$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft File: AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft (raw, json) Hash identifier: r+lyZ01PYLVtU+aCkL/56j8nM3KTiAxq0LRTy5RKqsU= Subject key identifier: DF:E2:04:14:D2:F3:C6:DA:13:AD:1D:F2:8C:A4:79:43:9E:4A:39:20 Authority key identifier: 00:AF:60:18:5D:1F:B9:A0:8A:58:B7:7E:F4:04:81:AC:38:0A:F1:B1 Certificate issuer: /CN=A91FFBAF/serialNumber=00AF60185D1FB9A08A58B77EF40481AC380AF1B1 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft Manifest number: 44 Signing time: Wed 25 Mar 2026 07:32:23 +0000 Manifest this update: Wed 25 Mar 2026 07:32:23 +0000 Manifest next update: Wed 01 Apr 2026 07:32:23 +0000 Files and hashes: 1: AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl (hash: lva68r4rY72RGj4DS0wGX/UfKQYGR8GkEsvnQddNRJY=) 2: C7200E0EC37D11F09171F578C4F9AE02.roa (hash: E6omI9lqZzM/PwLCS0UMdFdpwNRWOrVUdR04/HJ2Es8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFBAF, serialNumber=00AF60185D1FB9A08A58B77EF40481AC380AF1B1 Validity Not Before: Mar 25 07:32:23 2026 GMT Not After : Apr 1 07:32:23 2026 GMT Subject: CN=69c38f87-071e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:04:d4:0f:d8:95:72:4e:ba:85:cd:91:6d:bb: e5:9b:ae:25:9a:2a:4e:b6:ba:77:a3:51:2c:4a:41: 64:85:f5:b8:35:63:b1:52:d4:d3:41:03:6d:c6:fe: f8:cb:d1:e1:15:b3:d7:e8:a9:6f:14:0b:7e:8b:9e: 2d:b6:3c:17:c6:51:8c:70:5f:bc:2e:7c:6a:78:a5: 76:05:1f:39:7e:f9:0f:29:35:79:32:38:42:92:11: 94:de:df:10:85:96:b9:58:45:aa:64:3b:8e:85:33: 98:09:bf:74:fb:c0:89:7a:ee:cb:f3:df:e1:14:44: 96:d1:2b:aa:d8:e4:29:d4:f7:9a:83:18:41:f9:ae: 06:a4:6a:9c:8e:d9:a5:e6:13:64:a6:52:c9:68:51: 3b:7f:ac:ff:9f:23:0a:77:53:b5:45:98:66:0f:06: 51:5d:28:e8:35:27:c8:e8:38:6f:0f:c5:bc:26:c2: 41:b8:3d:74:18:ef:1e:97:9b:65:8b:ff:c9:6f:26: 2e:3e:89:ab:34:0a:fc:bd:dc:74:9e:b9:5b:7d:9d: ab:d8:fe:20:5a:74:9a:01:60:51:cc:ff:d1:d6:fb: 47:61:7a:67:b7:94:b2:9e:54:05:5a:7c:da:92:4b: 4a:a1:86:00:6d:b4:b6:ef:56:9b:d0:62:04:29:23: c3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E2:04:14:D2:F3:C6:DA:13:AD:1D:F2:8C:A4:79:43:9E:4A:39:20 X509v3 Authority Key Identifier: keyid:00:AF:60:18:5D:1F:B9:A0:8A:58:B7:7E:F4:04:81:AC:38:0A:F1:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:5c:28:1c:2b:d6:38:f5:fe:a0:f2:48:28:05:3e:a2:81:3e: 