$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft File: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft (raw, json) Hash identifier: vGcr3PD/zxmfK1GMGOVKcJ99cmRXi5qOOZYTfIpki0g= Subject key identifier: EA:03:3B:E2:E5:F1:F4:B8:0C:41:6C:89:E2:D7:FD:D9:A5:16:60:FB Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Certificate serial: 1089 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft Manifest number: 0FFB Signing time: Sat 28 Mar 2026 17:28:40 +0000 Manifest this update: Sat 28 Mar 2026 17:28:39 +0000 Manifest next update: Sat 04 Apr 2026 17:28:39 +0000 Files and hashes: 1: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl (hash: /HrWs6W77a7M2kufFLMPYDrpATk73JHVDFqyNL1rVhU=) 2: B35E5B46334111EF9770A542C4F9AE02.roa (hash: KbfiegSJRccS2wc3BWQkCJHlKd3xmNfbrA1PK5bBMgQ=) 3: 2F787ACA71DC11F0B648E61EC4F9AE02.roa (hash: eAns+FZkAHBk1mAiuYMr/116oRI3l4XLKkm5ctbEEec=) 4: 2EFFC95471DC11F0B648E61EC4F9AE02.roa (hash: imzzgK2jkD8mtGVZSU5UK2u7UGX3PSejQBat9sn+BNw=) 5: B2A71CE2334111EF9770A542C4F9AE02.roa (hash: CAc0lSCqkmGaHO8KNNEhlMOK99LXlZrr2QvZXGpcJRg=) 6: B1F39E9C334111EF9770A542C4F9AE02.roa (hash: TLIL13JgGPe1P4BL40jELv4mEyCxR17v77PRx0bd8FM=) 7: 931E0F7681C911EFA5B1D80BC4F9AE02.roa (hash: CK4ODNzWrU/j1GWyDHdyLVzs0cc7hbXsl1UKT9ytXhM=) 8: 6AB0F2A2892611EEB5E27D69C4F9AE02.roa (hash: PRbYpTR7dL6OD02LCfnRi/JtoGtSSPYB6suy4a9h8Dk=) 9: 7BD12E3A480811EE8C512B0DC4F9AE02.roa (hash: a/aSh7H+9BOPAN+WcSvePCOi0af08D3dWGvwlCEpYQk=) 10: B2AB6010721811F09FD98A22C4F9AE02.roa (hash: RppZ41kvs72Nx/kep3oP9EH50fRwPEp+eO9LIxKJPl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 14:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4233 (0x1089) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Validity Not Before: Mar 28 17:28:39 2026 GMT Not After : Apr 4 17:28:39 2026 GMT Subject: CN=69c80fc8-b704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:45:ed:d9:28:13:1c:9f:67:99:1a:6e:62:dc: 4c:b1:3e:33:09:ac:8e:9d:c0:d0:76:86:f1:d9:26: 1a:69:99:8b:61:4a:a2:d6:b9:b7:2e:b3:c7:dc:8e: e3:64:4b:41:dd:09:df:65:8b:8e:d7:3a:d7:ed:22: 64:6a:a1:73:19:d8:f3:50:ee:b3:86:13:06:ae:91: 3c:ba:52:7b:00:3c:7f:0f:d1:a6:7e:27:6d:73:87: a1:4b:1c:94:b4:88:22:b7:88:21:a7:f5:5e:ab:40: 3c:87:a4:92:b8:7e:92:0d:92:0f:dd:c5:5f:ef:51: 38:d1:d1:89:27:be:e5:e9:3a:b0:11:64:72:4e:a3: d0:ea:20:a6:71:34:13:00:7b:2c:32:44:94:45:56: 02:e3:63:12:9d:cc:83:38:f3:a5:2a:bd:51:5f:7e: ff:33:2e:60:e7:5a:6e:32:50:de:1a:30:32:b3:ab: 