$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft File: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft (raw, json) Hash identifier: Rv+d4PVMzEiILvVsssfTSj70bQt1zk80uIo8Ey8vIME= Subject key identifier: 6B:1C:4B:77:D1:81:C9:07:E2:78:17:07:83:7E:1E:37:1E:BF:90:D0 Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 Certificate issuer: /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft Manifest number: 01BE Signing time: Wed 25 Mar 2026 03:21:19 +0000 Manifest this update: Wed 25 Mar 2026 03:21:19 +0000 Manifest next update: Wed 01 Apr 2026 03:21:19 +0000 Files and hashes: 1: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl (hash: g5LUUHawaxWxnof0md5WmchdVYeI1yHnopHufI/a5xI=) 2: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (hash: arCyI6WOk9LgFnQELoYxClkR3V434NgEayNtabuOGMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2, serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Validity Not Before: Mar 25 03:21:19 2026 GMT Not After : Apr 1 03:21:19 2026 GMT Subject: CN=69c354af-e43b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:85:0b:27:2b:dd:28:55:84:65:00:98:9c:6d: 6b:ce:a0:46:a1:44:25:92:13:29:3d:5e:aa:ad:50: 70:49:d3:e4:04:77:95:8d:e5:7b:08:7f:a2:a8:71: e1:0f:fc:36:25:dc:84:eb:1a:fb:69:48:a3:4f:bb: 82:ec:e8:be:db:09:c5:2f:e8:f5:72:2c:2b:f0:1e: df:b6:f2:8b:12:0a:18:27:8c:1d:d4:c9:25:5a:fd: 69:c1:34:bc:ac:9d:91:bf:d0:9a:77:58:0e:bb:47: 13:b9:d9:33:ad:4e:ce:64:79:be:79:8d:c3:e0:58: 8f:c4:76:de:3e:c2:20:a7:87:1e:7b:45:30:2a:55: d1:d4:e9:37:85:07:c0:ca:7f:c3:2a:7a:4b:2e:32: 63:e7:9d:c3:16:1b:8e:40:91:3e:9c:49:4b:fd:92: d6:88:a5:df:3a:98:5d:0b:27:aa:f0:84:dc:a9:15: c2:7b:ac:44:dc:fc:7a:e2:7c:57:8f:09:6f:ed:21: fa:3e:3d:ff:b8:fb:4a:62:f8:48:64:af:4b:f1:4e: b1:46:4a:a3:53:d6:41:79:28:e5:77:15:63:71:41: 4b:9d:f7:ee:4a:4f:28:9f:73:1e:0e:0a:be:bc:49: 85:9a:12:a4:3a:e9:fa:3b:ed:09:54:d1:4b:ce:5b: 1c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1C:4B:77:D1:81:C9:07:E2:78:17:07:83:7E:1E:37:1E:BF:90:D0 X509v3 Authority Key Identifier: keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:8a:4f:3b:ab:6c:dd:cd:ca:1e:66:d3:ae:d5:a8:41:b4:31: 1d:30:40:e7:55:51:2f:fc:02:4a:28:3d:ce:89:20:d6:c8:21: 5e:a1:2f:c5:67:65:88:f2:ff:ad:6f:90:ce:2d:30:af:ba:8d: e9:58:b5:25:38:27:e3:e3:cf:e3:dd:39:02:5e:5c:cc:0a:86: 6a:24:3d:24:dc:01:8f:61:fc:8d:99:30:ab:4e:1a:73:5a:7e: 14:c5:5a:0f:26:89:3b:12:de:07:27:23:a3:2d:09:4c:08:c2: 22:49:3f:78:0c:f4:63:06:54:91:88:d8:b9:8c:53:5d:9a:7c: cc:4c:d2:e3:e0:18:25:05:0c:6b:1c:20:c6:50:66:b9:8f:da: f8:1a:9a:4d:ec:5e:0b:cf:d4:b9:9b:03:fa:5a:59:e0:60:5a: 92:97:e0:6f:8a:73:c3:2e:3e:05:5b:69:97:f2:bd:77:0c:a4: d7:59:00:b6:dd:bd:1b:56:b1:c5:04:83:80:e1:98:95:17:3b: e4:e6:ca:55:ba:99:d8:08:a0:45:3d:8b:ef:59:2d:58:0d:d8: 66:8e:1e:83:42:96:b2:88:4a:5e:5b:1a:c3:0c:d0:98:4b:5c: 35:eb:33:7f:ed:76:76:8f:22:9b:f7:7b:b2:00:16:2a:e9:fa: 7e:f8:5b:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKEY1QjExNzA1NEFGNTA5QzJDMzMzNjlEQTk2MUY0NDZE RENBQjgzNDIwHhcNMjYwMzI1MDMyMTE5WhcNMjYwNDAxMDMyMTE5WjAYMRYwFAYD VQQDEw02OWMzNTRhZi1lNDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjIULJyvdKFWEZQCYnG1rzqBGoUQlkhMpPV6qrVBwSdPkBHeVjeV7CH+iqHHh D/w2JdyE6xr7aUijT7uC7Oi+2wnFL+j1ciwr8B7ftvKLEgoYJ4wd1MklWv1pwTS8 rJ2Rv9Cad1gOu0cTudkzrU7OZHm+eY3D4FiPxHbePsIgp4cee0UwKlXR1Ok3hQfA yn/DKnpLLjJj553DFhuOQJE+nElL/ZLWiKXfOphdCyeq8ITcqRXCe6xE3Px64nxX jwlv7SH6Pj3/uPtKYvhIZK9L8U6xRkqjU9ZBeSjldxVjcUFLnffuSk8on3MeDgq+ vEmFmhKkOun6O+0JVNFLzlscwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGscS3fR gckH4ngXB4N+Hjcev5DQMB8GA1UdIwQYMBaAFPWxFwVK9QnCwzNp2pYfRG3cq4NC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi80NjcwRUFBQzk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNjTERNMm5hbGg5RWJkeXJn MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzliRVhCVXIxQ2NMRE0ybmFsaDlFYmR5cmcwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTVBMi80NjcwRUFBQzk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNj TERNMm5hbGg5RWJkeXJnMEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvYpPO6ts3c3KHmbTrtWoQbQxHTBA51VRL/wCSig9zokg1sghXqEvxWdliPL/ rW+Qzi0wr7qN6Vi1JTgn4+PP4905Al5czAqGaiQ9JNwBj2H8jZkwq04ac1p+FMVa DyaJOxLeBycjoy0JTAjCIkk/eAz0YwZUkYjYuYxTXZp8zEzS4+AYJQUMaxwgxlBm uY/a+BqaTexeC8/UuZsD+lpZ4GBakpfgb4pzwy4+BVtpl/K9dwyk11kAtt29G1ax xQSDgOGYlRc75ObKVbqZ2AigRT2L71ktWA3YZo4eg0KWsohKXlsawwzQmEtcNesz f+12do8im/d7sgAWKun6fvhbGA== -----END CERTIFICATE-----Generated at Thu Mar 26 07:48:42 2026 by rpki-client