$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft File: D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json) Hash identifier: wZd1azh3PNYb4CS3REQeQ/prPg4sdnDjbUCjqfm1C24= Subject key identifier: 5A:E8:DC:B7:6E:B0:AF:8E:F1:F1:B1:32:AB:05:36:3F:80:9F:89:00 Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft Manifest number: 0179 Signing time: Wed 25 Mar 2026 03:58:36 +0000 Manifest this update: Wed 25 Mar 2026 03:58:36 +0000 Manifest next update: Wed 01 Apr 2026 03:58:36 +0000 Files and hashes: 1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: c/INGY+HjpsgEzx2pdd5C6geCkE//DBIwEUVlXFwojI=) 2: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: NSdNu+vXnYcTSniUQqnt8p+QBPXnXEprmzukCezOx0U=) 3: 507476EE6BD811EFBDD72932C4F9AE02.roa (hash: irjK47i6Sld0YH0p5+DxVPsO0MEpAL8iYc9/ecny0Gs=) 4: 1132F3026BD811EF90DBC631C4F9AE02.roa (hash: RseQd9x0Qtjlynx4q/LTY8jY17t9oSxHJT5UuEAvOWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Validity Not Before: Mar 25 03:58:36 2026 GMT Not After : Apr 1 03:58:36 2026 GMT Subject: CN=69c35d6c-5264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:26:69:46:c9:cb:13:0c:5d:66:3e:1c:81:03: 5e:55:ec:15:ea:31:82:82:6f:c0:10:1b:4b:56:db: 4f:6b:94:a5:53:0b:85:8e:99:c9:c0:65:db:c5:7c: ab:a8:fc:ef:09:04:f6:e4:46:70:04:6c:83:92:46: 68:e0:32:2b:24:e5:0b:47:4f:84:e8:0c:b6:bd:09: 85:38:01:ae:5c:5e:85:c1:d6:02:89:fd:67:83:98: 22:95:93:e2:ce:94:83:2c:fa:08:8b:db:96:23:21: bb:77:e4:f6:a7:70:b8:f9:ae:bf:1f:7e:4e:a3:b6: a2:43:01:a5:e2:39:72:b5:5e:14:27:f6:1a:e4:df: 8a:0e:fb:35:73:e3:e7:54:27:61:df:c4:18:28:7e: 7a:f9:bb:10:e8:78:28:fb:d1:84:a0:c3:ba:97:e3: fd:5f:a6:62:e4:04:03:81:b8:88:ce:ee:b6:24:78: f8:31:f2:ba:44:9a:c4:4b:93:fb:ad:23:78:51:22: 1a:84:85:49:27:9a:fc:a9:ed:96:4c:f8:00:88:de: d9:b8:82:a9:d6:30:3e:94:66:6b:ee:1f:ea:d0:a6: f4:75:f5:2a:da:83:de:94:0f:98:12:45:2b:8b:b4: 85:1c:ce:96:40:45:ae:d8:05:f4:26:1e:26:d3:ff: 7f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E8:DC:B7:6E:B0:AF:8E:F1:F1:B1:32:AB:05:36:3F:80:9F:89:00 X509v3 Authority Key Identifier: keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:bd:aa:f4:5b:83:41:38:60:c2:c8:8d:48:39:2e:e5:2f:07: 11:ee:cc:6c:e2:a2:1b:fb:2a:5f:a1:bd:d7:58:18:58:c4:36: b9:87:e5:0a:01:4c:31:d2:85:c3:74:84:2e:2c:f5:6b:59:a1: 09:d5:ad:cb:aa:2d:ce:fb:2d:f2:a5:7b:b2:80:c2:be:53:93: bf:4e:63:d2:ff:51:9a:d2:d7:9e:2e:28:d1:7a:06:21:49:20: 4c:54:57:f6:ec:7d:69:cf:b6:b5:2d:b3:14:5f:2b:53:02:57: cf:23:ee:d8:5e:67:2f:0f:8c:a7:fd:a9:ed:87:6c:7d:a8:44: e4:77:65:8f:ea:d5:78:a3:79:91:b5:7b:71:89:0f:00:41:84: 79:60:5b:f2:14:9f:9f:16:66:f9:d2:5f:75:43:c0:db:1d:eb: 36:2c:90:1f:38:39:35:5e:6e:28:47:5f:3e:ba:f3:2e:d2:63: de:31:0b:40:9d:bd:d3:b5:1b:d1:11:dd:60:ef:99:d1:f8:c0: f6:aa:13:e7:02:85:6a:b4:c4:d8:00:9f:55:68:46:ea:f9:9c: 54:55:cd:2c:fd:3b:74:1a:4c:f1:a4:be:0a:e4:8e:5d:2c:e1: 8a:aa:a8:14:02:19:33:73:78:ba:06:4b:f2:41:e7:d5:be:3f: 31:e9:4d:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5REMxMTAvBgNVBAUTKDBGOUY3MTU4REJERkZBMkE1N0FFMDI0ODdDOTgyMDZC NzgzODA0OTYwHhcNMjYwMzI1MDM1ODM2WhcNMjYwNDAxMDM1ODM2WjAYMRYwFAYD VQQDEw02OWMzNWQ2Yy01MjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSZpRsnLEwxdZj4cgQNeVewV6jGCgm/AEBtLVttPa5SlUwuFjpnJwGXbxXyr qPzvCQT25EZwBGyDkkZo4DIrJOULR0+E6Ay2vQmFOAGuXF6FwdYCif1ng5gilZPi zpSDLPoIi9uWIyG7d+T2p3C4+a6/H35Oo7aiQwGl4jlytV4UJ/Ya5N+KDvs1c+Pn VCdh38QYKH56+bsQ6Hgo+9GEoMO6l+P9X6Zi5AQDgbiIzu62JHj4MfK6RJrES5P7 rSN4USIahIVJJ5r8qe2WTPgAiN7ZuIKp1jA+lGZr7h/q0Kb0dfUq2oPelA+YEkUr i7SFHM6WQEWu2AX0Jh4m0/9/mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFro3Ldu sK+O8fGxMqsFNj+An4kAMB8GA1UdIwQYMBaAFA+fcVjb3/oqV64CSHyYIGt4OASW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlEQy82RUVDMUY1Q0VG RkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1pcFhyZ0pJZkpnZ2EzZzRC SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1OXhXTnZmLWlwWHJnSklmSmdnYTNnNEJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlEQy82RUVDMUY1Q0VGRkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1p cFhyZ0pJZkpnZ2EzZzRCSlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB72q9FuDQThgwsiNSDku5S8HEe7MbOKiG/sqX6G911gYWMQ2uYflCgFMMdKF w3SELiz1a1mhCdWty6otzvst8qV7soDCvlOTv05j0v9RmtLXni4o0XoGIUkgTFRX 9ux9ac+2tS2zFF8rUwJXzyPu2F5nLw+Mp/2p7YdsfahE5Hdlj+rVeKN5kbV7cYkP AEGEeWBb8hSfnxZm+dJfdUPA2x3rNiyQHzg5NV5uKEdfPrrzLtJj3jELQJ2907Ub 0RHdYO+Z0fjA9qoT5wKFarTE2ACfVWhG6vmcVFXNLP07dBpM8aS+CuSOXSzhiqqo FAIZM3N4ugZL8kHn1b4/MelNdA== -----END CERTIFICATE-----Generated at Thu Mar 26 20:24:25 2026 by rpki-client