$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft File: _g28w89QoeDrA9MSluOfuogMGQU.mft (raw, json) Hash identifier: qE4xffSzqU5/kANBRIf/VR0XQPD9CDtAlYLufMLS+IA= Subject key identifier: C1:19:0C:78:8B:6F:FE:81:BB:42:B6:CA:B5:0C:2D:05:06:9E:5F:EF Authority key identifier: FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 Certificate issuer: /CN=A91F7FEA/serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Certificate serial: 0B2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft Manifest number: 0B1E Signing time: Tue 24 Mar 2026 19:07:59 +0000 Manifest this update: Tue 24 Mar 2026 19:07:59 +0000 Manifest next update: Tue 31 Mar 2026 19:07:59 +0000 Files and hashes: 1: _g28w89QoeDrA9MSluOfuogMGQU.crl (hash: XeNFOuD5Wdz5i5goJku6ta+AAx41h+1jonzMz9H7cKo=) 2: AF5AC6B69E3F11EEA6B6CB0DC4F9AE02.roa (hash: 6y3yay/h++NSGBBxz/Y8FI7mavyuaqujeGQxUN1PwJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2863 (0xb2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7FEA, serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Validity Not Before: Mar 24 19:07:59 2026 GMT Not After : Mar 31 19:07:59 2026 GMT Subject: CN=69c2e10f-fc19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:35:6a:2e:9d:a5:e2:07:c1:3e:b9:9b:80:9e: bd:02:c3:72:9d:75:25:22:21:18:0f:ae:e6:e6:3a: 07:66:f2:36:94:48:ca:6b:89:06:ef:e4:74:94:e9: 51:77:88:44:10:2d:4d:fb:0b:a8:38:d1:99:71:d1: dd:b7:6d:20:7d:8e:0d:2b:10:37:b5:eb:f9:d3:88: 74:22:4f:52:e1:61:50:92:5d:dd:f6:02:14:a6:49: 2d:e2:e3:48:3a:60:5a:ed:07:76:35:88:da:35:b9: f8:01:ad:e2:8b:ef:7a:61:dc:cc:a9:f8:8f:12:e3: ad:e5:3f:af:c5:36:30:80:a9:c9:1b:52:e6:31:93: 96:6d:8a:f4:05:62:34:08:b8:4a:31:07:63:e3:7f: 1b:24:a6:b7:11:a4:d7:3e:a9:ef:af:81:30:d0:58: 9e:78:a4:77:84:43:3e:d4:bb:d9:f7:7c:94:68:91: cb:d0:d3:5d:22:0e:a0:48:80:87:95:dc:4a:94:98: 5e:79:2f:cc:6d:1f:e2:77:6e:fe:6b:15:90:b9:6d: 13:bd:34:6a:d7:5d:a6:cd:0a:95:9f:97:8f:01:46: 02:2b:16:a2:ad:8d:f5:d4:5f:a8:08:0e:8f:28:1e: 1d:5a:42:c9:e2:21:7e:a3:23:6c:b3:e5:0a:45:dd: 59:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:19:0C:78:8B:6F:FE:81:BB:42:B6:CA:B5:0C:2D:05:06:9E:5F:EF X509v3 Authority Key Identifier: keyid:FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:56:16:40:ba:9a:91:b5:46:da:9e:7f:06:48:ce:64:75:ed: c9:35:ce:d4:84:6b:76:7d:31:cc:75:16:6e:4f:8c:10:d4:d3: a6:f5:12:e3:92:16:4e:bb:8a:99:8a:2c:3f:80:15:bf:d0:99: 14:a3:a4:d7:3e:80:37:ba:ef:88:5f:54:43:83:3d:67:b3:0c: 38:87:a5:fb:c7:fc:d0:3b:4a:06:a0:a1:73:d2:52:27:b8:ef: 4d:07:30:b4:b8:5f:01:b3:2a:68:fb:43:75:ad:c0:07:15:f8: 47:4d:6b:c7:6e:d7:81:4c:02:95:5d:21:9c:04:7f:56:9f:eb: 88:72:86:d3:4a:01:b2:77:b0:6c:74:d4:8f:91:53:aa:b1:c4: 3b:1f:0e:16:7a:63:99:3e:fb:c9:3c:93:96:67:93:0e:1d:89: c3:15:43:e7:24:4b:c8:1a:60:e2:f0:63:76:3c:aa:cc:ca:77: b3:35:76:14:f2:51:0c:3c:15:a1:57:bb:b7:1d:55:c8:e5:62: 60:7a:70:01:a6:bc:7f:35:56:02:7e:20:e2:7c:50:74:9c:59: bb:e2:20:0e:d1:d0:be:2f:05:b2:7f:a6:4e:83:c9:c3:67:79: e7:97:0e:0a:e4:3f:b5:cf:2c:be:6e:cc:29:f2:cb:8b:01:cd: 7f:26:19:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdGRUExMTAvBgNVBAUTKEZFMERCQ0MzQ0Y1MEExRTBFQjAzRDMxMjk2RTM5RkJB ODgwQzE5MDUwHhcNMjYwMzI0MTkwNzU5WhcNMjYwMzMxMTkwNzU5WjAYMRYwFAYD VQQDEw02OWMyZTEwZi1mYzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnTVqLp2l4gfBPrmbgJ69AsNynXUlIiEYD67m5joHZvI2lEjKa4kG7+R0lOlR d4hEEC1N+wuoONGZcdHdt20gfY4NKxA3tev504h0Ik9S4WFQkl3d9gIUpkkt4uNI OmBa7Qd2NYjaNbn4Aa3ii+96YdzMqfiPEuOt5T+vxTYwgKnJG1LmMZOWbYr0BWI0 CLhKMQdj438bJKa3EaTXPqnvr4Ew0FieeKR3hEM+1LvZ93yUaJHL0NNdIg6gSICH ldxKlJheeS/MbR/id27+axWQuW0TvTRq112mzQqVn5ePAUYCKxairY311F+oCA6P KB4dWkLJ4iF+oyNss+UKRd1ZbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMEZDHiL b/6Bu0K2yrUMLQUGnl/vMB8GA1UdIwQYMBaAFP4NvMPPUKHg6wPTEpbjn7qIDBkF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0ZFQS8xRUUzQUVFQzYw NDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9lRHJBOU1TbHVPZnVvZ01H UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nMjh3ODlRb2VEckE5TVNsdU9mdW9nTUdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0ZFQS8xRUUzQUVFQzYwNDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9l RHJBOU1TbHVPZnVvZ01HUVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1FYWQLqakbVG2p5/BkjOZHXtyTXO1IRrdn0xzHUWbk+MENTTpvUS45IWTruK mYosP4AVv9CZFKOk1z6AN7rviF9UQ4M9Z7MMOIel+8f80DtKBqChc9JSJ7jvTQcw tLhfAbMqaPtDda3ABxX4R01rx27XgUwClV0hnAR/Vp/riHKG00oBsnewbHTUj5FT qrHEOx8OFnpjmT77yTyTlmeTDh2JwxVD5yRLyBpg4vBjdjyqzMp3szV2FPJRDDwV oVe7tx1VyOViYHpwAaa8fzVWAn4g4nxQdJxZu+IgDtHQvi8Fsn+mToPJw2d555cO CuQ/tc8svm7MKfLLiwHNfyYZkA== -----END CERTIFICATE-----Generated at Thu Mar 26 10:11:31 2026 by rpki-client