$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft File: 88hJQLK99AJViHBvWcHm7D0hR_A.mft (raw, json) Hash identifier: 7TuO6F7t5hltn/v/tWrhwAd95mIezemnFIwPWNBlWXg= Subject key identifier: B9:8E:31:94:4A:92:74:2F:D6:00:E8:A5:19:68:27:A1:F3:C6:19:E5 Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 Certificate issuer: /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft Manifest number: 01C2 Signing time: Sun 05 Apr 2026 03:16:52 +0000 Manifest this update: Sun 05 Apr 2026 03:16:51 +0000 Manifest next update: Sun 12 Apr 2026 03:16:51 +0000 Files and hashes: 1: 88hJQLK99AJViHBvWcHm7D0hR_A.crl (hash: TO8xrpSRoqlX+JMGcJnyjxyyX6I7KACEKqJKiH+qo5E=) 2: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (hash: v31XiVYGJxKH7lnLyUBdZlEf6xpoQVchSdqRGdwSNGw=) 3: D36C048A81E211EEAF423C87C4F9AE02.roa (hash: ZIzmLDCvL9144wtn/f7cPEIGwIVNysAKaWM197wzKng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Validity Not Before: Apr 5 03:16:51 2026 GMT Not After : Apr 12 03:16:51 2026 GMT Subject: CN=69d1d423-22bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d9:f9:c9:18:ea:20:31:91:76:16:fb:e3:18: c6:a3:d4:e0:3f:05:c5:1b:29:e9:90:52:d8:c0:e4: f2:49:78:6a:e0:2c:52:18:70:d8:ec:32:dd:71:69: b9:e0:34:81:53:b9:d5:ec:bb:49:ac:31:65:c7:bb: f0:66:5c:b4:26:a7:21:a8:bf:21:8a:82:8b:fe:8e: 2c:3a:89:74:88:96:b8:21:09:a2:74:51:cc:93:e6: 8f:b3:dd:52:a0:7b:e3:a2:f4:15:bf:58:96:4c:2d: fc:d2:eb:9d:15:dc:d8:33:8b:10:44:37:d2:79:be: 73:48:4c:42:bb:9a:d0:fb:f9:2c:db:3c:27:77:3c: 53:09:08:1b:a4:38:23:6b:c5:4a:4f:9f:04:f5:f1: 0b:9b:a9:81:1c:9a:f9:ed:bf:43:23:8c:7f:de:8a: 91:8e:90:24:f0:87:e0:c7:7d:f2:9c:40:b6:f0:c4: d8:d0:13:9b:ef:a3:47:35:56:d0:db:04:86:f1:51: 46:8c:b7:e5:07:db:30:8a:c5:40:fd:18:b4:1d:97: 3a:90:8b:e4:ec:3d:07:aa:c0:b7:52:66:d5:0e:ab: ff:91:92:bf:e8:ba:5f:03:98:84:f3:b3:0b:23:06: 52:86:51:4a:71:f3:8b:a5:38:3c:df:80:5a:b3:30: 43:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8E:31:94:4A:92:74:2F:D6:00:E8:A5:19:68:27:A1:F3:C6:19:E5 X509v3 Authority Key Identifier: keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:05:a5:e4:c5:48:69:2a:1b:1f:41:b9:8c:bb:9b:70:8f:37: 38:8b:e8:66:5a:2c:d4:9f:4b:ed:9f:00:16:81:49:d4:cd:08: 1c:f8:c6:b1:cd:d8:81:4d:a4:02:99:f3:d4:23:3e:b9:f0:90: ad:67:73:c7:29:a2:7d:3a:7a:1c:a6:51:7e:1c:50:3e:6b:84: 47:61:93:19:37:1c:b9:d7:6c:81:22:87:01:31:52:b9:5e:b7: 62:33:6d:24:9c:8b:d4:83:b8:25:04:e1:b2:f0:9f:2c:2c:aa: dc:fe:91:a9:31:76:09:9a:ce:82:26:c5:ed:1e:c8:4a:75:bb: 73:c8:37:dc:81:31:68:2a:e1:f2:11:8a:09:19:af:aa:6d:d4: b8:2b:28:d3:16:ac:c5:fa:c8:d9:7a:b1:77:cf:20:23:97:97: d7:75:04:ee:b7:92:c7:e5:7d:a7:35:ac:63:5b:56:be:02:5c: cc:48:e3:d1:c9:ec:87:f3:8a:ee:d5:9d:b5:39:b5:e1:bb:85: 69:87:73:14:7d:80:cb:0d:39:71:4c:59:5a:90:28:4b:de:1d: 84:a7:3e:d7:a0:60:d4:28:79:44:2b:1c:18:e8:cc:c5:b8:d3: d6:a1:e5:eb:ea:f4:4d:0a:01:98:e3:d6:ae:c4:9b:43:37:3e: d2:b7:c5:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDMjMxMTAvBgNVBAUTKEYzQzg0OTQwQjJCREY0MDI1NTg4NzA2RjU5QzFFNkVD M0QyMTQ3RjAwHhcNMjYwNDA1MDMxNjUxWhcNMjYwNDEyMDMxNjUxWjAYMRYwFAYD VQQDEw02OWQxZDQyMy0yMmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkdn5yRjqIDGRdhb74xjGo9TgPwXFGynpkFLYwOTySXhq4CxSGHDY7DLdcWm5 4DSBU7nV7LtJrDFlx7vwZly0JqchqL8hioKL/o4sOol0iJa4IQmidFHMk+aPs91S oHvjovQVv1iWTC380uudFdzYM4sQRDfSeb5zSExCu5rQ+/ks2zwndzxTCQgbpDgj a8VKT58E9fELm6mBHJr57b9DI4x/3oqRjpAk8Ifgx33ynEC28MTY0BOb76NHNVbQ 2wSG8VFGjLflB9swisVA/Ri0HZc6kIvk7D0HqsC3UmbVDqv/kZK/6LpfA5iE87ML IwZShlFKcfOLpTg834BaszBDrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLmOMZRK knQv1gDopRloJ6HzxhnlMB8GA1UdIwQYMBaAFPPISUCyvfQCVYhwb1nB5uw9IUfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0MyMy85MjVDODBDRTgx RTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlBSlZpSEJ2V2NIbTdEMGhS X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg4aEpRTEs5OUFKVmlIQnZXY0htN0QwaFJfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0MyMy85MjVDODBDRTgxRTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlB SlZpSEJ2V2NIbTdEMGhSX0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATQWl5MVIaSobH0G5jLubcI83OIvoZlos1J9L7Z8AFoFJ1M0IHPjGsc3YgU2k Apnz1CM+ufCQrWdzxymifTp6HKZRfhxQPmuER2GTGTccuddsgSKHATFSuV63YjNt JJyL1IO4JQThsvCfLCyq3P6RqTF2CZrOgibF7R7ISnW7c8g33IExaCrh8hGKCRmv qm3UuCso0xasxfrI2Xqxd88gI5eX13UE7reSx+V9pzWsY1tWvgJczEjj0cnsh/OK 7tWdtTm14buFaYdzFH2Ayw05cUxZWpAoS94dhKc+16Bg1Ch5RCscGOjMxbjT1qHl 6+r0TQoBmOPWrsSbQzc+0rfF7w== -----END CERTIFICATE-----Generated at Mon Apr 6 09:53:50 2026 by rpki-client