$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: Mz5jyPkBot5Z6xUjPWcWi84GYj3ao/vH4dY7sdhVwhc= Subject key identifier: B3:DA:EC:63:CC:90:62:8B:45:8F:FC:08:1C:06:00:DD:9E:BD:57:51 Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 0491 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 044B Signing time: Fri 20 Mar 2026 23:55:38 +0000 Manifest this update: Fri 20 Mar 2026 23:55:38 +0000 Manifest next update: Fri 27 Mar 2026 23:55:38 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: 6UDtUKjgPsMk9+314EveMVMUpXY/cIkVROO01uEWZYQ=) 2: 366FD216EC5611F0B67F861C4A6F56BC.roa (hash: 8hEcxmIABfPcKgGp7REoiZjUChwO5uqaU2sng+eHPto=) 3: 977BACDA818811F0AE59F81AC4F9AE02.roa (hash: dEkGctGFRuV+92+6vy6IawdT4cLJk4p5FamFSDgRr5E=) 4: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: 4xc2eHMBANiDLGUopOzPmz/t979NlwB4OQ24UrePrZk=) 5: 9ED423000B1211F08F4E1E7EC4F9AE02.roa (hash: ORf56ozU5OuuYhJ3jJBGO/DKLOqT1LcBoA7dCCaBtMw=) 6: 0735D9BEEC5611F09B1B681B4A6F56BC.roa (hash: 9O8lYARfguAM8wZyrMjSX3M2SixgKtVusIr2gjU+hSU=) 7: 5C153EA0EC5811F0941546AF4A6F56BC.roa (hash: SESRFgYcB//TECdDuj/cs+vfm+TSag2D6w9sVIXdLb0=) 8: 97F41C10818811F0AE59F81AC4F9AE02.roa (hash: ZlA781tNXPtHDv8gbQ6DMbr27sqCTQUDYyUqps9Yuss=) 9: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: CNCgjqoVzyqxh93n0ZBsBcg25yxnaYEUJ+jXTOgpvUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1169 (0x491) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: Mar 20 23:55:38 2026 GMT Not After : Mar 27 23:55:38 2026 GMT Subject: CN=69bdde7a-0cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0c:a9:e8:06:84:99:c1:eb:ed:ba:d1:ea:a9: 44:0b:8d:4a:6b:2e:94:c4:ce:22:b9:3c:a5:cf:92: 9f:09:e4:a1:ee:b3:e5:50:08:63:f1:ad:9b:2d:58: d7:d2:6b:63:a2:e1:4a:bd:7b:2d:dc:db:45:3d:de: be:36:e7:c0:b7:17:8a:e2:0a:8c:44:5e:9e:43:98: 69:fa:33:e3:6f:9a:8e:7e:00:96:70:aa:ad:a1:d4: 90:26:f7:dc:b5:f1:08:47:9b:e2:bf:af:5d:7c:a6: a3:48:42:4e:8d:b0:6d:51:83:6b:47:db:7b:b0:9c: 6d:91:0f:8e:c4:47:bd:e1:b3:c8:87:9c:53:ef:62: 57:0b:12:ce:ad:55:c3:c6:06:74:ea:5c:b8:1b:b6: d8:0c:c8:81:54:a0:91:8c:39:10:0f:39:01:f2:26: 70:f2:65:b6:cc:1f:9b:fc:4f:d5:0a:49:52:a8:08: 16:44:fd:8f:46:5a:6a:fe:b7:16:d6:09:bd:00:b8: 91:0b:6a:f1:79:1d:2f:2d:01:45:d6:fe:f2:c2:42: f2:81:01:f1:e6:fb:1e:c1:ee:92:7a:0f:5f:c0:0e: 1f:d1:ff:d6:89:24:4e:c8:eb:6c:36:3d:71:d4:06: 56:83:13:5a:ee:81:5c:a0:cc:a2:90:f3:16:a1:b7: 5e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DA:EC:63:CC:90:62:8B:45:8F:FC:08:1C:06:00:DD:9E:BD:57:51 X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:92:2c:9a:2c:ec:ae:27:b6:3a:3c:1e:f7:94:40:18:4b:d2: 3a:8f:35:37:85:95:9a:ae:13:82:92:70:13:73:48:8f:35:1b: 9a:71:91:a0:f0:28:ce:42:7d:86:40:6f:a8:23:e8:62:09:fc: 44:95:fb:c8:de:29:42:22:53:ea:83:5c:fe:85:d2:ab:5c:e6: 02:74:f9:de:f9:fa:00:30:ce:78:8e:a2:52:b2:90:7b:91:9d: 9f:05:55:13:f7:7c:c6:35:f3:b0:fa:a2:3c:09:66:ad:0b:f6: 37:b3:b0:5c:00:80:03:82:75:48:c1:57:67:03:90:8f:1b:11: 20:6a:a3:3e:d2:8c:10:ce:2a:ef:20:a6:0d:fd:39:76:ff:8f: 73:3c:e8:ea:27:68:f7:34:f2:78:c9:7d:2d:d8:e1:97:c6:3e: 00:d1:65:07:81:d6:3f:6f:98:27:33:0c:fe:44:21:8d:eb:fc: 8e:8f:2d:b3:48:af:1e:19:3c:9d:5f:c5:ef:73:e7:0f:8e:7f: f3:70:cf:c1:74:a6:5e:9c:5c:89:d7:aa:44:4c:5c:0e:4d:ef: 8e:0d:f6:ef:65:16:72:5e:24:f6:90:1e:dd:f1:4c:3d:90:e9: f0:f4:ea:46:e1:be:33:3b:84:6e:50:33:58:e7:42:b5:53:dc: 24:44:d7:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjYwMzIwMjM1NTM4WhcNMjYwMzI3MjM1NTM4WjAYMRYwFAYD VQQDEw02OWJkZGU3YS0wY2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApgyp6AaEmcHr7brR6qlEC41Kay6UxM4iuTylz5KfCeSh7rPlUAhj8a2bLVjX 0mtjouFKvXst3NtFPd6+NufAtxeK4gqMRF6eQ5hp+jPjb5qOfgCWcKqtodSQJvfc tfEIR5viv69dfKajSEJOjbBtUYNrR9t7sJxtkQ+OxEe94bPIh5xT72JXCxLOrVXD xgZ06ly4G7bYDMiBVKCRjDkQDzkB8iZw8mW2zB+b/E/VCklSqAgWRP2PRlpq/rcW 1gm9ALiRC2rxeR0vLQFF1v7ywkLygQHx5vsewe6Seg9fwA4f0f/WiSROyOtsNj1x 1AZWgxNa7oFcoMyikPMWobdeiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLPa7GPM kGKLRY/8CBwGAN2evVdRMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT5Ismizsrie2Ojwe95RAGEvSOo81N4WVmq4TgpJwE3NIjzUbmnGRoPAozkJ9 hkBvqCPoYgn8RJX7yN4pQiJT6oNc/oXSq1zmAnT53vn6ADDOeI6iUrKQe5GdnwVV E/d8xjXzsPqiPAlmrQv2N7OwXACAA4J1SMFXZwOQjxsRIGqjPtKMEM4q7yCmDf05 dv+Pczzo6ido9zTyeMl9Ldjhl8Y+ANFlB4HWP2+YJzMM/kQhjev8jo8ts0ivHhk8 nV/F73PnD45/83DPwXSmXpxcideqRExcDk3vjg3272UWcl4k9pAe3fFMPZDp8PTq RuG+MzuEblAzWOdCtVPcJETX+g== -----END CERTIFICATE-----Generated at Sat Mar 21 13:17:24 2026 by rpki-client