$ rpki-client -vvf rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft File: THDgIDLqWcKv1UGhhw10sEDRtqI.mft (raw, json) Hash identifier: QhFAzM9He9Azfgm6NOpYfjri/7UmjTdIsEHaDfeZeVk= Subject key identifier: 35:61:54:20:D8:DD:BA:4E:78:41:6C:16:92:49:9E:3E:7D:E0:35:DD Authority key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2 Certificate issuer: /CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2 Certificate serial: 09B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft Manifest number: 09AA Signing time: Sat 28 Mar 2026 19:51:05 +0000 Manifest this update: Sat 28 Mar 2026 19:51:04 +0000 Manifest next update: Sat 04 Apr 2026 19:51:04 +0000 Files and hashes: 1: THDgIDLqWcKv1UGhhw10sEDRtqI.crl (hash: TUFJAaiMSZOJx27t5zksflpPP9nHZogdXPQeF7P0SS4=) 2: 193128AAD15D11EE8BD5C02BC4F9AE02.roa (hash: GsGKse+jvZV0Ypq4tt+9yydVOYc4iOZZx7JlseayyeQ=) 3: 05CABF92A64111EAB544074CC4F9AE02.roa (hash: SF124PgFJdMgEInYT/GtV8Bi1Qw6o/zRPCKi4I6lOOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 19:51:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2489 (0x9b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D615F, serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2 Validity Not Before: Mar 28 19:51:04 2026 GMT Not After : Apr 4 19:51:04 2026 GMT Subject: CN=69c83128-de4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:97:8b:7c:48:0b:75:f8:87:c0:bd:fa:45:30: a2:84:c2:a8:a7:01:18:04:8b:c9:65:e3:a7:df:d8: cc:3c:08:57:f3:5d:01:79:9d:50:f7:21:09:82:15: e2:1b:7b:6d:89:29:31:de:30:0a:0e:79:e8:db:cf: 40:a4:8f:97:78:f1:e4:58:7b:d2:89:61:8e:e6:90: 22:7a:0e:21:e3:34:a4:3f:ad:96:71:db:35:2e:ce: 52:e8:5d:45:6b:11:09:a0:2f:ef:8b:9b:1d:73:a2: f3:e0:94:8d:d7:0d:6b:f7:f7:21:86:d6:6e:fc:04: e9:10:bb:95:01:a4:bd:79:78:bf:2f:84:75:97:6c: c8:cb:54:bd:b1:86:bb:00:00:17:f5:95:ce:42:31: 1e:e6:46:e2:b4:01:8b:e5:8b:8f:88:a1:cc:d0:50: ac:ac:64:54:04:05:95:c4:e5:2c:04:2c:25:af:2f: 49:08:95:1d:7b:8e:d3:df:d8:1d:76:88:eb:1d:25: 2e:18:65:2f:85:43:4e:3d:a3:60:b6:03:01:e2:71: b0:7f:40:b4:d4:45:b5:2d:7a:64:b4:8e:2a:d1:29: 85:55:f9:f5:27:74:5c:d2:4f:e8:80:30:6f:20:3f: 16:33:6e:2b:ce:7a:bd:ac:53:1b:84:bf:bb:d5:2a: 45:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:61:54:20:D8:DD:BA:4E:78:41:6C:16:92:49:9E:3E:7D:E0:35:DD X509v3 Authority Key Identifier: keyid:4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:11:19:87:f7:4b:10:a5:06:6b:06:ed:bd:05:db:a9:dd:56: