$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft File: h25oE78sGBHNEd6ZKBrNRL7A3nM.mft (raw, json) Hash identifier: 8Q7W613cvjQgiwf6g2pn7q6xBQBZfltUQzDBOfUfZQM= Subject key identifier: 1B:EC:F5:B7:B6:13:CD:03:6F:E0:A4:D8:4B:91:63:4C:B5:53:6F:1B Authority key identifier: 87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 Certificate issuer: /CN=A91F4FB0/serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft Manifest number: 0182 Signing time: Wed 25 Mar 2026 04:14:45 +0000 Manifest this update: Wed 25 Mar 2026 04:14:44 +0000 Manifest next update: Wed 01 Apr 2026 04:14:44 +0000 Files and hashes: 1: h25oE78sGBHNEd6ZKBrNRL7A3nM.crl (hash: Dz1WJl+POSP9L6sH2a9AeT2N3H7a5GIL4nRZ4zWRaE4=) 2: 0B5DBB081C0311EF8B8AB54DC4F9AE02.roa (hash: WQwwG0p66GxjEWNcaSKndoSIUakwMJP7WJLK7nMnWQI=) 3: 2EFBFF901C0611EF883D807CC4F9AE02.roa (hash: uc4RYqpjqZuGmSUCE9a97wEXjfj0RfCgzqbAD8ekhMc=) 4: EEC42F86232311EFAF815012C4F9AE02.roa (hash: o8afSdgZmX58QcVUZe75xNDu09+q2TPxGPAeyh/MOEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:14:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FB0, serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Validity Not Before: Mar 25 04:14:44 2026 GMT Not After : Apr 1 04:14:44 2026 GMT Subject: CN=69c36135-91a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b8:70:10:06:34:f8:88:5c:82:46:a8:58:73: a0:fc:af:20:85:74:91:bd:76:ce:c3:9a:8c:4b:e1: 62:70:d0:6e:d8:d8:3d:e1:f1:12:ef:68:20:a1:6f: 0e:02:a8:d4:8b:da:b9:50:53:d5:6c:7d:ee:a4:aa: b6:50:40:8c:06:d9:f2:04:a8:c3:4f:4d:d1:2e:cf: 50:c7:5b:60:24:04:b8:4c:e8:40:6f:ba:02:f2:f3: 56:4b:3e:8f:32:82:ab:6c:9b:ed:f6:53:e3:d5:01: 4b:0c:86:a0:93:ba:84:27:82:c2:7a:8d:df:60:66: 96:0c:96:5f:25:77:71:f8:51:75:04:46:34:b0:0f: e2:e2:55:6e:13:94:d6:78:9e:a0:2b:50:ff:26:07: 63:23:7c:dd:06:d0:2f:59:36:99:97:44:ca:fd:7a: aa:a0:0a:66:ff:18:4b:61:ca:40:7c:a4:cd:0a:a2: 03:e2:36:96:2b:21:ed:34:7d:8a:a2:ed:9c:01:86: c4:c2:06:5c:8d:41:21:91:34:0e:80:1b:9e:7f:74: 7c:d1:da:46:1f:aa:07:fa:77:ae:c3:ee:b6:6c:81: 21:2a:2f:fd:b7:79:f0:7d:bf:90:70:7c:25:ac:6b: dd:cc:14:70:5c:e1:d2:5a:5c:c2:0d:8c:b4:71:e0: a5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EC:F5:B7:B6:13:CD:03:6F:E0:A4:D8:4B:91:63:4C:B5:53:6F:1B X509v3 Authority Key Identifier: keyid:87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:c6:ce:8f:d5:17:a7:fc:24:3a:57:3a:7b:0b:98:c9:d7:4b: