$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft File: azpu8rvlhOJwDYYifvSaOc24Hc4.mft (raw, json) Hash identifier: ceAqecHzzCtvte6PvmF1COpZa/s14SKSzRuiGHN+4zc= Subject key identifier: A7:57:50:18:F0:C9:7D:C8:F3:4A:8F:74:63:5E:58:79:99:27:77:31 Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE Certificate issuer: /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Certificate serial: 0367 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft Manifest number: 0353 Signing time: Wed 25 Mar 2026 00:37:06 +0000 Manifest this update: Wed 25 Mar 2026 00:37:05 +0000 Manifest next update: Wed 01 Apr 2026 00:37:05 +0000 Files and hashes: 1: azpu8rvlhOJwDYYifvSaOc24Hc4.crl (hash: oyOSm1CgcGOxB/eUF4bZyHuLgIEvAMZtFS664arhDX0=) 2: E7D03568F89011ECB5F98148C4F9AE02.roa (hash: /GgklwwSBikULn43rGtHG5wL0AHIDwWQqbAtpZ3bJj4=) 3: 937AFB607E3611EEAD05495AC4F9AE02.roa (hash: jw62AuKYcLU+o7CElN93+zYrOGkOkAOws+22gA0aEog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 871 (0x367) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA00A, serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Validity Not Before: Mar 25 00:37:05 2026 GMT Not After : Apr 1 00:37:05 2026 GMT Subject: CN=69c32e32-41fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:49:65:7a:3a:73:69:51:9a:ec:1b:c7:97:fc: 16:98:5a:9a:40:d7:7e:8f:a0:2b:3e:c6:b0:8d:07: 05:c8:b4:f3:12:41:64:ae:dc:e8:50:19:26:0f:e6: d8:ea:b3:35:13:10:18:68:dc:8f:ad:b2:31:39:f2: 11:52:1e:14:3d:8b:9c:49:72:6d:8d:60:b7:45:39: ad:c1:46:87:8d:2b:24:ee:f8:1a:47:04:73:9e:ed: 6f:95:fa:4c:53:3a:bc:35:7d:b4:c9:26:5c:c7:19: 38:34:1d:a9:8e:d9:52:e5:b4:b8:4a:1a:e9:d5:62: 32:a5:6d:a2:32:cb:8e:06:a8:c0:c0:c9:0f:49:a9: 21:f1:88:0f:e6:55:fb:87:55:47:54:13:44:55:a0: 0a:c9:2e:0a:74:87:7c:4a:d9:8f:28:87:a4:30:b5: 07:0e:3b:f7:4b:d3:2b:5d:cc:58:d5:4b:ae:36:1a: 0c:2b:4f:22:1c:64:b5:ed:64:f6:39:58:b4:fe:e4: f7:b5:3a:bd:24:1c:85:0f:05:62:86:d1:13:2d:37: 85:66:26:e9:46:27:9e:c1:a1:30:6f:85:f2:8c:e6: 23:ca:7f:b3:db:31:6c:0f:b6:d5:9c:44:a0:58:51: 60:1b:28:35:45:b7:3f:0a:70:cc:d0:3c:d0:24:ab: ff:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:57:50:18:F0:C9:7D:C8:F3:4A:8F:74:63:5E:58:79:99:27:77:31 X509v3 Authority Key Identifier: keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:21:6b:06:6f:70:f0:77:d5:cc:ad:d7:41:79:11:a1:86:8e: be:5c:53:ac:f7:46:aa:7e:c4:ff:85:0d:97:c0:a0:fd:0e:50: 51:fe:59:c4:b4:c2:e8:71:19:7f:71:75:e4:e0:2c:b8:ed:84: 99:1a:cd:e6:47:76:c8:d2:62:eb:b6:74:8e:54:69:a2:3e:ec: af:81:9f:b7:ba:c6:74:cf:34:41:6c:9c:5d:fe:b7:0f:c5:df: 58:c8:36:cd:82:c2:65:99:01:ef:c8:cf:0e:e6:26:05:aa:41: 93:5c:09:fa:29:b3:b3:e5:a8:ea:3b:ff:9b:00:01:3c:17:bf: e7:d2:7e:c4:31:8d:5b:af:40:7c:5c:a7:b5:56:ed:51:65:ff: b9:c9:cb:01:85:a4:75:1f:d6:55:d5:da:16:66:6d:7d:85:02: 05:33:11:ae:a7:a3:7e:12:32:53:b9:21:6c:bf:04:de:f3:2d: 66:5a:b2:ec:7c:f3:0c:23:bb:3f:2f:67:be:0c:3d:6c:a9:ff: 2f:0e:8d:cd:9a:52:06:72:c3:ef:61:a0:66:5e:c4:e6:a0:49: 0e:1a:82:fa:1d:1d:c1:59:9d:f3:2a:6c:5e:a7:52:1e:0d:a5: 20:e1:10:2c:ed:85:fe:32:5a:32:e3:c3:8b:a6:b4:be:90:83: 95:b1:33:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkEwMEExMTAvBgNVBAUTKDZCM0E2RUYyQkJFNTg0RTI3MDBEODYyMjdFRjQ5QTM5 Q0RCODFEQ0UwHhcNMjYwMzI1MDAzNzA1WhcNMjYwNDAxMDAzNzA1WjAYMRYwFAYD VQQDEw02OWMzMmUzMi00MWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjEllejpzaVGa7BvHl/wWmFqaQNd+j6ArPsawjQcFyLTzEkFkrtzoUBkmD+bY 6rM1ExAYaNyPrbIxOfIRUh4UPYucSXJtjWC3RTmtwUaHjSsk7vgaRwRznu1vlfpM Uzq8NX20ySZcxxk4NB2pjtlS5bS4Shrp1WIypW2iMsuOBqjAwMkPSakh8YgP5lX7 h1VHVBNEVaAKyS4KdId8StmPKIekMLUHDjv3S9MrXcxY1UuuNhoMK08iHGS17WT2 OVi0/uT3tTq9JByFDwVihtETLTeFZibpRieewaEwb4XyjOYjyn+z2zFsD7bVnESg WFFgGyg1Rbc/CnDM0DzQJKv/awIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKdXUBjw yX3I80qPdGNeWHmZJ3cxMB8GA1UdIwQYMBaAFGs6bvK75YTicA2GIn70mjnNuB3O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAwQS8zQUE5NEIzNkY4 OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhPSndEWVlpZnZTYU9jMjRI YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F6cHU4cnZsaE9Kd0RZWWlmdlNhT2MyNEhjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTAwQS8zQUE5NEIzNkY4OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhP SndEWVlpZnZTYU9jMjRIYzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAICFrBm9w8HfVzK3XQXkRoYaOvlxTrPdGqn7E/4UNl8Cg/Q5QUf5ZxLTC6HEZ f3F15OAsuO2EmRrN5kd2yNJi67Z0jlRpoj7sr4Gft7rGdM80QWycXf63D8XfWMg2 zYLCZZkB78jPDuYmBapBk1wJ+imzs+Wo6jv/mwABPBe/59J+xDGNW69AfFyntVbt UWX/ucnLAYWkdR/WVdXaFmZtfYUCBTMRrqejfhIyU7khbL8E3vMtZlqy7HzzDCO7 Py9nvgw9bKn/Lw6NzZpSBnLD72GgZl7E5qBJDhqC+h0dwVmd8ypsXqdSHg2lIOEQ LO2F/jJaMuPDi6a0vpCDlbEzBQ== -----END CERTIFICATE-----Generated at Thu Mar 26 12:44:16 2026 by rpki-client