$ rpki-client -vvf rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft File: A72QmhoVpFA9-tWUw8bem5RgTmY.mft (raw, json) Hash identifier: 1oZYb74Kh5z5bSuxO6ixjkF6wJKtNUuSk+xNvfbuwNE= Subject key identifier: 17:18:C1:FA:F4:5D:6E:32:C3:C9:55:1F:BD:46:79:DB:4B:99:B0:F2 Authority key identifier: 03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66 Certificate issuer: /CN=A91D873B/serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66 Certificate serial: 03D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft Manifest number: 03C9 Signing time: Sat 21 Mar 2026 00:07:12 +0000 Manifest this update: Sat 21 Mar 2026 00:07:11 +0000 Manifest next update: Sat 28 Mar 2026 00:07:11 +0000 Files and hashes: 1: A72QmhoVpFA9-tWUw8bem5RgTmY.crl (hash: JN8/x2WnhpZBrwa/LOCFTnvA0VvmEuMX6AWcwm7FHUc=) 2: E15CC33CD55011EFB17CB022C4F9AE02.roa (hash: aYot4qw3P8YllWeiZniDWXUCdYeGzmeGo07W9mBLGtQ=) 3: 5409C188C6CB11ECB185E43EC4F9AE02.roa (hash: 0a9pPFK9l1fog9k4rdhxyffTfCfNNylKzOV1up6yd0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.crl rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 982 (0x3d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D873B, serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66 Validity Not Before: Mar 21 00:07:11 2026 GMT Not After : Mar 28 00:07:11 2026 GMT Subject: CN=69bde130-a8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8d:86:06:6e:37:c8:a9:a3:3b:04:e2:eb:1b: 86:9a:2c:4c:bc:07:d7:e8:8b:8a:c9:16:fd:7e:6c: ac:88:a6:2f:b2:cb:1b:73:6f:bd:08:06:e8:55:18: 30:17:06:f4:93:5a:a5:3f:40:59:3b:32:89:5d:59: 69:e2:e5:fa:f5:38:df:e8:bc:c5:16:db:30:25:da: 29:55:1d:07:3c:14:8e:57:c3:c0:af:f8:6a:e2:23: 02:a1:c2:cd:1e:09:5a:2d:69:e4:c2:61:1e:49:1b: ed:14:4f:22:49:ae:bc:f8:e7:70:05:dc:4a:b0:a0: 33:b0:67:a0:83:63:34:f0:c8:9a:34:85:0d:4b:39: 2a:ea:e3:24:d8:f8:61:d0:e1:39:ac:f5:bb:f2:b0: af:28:d3:b0:2f:ad:e7:12:08:2e:8f:4f:10:4e:dc: 46:40:3e:3a:41:0a:f9:9c:ae:96:d3:59:1e:c4:d6: f1:a0:76:64:8d:2f:86:93:27:ea:23:d2:3c:40:b7: 8e:7f:99:fe:2d:6d:38:f5:60:66:22:38:77:c9:be: 59:2d:a5:d1:52:cf:59:34:41:51:c2:ee:48:b4:f0: 9e:dc:53:71:5c:3e:f3:c8:66:f5:be:d9:c9:cb:a3: ac:cf:ae:4b:de:44:d7:98:3e:ce:3d:a8:f3:18:15: b6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:18:C1:FA:F4:5D:6E:32:C3:C9:55:1F:BD:46:79:DB:4B:99:B0:F2 X509v3 Authority Key Identifier: