$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft File: -pTeOQiOw4pStpInmkLEr_tbc7E.mft (raw, json) Hash identifier: d0GA248PZY39azENiynyNsx+9vDa2GDkeehrqiTJVSE= Subject key identifier: AE:6F:75:F8:3C:35:32:F0:E9:5A:43:9A:85:36:01:3A:F0:44:BE:DC Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 Certificate issuer: /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Certificate serial: 0CD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft Manifest number: 0CC3 Signing time: Tue 24 Mar 2026 18:13:46 +0000 Manifest this update: Tue 24 Mar 2026 18:13:45 +0000 Manifest next update: Tue 31 Mar 2026 18:13:45 +0000 Files and hashes: 1: -pTeOQiOw4pStpInmkLEr_tbc7E.crl (hash: FL30LMaF/YNNBMC0K5p5zSNqwc6x+PotmdKA0NGJZYU=) 2: B74426C88AA711EB876EF84BC4F9AE02.roa (hash: Eji1oSGr80uG2ZkEWDi3XKFH3aT7cQe4W8HidYlRHQU=) 3: B69D3A2A8AA711EB876EF84BC4F9AE02.roa (hash: vuC9fsOD+G1Pf+DWd9JdWxJswFxAOiFEQCkKOOQygnE=) 4: 33B6385E09E911EAA0C05451C4F9AE02.roa (hash: gFZOTu8d2L6s2nLA0DenUPFZSyNTRHDF7VZSiFkBhgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3289 (0xcd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEE70, serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Validity Not Before: Mar 24 18:13:45 2026 GMT Not After : Mar 31 18:13:45 2026 GMT Subject: CN=69c2d459-3d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a9:a4:9c:be:4b:af:fe:47:81:a0:03:1b:0f: 50:42:cb:70:82:29:e8:2a:1b:11:3b:4b:9f:b7:11: 83:93:63:8d:49:5f:31:46:14:a5:8b:14:63:0f:8b: f3:92:a8:1d:be:32:21:da:64:2d:e7:e0:7e:c5:99: 35:dd:b9:d2:28:02:72:7e:1c:a7:8c:48:14:55:eb: 81:ec:c0:81:e8:50:4f:00:6f:91:63:6c:b3:81:30: 97:3e:58:3f:27:0d:f1:69:b8:99:d6:20:ff:ec:1b: ea:46:b6:b2:f4:50:0b:74:21:41:2a:9c:d9:91:29: df:04:b3:02:99:d8:52:b3:96:d7:d5:58:1a:eb:17: 45:7c:8f:1f:56:a5:d1:c7:ce:4f:c6:6e:aa:02:67: da:88:1e:d2:c6:26:55:1a:01:22:f6:47:11:68:9e: dd:b3:11:d0:cf:4a:99:e6:3f:31:7a:f2:b9:72:16: 23:56:e3:60:41:00:59:de:e4:a5:18:f8:0f:39:21: da:b6:92:a1:21:c8:ef:b4:b1:bc:60:3a:d9:a1:c4: a5:1a:7a:cb:a6:cb:85:3a:71:48:e1:f4:ba:55:7c: ba:3e:08:09:34:40:41:f0:ae:a9:9f:bd:49:68:35: 59:34:a4:d7:30:cf:e6:65:ef:be:4f:27:c8:40:1b: 49:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:6F:75:F8:3C:35:32:F0:E9:5A:43:9A:85:36:01:3A:F0:44:BE:DC X509v3 Authority Key Identifier: keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:cd:50:b3:dc:0e:ff:f3:9d:7e:31:7c:42:94:f1:27:d0:69: 