7e:5e:0a:9f:fb:dd:33:79:0d:a2:7c:b0:23:12:5c: e3:d4:2c:2a:ab:f4:f6:9b:a7:2d:0d:2b:55:a9:64: 86:3a:ba:02:84:fd:09:bb:af:b4:db:74:42:d5:73: 46:83:23:9b:0d:ed:d2:02:d9:45:9e:f3:a2:f7:03: 6c:d2:c2:e9:ce:c1:0a:1d:b4:ca:5c:77:c5:a8:f5: 44:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:03:3B:E2:E5:F1:F4:B8:0C:41:6C:89:E2:D7:FD:D9:A5:16:60:FB X509v3 Authority Key Identifier: keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a9:43:c4:5a:7e:09:14:31:b3:a0:ce:06:04:b9:66:22:b0: bc:e5:bc:8c:1f:15:c8:2e:a4:3b:0b:07:7c:bc:7a:0e:a4:f2: fa:79:8c:1e:ca:bf:7b:84:37:ca:30:7d:f8:f0:06:47:53:a6: d2:20:db:93:03:b6:b9:93:c1:d0:fd:f1:1a:41:15:dc:8e:34: d1:31:16:13:50:51:a2:dc:3d:2a:e5:6d:78:76:b2:8d:d0:52: 8e:22:6a:b2:22:7b:6f:de:dc:f1:d0:a6:c9:6c:fa:3f:c7:9f: be:87:76:26:81:cc:06:5b:8e:2b:b6:48:60:0e:9d:6d:e3:5c: 84:2d:f3:9f:d6:c4:fc:2e:7c:5f:a0:96:4e:f2:31:bf:6c:f7: e1:4a:f0:bf:c3:aa:b8:17:9e:12:61:3e:9d:a7:8c:22:0a:e0: 97:24:c5:be:13:3c:4d:e9:30:72:bb:fe:8b:1f:3f:9c:b1:f6: c7:4a:6a:cb:53:03:e0:6a:77:0c:e3:69:5a:5b:22:f0:ab:42: e3:af:fe:35:be:a7:07:92:3e:7b:bd:22:25:51:52:c0:9d:38: 17:d5:6f:dc:27:45:1e:33:2d:fa:d1:16:f7:f6:ab:df:9e:a4: 95:2b:42:9e:a3:11:54:87:dc:ef:c9:9e:fb:08:89:7d:3d:d2: 54:58:74:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw MUYxOEZGNDkwHhcNMjYwMzI4MTcyODM5WhcNMjYwNDA0MTcyODM5WjAYMRYwFAYD VQQDEw02OWM4MGZjOC1iNzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00Xt2SgTHJ9nmRpuYtxMsT4zCayOncDQdobx2SYaaZmLYUqi1rm3LrPH3I7j ZEtB3QnfZYuO1zrX7SJkaqFzGdjzUO6zhhMGrpE8ulJ7ADx/D9Gmfidtc4ehSxyU tIgit4ghp/Veq0A8h6SSuH6SDZIP3cVf71E40dGJJ77l6TqwEWRyTqPQ6iCmcTQT AHssMkSURVYC42MSncyDOPOlKr1RX37/My5g51puMlDeGjAys6t+Xgqf+90zeQ2i fLAjElzj1Cwqq/T2m6ctDStVqWSGOroChP0Ju6+023RC1XNGgyObDe3SAtlFnvOi 9wNs0sLpzsEKHbTKXHfFqPVEuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOoDO+Ll 8fS4DEFsieLX/dmlFmD7MB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkNDNy83OTFDNkEzNDdCMzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91 dmFqeVZjVUJRUnNCOFlfMGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASqlDxFp+CRQxs6DOBgS5ZiKwvOW8jB8VyC6kOwsHfLx6DqTy+nmMHsq/e4Q3 yjB9+PAGR1Om0iDbkwO2uZPB0P3xGkEV3I400TEWE1BRotw9KuVteHayjdBSjiJq siJ7b97c8dCmyWz6P8efvod2JoHMBluOK7ZIYA6dbeNchC3zn9bE/C58X6CWTvIx v2z34Urwv8OquBeeEmE+naeMIgrglyTFvhM8Tekwcrv+ix8/nLH2x0pqy1MD4Gp3 DONpWlsi8KtC46/+Nb6nB5I+e70iJVFSwJ04F9Vv3CdFHjMt+tEW9/ar356klStC nqMRVIfc78me+wiJfT3SVFh0aA== -----END CERTIFICATE-----Generated at Sat Mar 28 19:59:12 2026 by rpki-client