60:0e:85:f2:9d:83:27:13:af:1a:41:4b:35:11:d5:4e:ab:cc: 42:56:87:ee:d3:40:d0:f1:1a:ba:34:e1:cb:f6:f5:6e:1c:ad: f6:cf:ec:be:c2:1a:b6:de:0a:ea:49:c9:08:51:ce:8a:13:85: d6:03:98:a5:05:bf:62:d7:f6:2c:f6:48:3f:d4:25:b7:30:21: 7a:57:cf:25:21:d5:32:21:38:fc:4c:01:c1:e4:e9:68:61:99: 03:2f:de:f5:a8:19:59:3a:b5:65:9e:09:c7:fb:0d:85:62:16: e6:98:43:ae:90:12:44:51:f5:ff:9a:5b:89:e5:90:cb:db:85: da:90:8b:2a:a8:bd:06:e0:35:ad:a5:08:73:16:79:06:17:46: 64:98:df:53:b2:2c:24:ee:4c:05:3a:9b:7a:43:05:30:81:47: 9a:46:07:22:d0:a6:2e:61:56:bd:07:87:63:71:16:87:81:0c: 39:a0:37:13:5b:aa:27:c1:8b:11:74:37:78:57:9f:18:59:a4: b4:50:7a:3c:b5:33:f2:7d:5d:e2:6b:ca:c2:1c:cc:e3:89:9d: d1:61:45:de:2d:35:c1:61:d4:18:e5:51:ed:bb:19:d7:ac:4e: 9e:43:26:67 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RkJBRjExMC8GA1UEBRMoMDBBRjYwMTg1RDFGQjlBMDhBNThCNzdFRjQwNDgxQUMz ODBBRjFCMTAeFw0yNjAzMjUwNzMyMjNaFw0yNjA0MDEwNzMyMjNaMBgxFjAUBgNV BAMTDTY5YzM4Zjg3LTA3MWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWBNQP2JVyTrqFzZFtu+WbriWaKk62unejUSxKQWSF9bg1Y7FS1NNBA23G/vjL 0eEVs9foqW8UC36Lni22PBfGUYxwX7wufGp4pXYFHzl++Q8pNXkyOEKSEZTe3xCF lrlYRapkO46FM5gJv3T7wIl67svz3+EURJbRK6rY5CnU95qDGEH5rgakapyO2aXm E2SmUsloUTt/rP+fIwp3U7VFmGYPBlFdKOg1J8joOG8PxbwmwkG4PXQY7x6Xm2WL /8lvJi4+ias0Cvy93HSeuVt9navY/iBadJoBYFHM/9HW+0dheme3lLKeVAVafNqS S0qhhgBttLbvVpvQYgQpI8MjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3+IEFNLz xtoTrR3yjKR5Q55KOSAwHwYDVR0jBBgwFoAUAK9gGF0fuaCKWLd+9ASBrDgK8bEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGQkFGLzcwRkNBNzcyQzM3 QzExRjBCNTE4QTUzMkM0RjlBRTAyL0FLOWdHRjBmdWFDS1dMZC05QVNCckRnSzhi RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUs5Z0dGMGZ1YUNLV0xkLTlBU0JyRGdLOGJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG QkFGLzcwRkNBNzcyQzM3QzExRjBCNTE4QTUzMkM0RjlBRTAyL0FLOWdHRjBmdWFD S1dMZC05QVNCckRnSzhiRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC/XCgcK9Y49f6g8kgoBT6igT5gDoXynYMnE68aQUs1EdVOq8xCVofu00DQ8Rq6 NOHL9vVuHK32z+y+whq23grqSckIUc6KE4XWA5ilBb9i1/Ys9kg/1CW3MCF6V88l IdUyITj8TAHB5OloYZkDL971qBlZOrVlngnH+w2FYhbmmEOukBJEUfX/mluJ5ZDL 24XakIsqqL0G4DWtpQhzFnkGF0ZkmN9Tsiwk7kwFOpt6QwUwgUeaRgci0KYuYVa9 B4djcRaHgQw5oDcTW6onwYsRdDd4V58YWaS0UHo8tTPyfV3ia8rCHMzjiZ3RYUXe LTXBYdQY5VHtuxnXrE6eQyZn -----END CERTIFICATE-----Generated at Fri Mar 27 00:55:52 2026 by rpki-client