$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft File: rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft (raw, json) Hash identifier: N402bKtWujYr5zsOTpvXadz9IgtU0HoWGVEcZtCs8xo= Subject key identifier: F4:1F:AC:F0:D4:A7:4D:4E:51:45:B3:30:D9:AC:FA:22:B0:F7:DB:1F Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft Manifest number: 0185 Signing time: Wed 25 Mar 2026 04:07:04 +0000 Manifest this update: Wed 25 Mar 2026 04:07:03 +0000 Manifest next update: Wed 01 Apr 2026 04:07:03 +0000 Files and hashes: 1: rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl (hash: o78ZErCCUFWXSpLUL8iwr18yDycHFjBRC6TDuOgNIFM=) 2: 3285ADDAA9D911EF9F30DA47C4F9AE02.roa (hash: vWSMncIbSdA4KIGZrugD99DnKmAynQ5wQcd5AMkh+3k=) 3: 7B21EBD2B6FB11F0AFDD6239C4F9AE02.roa (hash: bKR+/9hF1Mbqq8jhYcz+VpME4jxBkcq5w4O21jzKfnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Validity Not Before: Mar 25 04:07:03 2026 GMT Not After : Apr 1 04:07:03 2026 GMT Subject: CN=69c35f67-880d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:17:9f:02:30:44:37:71:08:8c:c0:b8:33:9b: 4d:c7:40:1d:20:e9:d3:38:3a:b4:12:7e:a7:94:ba: 97:46:d0:0b:99:18:12:92:9f:c6:e2:0a:e8:e1:42: 16:c3:c1:9a:d6:e5:44:ae:c7:da:4f:50:e6:aa:5d: 41:0d:0f:35:88:c8:53:3c:e2:94:d3:b6:8e:65:a2: 4c:fd:ce:04:f2:14:af:81:64:6c:0d:77:b7:bf:9a: 2d:32:10:ac:71:f3:55:b2:ab:a5:5c:5e:07:f4:83: e2:55:04:a8:22:12:2f:58:9f:04:0a:58:6f:82:6d: 7e:6d:e6:55:1b:52:ac:64:2b:90:93:08:03:ba:dc: 35:22:94:cb:40:4f:e2:ee:44:d8:e4:db:26:bf:89: 83:91:bc:bb:ea:f1:fb:14:42:8d:4c:49:2d:8d:58: 33:59:b0:6c:7d:f5:b0:ee:9e:c9:b4:2a:9c:27:70: b5:25:13:10:ee:78:74:24:80:2a:d8:60:af:77:83: ba:c9:2d:e1:52:28:37:95:b4:44:aa:85:05:6e:f4: 65:c4:7a:23:45:f6:ab:90:8b:03:90:76:b4:14:1d: 24:40:df:85:4d:b0:9d:e8:82:88:c3:1e:7f:f7:d0: f3:5f:36:e9:76:51:41:bb:06:f6:46:26:f2:0d:56: d2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1F:AC:F0:D4:A7:4D:4E:51:45:B3:30:D9:AC:FA:22:B0:F7:DB:1F X509v3 Authority Key Identifier: keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:a9:7a:c7:3e:cb:9f:04:10:ec:11:e6:2e:5c:74:98:77:e5: 4f:2d:c7:7d:59:4e:3a:92:30:c6:c5:1a:96:76:5c:8d:05:b9: 04:7b:a5:37:8a:a7:f1:b5:c8:14:eb:2a:1e:65:55:fc:7f:4f: e5:aa:c4:95:3e:40:02:38:1e:07:c5:e6:14:ce:6b:e4:cf:54: ae:d6:d7:f4:37:2e:95:b2:af:11:f2:77:f0:24:b6:ae:f0:3f: 1a:76:bf:98:cc:2d:9e:dd:6f:42:db:0d:66:e6:6a:f7:92:d4: bd:ff:67:5d:16:e6:7a:c1:78:10:4f:4e:3d:9b:dd:29:75:09: ae:a2:59:cc:2c:af:f5:75:e6:51:bb:b5:41:e6:b0:b9:98:b6: af:28:0f:ac:0d:1e:33:3d:db:81:bc:0b:40:60:9d:22:77:51: 9f:12:8b:03:a6:80:10:6e:84:59:01:be:24:a0:ba:8e:3d:79: 84:eb:c3:16:27:93:97:69:84:de:7d:28:0c:71:01:ab:de:51: 32:75:2f:a9:b8:64:88:73:51:02:d1:a8:d8:83:67:40:a2:8e: a8:30:b9:9a:29:7c:bd:b7:33:c4:cf:34:00:d9:b5:54:5c:cb: 44:f2:cd:5c:71:7e:a3:59:dd:cb:ba:97:25:0a:14:46:d0:c3: ca:40:c3:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkzNTMxMTAvBgNVBAUTKEFDRDA0N0QwRDg4RTI2NTdFMTJDRjkxMzAxQzE2MEYx RDNDRDJGMzMwHhcNMjYwMzI1MDQwNzAzWhcNMjYwNDAxMDQwNzAzWjAYMRYwFAYD VQQDEw02OWMzNWY2Ny04ODBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxefAjBEN3EIjMC4M5tNx0AdIOnTODq0En6nlLqXRtALmRgSkp/G4gro4UIW w8Ga1uVErsfaT1Dmql1BDQ81iMhTPOKU07aOZaJM/c4E8hSvgWRsDXe3v5otMhCs cfNVsqulXF4H9IPiVQSoIhIvWJ8EClhvgm1+beZVG1KsZCuQkwgDutw1IpTLQE/i 7kTY5Nsmv4mDkby76vH7FEKNTEktjVgzWbBsffWw7p7JtCqcJ3C1JRMQ7nh0JIAq 2GCvd4O6yS3hUig3lbREqoUFbvRlxHojRfarkIsDkHa0FB0kQN+FTbCd6IKIwx5/ 99DzXzbpdlFBuwb2RibyDVbSUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPQfrPDU p01OUUWzMNms+iKw99sfMB8GA1UdIwQYMBaAFKzQR9DYjiZX4Sz5EwHBYPHTzS8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTM1My8wODc1RTY0ODA1 QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0psZmhMUGtUQWNGZzhkUE5M ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQkgwTmlPSmxmaExQa1RBY0ZnOGRQTkx6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTM1My8wODc1RTY0ODA1QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0ps ZmhMUGtUQWNGZzhkUE5Mek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlKl6xz7LnwQQ7BHmLlx0mHflTy3HfVlOOpIwxsUalnZcjQW5BHulN4qn8bXI FOsqHmVV/H9P5arElT5AAjgeB8XmFM5r5M9UrtbX9DculbKvEfJ38CS2rvA/Gna/ mMwtnt1vQtsNZuZq95LUvf9nXRbmesF4EE9OPZvdKXUJrqJZzCyv9XXmUbu1Qeaw uZi2rygPrA0eMz3bgbwLQGCdIndRnxKLA6aAEG6EWQG+JKC6jj15hOvDFieTl2mE 3n0oDHEBq95RMnUvqbhkiHNRAtGo2INnQKKOqDC5mil8vbczxM80ANm1VFzLRPLN XHF+o1ndy7qXJQoURtDDykDDeA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:38:22 2026 by rpki-client