$ rpki-client -vvf rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft File: _rv4NRuAvuL_tu8l-lfwhy9QkfI.mft (raw, json) Hash identifier: bgIYrE3jnIqdbPjaAXtWWw7TiyRZndiBA4PPu1tKIhY= Subject key identifier: 43:08:55:7D:4F:30:AD:BE:D9:34:35:25:34:16:66:04:8E:F0:19:CC Authority key identifier: FE:BB:F8:35:1B:80:BE:E2:FF:B6:EF:25:FA:57:F0:87:2F:50:91:F2 Certificate issuer: /CN=A91133BE/serialNumber=FEBBF8351B80BEE2FFB6EF25FA57F0872F5091F2 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rv4NRuAvuL_tu8l-lfwhy9QkfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft Manifest number: 20 Signing time: Sun 29 Mar 2026 08:31:41 +0000 Manifest this update: Sun 29 Mar 2026 08:31:40 +0000 Manifest next update: Sun 05 Apr 2026 08:31:40 +0000 Files and hashes: 1: _rv4NRuAvuL_tu8l-lfwhy9QkfI.crl (hash: A2+bSWYva4+12o21ipPCYbBTG/KWhM3puRRvUDwa8/o=) 2: D030482C001011F18942B574406F56BC.roa (hash: sbfrnLF6dkRPUD2i2wrrg7/6Vn8Z0is3ukK/xyl/U6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.crl rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rv4NRuAvuL_tu8l-lfwhy9QkfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 08:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91133BE, serialNumber=FEBBF8351B80BEE2FFB6EF25FA57F0872F5091F2 Validity Not Before: Mar 29 08:31:40 2026 GMT Not After : Apr 5 08:31:40 2026 GMT Subject: CN=69c8e36d-b2dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:53:74:9a:70:c7:1f:26:3a:0f:fa:07:f4:4a: 26:b7:cc:94:79:62:a6:e4:ca:a5:e5:e0:f7:6b:75: b7:78:12:08:e7:0e:2c:d8:97:eb:2e:b5:c4:04:4f: b9:5f:ab:49:ea:e1:4e:4c:54:35:91:30:7f:ad:d5: 86:7b:13:4e:57:b3:2d:b8:14:f9:25:41:e0:69:5a: 8d:39:63:7c:e0:dd:1c:d4:65:6f:6a:68:5d:6a:97: 06:36:7b:26:a7:eb:0e:82:de:ce:e1:eb:7b:32:40: 9e:d3:91:df:10:49:49:b7:a6:bc:10:bf:ad:d4:c5: 05:b7:86:24:ad:fd:4b:13:fd:16:6c:ca:76:95:b0: 73:22:6f:b1:d4:a5:a8:74:7d:3e:ef:44:a8:90:4e: 9e:78:15:92:02:b3:d1:e1:40:65:5b:2f:e5:f2:a1: 52:06:b7:73:0f:ba:fe:7f:43:95:22:94:39:8e:8a: 34:74:ad:48:12:4a:d0:65:11:cc:1f:65:98:ad:d3: 79:37:e9:a9:61:20:7b:a0:18:0c:08:93:03:79:f5: f0:16:8f:10:33:03:03:ab:7c:e6:d8:b1:cd:46:98: b5:c1:2e:8b:76:c7:a5:92:b7:2b:3d:74:ce:d5:79: 2d:aa:e2:27:74:67:10:93:e3:80:5d:e8:a8:54:d3: b8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:08:55:7D:4F:30:AD:BE:D9:34:35:25:34:16:66:04:8E:F0:19:CC X509v3 Authority Key Identifier: keyid:FE:BB:F8:35:1B:80:BE:E2:FF:B6:EF:25:FA:57:F0:87:2F:50:91:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rv4NRuAvuL_tu8l-lfwhy9QkfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f0:f8:3b:c2:ae:ec:b7:e2:c0:a1:e5:f4:47:b1:33:83:f8: dc:ff:62:05:96:fe:88:3c:bd:66:aa:83:94:96:8a:7c:cf:68: 31:72:64:03:7e:1e:08:40:78:02:7b:9a:65:04:5d:a2:5c:5b: 10:72:ae:39:e1:7d:e2:91:10:fe:97:a9:fd:90:8a:2d:40:87: 7e:bf:16:60:a3:f5:db:cf:d1:9e:3d:39:60:0b:7e:e3:7e:4b: 13:11:94:c6:11:bd:06:2d:9d:01:07:b0:7b:9b:c2:e6:5d:1d: 99:18:f9:07:d8:33:e2:b5:4b:29:8c:52:b2:23:77:80:c6:d9: b1:24:22:c1:03:92:f8:59:89:f8:ae:32:5c:ed:8f:dd:37:45: cd:af:cf:11:bc:56:61:bf:67:f5:2d:f9:ce:a0:a5:97:6a:a5: 8f:63:a5:aa:5f:44:7c:d1:ff:8b:01:bc:3a:ab:ca:de:51:fa: 4e:ec:ed:05:34:45:d0:22:78:55:48:78:6f:a6:59:91:62:d3: 71:c4:5a:f3:0d:e4:4f:2d:4e:95:52:55:6d:99:75:09:72:13: 56:5e:16:59:d7:a2:95:45:cd:9c:8a:30:b3:1d:2e:ca:a5:40: c1:3c:1e:6a:44:5f:7d:18:48:0f:fb:8b:76:7a:9c:3b:fb:5d: 8b:9d:4a:11 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MzNCRTExMC8GA1UEBRMoRkVCQkY4MzUxQjgwQkVFMkZGQjZFRjI1RkE1N0YwODcy RjUwOTFGMjAeFw0yNjAzMjkwODMxNDBaFw0yNjA0MDUwODMxNDBaMBgxFjAUBgNV BAMTDTY5YzhlMzZkLWIyZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAU3SacMcfJjoP+gf0Sia3zJR5YqbkyqXl4Pdrdbd4EgjnDizYl+sutcQET7lf q0nq4U5MVDWRMH+t1YZ7E05Xsy24FPklQeBpWo05Y3zg3RzUZW9qaF1qlwY2eyan 6w6C3s7h63syQJ7Tkd8QSUm3prwQv63UxQW3hiSt/UsT/RZsynaVsHMib7HUpah0 fT7vRKiQTp54FZICs9HhQGVbL+XyoVIGt3MPuv5/Q5UilDmOijR0rUgSStBlEcwf ZZit03k36alhIHugGAwIkwN59fAWjxAzAwOrfObYsc1GmLXBLot2x6WStys9dM7V eS2q4id0ZxCT44Bd6KhU07gNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQwhVfU8w rb7ZNDUlNBZmBI7wGcwwHwYDVR0jBBgwFoAU/rv4NRuAvuL/tu8l+lfwhy9QkfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzM0JFLzhEODJENTc2MDAx MDExRjE4OENDQkIwRTQwNkY1NkJDL19ydjROUnVBdnVMX3R1OGwtbGZ3aHk5UWtm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3J2NE5SdUF2dUxfdHU4bC1sZndoeTlRa2ZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz M0JFLzhEODJENTc2MDAxMDExRjE4OENDQkIwRTQwNkY1NkJDL19ydjROUnVBdnVM X3R1OGwtbGZ3aHk5UWtmSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBK8Pg7wq7st+LAoeX0R7Ezg/jc/2IFlv6IPL1mqoOUlop8z2gxcmQDfh4IQHgC e5plBF2iXFsQcq454X3ikRD+l6n9kIotQId+vxZgo/Xbz9GePTlgC37jfksTEZTG Eb0GLZ0BB7B7m8LmXR2ZGPkH2DPitUspjFKyI3eAxtmxJCLBA5L4WYn4rjJc7Y/d N0XNr88RvFZhv2f1LfnOoKWXaqWPY6WqX0R80f+LAbw6q8reUfpO7O0FNEXQInhV SHhvplmRYtNxxFrzDeRPLU6VUlVtmXUJchNWXhZZ16KVRc2cijCzHS7KpUDBPB5q RF99GEgP+4t2epw7+12LnUoR -----END CERTIFICATE-----Generated at Mon Mar 30 13:18:33 2026 by rpki-client