d1:e7:31:59:d4:59:3b:9b:78:24:78:d5:21:3b:6a:89:47:6a: dd:b4:d8:1d:c2:c2:2c:7a:26:42:93:35:5c:17:7f:17:58:4f: f3:d3:0d:67:19:1f:fd:a6:c8:83:31:8b:52:79:50:cb:29:04: f2:73:23:0e:b9:45:b8:87:dc:d4:36:b4:bd:b5:f1:cf:3b:05: 21:14:75:06:44:42:5f:f6:30:9e:df:d8:98:f7:ab:e5:9e:17: 39:49:4d:f4:24:cc:15:2f:b8:72:b4:cc:27:a0:fa:00:7f:73: 3a:05:b4:73:a2:f8:a7:56:18:ef:47:a1:29:91:26:af:e9:e0: 93:31:f5:a8:f5:3d:54:1c:53:e8:27:56:24:b2:5f:4e:06:22: b4:87:b4:dc:e7:e9:36:fe:56:d3:da:ab:eb:b6:8f:b5:78:5c: 98:36:11:f6:0c:18:a9:98:ff:be:ba:25:17:85:ad:b5:71:cf: a1:b3:36:0e:84:d4:c3:3f:2a:b7:e9:84:c5:50:08:3d:9e:20: 97:dc:b3:cf:fe:c4:ff:e5:55:cf:c0:36:ce:8b:5d:e7:bf:85: fa:25:a3:91:26:13:1a:45:2d:e0:97:00:d3:b7:ba:b6:f3:4d: 09:23:9d:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGQjAxMTAvBgNVBAUTKDg3NkU2ODEzQkYyQzE4MTFDRDExREU5OTI4MUFDRDQ0 QkVDMERFNzMwHhcNMjYwMzI1MDQxNDQ0WhcNMjYwNDAxMDQxNDQ0WjAYMRYwFAYD VQQDEw02OWMzNjEzNS05MWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrhwEAY0+IhcgkaoWHOg/K8ghXSRvXbOw5qMS+FicNBu2Ng94fES72ggoW8O AqjUi9q5UFPVbH3upKq2UECMBtnyBKjDT03RLs9Qx1tgJAS4TOhAb7oC8vNWSz6P MoKrbJvt9lPj1QFLDIagk7qEJ4LCeo3fYGaWDJZfJXdx+FF1BEY0sA/i4lVuE5TW eJ6gK1D/JgdjI3zdBtAvWTaZl0TK/XqqoApm/xhLYcpAfKTNCqID4jaWKyHtNH2K ou2cAYbEwgZcjUEhkTQOgBuef3R80dpGH6oH+neuw+62bIEhKi/9t3nwfb+QcHwl rGvdzBRwXOHSWlzCDYy0ceClMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBvs9be2 E80Db+Ck2EuRY0y1U28bMB8GA1UdIwQYMBaAFIduaBO/LBgRzRHemSgazUS+wN5z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZCMC8wNThDRUMxNDE5 QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dCSE5FZDZaS0JyTlJMN0Ez bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gyNW9FNzhzR0JITkVkNlpLQnJOUkw3QTNuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZCMC8wNThDRUMxNDE5QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dC SE5FZDZaS0JyTlJMN0Ezbk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdMbOj9UXp/wkOlc6ewuYyddL0ecxWdRZO5t4JHjVITtqiUdq3bTYHcLCLHom QpM1XBd/F1hP89MNZxkf/abIgzGLUnlQyykE8nMjDrlFuIfc1Da0vbXxzzsFIRR1 BkRCX/Ywnt/YmPer5Z4XOUlN9CTMFS+4crTMJ6D6AH9zOgW0c6L4p1YY70ehKZEm r+ngkzH1qPU9VBxT6CdWJLJfTgYitIe03OfpNv5W09qr67aPtXhcmDYR9gwYqZj/ vrolF4WttXHPobM2DoTUwz8qt+mExVAIPZ4gl9yzz/7E/+VVz8A2zotd57+F+iWj kSYTGkUt4JcA07e6tvNNCSOd2g== -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:47 2026 by rpki-client