$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft File: rroZtvzB0hrnExdw57HaPhR17JA.mft (raw, json) Hash identifier: cgKUlyBy1GG5zf5XmRtOWcomfQBRXsoyzVCatn8Alvo= Subject key identifier: 4C:F1:0A:22:D4:28:10:D4:07:BE:BC:B4:BB:6B:9F:84:F7:70:25:B9 Authority key identifier: AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90 Certificate issuer: /CN=A91FE7DB/serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90 Certificate serial: 0BC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft Manifest number: 0BBA Signing time: Tue 24 Mar 2026 18:47:12 +0000 Manifest this update: Tue 24 Mar 2026 18:47:12 +0000 Manifest next update: Tue 31 Mar 2026 18:47:12 +0000 Files and hashes: 1: rroZtvzB0hrnExdw57HaPhR17JA.crl (hash: E6jHwphY/BV4F1TfUNnw/Bjn7f4pG3L9WpP5XfD8DAo=) 2: 078AE946642A11EAA019224CC4F9AE02.roa (hash: 31whv5fvX3GHhn8oNBBfKndDfzOhLiKe+vMmbXanShU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:47:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3012 (0xbc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE7DB, serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90 Validity Not Before: Mar 24 18:47:12 2026 GMT Not After : Mar 31 18:47:12 2026 GMT Subject: CN=69c2dc30-77e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:08:77:61:46:d9:6d:ad:fd:07:e2:92:34:b7: 3c:50:df:c6:f3:e9:20:1c:41:13:a3:e5:a9:03:a8: 16:c8:2c:76:85:f4:76:04:55:f8:c1:e5:1e:29:e4: 9c:f1:18:5f:e1:00:c5:ab:5c:85:5b:d4:f9:7d:97: dd:16:5e:a7:3b:62:ad:42:a7:62:4c:ad:76:cf:7e: 66:79:4c:6c:67:7f:6b:e3:29:e8:66:9b:70:7b:9a: 17:be:1d:96:ec:8f:3b:e9:b0:2e:bd:20:db:96:86: 92:eb:ce:a8:ef:ed:8b:62:44:94:70:b6:b3:31:99: 87:64:cc:ed:df:a7:36:b3:b2:a3:38:dd:61:e1:dd: 78:a6:7e:dd:11:84:22:b8:12:b1:4c:64:03:22:3a: d2:33:6d:b6:ac:3e:49:33:a5:31:7b:58:65:0c:3d: da:39:5f:af:cd:fa:4f:cd:4d:9a:41:81:33:65:09: 61:5f:07:73:98:72:9c:1c:ff:52:c5:1a:cf:59:e4: 1f:7b:c7:65:b7:e5:83:c2:68:94:be:eb:a5:91:79: 3f:89:68:93:c5:30:8a:84:a1:c2:94:c3:56:b6:10: db:5f:10:93:8a:ab:67:85:c0:09:b7:db:2c:fb:46: c1:90:52:bb:34:29:47:88:6a:fe:87:d6:77:8c:4b: 2f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F1:0A:22:D4:28:10:D4:07:BE:BC:B4:BB:6B:9F:84:F7:70:25:B9 X509v3 Authority Key Identifier: keyid:AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:5a:3f:2c:76:62:2a:8e:0a:7d:1a:ae:78:b6:7c:5b:71:d2: f2:cc:e0:08:fb:4b:97:fa:0f:08:78:53:4b:d3:af:7f:1c:00: cd:ed:fc:7e:f1:51:af:ab:a2:a9:f8:4d:85:72:b9:d8:31:ff: aa:3f:24:2e:cd:65:5b:fe:e9:c5:cd:cd:cd:b6:e9:cc:1c:7c: 11:4e:d6:ec:a3:66:bc:c8:a8:b5:70:3d:bf:de:c0:72:50:cd: 9b:d8:f2:7d:60:4b:77:aa:5d:96:cb:d2:30:0a:0b:a4:ce:f4: 8c:24:33:ca:9a:b2:2e:46:8a:30:4f:a7:03:b7:e0:74:53:74: 5b:0e:c9:50:97:4d:ae:80:cc:ea:43:b5:62:5b:8f:03:ba:69: ba:a5:fc:28:4e:c3:57:62:d8:44:29:df:06:4e:43:b3:16:8c: e8:19:23:27:90:e0:ec:71:ba:73:2e:a6:29:a3:cb:64:98:00: 18:66:47:30:b3:1a:09:4d:c3:4c:c7:65:1f:5b:75:b4:d6:40: 13:b7:c6:56:04:64:2b:a6:fc:b2:55:66:5b:4d:f4:e3:47:f5: f8:45:db:f4:ab:10:74:49:b2:f7:81:a6:6e:ca:53:27:75:b5: 10:2c:de:dd:ee:6d:1e:9e:85:8b:82:2f:85:8f:f1:f1:d7:e0: 59:f2:93:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3REIxMTAvBgNVBAUTKEFFQkExOUI2RkNDMUQyMUFFNzEzMTc3MEU3QjFEQTNF MTQ3NUVDOTAwHhcNMjYwMzI0MTg0NzEyWhcNMjYwMzMxMTg0NzEyWjAYMRYwFAYD VQQDEw02OWMyZGMzMC03N2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQh3YUbZba39B+KSNLc8UN/G8+kgHEETo+WpA6gWyCx2hfR2BFX4weUeKeSc 8Rhf4QDFq1yFW9T5fZfdFl6nO2KtQqdiTK12z35meUxsZ39r4ynoZptwe5oXvh2W 7I876bAuvSDbloaS686o7+2LYkSUcLazMZmHZMzt36c2s7KjON1h4d14pn7dEYQi uBKxTGQDIjrSM222rD5JM6Uxe1hlDD3aOV+vzfpPzU2aQYEzZQlhXwdzmHKcHP9S xRrPWeQfe8dlt+WDwmiUvuulkXk/iWiTxTCKhKHClMNWthDbXxCTiqtnhcAJt9ss +0bBkFK7NClHiGr+h9Z3jEsviwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEzxCiLU KBDUB768tLtrn4T3cCW5MB8GA1UdIwQYMBaAFK66Gbb8wdIa5xMXcOex2j4UdeyQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdEQi9COTUxRTI4QzNE Q0ExMUVBODFCOUQzNTJDNEY5QUUwMi9ycm9adHZ6QjBocm5FeGR3NTdIYVBoUjE3 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jyb1p0dnpCMGhybkV4ZHc1N0hhUGhSMTdKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTdEQi9COTUxRTI4QzNEQ0ExMUVBODFCOUQzNTJDNEY5QUUwMi9ycm9adHZ6QjBo cm5FeGR3NTdIYVBoUjE3SkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuFo/LHZiKo4KfRqueLZ8W3HS8szgCPtLl/oPCHhTS9OvfxwAze38fvFRr6ui qfhNhXK52DH/qj8kLs1lW/7pxc3NzbbpzBx8EU7W7KNmvMiotXA9v97AclDNm9jy fWBLd6pdlsvSMAoLpM70jCQzypqyLkaKME+nA7fgdFN0Ww7JUJdNroDM6kO1YluP A7ppuqX8KE7DV2LYRCnfBk5DsxaM6BkjJ5Dg7HG6cy6mKaPLZJgAGGZHMLMaCU3D TMdlH1t1tNZAE7fGVgRkK6b8slVmW03040f1+EXb9KsQdEmy94GmbspTJ3W1ECze 3e5tHp6Fi4IvhY/x8dfgWfKT+A== -----END CERTIFICATE-----Generated at Thu Mar 26 07:51:47 2026 by rpki-client