$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft File: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft (raw, json) Hash identifier: q/MOq6GrExKBOyLgvJtZTUUcmFi5vIrMmdS+NUt9Oxo= Subject key identifier: 8C:35:38:2E:6C:0D:8A:5A:A2:E4:24:76:9E:4B:E7:D0:BE:7E:74:FF Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB Certificate issuer: /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft Manifest number: 9F Signing time: Wed 25 Mar 2026 06:35:27 +0000 Manifest this update: Wed 25 Mar 2026 06:35:26 +0000 Manifest next update: Wed 01 Apr 2026 06:35:26 +0000 Files and hashes: 1: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl (hash: WzsG9qvd4E+x6lsDF0Se369RqgFwtSE7WN57l/LeyKY=) 2: 7D7F13983B9D11F08338F965C4F9AE02.roa (hash: aa37TZjw6HNm2WFQiAgnFDeT1PF+5A+xhsToPCU7ZoQ=) 3: F88154843B9D11F091B39D67C4F9AE02.roa (hash: WttgIko4+9s/vHPmH0/bx3r2YOermo25w+xjC3iigHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Validity Not Before: Mar 25 06:35:26 2026 GMT Not After : Apr 1 06:35:26 2026 GMT Subject: CN=69c3822e-fa1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ac:5f:23:7d:b6:a7:6d:41:02:2d:84:e1:99: 9f:6f:e2:f3:d6:ae:38:40:d0:d2:b2:b3:c5:9f:59: d7:0b:3b:bc:64:87:e1:db:b0:ba:7c:57:71:30:83: c7:f3:63:ae:94:44:57:b5:28:b8:81:ef:a4:8f:1d: 0e:de:a4:07:41:7d:09:e8:76:21:11:3d:23:39:43: 05:68:1c:ee:8e:93:9a:3f:ad:bc:80:99:e0:b2:c0: e4:f2:f6:8a:2f:15:67:51:39:74:34:5a:db:61:e9: 92:39:4f:e5:9d:e0:ab:0e:1b:70:ee:50:2b:30:dc: a2:f2:00:75:76:24:5a:85:43:c4:0a:1c:d5:b0:d8: a4:28:8c:1e:c7:00:ca:ef:50:d7:6c:ad:0d:81:bd: 8f:00:b6:ed:c6:f4:23:1d:c0:ff:88:c9:f3:92:dc: 5a:77:27:52:c2:61:8e:64:8d:3f:b6:7d:5f:34:26: 90:fc:e5:3e:6b:99:3f:24:dd:be:07:e9:a6:86:5b: ab:39:97:2a:3b:ed:5e:0b:46:7a:b1:11:a0:b2:ce: 5b:cc:ec:82:23:65:e3:c3:d6:36:bf:4b:88:66:8c: 48:8e:d1:17:40:4b:21:b9:18:75:8a:de:52:7f:15: a2:8a:76:2f:67:58:51:51:41:34:a9:58:f9:dd:99: 9f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:35:38:2E:6C:0D:8A:5A:A2:E4:24:76:9E:4B:E7:D0:BE:7E:74:FF X509v3 Authority Key Identifier: keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:37:b9:f3:9e:bf:5a:68:d0:fd:2d:9e:8a:7a:bd:0e:ca:16: b2:33:78:77:16:1b:d7:18:a9:32:e5:18:f2:a7:55:68:aa:c2: d6:8c:19:2a:af:e0:68:1a:b2:85:da:71:96:88:fb:46:82:5e: 10:43:e7:4b:a1:c6:6b:15:7d:26:3b:91:fc:31:e3:a0:bd:e6: 8a:51:20:df:71:41:56:81:e9:d8:99:c5:8c:52:d3:1b:b3:86: 3b:1d:97:44:8f:7c:26:39:ff:e3:d4:49:14:5c:a6:73:c2:0a: b7:6a:e0:fd:96:c7:70:af:5e:0f:d7:8c:39:2b:9c:00:1b:10: 88:d1:be:5b:2a:b9:57:06:23:0a:ec:73:80:66:2b:44:3b:4b: f1:69:3a:7a:ae:da:e1:69:0c:c0:ee:79:72:55:eb:e9:99:cb: b8:a2:12:1e:e3:e3:51:4e:10:f0:1b:2a:36:59:96:39:d9:eb: fa:74:b6:a9:77:ef:f7:09:2f:06:ca:30:9e:e9:a5:c0:81:29: 4b:b7:a2:ec:c7:22:5e:65:bf:26:0d:84:11:86:ce:d5:b2:0c: b5:ab:c9:4c:d4:6e:c4:fe:a4:21:80:68:f6:40:34:d0:ad:58: 90:75:6b:87:4c:71:90:9c:2c:32:e1:2c:5c:64:f5:a9:4b:eb: 05:0a:97:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZDMTAxMTAvBgNVBAUTKEUyQjBERkE2OTBEMkM3RUFDNDM2MzY3NTZFNDM3QjdD MjYyNkY0QkIwHhcNMjYwMzI1MDYzNTI2WhcNMjYwNDAxMDYzNTI2WjAYMRYwFAYD VQQDEw02OWMzODIyZS1mYTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnqxfI322p21BAi2E4Zmfb+Lz1q44QNDSsrPFn1nXCzu8ZIfh27C6fFdxMIPH 82OulERXtSi4ge+kjx0O3qQHQX0J6HYhET0jOUMFaBzujpOaP628gJngssDk8vaK LxVnUTl0NFrbYemSOU/lneCrDhtw7lArMNyi8gB1diRahUPEChzVsNikKIwexwDK 71DXbK0Ngb2PALbtxvQjHcD/iMnzktxadydSwmGOZI0/tn1fNCaQ/OU+a5k/JN2+ B+mmhlurOZcqO+1eC0Z6sRGgss5bzOyCI2Xjw9Y2v0uIZoxIjtEXQEshuRh1it5S fxWiinYvZ1hRUUE0qVj53ZmftQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIw1OC5s DYpaouQkdp5L59C+fnT/MB8GA1UdIwQYMBaAFOKw36aQ0sfqxDY2dW5De3wmJvS7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkMxMC8wRTk0MDVCQTNC OUQxMUYwOTAxQ0IyNjJDNEY5QUUwMi80ckRmcHBEU3gtckVOaloxYmtON2ZDWW05 THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRyRGZwcERTeC1yRU5qWjFia043ZkNZbTlMcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkMxMC8wRTk0MDVCQTNCOUQxMUYwOTAxQ0IyNjJDNEY5QUUwMi80ckRmcHBEU3gt ckVOaloxYmtON2ZDWW05THMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAODe5856/WmjQ/S2einq9DsoWsjN4dxYb1xipMuUY8qdVaKrC1owZKq/gaBqy hdpxloj7RoJeEEPnS6HGaxV9JjuR/DHjoL3milEg33FBVoHp2JnFjFLTG7OGOx2X RI98Jjn/49RJFFymc8IKt2rg/ZbHcK9eD9eMOSucABsQiNG+Wyq5VwYjCuxzgGYr RDtL8Wk6eq7a4WkMwO55clXr6ZnLuKISHuPjUU4Q8BsqNlmWOdnr+nS2qXfv9wkv BsownumlwIEpS7ei7MciXmW/Jg2EEYbO1bIMtavJTNRuxP6kIYBo9kA00K1YkHVr h0xxkJwsMuEsXGT1qUvrBQqXCA== -----END CERTIFICATE-----Generated at Thu Mar 26 13:04:39 2026 by rpki-client