keyid:03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:d5:98:19:ed:50:71:ab:e0:6f:75:c4:d0:65:bf:66:15:6b: 08:e3:94:df:8b:9e:c8:88:9f:a6:cd:54:3c:17:ac:9e:29:9f: 3c:a4:3a:58:26:92:30:c2:07:06:72:21:8b:fd:f4:2c:99:8e: 4d:c3:e9:7a:0b:a0:46:79:0b:24:0e:4f:36:2b:d8:fb:b7:c4: f4:ca:a6:8a:86:2c:4b:ba:dc:b6:59:40:11:0d:29:10:41:fa: a5:a4:b1:f1:10:8c:43:81:6a:ca:fc:66:0b:35:90:17:8a:23: 46:5e:5c:c7:7b:20:af:30:75:c3:5f:15:ee:7e:c3:bc:07:f3: 7f:55:8b:17:45:03:8d:8c:e9:33:14:3f:21:8b:44:df:92:fd: 20:30:93:94:ff:94:07:9a:62:14:34:cd:19:ff:37:5d:03:c7: 39:30:b8:59:80:14:56:52:e8:35:f7:44:8c:52:80:ce:c3:29: cb:ed:31:31:2f:95:89:bc:5e:32:e6:d2:bd:da:8b:58:49:e3: c9:36:de:b8:12:1b:72:cf:60:f5:1a:3e:8c:60:f7:38:83:c7: ad:31:c7:bf:4a:e6:be:e1:2b:9e:cb:e7:92:79:be:03:b2:d4: f4:c0:5a:8d:ee:cf:53:56:f3:49:cb:34:41:ee:ec:4f:26:dc: f5:9e:d0:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3M0IxMTAvBgNVBAUTKDAzQkQ5MDlBMUExNUE0NTAzREZBRDU5NEMzQzZERTlC OTQ2MDRFNjYwHhcNMjYwMzIxMDAwNzExWhcNMjYwMzI4MDAwNzExWjAYMRYwFAYD VQQDEw02OWJkZTEzMC1hOGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0o2GBm43yKmjOwTi6xuGmixMvAfX6IuKyRb9fmysiKYvsssbc2+9CAboVRgw Fwb0k1qlP0BZOzKJXVlp4uX69Tjf6LzFFtswJdopVR0HPBSOV8PAr/hq4iMCocLN HglaLWnkwmEeSRvtFE8iSa68+OdwBdxKsKAzsGegg2M08MiaNIUNSzkq6uMk2Phh 0OE5rPW78rCvKNOwL63nEgguj08QTtxGQD46QQr5nK6W01kexNbxoHZkjS+Gkyfq I9I8QLeOf5n+LW049WBmIjh3yb5ZLaXRUs9ZNEFRwu5ItPCe3FNxXD7zyGb1vtnJ y6Osz65L3kTXmD7OPajzGBW2RwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBcYwfr0 XW4yw8lVH71GedtLmbDyMB8GA1UdIwQYMBaAFAO9kJoaFaRQPfrVlMPG3puUYE5m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODczQi80QTE2QkJEQUM2 MDQxMUVDQUE5NDU5NEJDNEY5QUUwMi9BNzJRbWhvVnBGQTktdFdVdzhiZW01UmdU bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3MlFtaG9WcEZBOS10V1V3OGJlbTVSZ1RtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODczQi80QTE2QkJEQUM2MDQxMUVDQUE5NDU5NEJDNEY5QUUwMi9BNzJRbWhvVnBG QTktdFdVdzhiZW01UmdUbVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkNWYGe1Qcavgb3XE0GW/ZhVrCOOU34ueyIifps1UPBesnimfPKQ6WCaSMMIH BnIhi/30LJmOTcPpegugRnkLJA5PNivY+7fE9MqmioYsS7rctllAEQ0pEEH6paSx 8RCMQ4FqyvxmCzWQF4ojRl5cx3sgrzB1w18V7n7DvAfzf1WLF0UDjYzpMxQ/IYtE 35L9IDCTlP+UB5piFDTNGf83XQPHOTC4WYAUVlLoNfdEjFKAzsMpy+0xMS+Vibxe MubSvdqLWEnjyTbeuBIbcs9g9Ro+jGD3OIPHrTHHv0rmvuErnsvnknm+A7LU9MBa je7PU1bzScs0Qe7sTybc9Z7QPQ== -----END CERTIFICATE-----Generated at Sun Mar 22 00:12:32 2026 by rpki-client