$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft File: vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft (raw, json) Hash identifier: Gq8q+LdqWJFesetaaDgxs2EyjvoZx8CMqA52xJdIcHU= Subject key identifier: 11:9E:71:B2:78:8B:BA:68:CA:38:A1:1A:88:84:5F:C8:11:5F:98:E4 Authority key identifier: BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F Certificate issuer: /CN=A91F4957/serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft Manifest number: 0203 Signing time: Fri 27 Mar 2026 02:35:28 +0000 Manifest this update: Fri 27 Mar 2026 02:35:27 +0000 Manifest next update: Fri 03 Apr 2026 02:35:27 +0000 Files and hashes: 1: vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl (hash: HedHVEBjeMiq+Zv8xCicZRR6TonpSJ6maEy9ne+FOGs=) 2: F0237E941B1911EE9DFF2942C4F9AE02.roa (hash: gVdmkqx6NMYmCIMvMpCuqPA5iFz+9mSl4sfjYVVq1bo=) 3: 60B707FA1AEA11EE92BEA24CC4F9AE02.roa (hash: bix+YU13i+NYX1fy3wJhfyH3DvlL1GPid8lFNptHhAQ=) 4: 4231A1AA1B1711EEA5566A23C4F9AE02.roa (hash: f29LIF15y9c4pRVyaia3pQoiL6xkSmloi7OnCo+ktB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 02:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4957, serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Validity Not Before: Mar 27 02:35:27 2026 GMT Not After : Apr 3 02:35:27 2026 GMT Subject: CN=69c5ecf0-4f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7c:9b:c8:ee:53:62:93:a0:f2:30:ea:57:cf: 2e:ba:4c:3b:da:59:77:c7:f5:ca:de:4b:d2:e8:5a: 1e:02:0c:a8:50:58:2d:90:08:0a:cd:ee:0b:c8:dc: 2f:c5:91:87:33:8e:16:9e:f5:69:72:f5:10:b0:6e: 36:40:f8:f1:e1:8c:22:2e:b9:e1:33:d8:1b:dc:4f: bd:25:18:15:f8:be:4b:03:8b:e1:34:b2:00:47:2f: e7:fc:e7:8a:4c:b6:57:ef:fb:63:bc:a5:00:1e:3a: ff:3c:3b:e1:89:86:2f:98:e3:ed:2d:8f:22:6d:ce: 80:76:72:b6:5e:2f:1e:89:15:bc:ca:54:5f:1a:12: ec:3f:76:b8:75:76:fb:d9:0e:20:f3:87:b9:70:81: e3:9b:b8:e3:62:96:64:f1:dd:48:30:5a:4c:0b:d9: d7:26:c3:c6:b2:03:45:5e:7f:ae:fe:dc:87:91:e8: 2f:2c:11:5e:73:8d:a1:90:08:8e:a0:76:38:3c:76: fb:e7:3b:9f:ef:c8:e8:f6:8e:42:c4:b9:5f:6e:61: c4:31:df:fc:05:90:a8:e4:ee:49:a6:89:40:ed:13: 4b:a1:c5:6d:dc:4d:11:57:00:0b:09:87:35:09:4e: 09:1c:03:29:88:4f:b9:35:29:f0:17:2c:45:24:3e: 31:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9E:71:B2:78:8B:BA:68:CA:38:A1:1A:88:84:5F:C8:11:5F:98:E4 X509v3 Authority Key Identifier: keyid:BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:92:cf:d0:6b:1b:75:9c:b2:37:d5:93:ed:7f:c2:b1:1e:28: 01:30:15:34:b4:41:15:de:6a:a2:d7:0f:e9:85:08:7d:d8:0c: 1d:93:d7:6c:24:57:5e:83:dc:6b:ef:35:3c:72:5a:f9:14:59: 97:a7:0c:ff:1e:2d:79:16:51:ee:ea:95:e2:30:ec:e6:32:eb: 1b:97:41:66:50:7d:05:b7:d3:ff:9a:ab:97:05:c8:68:88:88: b3:bc:9d:5f:3e:c1:35:d9:f8:db:d8:0a:e8:75:54:69:ac:09: 7e:0a:02:e9:fe:74:27:52:0f:ce:a5:b5:e6:99:0a:28:df:41: b5:51:32:73:2e:76:a4:3a:ba:a7:7a:db:1d:66:2f:af:50:80: 12:9c:4a:6f:33:6e:5d:62:e7:e7:a4:36:36:49:ef:be:ae:d2: f0:63:a3:ea:a1:2e:bb:ea:42:6a:de:be:39:86:d9:dc:fe:c2: 0e:30:a6:78:2a:b9:c1:3c:c4:97:57:af:74:cd:3d:7d:aa:06: 3e:6b:7a:b8:b2:ce:aa:d0:a5:77:ca:e8:06:e4:42:5f:6e:ab: b4:02:ca:d8:65:a2:04:50:d5:89:ad:32:ec:12:fd:63:3c:fd: 8b:3e:e1:39:00:f2:9c:c1:37:3f:66:58:f8:ed:1b:0d:59:05: 34:5b:d3:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NTcxMTAvBgNVBAUTKEJGMkQxQjM5RDNDMkU5QUUwQUE4RkFCOTRCQUM1NDBD QzUyNjUyNEYwHhcNMjYwMzI3MDIzNTI3WhcNMjYwNDAzMDIzNTI3WjAYMRYwFAYD VQQDEw02OWM1ZWNmMC00ZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk3ybyO5TYpOg8jDqV88uukw72ll3x/XK3kvS6FoeAgyoUFgtkAgKze4LyNwv xZGHM44WnvVpcvUQsG42QPjx4YwiLrnhM9gb3E+9JRgV+L5LA4vhNLIARy/n/OeK TLZX7/tjvKUAHjr/PDvhiYYvmOPtLY8ibc6AdnK2Xi8eiRW8ylRfGhLsP3a4dXb7 2Q4g84e5cIHjm7jjYpZk8d1IMFpMC9nXJsPGsgNFXn+u/tyHkegvLBFec42hkAiO oHY4PHb75zuf78jo9o5CxLlfbmHEMd/8BZCo5O5JpolA7RNLocVt3E0RVwALCYc1 CU4JHAMpiE+5NSnwFyxFJD4xhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBGecbJ4 i7poyjihGoiEX8gRX5jkMB8GA1UdIwQYMBaAFL8tGznTwumuCqj6uUusVAzFJlJP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Ny81NzFCMjIxMDFB RTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZhNEtxUHE1UzZ4VURNVW1V azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z5MGJPZFBDNmE0S3FQcTVTNnhVRE1VbVVrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Ny81NzFCMjIxMDFBRTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZh NEtxUHE1UzZ4VURNVW1VazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbZLP0GsbdZyyN9WT7X/CsR4oATAVNLRBFd5qotcP6YUIfdgMHZPXbCRXXoPc a+81PHJa+RRZl6cM/x4teRZR7uqV4jDs5jLrG5dBZlB9BbfT/5qrlwXIaIiIs7yd Xz7BNdn429gK6HVUaawJfgoC6f50J1IPzqW15pkKKN9BtVEycy52pDq6p3rbHWYv r1CAEpxKbzNuXWLn56Q2Nknvvq7S8GOj6qEuu+pCat6+OYbZ3P7CDjCmeCq5wTzE l1evdM09faoGPmt6uLLOqtCld8roBuRCX26rtALK2GWiBFDVia0y7BL9Yzz9iz7h OQDynME3P2ZY+O0bDVkFNFvTdw== -----END CERTIFICATE-----Generated at Sat Mar 28 10:45:25 2026 by rpki-client