$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft File: MU9VrlJExM2xD3hN_xXQItOJaEg.mft (raw, json) Hash identifier: cf65rL5Uyo6sOloFdVZh7gSIpniJpXn9Ug6p9nU/7hU= Subject key identifier: 35:2B:E6:75:9C:A2:F7:9E:E7:B2:57:10:7B:94:E3:7B:57:A7:74:6B Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 Certificate issuer: /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Certificate serial: 1E66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft Manifest number: 1E38 Signing time: Tue 24 Mar 2026 16:00:37 +0000 Manifest this update: Tue 24 Mar 2026 16:00:37 +0000 Manifest next update: Tue 31 Mar 2026 16:00:37 +0000 Files and hashes: 1: MU9VrlJExM2xD3hN_xXQItOJaEg.crl (hash: 2mu8YRqCAwd0iXSL+n5HLpzUk5rblGGF1+hPq7hYR4w=) 2: 30C10672A27411E68C8EC670C4F9AE02.roa (hash: b5jJ0XYRIPMCiG6TS1QuIIn72XeOYM6z8qgDLi8Q27c=) 3: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (hash: 1/N+x4tq6/c9xUAJy159IIU+1McF9uoQiXksMGt8yqs=) 4: FC3B9966A80F11F083B2493AC4F9AE02.roa (hash: dCYCraCe4BAH3K0YJs5ny72N+4yB3GJ0WgL75Ya+JGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7782 (0x1e66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4288, serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Validity Not Before: Mar 24 16:00:37 2026 GMT Not After : Mar 31 16:00:37 2026 GMT Subject: CN=69c2b525-4461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a2:cd:68:5a:47:62:85:17:b4:93:91:13:08: 15:bd:3b:d3:68:88:6d:a4:1a:2b:a6:98:7d:67:83: c1:82:48:de:92:47:0c:26:c5:55:8c:25:cc:b2:36: 1b:d2:d9:64:49:25:85:f2:bf:26:e8:5d:6a:64:6b: f7:f0:ea:0c:e1:e4:fb:42:68:15:18:d0:ae:09:c6: 85:6c:e2:31:a8:7c:24:5c:91:31:ac:02:f5:76:76: 11:6c:c7:f5:c3:1e:7c:ce:c6:21:df:a4:0e:2d:f1: 15:da:85:19:d1:e8:d0:c8:cb:58:08:90:6a:5a:90: 91:eb:ce:dd:8b:06:10:24:99:e3:80:d6:ec:fa:73: 14:00:f8:61:e9:76:3a:cf:e6:88:bf:fa:f2:95:c1: 4c:2c:d0:a7:7d:46:a5:b2:33:b7:64:65:ec:81:b2: f5:2a:08:cb:f4:fd:74:55:d4:37:84:47:45:df:2d: 2d:43:e9:e0:34:1a:bf:13:ce:d4:ae:62:66:a5:07: 05:80:29:96:0a:c5:65:64:77:dd:44:b3:0b:00:c6: f7:e0:61:67:3d:fc:bd:09:0f:d3:2c:97:d1:ff:65: 52:f6:b1:a6:8f:da:5a:37:17:eb:10:2a:ad:43:57: 55:7a:3c:f7:8e:b4:76:90:0d:9a:6a:57:2f:cc:89: fe:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2B:E6:75:9C:A2:F7:9E:E7:B2:57:10:7B:94:E3:7B:57:A7:74:6B X509v3 Authority Key Identifier: keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:2d:3d:97:93:e0:17:e3:f0:1c:14:26:ad:65:09:e8:07:fa: 