$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft File: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft (raw, json) Hash identifier: UpNy0VFFL7lcqk0Ym/oh/5sTW0mItDPycpdNRuM/yp4= Subject key identifier: D1:B0:53:D2:0D:96:21:31:B0:90:76:34:42:85:4D:6D:84:EC:F5:FC Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9 Certificate issuer: /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9 Certificate serial: 0271 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft Manifest number: 025B Signing time: Fri 27 Mar 2026 01:48:25 +0000 Manifest this update: Fri 27 Mar 2026 01:48:25 +0000 Manifest next update: Fri 03 Apr 2026 01:48:25 +0000 Files and hashes: 1: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl (hash: PouCq0BQIVrITpPd3h3Bdce4wkxCfbbiskbkMpnfijM=) 2: 6549AD3EAC1011ED8592693FC4F9AE02.roa (hash: ZK4LGz9IH3YYiFptoI1UZ2KXhSWEWUkXq5JqqcwZNko=) 3: 665497A2AC1011ED8592693FC4F9AE02.roa (hash: qIJw0+FjxuTWluHNODsBUj7/4aX0PbanF96QaF1KBaA=) 4: 64B2DE72AC1011ED8592693FC4F9AE02.roa (hash: fbmqeqVKiqA0r2a2Diispb0Kfg/Ww32W2ewxBa+GSGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 01:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 625 (0x271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E9B, serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9 Validity Not Before: Mar 27 01:48:25 2026 GMT Not After : Apr 3 01:48:25 2026 GMT Subject: CN=69c5e1e9-0031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8a:f5:e2:17:43:11:b0:5d:b5:de:a7:33:94: bb:e6:1b:70:78:04:de:ad:f1:c3:60:fd:e0:55:86: b8:5a:20:96:f1:3c:02:c0:db:c9:d8:b1:55:a8:72: 34:d4:68:6e:3b:7b:7d:97:d3:ef:1f:27:82:d7:b8: d6:dd:90:60:ca:b0:54:56:39:9b:e3:8b:81:98:c9: a7:c1:96:3e:5d:04:97:76:b6:3c:80:00:4c:7a:86: c3:ef:a5:d6:d0:ca:71:76:43:fc:c6:e6:83:37:c3: 90:d0:e4:ec:41:c0:b9:7c:60:b5:cd:fd:32:04:c3: 40:2d:40:c0:2e:36:5d:aa:12:42:35:8c:3b:7d:12: f0:65:36:a6:97:79:a5:fd:18:42:56:54:97:90:0a: a4:42:8c:c3:08:21:16:0e:51:f0:e1:80:84:04:0b: 4e:93:5f:e8:49:ce:26:60:8e:fd:54:9c:8c:55:d4: de:3d:06:74:d9:bb:00:06:a4:a9:c1:4f:e4:48:4a: 87:4b:9a:d0:bf:37:19:2d:8d:be:64:7f:8d:d4:a9: 60:90:3f:00:24:8b:f4:4d:37:43:64:ac:02:45:19: e7:94:49:ec:b1:88:fa:98:f9:8e:3e:25:8a:84:6d: d2:64:5f:18:a4:e7:de:f1:f6:49:1c:3a:62:ca:e8: b6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B0:53:D2:0D:96:21:31:B0:90:76:34:42:85:4D:6D:84:EC:F5:FC X509v3 Authority Key Identifier: keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:82:8c:ca:78:55:98:e2:71:4f:bf:2c:93:68:40:d4:53:2a: f9:70:34:31:c0:48:99:b1:e7:1e:34:a8:cb:66:db:5e:4b:2f: 1b:42:75:60:4d:0c:b5:11:6c:d1:e9:c2:62:a8:f3:3d:f8:f8: 1e:89:4b:57:71:47:c1:ec:76:7d:a6:6d:9d:12:69:f9:b6:4a: 29:4e:86:bc:46:9a:7c:78:7a:54:d8:8f:1a:01:a7:23:4d:bd: 88:76:92:13:d6:34:44:12:4c:0d:d6:77:32:2f:25:c3:9e:f4: 6c:1c:e2:3d:01:78:22:fd:89:99:c5:bb:01:d7:5a:4c:34:5d: ad:2f:ca:4b:1f:22:a3:e4:23:bc:86:a2:7c:42:04:60:5b:d8: c1:ae:ba:76:f0:8c:3c:9f:0f:7b:b8:b0:da:25:56:76:94:bd: f3:59:a4:d7:28:d2:3d:32:73:8a:b2:9f:06:7b:10:27:c2:83: fe:ea:b2:be:c3:d3:15:df:69:0e:9c:73:36:5d:9c:b0:79:76: 50:88:e5:f3:6f:3b:49:c4:aa:7f:f6:40:cd:9d:2e:00:e9:32: 1f:78:c1:13:ea:84:5d:04:3c:04:ab:bd:eb:9c:12:85:30:d7: 38:a3:d6:b0:5c:be:e1:13:05:3d:7b:56:cc:0c:15:92:aa:4c: 82:57:8b:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFOUIxMTAvBgNVBAUTKDQ0Njc5MjQzOTI1ODE4MkE3QTFFNERBNEIyQzA2RkFE MkFBRUU0QjkwHhcNMjYwMzI3MDE0ODI1WhcNMjYwNDAzMDE0ODI1WjAYMRYwFAYD VQQDEw02OWM1ZTFlOS0wMDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4r14hdDEbBdtd6nM5S75htweATerfHDYP3gVYa4WiCW8TwCwNvJ2LFVqHI0 1GhuO3t9l9PvHyeC17jW3ZBgyrBUVjmb44uBmMmnwZY+XQSXdrY8gABMeobD76XW 0MpxdkP8xuaDN8OQ0OTsQcC5fGC1zf0yBMNALUDALjZdqhJCNYw7fRLwZTaml3ml /RhCVlSXkAqkQozDCCEWDlHw4YCEBAtOk1/oSc4mYI79VJyMVdTePQZ02bsABqSp wU/kSEqHS5rQvzcZLY2+ZH+N1KlgkD8AJIv0TTdDZKwCRRnnlEnssYj6mPmOPiWK hG3SZF8YpOfe8fZJHDpiyui2tQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNGwU9IN liExsJB2NEKFTW2E7PX8MB8GA1UdIwQYMBaAFERnkkOSWBgqeh5NpLLAb60qruS5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEU5Qi82OUVCNDJDMDk2 MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdDcDZIazJrc3NCdnJTcXU1 TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JHZVNRNUpZR0NwNkhrMmtzc0J2clNxdTVMay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEU5Qi82OUVCNDJDMDk2MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdD cDZIazJrc3NCdnJTcXU1TGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZYKMynhVmOJxT78sk2hA1FMq+XA0McBImbHnHjSoy2bbXksvG0J1YE0MtRFs 0enCYqjzPfj4HolLV3FHwex2faZtnRJp+bZKKU6GvEaafHh6VNiPGgGnI029iHaS E9Y0RBJMDdZ3Mi8lw570bBziPQF4Iv2JmcW7AddaTDRdrS/KSx8io+QjvIaifEIE YFvYwa66dvCMPJ8Pe7iw2iVWdpS981mk1yjSPTJzirKfBnsQJ8KD/uqyvsPTFd9p DpxzNl2csHl2UIjl8287ScSqf/ZAzZ0uAOkyH3jBE+qEXQQ8BKu965wShTDXOKPW sFy+4RMFPXtWzAwVkqpMgleLYA== -----END CERTIFICATE-----Generated at Sat Mar 28 10:35:27 2026 by rpki-client