$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft File: 1ABRvI3aYMky7gd2mrhnvvqNQvY.mft (raw, json) Hash identifier: wr5I+2Cypjtj5w2JeGKOyhdusaZDeCyW8pcM2ZG/TfI= Subject key identifier: 54:83:50:9A:05:E8:E2:C4:74:3F:5A:2B:AF:5D:8C:22:3D:50:1E:D5 Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 Certificate issuer: /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Certificate serial: 0247 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft Manifest number: 0222 Signing time: Sun 29 Mar 2026 02:50:39 +0000 Manifest this update: Sun 29 Mar 2026 02:50:39 +0000 Manifest next update: Sun 05 Apr 2026 02:50:39 +0000 Files and hashes: 1: 1ABRvI3aYMky7gd2mrhnvvqNQvY.crl (hash: YcvcsePEuuRxnZw1xpVVNxMiXBX0sylhw+zi2DRlAus=) 2: C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa (hash: Q0Tn34xgetxGIUe18fvGLnakCaK/ggAk8mGCcQ1jVtg=) 3: F8B64B2A97BB11EF9D4C9647C4F9AE02.roa (hash: 4/nBHOA25vAMqwUgab8qc39twLNBg0xZb9rqex0mT0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 02:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 583 (0x247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F8E, serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Validity Not Before: Mar 29 02:50:39 2026 GMT Not After : Apr 5 02:50:39 2026 GMT Subject: CN=69c8937f-fb4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8d:47:c1:dc:aa:e6:c3:79:f1:05:96:e9:43: 00:24:e1:ac:99:98:31:f6:d8:f1:2a:af:c9:b3:dc: 6e:dd:62:4a:ee:43:45:d7:c0:83:06:59:a9:62:4e: 26:b9:bf:2d:24:cf:2b:83:a3:0e:92:c1:7f:9d:77: 1f:2b:2e:94:84:34:83:e7:11:08:74:89:c0:2c:f8: 21:32:ce:30:3c:ab:b7:c7:24:6a:80:6d:7b:39:88: c6:01:89:87:17:dc:0b:ac:0d:9c:aa:0f:95:c4:c5: 99:e5:0a:0b:71:ac:ad:3f:03:9c:51:78:ff:80:84: 11:c5:32:33:19:04:59:d2:21:2b:bb:b5:70:97:09: 51:c1:5d:30:aa:09:6b:5f:91:7b:9c:0b:8a:8b:32: 8f:af:0c:78:1f:51:ff:dc:61:fa:7b:d6:62:0f:de: b6:18:44:35:69:0c:cd:4b:ea:1d:ac:4d:92:fc:fe: ef:c6:90:59:21:9d:6c:e3:a8:e3:e4:b1:78:f8:aa: 58:83:f0:c4:5f:90:fe:09:fd:1a:38:00:2b:4b:d0: 2b:0e:c0:a6:81:65:fc:01:5e:57:04:60:bf:6a:bf: a6:c9:c2:65:2a:5f:8f:f3:89:23:66:28:1a:e5:1a: 64:34:aa:00:1e:b3:f9:26:da:b0:e5:8e:4e:0c:2c: 0b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:83:50:9A:05:E8:E2:C4:74:3F:5A:2B:AF:5D:8C:22:3D:50:1E:D5 X509v3 Authority Key Identifier: keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:d8:a7:87:e4:d5:f7:ec:e9:d3:69:cf:18:79:39:b3:34:02: a6:a0:d3:cd:c5:3f:9d:a4:cf:6b:a2:dd:89:80:52:6b:a7:26: f3:de:0b:dd:ac:96:1d:26:b0:d0:f4:0c:d1:97:67:8c:f0:95: c0:16:28:54:eb:a8:dd:dd:85:15:65:72:35:31:90:e2:a4:65: 98:ad:e4:ae:69:38:de:bd:f0:0e:d3:03:de:97:38:bf:ab:3b: cc:41:43:04:e1:60:4e:b1:97:97:c2:f8:11:b2:2a:8e:75:f6: 5d:43:e3:4a:54:16:11:3e:ba:f8:f1:b5:de:ed:dd:1e:b1:a5: 17:3b:4c:6f:48:ea:0c:55:72:ad:25:e8:cc:1d:1a:cf:9a:a4: d9:2d:5f:80:3a:69:6d:ad:0f:bb:1e:7a:77:f2:2c:20:a8:2d: 69:f5:05:e4:ca:fe:58:eb:61:0f:31:8d:ad:07:9a:36:23:ca: 00:1c:a5:16:1b:93:b4:a5:f3:6c:65:89:b0:43:b4:9d:b5:51: 1d:97:4c:b9:89:0e:36:5c:b4:aa:cd:f2:bb:dc:74:64:08:ff: 5d:87:33:77:71:73:14:ff:80:be:b2:3c:cb:7f:a8:3d:26:00: a7:22:40:3f:e0:54:6b:37:8f:62:4f:3d:31:45:9d:d6:50:a3: 3a:5d:f2:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGOEUxMTAvBgNVBAUTKEQ0MDA1MUJDOEREQTYwQzkzMkVFMDc3NjlBQjg2N0JF RkE4RDQyRjYwHhcNMjYwMzI5MDI1MDM5WhcNMjYwNDA1MDI1MDM5WjAYMRYwFAYD VQQDEw02OWM4OTM3Zi1mYjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxo1Hwdyq5sN58QWW6UMAJOGsmZgx9tjxKq/Js9xu3WJK7kNF18CDBlmpYk4m ub8tJM8rg6MOksF/nXcfKy6UhDSD5xEIdInALPghMs4wPKu3xyRqgG17OYjGAYmH F9wLrA2cqg+VxMWZ5QoLcaytPwOcUXj/gIQRxTIzGQRZ0iEru7VwlwlRwV0wqglr X5F7nAuKizKPrwx4H1H/3GH6e9ZiD962GEQ1aQzNS+odrE2S/P7vxpBZIZ1s46jj 5LF4+KpYg/DEX5D+Cf0aOAArS9ArDsCmgWX8AV5XBGC/ar+mycJlKl+P84kjZiga 5RpkNKoAHrP5Jtqw5Y5ODCwLXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFSDUJoF 6OLEdD9aK69djCI9UB7VMB8GA1UdIwQYMBaAFNQAUbyN2mDJMu4Hdpq4Z776jUL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y4RS82QzQwODlCQTIx NkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlNa3k3Z2QybXJobnZ2cU5R dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBQlJ2STNhWU1reTdnZDJtcmhudnZxTlF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y4RS82QzQwODlCQTIxNkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlN a3k3Z2QybXJobnZ2cU5RdlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqtinh+TV9+zp02nPGHk5szQCpqDTzcU/naTPa6LdiYBSa6cm894L3ayWHSaw 0PQM0ZdnjPCVwBYoVOuo3d2FFWVyNTGQ4qRlmK3krmk43r3wDtMD3pc4v6s7zEFD BOFgTrGXl8L4EbIqjnX2XUPjSlQWET66+PG13u3dHrGlFztMb0jqDFVyrSXozB0a z5qk2S1fgDppba0Pux56d/IsIKgtafUF5Mr+WOthDzGNrQeaNiPKABylFhuTtKXz bGWJsEO0nbVRHZdMuYkONly0qs3yu9x0ZAj/XYczd3FzFP+AvrI8y3+oPSYApyJA P+BUazePYk89MUWd1lCjOl3yyA== -----END CERTIFICATE-----Generated at Mon Mar 30 22:53:33 2026 by rpki-client