53:ba:35:00:63:8e:46:7a:18:ec:e9:69:86:a8:17:e5:e9:fe: 68:ae:17:df:01:51:ea:e2:af:2c:f3:9f:dd:08:c2:7d:a2:54: 96:59:1a:47:73:04:20:3a:cc:97:fc:04:e3:f8:5c:fa:ac:af: b5:d1:31:df:c2:c0:70:66:c0:b9:66:58:0a:c4:ef:31:6c:74: b4:37:ff:00:21:f7:f8:4f:ef:c5:81:4f:84:d1:0a:e6:22:a1: 0f:11:43:f4:e5:b9:9e:b0:5e:5c:3a:0d:7d:1e:30:28:75:ed: 62:2a:59:1c:7c:b0:0c:24:a0:19:f1:24:e7:db:fb:61:53:13: 0b:d7:c9:50:4c:ac:e6:57:7a:f5:0a:21:86:f1:97:bc:7a:65: 4c:84:71:e5:bb:9f:5f:75:21:ec:2a:8f:3c:40:c0:a4:c0:c4: 06:fc:f6:dc:09:f7:56:e9:7f:01:35:35:f1:ed:3c:ae:b9:c5: 96:2d:a6:c3:77:1b:50:71:c3:c3:3d:06:72:fb:4a:db:d8:c1: 1a:dc:4b:06:36:f6:05:8e:92:33:6b:dd:c5:2e:84:2d:7c:79: 07:37:59:2a:95:80:bb:4a:40:cd:fa:ae:82:40:c6:e9:b1:cb: 2b:fe:5f:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyODgxMTAvBgNVBAUTKDMxNEY1NUFFNTI0NEM0Q0RCMTBGNzg0REZGMTVEMDIy RDM4OTY4NDgwHhcNMjYwMzI0MTYwMDM3WhcNMjYwMzMxMTYwMDM3WjAYMRYwFAYD VQQDEw02OWMyYjUyNS00NDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsaLNaFpHYoUXtJOREwgVvTvTaIhtpBorpph9Z4PBgkjekkcMJsVVjCXMsjYb 0tlkSSWF8r8m6F1qZGv38OoM4eT7QmgVGNCuCcaFbOIxqHwkXJExrAL1dnYRbMf1 wx58zsYh36QOLfEV2oUZ0ejQyMtYCJBqWpCR687diwYQJJnjgNbs+nMUAPhh6XY6 z+aIv/rylcFMLNCnfUalsjO3ZGXsgbL1KgjL9P10VdQ3hEdF3y0tQ+ngNBq/E87U rmJmpQcFgCmWCsVlZHfdRLMLAMb34GFnPfy9CQ/TLJfR/2VS9rGmj9paNxfrECqt Q1dVejz3jrR2kA2aalcvzIn+3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDUr5nWc ovee57JXEHuU43tXp3RrMB8GA1UdIwQYMBaAFDFPVa5SRMTNsQ94Tf8V0CLTiWhI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4OC9BOTNBQTg4MEEy NzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhNMnhEM2hOX3hYUUl0T0ph RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01VOVZybEpFeE0yeEQzaE5feFhRSXRPSmFFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4OC9BOTNBQTg4MEEyNzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhN MnhEM2hOX3hYUUl0T0phRWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAC09l5PgF+PwHBQmrWUJ6Af6U7o1AGOORnoY7OlphqgX5en+aK4X3wFR6uKv LPOf3QjCfaJUllkaR3MEIDrMl/wE4/hc+qyvtdEx38LAcGbAuWZYCsTvMWx0tDf/ ACH3+E/vxYFPhNEK5iKhDxFD9OW5nrBeXDoNfR4wKHXtYipZHHywDCSgGfEk59v7 YVMTC9fJUEys5ld69QohhvGXvHplTIRx5bufX3Uh7CqPPEDApMDEBvz23An3Vul/ ATU18e08rrnFli2mw3cbUHHDwz0GcvtK29jBGtxLBjb2BY6SM2vdxS6ELXx5BzdZ KpWAu0pAzfqugkDG6bHLK/5foA== -----END CERTIFICATE-----Generated at Thu Mar 26 04:45:27 2026 by rpki-client