$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft File: x-37dX9ZS98jrdcSH12-PSWuAPw.mft (raw, json) Hash identifier: +9tB4YzCtPEkT64uboWqAEEQxyrXY2jV5EBT90vPNhs= Subject key identifier: A7:28:BE:90:22:29:D1:B1:A0:56:DC:85:00:FC:29:36:7B:C0:BE:9A Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Certificate serial: 03EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft Manifest number: 03C4 Signing time: Wed 25 Mar 2026 00:20:01 +0000 Manifest this update: Wed 25 Mar 2026 00:20:00 +0000 Manifest next update: Wed 01 Apr 2026 00:20:00 +0000 Files and hashes: 1: x-37dX9ZS98jrdcSH12-PSWuAPw.crl (hash: g63BBuF7t6uHn7KkppdT9G4+hzh6KHo2y7mG1ina4u4=) 2: 2872E3EEB78511EFACBD807DC4F9AE02.roa (hash: xzTQB5ahnINBSmifSeaZ+vcG1Uy8tZ8MCMCjvhC6ThE=) 3: C38C54A2650411EE89EC7112C4F9AE02.roa (hash: /iTMsXCUnyKaFWbmcrlhAvQFHMmknqRf7ToDYky66Rg=) 4: EAAF7884450411F09738105FC4F9AE02.roa (hash: E4W5oMfnGquPJA/5oOiZJesivTNv9jd8LinDZ2k9N+Y=) 5: 27DC7846B78511EFACBD807DC4F9AE02.roa (hash: oTDoE/TmlZFxLgjHVcBtawSli7Z2FLQIv5kQf55g3cA=) 6: EB1C709C450411F09738105FC4F9AE02.roa (hash: +AncE6sTnOtU1ZeR9+gjMKLIkBP6FUz08DE0mz8mrdA=) 7: EA2C5116450411F09738105FC4F9AE02.roa (hash: ZkfX4YPLvi9vkcBz9+NUu1NB2UO1R7auL+jxlTVunl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1003 (0x3eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Validity Not Before: Mar 25 00:20:00 2026 GMT Not After : Apr 1 00:20:00 2026 GMT Subject: CN=69c32a31-12fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4c:4d:d8:5c:04:4f:b7:c7:2e:1e:22:b0:42: 83:b3:24:98:79:e8:08:a8:83:2d:2e:d5:97:8d:85: 22:15:b2:4f:4d:82:3f:87:1e:09:8e:9a:69:59:8a: a5:71:25:06:0b:74:35:d8:e9:28:9b:4d:07:bc:57: 00:24:27:08:b9:16:0c:76:48:93:45:3c:86:21:6d: d2:e4:f4:3b:21:b9:a1:dd:87:76:cd:6c:33:b4:e4: 8f:de:f3:65:52:ad:98:aa:88:e7:0a:57:58:5b:de: c0:f1:9e:93:cc:13:59:2f:4a:41:ba:39:d5:05:5c: 82:2e:d3:15:ba:a5:b4:d7:68:2b:6b:68:e9:4d:f3: 90:a4:09:e3:fd:7a:ee:2d:7b:26:e2:71:c4:2a:c3: 1c:89:1f:19:59:ed:1a:48:ba:08:37:3c:21:ff:a0: c3:0d:f1:47:bc:67:bd:20:e1:9b:73:c9:3b:a4:7d: 63:9f:4f:d3:63:1f:14:fd:c9:e4:ed:9d:a8:8b:6f: 08:2a:a3:1e:e5:bd:c1:0c:b5:56:38:f9:75:90:e2: 1c:02:63:93:2c:67:85:0c:17:0b:50:e7:45:77:fc: 38:9b:8a:60:c2:e4:b0:a1:d4:c5:e0:62:96:b9:6f: 04:e7:b3:11:3a:0b:ca:8c:6e:4d:9b:0f:71:11:d9: 81:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:28:BE:90:22:29:D1:B1:A0:56:DC:85:00:FC:29:36:7B:C0:BE:9A X509v3 Authority Key Identifier: keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ca:64:d3:2c:af:61:02:0d:5e:ec:0b:99:14:9f:85:d5:b1: 28:ab:8a:26:69:e9:d4:f5:66:3f:bc:09:0e:57:f8:3d:62:e8: c1:9e:76:10:a4:5b:26:60:93:73:e4:04:73:79:23:e8:c4:4b: c3:59:8b:2c:cd:08:ed:09:3f:41:30:67:71:64:c7:b9:b3:4b: 9b:6a:f0:48:e8:69:ac:04:13:8d:8d:e7:00:b1:4b:02:bd:2f: 5e:cd:d4:9a:2c:a2:d0:e2:50:99:5f:e5:82:38:8b:f9:0c:62: 8c:cf:37:45:f4:4e:64:20:b5:31:c7:12:b9:b8:4f:a3:e4:9c: 36:61:2a:ab:63:a5:f8:a5:f3:69:0d:93:4f:68:ba:5f:19:02: 12:0c:3c:43:a3:74:cb:d0:54:49:35:f7:08:77:93:4a:a9:39: 65:08:53:c2:a9:e3:e0:d5:3b:e8:90:d9:f9:2b:5f:79:fb:58: cb:37:cf:75:c2:ac:63:d2:08:00:26:27:a0:eb:f6:fd:44:e0: e1:86:e1:cb:4e:b0:51:48:fb:8d:71:3a:a3:21:4c:ef:41:a4: 21:31:56:10:61:5f:0a:f7:0e:f5:d6:6b:9c:7c:65:aa:a1:68: 72:0a:49:70:76:aa:e5:e9:bc:49:62:02:0f:7f:ae:ef:e9:21: 1f:fb:27:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1NzkxMTAvBgNVBAUTKEM3RURGQjc1N0Y1OTRCREYyM0FERDcxMjFGNURCRTNE MjVBRTAwRkMwHhcNMjYwMzI1MDAyMDAwWhcNMjYwNDAxMDAyMDAwWjAYMRYwFAYD VQQDEw02OWMzMmEzMS0xMmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhkxN2FwET7fHLh4isEKDsySYeegIqIMtLtWXjYUiFbJPTYI/hx4JjpppWYql cSUGC3Q12Okom00HvFcAJCcIuRYMdkiTRTyGIW3S5PQ7Ibmh3Yd2zWwztOSP3vNl Uq2YqojnCldYW97A8Z6TzBNZL0pBujnVBVyCLtMVuqW012gra2jpTfOQpAnj/Xru LXsm4nHEKsMciR8ZWe0aSLoINzwh/6DDDfFHvGe9IOGbc8k7pH1jn0/TYx8U/cnk 7Z2oi28IKqMe5b3BDLVWOPl1kOIcAmOTLGeFDBcLUOdFd/w4m4pgwuSwodTF4GKW uW8E57MROgvKjG5Nmw9xEdmBAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKcovpAi KdGxoFbchQD8KTZ7wL6aMB8GA1UdIwQYMBaAFMft+3V/WUvfI63XEh9dvj0lrgD8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODU3OS8wMTc2MDNGQ0NF QjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5OGpyZGNTSDEyLVBTV3VB UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gtMzdkWDlaUzk4anJkY1NIMTItUFNXdUFQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODU3OS8wMTc2MDNGQ0NFQjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5 OGpyZGNTSDEyLVBTV3VBUHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKspk0yyvYQINXuwLmRSfhdWxKKuKJmnp1PVmP7wJDlf4PWLowZ52EKRbJmCT c+QEc3kj6MRLw1mLLM0I7Qk/QTBncWTHubNLm2rwSOhprAQTjY3nALFLAr0vXs3U miyi0OJQmV/lgjiL+QxijM83RfROZCC1MccSubhPo+ScNmEqq2Ol+KXzaQ2TT2i6 XxkCEgw8Q6N0y9BUSTX3CHeTSqk5ZQhTwqnj4NU76JDZ+StfeftYyzfPdcKsY9II ACYnoOv2/UTg4Ybhy06wUUj7jXE6oyFM70GkITFWEGFfCvcO9dZrnHxlqqFocgpJ cHaq5em8SWICD3+u7+khH/sncQ== -----END CERTIFICATE-----Generated at Thu Mar 26 13:50:33 2026 by rpki-client