a5:86:ef:55:ab:65:83:3c:8b:75:08:c5:ce:7f:e7:aa:84:63: 74:a1:67:7a:1d:dc:8b:e3:7e:b5:92:0a:6a:01:56:aa:f5:00: e0:a0:aa:13:ca:0c:b7:7d:f5:36:9f:52:25:2a:db:f9:89:db: 11:9e:a6:4f:6c:74:fd:ff:f1:e6:4b:bb:55:5a:e8:25:5a:4f: 46:52:8d:21:ee:5f:84:bb:25:cf:97:3f:47:53:55:74:b6:e5: 88:9a:27:d5:25:8f:ed:19:0b:4b:65:4c:e5:b0:bf:ea:37:53: d9:48:3f:fe:5c:02:45:24:52:6f:4d:b6:64:67:d5:41:83:99: f1:1b:7c:4a:56:6e:6c:fa:cb:bb:a1:a1:b0:12:85:3b:bf:bc: b1:fa:36:10:b2:2b:8d:85:a2:d4:bd:79:76:51:88:87:ea:00: b7:37:3b:11:78:11:25:e5:c3:21:44:2c:d3:65:39:92:7b:06: b4:94:89:d6:2e:fd:b1:b9:c4:fc:fb:c9:22:62:8c:f3:c2:51: 11:bf:3d:41:0b:10:7b:6b:0f:45:ad:09:c5:0a:01:a7:b3:48: 27:64:d3:dd:2f:a2:6b:b7:f3:7c:39:cd:7c:db:6f:5b:cc:f3: c4:32:87:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYxNUYxMTAvBgNVBAUTKDRDNzBFMDIwMzJFQTU5QzJBRkQ1NDFBMTg3MEQ3NEIw NDBEMUI2QTIwHhcNMjYwMzI4MTk1MTA0WhcNMjYwNDA0MTk1MTA0WjAYMRYwFAYD VQQDEw02OWM4MzEyOC1kZTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJeLfEgLdfiHwL36RTCihMKopwEYBIvJZeOn39jMPAhX810BeZ1Q9yEJghXi G3ttiSkx3jAKDnno289ApI+XePHkWHvSiWGO5pAieg4h4zSkP62Wcds1Ls5S6F1F axEJoC/vi5sdc6Lz4JSN1w1r9/chhtZu/ATpELuVAaS9eXi/L4R1l2zIy1S9sYa7 AAAX9ZXOQjEe5kbitAGL5YuPiKHM0FCsrGRUBAWVxOUsBCwlry9JCJUde47T39gd dojrHSUuGGUvhUNOPaNgtgMB4nGwf0C01EW1LXpktI4q0SmFVfn1J3Rc0k/ogDBv ID8WM24rznq9rFMbhL+71SpFswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDVhVCDY 3bpOeEFsFpJJnj594DXdMB8GA1UdIwQYMBaAFExw4CAy6lnCr9VBoYcNdLBA0bai MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjE1Ri9GMzEyQ0EyNkE2 M0YxMUVBOEQwNjgyNEFDNEY5QUUwMi9USERnSURMcVdjS3YxVUdoaHcxMHNFRFJ0 cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RIRGdJRExxV2NLdjFVR2hodzEwc0VEUnRxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjE1Ri9GMzEyQ0EyNkE2M0YxMUVBOEQwNjgyNEFDNEY5QUUwMi9USERnSURMcVdj S3YxVUdoaHcxMHNFRFJ0cUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqREZh/dLEKUGawbtvQXbqd1WpYbvVatlgzyLdQjFzn/nqoRjdKFneh3ci+N+ tZIKagFWqvUA4KCqE8oMt331Np9SJSrb+YnbEZ6mT2x0/f/x5ku7VVroJVpPRlKN Ie5fhLslz5c/R1NVdLbliJon1SWP7RkLS2VM5bC/6jdT2Ug//lwCRSRSb022ZGfV QYOZ8Rt8SlZubPrLu6GhsBKFO7+8sfo2ELIrjYWi1L15dlGIh+oAtzc7EXgRJeXD IUQs02U5knsGtJSJ1i79sbnE/PvJImKM88JREb89QQsQe2sPRa0JxQoBp7NIJ2TT 3S+ia7fzfDnNfNtvW8zzxDKHXw== -----END CERTIFICATE-----Generated at Sun Mar 29 18:35:53 2026 by rpki-client