznj8c=) 2: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: p0QtasiXfN8/dE9L47jUX4sIVuhY7a3tPfYaZVlyQMU=) 3: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: 9T7eAkjvrOk7zwMcNgqYoD07VX3V7BOca4enSrOlqyo=) 4: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: AgzdJ8YeczC0jH58Lt1PJBql93I4ssj/fkdCRiuIJTQ=) 5: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: 1GbLqjYWrwO+B9i33IFxJ8aHv1NdPvotqSkvEUnCP88=) 6: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: EQOEyE+SLA+wjk3YozLTT2h5jMfekQ3SJQwsf3YqYKQ=) 7: 905F258E24F211EEA0863328C4F9AE02.roa (hash: 7eehH6/H/s1e1PgcHRQXB+ABMkIOWQTpfsozjtSna68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1534 (0x5fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Validity Not Before: Mar 24 23:01:35 2026 GMT Not After : Mar 31 23:01:35 2026 GMT Subject: CN=69c317cf-d9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b2:19:24:b5:81:ee:12:b2:8c:82:2a:00:72: ec:4b:98:09:0e:1d:ce:4a:aa:d0:cf:d9:e7:ac:39: 35:04:4d:cd:c3:d6:9a:08:8b:1e:42:07:d3:3a:99: b3:1f:66:7f:f1:76:aa:be:0c:c9:08:fd:66:cd:5e: b2:d8:52:d9:91:0f:94:6a:8e:d9:cb:3b:00:8d:c9: ee:38:90:43:af:fc:28:ea:d9:56:8e:59:19:80:a3: 35:63:a7:e1:e8:be:b0:6f:92:46:6c:9a:89:8b:7b: af:85:5b:c2:12:c7:87:bf:04:7b:4f:db:12:00:ff: 8d:c3:f7:76:b9:80:a5:e6:5c:12:9a:99:22:f0:3c: e2:08:5a:18:f3:fa:ee:9a:36:32:e3:3a:91:2d:b3: d9:62:3b:bd:6c:e9:f5:0e:e7:4b:c9:e4:79:b0:50: 73:c0:bb:ad:27:39:e2:f1:f4:0a:34:99:03:10:20: 59:25:ea:fa:b4:a6:ed:d3:98:aa:ca:a2:37:7f:db: ab:19:40:5e:28:1b:a7:f2:76:28:d1:bf:dc:c2:f8: 2e:87:41:a0:bf:68:f9:b3:ca:e2:6f:a7:39:57:cf: 6b:45:d5:b8:1a:35:0e:6d:0a:eb:bf:ff:ab:9b:32: 12:1f:9a:81:db:96:e3:8e:2e:f5:25:97:b3:c3:fe: ff:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4C:E1:D6:21:B1:6F:0E:4A:A2:6F:9E:22:60:DA:20:86:43:48:3A X509v3 Authority Key Identifier: keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:72:df:9c:70:5a:40:d1:9b:5b:41:57:66:f7:4d:ca:f1:b2: e6:ad:44:0a:c7:d0:1d:48:a3:63:91:04:3c:75:1a:67:6d:18: 49:cf:61:22:a9:af:a5:40:36:37:9d:cc:b7:81:67:dc:6d:1f: f6:09:93:76:53:1b:12:07:db:3d:f7:38:de:c9:b7:8f:a8:68: bb:fa:47:11:3c:b9:a4:b8:db:df:f2:8a:7b:f2:64:66:c7:5f: b2:e1:04:94:96:f2:7b:c3:e1:fa:2d:73:26:c8:59:b5:ab:47: 71:47:5a:9c:5a:db:72:a0:50:46:ab:55:00:e6:64:68:73:8f: 81:32:6b:a1:4e:8a:6a:38:2d:12:4f:be:40:32:c0:b9:f1:24: 45:78:72:20:fb:c6:23:43:9f:ac:ed:2e:7e:31:50:cf:de:64: d8:af:fd:07:5d:76:36:48:42:85:ab:88:ac:53:99:a1:ce:d9: 5f:63:64:da:8e:21:d3:19:7a:fe:0c:f7:f0:6b:ef:40:26:fc: 5a:41:b1:38:2c:c6:a2:21:d9:e5:6e:f1:d3:65:15:a8:4a:41: 29:57:32:95:ce:5a:d2:65:bb:db:7f:91:13:dc:37:54:4f:cc: df:ba:e8:e2:0f:26:fc:07:0d:52:7d:e4:5d:bd:0c:79:05:84: 9f:b1:92:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1 MUNDQUQ4NTcwHhcNMjYwMzI0MjMwMTM1WhcNMjYwMzMxMjMwMTM1WjAYMRYwFAYD VQQDEw02OWMzMTdjZi1kOWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbIZJLWB7hKyjIIqAHLsS5gJDh3OSqrQz9nnrDk1BE3Nw9aaCIseQgfTOpmz H2Z/8XaqvgzJCP1mzV6y2FLZkQ+Uao7ZyzsAjcnuOJBDr/wo6tlWjlkZgKM1Y6fh 6L6wb5JGbJqJi3uvhVvCEseHvwR7T9sSAP+Nw/d2uYCl5lwSmpki8DziCFoY8/ru mjYy4zqRLbPZYju9bOn1DudLyeR5sFBzwLutJzni8fQKNJkDECBZJer6tKbt05iq yqI3f9urGUBeKBun8nYo0b/cwvguh0Ggv2j5s8rib6c5V89rRdW4GjUObQrrv/+r mzISH5qB25bjji71JZezw/7/MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLJM4dYh sW8OSqJvniJg2iCGQ0g6MB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI2OC9DNzhFQkNFQTIxOTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdi dV9pemVXSkwtUk5SeksyRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjHLfnHBaQNGbW0FXZvdNyvGy5q1ECsfQHUijY5EEPHUaZ20YSc9hIqmvpUA2 N53Mt4Fn3G0f9gmTdlMbEgfbPfc43sm3j6hou/pHETy5pLjb3/KKe/JkZsdfsuEE lJbye8Ph+i1zJshZtatHcUdanFrbcqBQRqtVAOZkaHOPgTJroU6KajgtEk++QDLA ufEkRXhyIPvGI0OfrO0ufjFQz95k2K/9B112NkhChauIrFOZoc7ZX2Nk2o4h0xl6 /gz38GvvQCb8WkGxOCzGoiHZ5W7x02UVqEpBKVcylc5a0mW723+RE9w3VE/M37ro 4g8m/AcNUn3kXb0MeQWEn7GSQw== -----END CERTIFICATE-----Generated at Thu Mar 26 04:53:02 2026 by rpki-client