41:43:a7:0a:41:19:c2:50:44:02:9b:e8:80:4c:30:57:c8:16: a7:07:32:61:97:40:29:62:1d:0a:69:7e:8b:d5:93:d7:5a:40: e6:e6:9c:d7:66:be:85:90:43:c1:e8:2c:d7:94:1e:9d:5c:d8: b7:c1:66:c8:18:83:24:57:fc:98:2b:55:d1:3c:50:7d:e2:22: 43:3f:ed:27:1a:82:fb:12:99:6e:21:a2:15:2b:36:a5:b7:32: 19:cc:2f:c0:19:ad:09:09:b2:02:3a:72:7e:13:b7:c5:3b:ae: 9a:0e:cd:37:1e:ef:69:05:26:96:12:2c:f2:b4:e3:98:33:55: 55:f0:84:21:45:e3:7e:35:71:60:ec:5a:fb:8c:d6:e8:92:1f: ec:5e:e3:c9:88:3e:9b:2c:7b:6c:32:9a:63:e5:bb:40:cb:fb: 46:38:0e:8b:27:0a:bf:61:56:9d:05:d0:7f:4b:cf:0a:3e:ab: 08:d7:b8:7b:04:7d:82:99:5f:a4:3c:f7:4e:94:ed:7f:df:68: e9:35:23:1e:7b:00:89:63:3b:56:d7:74:11:1c:95:98:01:b3: 24:df:a7:c4:a5:40:32:6b:a6:37:33:b2:54:ca:5f:4f:e8:e8: c4:db:1d:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVFNzAxMTAvBgNVBAUTKEZBOTRERTM5MDg4RUMzOEE1MkI2OTIyNzlBNDJDNEFG RkI1QjczQjEwHhcNMjYwMzI0MTgxMzQ1WhcNMjYwMzMxMTgxMzQ1WjAYMRYwFAYD VQQDEw02OWMyZDQ1OS0zZDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAramknL5Lr/5HgaADGw9QQstwginoKhsRO0uftxGDk2ONSV8xRhSlixRjD4vz kqgdvjIh2mQt5+B+xZk13bnSKAJyfhynjEgUVeuB7MCB6FBPAG+RY2yzgTCXPlg/ Jw3xabiZ1iD/7BvqRray9FALdCFBKpzZkSnfBLMCmdhSs5bX1Vga6xdFfI8fVqXR x85Pxm6qAmfaiB7SxiZVGgEi9kcRaJ7dsxHQz0qZ5j8xevK5chYjVuNgQQBZ3uSl GPgPOSHatpKhIcjvtLG8YDrZocSlGnrLpsuFOnFI4fS6VXy6PggJNEBB8K6pn71J aDVZNKTXMM/mZe++TyfIQBtJNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK5vdfg8 NTLw6VpDmoU2ATrwRL7cMB8GA1UdIwQYMBaAFPqU3jkIjsOKUraSJ5pCxK/7W3Ox MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUU3MC8wOTEwRDFBMDA5 RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0cFN0cElubWtMRXJfdGJj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1wVGVPUWlPdzRwU3RwSW5ta0xFcl90YmM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUU3MC8wOTEwRDFBMDA5RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0 cFN0cElubWtMRXJfdGJjN0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXM1Qs9wO//OdfjF8QpTxJ9BpQUOnCkEZwlBEApvogEwwV8gWpwcyYZdAKWId Cml+i9WT11pA5uac12a+hZBDwegs15QenVzYt8FmyBiDJFf8mCtV0TxQfeIiQz/t JxqC+xKZbiGiFSs2pbcyGcwvwBmtCQmyAjpyfhO3xTuumg7NNx7vaQUmlhIs8rTj mDNVVfCEIUXjfjVxYOxa+4zW6JIf7F7jyYg+myx7bDKaY+W7QMv7RjgOiycKv2FW nQXQf0vPCj6rCNe4ewR9gplfpDz3TpTtf99o6TUjHnsAiWM7Vtd0ERyVmAGzJN+n xKVAMmumNzOyVMpfT+joxNsdfg== -----END CERTIFICATE-----Generated at Thu Mar 26 17:32:19 2026 by rpki-client