$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft File: -AbfRcmATdTJ0eUsYuDig8D4DFM.mft (raw, json) Hash identifier: 1QVaRAMF1jri/t0dhJ6dFDppKcKWFpSpF0naSADUTas= Subject key identifier: FF:10:63:AC:AB:11:1A:FE:B7:02:65:45:FC:F2:D1:DE:DF:4F:A4:0A Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 Certificate issuer: /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Certificate serial: 0AC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft Manifest number: 0AC3 Signing time: Tue 24 Mar 2026 19:14:52 +0000 Manifest this update: Tue 24 Mar 2026 19:14:51 +0000 Manifest next update: Tue 31 Mar 2026 19:14:51 +0000 Files and hashes: 1: -AbfRcmATdTJ0eUsYuDig8D4DFM.crl (hash: EOVHe4kepB2YEbARELDWQrkoE9niq+MKNIhF517Vx1I=) 2: 2F05099CEC5611F094F5171C4A6F56BC.roa (hash: hYqPQa2lRgttCCrOWvp1IGQeF9Z/2IqUx+eay8bn3hQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:14:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2757 (0xac5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD292, serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Validity Not Before: Mar 24 19:14:51 2026 GMT Not After : Mar 31 19:14:51 2026 GMT Subject: CN=69c2e2ac-dfb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0b:6d:ca:11:e1:a3:6e:3e:94:b6:84:9e:ea: 1e:1f:5d:96:5d:55:41:6e:82:b4:65:5e:53:25:de: 7b:1c:d0:aa:5d:39:61:86:1c:59:5e:1e:49:c2:11: c8:01:13:63:cb:77:54:b8:7a:f1:34:89:84:24:2b: e2:90:6d:09:8c:0a:43:1a:f0:33:5a:22:8d:70:d9: 42:95:1e:ad:c7:1e:89:36:28:b2:f5:b0:ac:50:e9: 51:dc:1f:ea:ba:7e:35:a6:5b:5f:3d:df:af:90:55: 6d:4f:f5:c3:fd:91:0f:77:56:1e:1e:6d:c3:d2:1b: 63:2b:8d:78:c1:c1:37:06:91:0b:cb:38:d4:b0:8c: f8:a2:47:c1:7b:64:f3:63:8d:ed:7a:bf:36:d3:47: 9b:b4:1d:51:65:9f:83:78:38:15:22:f1:dc:55:70: 7d:66:11:5c:31:f9:c4:cc:f1:6f:01:69:bc:a0:a7: 10:c4:1b:dd:a5:d3:80:f9:49:b4:17:ed:79:23:d7: 74:4f:e4:c1:a4:bb:64:03:5d:27:8e:8e:27:c8:ff: 76:5f:94:77:30:d8:ad:42:ad:3a:b9:fb:af:9a:b3: 65:d4:c8:32:bf:62:37:a8:9a:51:88:4c:d4:9b:bb: 67:d5:03:f7:5a:79:f6:b8:31:14:9a:be:ce:65:0b: 3c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:10:63:AC:AB:11:1A:FE:B7:02:65:45:FC:F2:D1:DE:DF:4F:A4:0A X509v3 Authority Key Identifier: keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:5e:b3:f9:de:fd:d7:d9:f4:d8:e4:41:c9:c0:59:3e:a0:40: b1:a8:f6:72:3f:0d:92:8e:95:72:a6:79:10:7f:9b:bd:f3:6f: 54:2e:8f:a3:13:5e:e8:12:17:38:2a:02:24:4c:39:ec:06:a1: f8:8c:1b:9b:29:c8:35:45:a7:50:80:ad:4a:01:81:c3:59:f9: 82:06:ee:af:ee:f9:47:9b:24:3f:be:8d:4e:9e:5f:17:f0:b3: 5f:5c:d2:6a:26:8f:cd:3a:5e:35:2d:a5:04:95:da:87:61:01: 23:f7:4a:4e:b6:3a:e3:52:4a:69:c1:70:30:a2:eb:49:dc:a4: 32:9d:84:e8:dd:1c:a9:ca:a4:e2:fa:4b:28:c3:bb:e2:fe:9c: 23:b5:52:e2:14:62:f0:c1:fc:83:1b:14:ea:c6:8d:5e:27:2d: e2:7d:77:7f:e3:7c:b4:fc:b8:f1:dd:9a:ee:56:da:08:55:59: 73:e0:bd:56:30:f2:71:e8:8c:75:da:91:1d:39:75:62:96:5a: 7b:76:49:7e:fa:8b:da:d5:5f:c8:51:75:b0:86:e5:1e:af:19: a2:d9:ec:3c:e5:1c:72:2f:ba:2b:bf:9c:5e:51:5a:cf:c8:68: 43:a1:a6:07:63:50:af:20:0b:0f:52:44:df:b1:9b:63:42:f0: 8e:df:67:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQyOTIxMTAvBgNVBAUTKEY4MDZERjQ1Qzk4MDRERDRDOUQxRTUyQzYyRTBFMjgz QzBGODBDNTMwHhcNMjYwMzI0MTkxNDUxWhcNMjYwMzMxMTkxNDUxWjAYMRYwFAYD VQQDEw02OWMyZTJhYy1kZmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjAttyhHho24+lLaEnuoeH12WXVVBboK0ZV5TJd57HNCqXTlhhhxZXh5JwhHI ARNjy3dUuHrxNImEJCvikG0JjApDGvAzWiKNcNlClR6txx6JNiiy9bCsUOlR3B/q un41pltfPd+vkFVtT/XD/ZEPd1YeHm3D0htjK414wcE3BpELyzjUsIz4okfBe2Tz Y43ter8200ebtB1RZZ+DeDgVIvHcVXB9ZhFcMfnEzPFvAWm8oKcQxBvdpdOA+Um0 F+15I9d0T+TBpLtkA10njo4nyP92X5R3MNitQq06ufuvmrNl1Mgyv2I3qJpRiEzU m7tn1QP3Wnn2uDEUmr7OZQs8AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP8QY6yr ERr+twJlRfzy0d7fT6QKMB8GA1UdIwQYMBaAFPgG30XJgE3UydHlLGLg4oPA+AxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDI5Mi9EMTYxOUE2NDZD QzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRkVEowZVVzWXVEaWc4RDRE Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1BYmZSY21BVGRUSjBlVXNZdURpZzhENERGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDI5Mi9EMTYxOUE2NDZDQzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRk VEowZVVzWXVEaWc4RDRERk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGF6z+d7919n02ORBycBZPqBAsaj2cj8Nko6VcqZ5EH+bvfNvVC6PoxNe6BIX OCoCJEw57Aah+IwbmynINUWnUICtSgGBw1n5ggbur+75R5skP76NTp5fF/CzX1zS aiaPzTpeNS2lBJXah2EBI/dKTrY641JKacFwMKLrSdykMp2E6N0cqcqk4vpLKMO7 4v6cI7VS4hRi8MH8gxsU6saNXict4n13f+N8tPy48d2a7lbaCFVZc+C9VjDyceiM ddqRHTl1YpZae3ZJfvqL2tVfyFF1sIblHq8ZotnsPOUcci+6K7+cXlFaz8hoQ6Gm B2NQryALD1JE37GbY0Lwjt9nEw== -----END CERTIFICATE-----Generated at Thu Mar 26 11:51:03 2026 by rpki-client