$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft File: l85Wj2RoJWRz-Es4s84D6jVJ64k.mft (raw, json) Hash identifier: Y8N3tYFgJSSATZgeFtZdWy5TZ4U1eIeNVv6PJzxm7D8= Subject key identifier: 53:D5:A6:32:87:E3:3B:55:92:C3:6B:29:EE:CD:DE:12:08:C7:CC:50 Authority key identifier: 97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 Certificate issuer: /CN=A91FCABC/serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft Manifest number: 020E Signing time: Wed 25 Mar 2026 02:19:14 +0000 Manifest this update: Wed 25 Mar 2026 02:19:14 +0000 Manifest next update: Wed 01 Apr 2026 02:19:14 +0000 Files and hashes: 1: l85Wj2RoJWRz-Es4s84D6jVJ64k.crl (hash: bCFYf1EZhDAlJATX6geyWMf9jB3mHZZu0M9yBVxkWxk=) 2: 35BBCFB005C111EEA3A8584CC4F9AE02.roa (hash: BQffJWUhC3MFwSjvVuhP9nq/ZEQ/mBQ35OQP2zYEaDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCABC, serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Validity Not Before: Mar 25 02:19:14 2026 GMT Not After : Apr 1 02:19:14 2026 GMT Subject: CN=69c34622-9799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:08:01:16:8e:0c:ed:70:98:c3:24:a0:e6:cc: 50:5f:50:4c:bf:89:80:7f:b7:8b:f3:28:eb:57:5d: 48:c5:af:f8:82:1f:6a:94:d8:19:d5:c2:fe:47:6e: 11:cd:e6:9f:ce:37:66:ac:a8:da:47:07:89:af:c0: 31:95:06:c5:92:a6:1b:ad:bb:1b:e2:1a:e6:06:2f: 3c:59:70:e5:48:58:74:23:06:c4:91:57:6e:34:85: 4a:06:3a:ba:6a:f5:f3:8f:ec:31:29:48:a3:8f:5c: db:11:58:28:50:59:fb:36:9f:75:6b:99:55:9c:9f: d5:5e:e7:83:2d:c8:ba:bc:43:03:5a:26:17:e6:2b: a3:5d:5d:30:9f:67:94:d5:5e:7f:9c:70:71:d1:c3: 1c:6d:33:17:4f:08:fa:be:9e:bb:a1:f6:74:ff:a7: 79:3c:ae:c4:0d:fe:a0:01:17:d1:8c:21:e9:6f:eb: ff:b1:70:e3:54:3e:9f:b9:6a:21:90:f6:d7:43:9d: 07:84:8c:42:2d:01:d5:a3:c8:7f:dd:cc:ad:60:38: 3f:eb:c6:0d:93:a3:57:ea:1c:20:60:c3:bf:f0:eb: 71:a7:be:1c:26:ba:92:47:8d:62:23:ca:2a:4b:32: 11:17:3f:80:26:bb:bf:4f:63:12:d0:ed:16:b5:b5: cc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D5:A6:32:87:E3:3B:55:92:C3:6B:29:EE:CD:DE:12:08:C7:CC:50 X509v3 Authority Key Identifier: keyid:97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:6e:9d:6e:73:50:0d:2a:a0:bc:48:2b:4e:98:1a:c2:61:4a: a9:61:64:5e:3b:a9:42:a6:10:37:37:29:14:3b:85:42:61:41: 00:31:48:31:8c:a1:e8:9d:54:77:f4:d1:29:a0:09:61:67:70: 4f:a6:df:fc:2d:98:35:56:2f:5d:b7:82:31:76:ca:08:73:e6: 1b:fb:e2:3f:f0:e7:5e:73:81:71:04:bd:6c:bb:63:c7:2f:ac: b0:19:9e:40:84:40:40:e8:3f:c3:d2:0e:b7:7f:84:e0:50:f9: 9d:24:b8:2d:f9:fd:3f:ae:3e:f7:7f:8d:64:b2:de:32:0f:7e: 4b:d3:95:4f:82:68:b9:39:8e:3b:9c:9b:20:ed:5e:d7:5b:2a: a0:f8:12:f4:ab:35:4d:a1:66:5d:59:21:9c:f7:8e:c7:33:32: fe:88:ca:10:40:e3:24:df:df:0e:20:c5:e6:76:c4:07:42:7b: 71:bd:89:fe:79:55:ca:3e:4a:cf:83:37:74:83:8c:35:35:30: 89:c5:1d:e3:27:aa:ce:73:a0:70:b0:1f:53:64:ae:16:aa:38: 44:13:84:a4:36:93:cf:fd:9b:8f:fa:51:84:f7:a4:33:80:64: a4:6f:bc:33:8d:f8:38:8d:69:80:ef:cd:36:de:91:20:48:b7: d0:01:e1:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBQkMxMTAvBgNVBAUTKDk3Q0U1NjhGNjQ2ODI1NjQ3M0Y4NEIzOEIzQ0UwM0VB MzU0OUVCODkwHhcNMjYwMzI1MDIxOTE0WhcNMjYwNDAxMDIxOTE0WjAYMRYwFAYD VQQDEw02OWMzNDYyMi05Nzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnwgBFo4M7XCYwySg5sxQX1BMv4mAf7eL8yjrV11Ixa/4gh9qlNgZ1cL+R24R zeafzjdmrKjaRweJr8AxlQbFkqYbrbsb4hrmBi88WXDlSFh0IwbEkVduNIVKBjq6 avXzj+wxKUijj1zbEVgoUFn7Np91a5lVnJ/VXueDLci6vEMDWiYX5iujXV0wn2eU 1V5/nHBx0cMcbTMXTwj6vp67ofZ0/6d5PK7EDf6gARfRjCHpb+v/sXDjVD6fuWoh kPbXQ50HhIxCLQHVo8h/3cytYDg/68YNk6NX6hwgYMO/8Otxp74cJrqSR41iI8oq SzIRFz+AJru/T2MS0O0WtbXMDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFPVpjKH 4ztVksNrKe7N3hIIx8xQMB8GA1UdIwQYMBaAFJfOVo9kaCVkc/hLOLPOA+o1SeuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0FCQy9DNTUxNjQxMjA1 QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pXUnotRXM0czg0RDZqVko2 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2w4NVdqMlJvSldSei1FczRzODRENmpWSjY0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0FCQy9DNTUxNjQxMjA1QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pX UnotRXM0czg0RDZqVko2NGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuG6dbnNQDSqgvEgrTpgawmFKqWFkXjupQqYQNzcpFDuFQmFBADFIMYyh6J1U d/TRKaAJYWdwT6bf/C2YNVYvXbeCMXbKCHPmG/viP/DnXnOBcQS9bLtjxy+ssBme QIRAQOg/w9IOt3+E4FD5nSS4Lfn9P64+93+NZLLeMg9+S9OVT4JouTmOO5ybIO1e 11sqoPgS9Ks1TaFmXVkhnPeOxzMy/ojKEEDjJN/fDiDF5nbEB0J7cb2J/nlVyj5K z4M3dIOMNTUwicUd4yeqznOgcLAfU2SuFqo4RBOEpDaTz/2bj/pRhPekM4BkpG+8 M434OI1pgO/NNt6RIEi30AHhqg== -----END CERTIFICATE-----Generated at Thu Mar 26 11:32:09 2026 by rpki-client