$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft File: -a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft (raw, json) Hash identifier: oZcsbJuWFVZmnAM9B6ZY1/w87J3vPLL6RJDboWa5lOU= Subject key identifier: 8D:29:80:B0:A9:03:E4:85:0C:9E:B4:F4:48:0E:11:CB:7F:BB:26:48 Authority key identifier: F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 Certificate issuer: /CN=A91DBAA3/serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft Manifest number: 3C Signing time: Sun 29 Mar 2026 08:12:10 +0000 Manifest this update: Sun 29 Mar 2026 08:12:09 +0000 Manifest next update: Sun 05 Apr 2026 08:12:09 +0000 Files and hashes: 1: -a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl (hash: 9yxAtBzY22mp/VcS3WKL+7rxQv8bHtANGBvw30s9ty8=) 2: D0B6868A1D1B11F1ACF733B0103D8C67.roa (hash: rogl+yV8mqomZi5XFY8zGIncIfCI6Ju2NLYZxXN71x0=) 3: CF0F37FA1D1B11F1ACF733B0103D8C67.roa (hash: Enic89W+OV3hzIdxS0CHvDqgnWq3iYz6oFq51hnxs94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 08:12:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAA3, serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Validity Not Before: Mar 29 08:12:09 2026 GMT Not After : Apr 5 08:12:09 2026 GMT Subject: CN=69c8ded9-8217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9d:c2:32:39:f9:b4:bb:8a:b8:93:d2:d9:5b: eb:da:06:a2:ed:e0:1c:fb:5d:61:ad:a8:c0:8d:2f: 3c:c7:60:31:69:8e:62:2e:85:46:11:7f:de:a0:46: 4c:10:b3:43:d8:aa:90:99:22:c5:f8:6a:b5:f9:7f: ca:3b:11:c4:5d:9d:b7:9b:70:c0:6f:6f:b5:94:49: 6c:34:5a:99:8e:94:9b:1f:98:b6:03:eb:b6:b9:f6: b5:4e:b6:5a:53:e2:ff:03:a0:7b:10:6e:9b:6c:b2: 10:ec:11:e8:06:0c:30:8d:b6:0f:e6:75:62:98:cf: 85:e2:9d:04:97:46:9a:62:39:3c:96:82:b4:a8:12: f2:77:40:8e:bb:3a:72:a7:73:df:4b:12:fd:a4:5a: 93:aa:1f:77:b3:ee:12:7a:4a:84:76:e5:d4:37:14: ea:21:24:9c:da:b1:d8:e6:7e:2b:24:b1:87:db:ab: ec:8a:cc:19:b2:5f:93:f5:6c:1a:d1:6b:18:29:d3: b8:38:67:48:e7:bd:db:95:e8:e2:05:c0:3d:4a:81: 34:30:92:03:16:84:ad:d8:d0:8e:5c:b9:23:24:19: 9e:ff:40:ca:c7:eb:5a:c4:78:06:80:6a:4a:83:b5: 89:8b:37:15:86:ce:1d:46:07:2d:18:1d:ce:9b:b9: 49:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:29:80:B0:A9:03:E4:85:0C:9E:B4:F4:48:0E:11:CB:7F:BB:26:48 X509v3 Authority Key Identifier: keyid:F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:18:07:db:db:52:ee:7b:b3:a5:ad:56:27:6d:06:f4:48:b3: 70:dd:38:e9:e8:c2:66:56:78:47:ac:3f:7a:f3:75:0d:33:c4: 9a:96:29:62:bb:4d:7d:09:86:9c:5d:09:dc:70:e0:2b:bc:bf: 23:c8:b7:23:e8:47:74:54:41:0f:ba:91:e7:f4:d2:f4:45:3c: cf:3a:ac:ae:c7:76:46:53:14:1b:f4:64:0b:68:da:27:57:9e: bb:df:c4:f6:ab:66:87:29:97:79:b1:27:cc:9e:db:19:08:29: 9c:ee:75:a3:35:9f:9d:cc:13:f8:47:68:ce:51:5a:81:73:10: 58:b5:32:e4:12:1a:11:ac:81:33:e8:52:d9:2a:ae:e0:c6:22: 09:51:86:45:74:b1:e0:bd:3e:e2:9b:0f:41:3c:6e:a3:e7:2c: ef:c5:60:e5:42:cb:64:2d:5d:ee:76:cb:9d:54:e0:8c:fd:5e: a3:be:eb:9e:6a:c0:fb:9e:bf:07:54:db:49:0e:ad:ab:30:20: 4b:8b:99:64:93:43:b4:40:95:e9:1c:20:a8:b6:dd:c9:46:ef: 0e:16:35:43:a8:4a:70:c0:44:9b:c3:57:98:55:49:cd:d6:36: 79:9e:3a:ba:08:e3:2e:e4:f3:a3:60:22:c0:40:45:a2:88:0c: 5b:36:f7:29 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkFBMzExMC8GA1UEBRMoRjlBRTVFMkE5REM4MEI1MUVBQTc1NzcyNzhDM0RFMDYx QTgwQUI2MzAeFw0yNjAzMjkwODEyMDlaFw0yNjA0MDUwODEyMDlaMBgxFjAUBgNV BAMTDTY5YzhkZWQ5LTgyMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBncIyOfm0u4q4k9LZW+vaBqLt4Bz7XWGtqMCNLzzHYDFpjmIuhUYRf96gRkwQ s0PYqpCZIsX4arX5f8o7EcRdnbebcMBvb7WUSWw0WpmOlJsfmLYD67a59rVOtlpT 4v8DoHsQbptsshDsEegGDDCNtg/mdWKYz4XinQSXRppiOTyWgrSoEvJ3QI67OnKn c99LEv2kWpOqH3ez7hJ6SoR25dQ3FOohJJzasdjmfisksYfbq+yKzBmyX5P1bBrR axgp07g4Z0jnvduV6OIFwD1KgTQwkgMWhK3Y0I5cuSMkGZ7/QMrH61rEeAaAakqD tYmLNxWGzh1GBy0YHc6buUmDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUjSmAsKkD 5IUMnrT0SA4Ry3+7JkgwHwYDVR0jBBgwFoAU+a5eKp3IC1Hqp1dyeMPeBhqAq2Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCQUEzLzFDMTc5MTNBRDkw RDExRjA4NjgwRDVGMTdDRDM2NDFELy1hNWVLcDNJQzFIcXAxZHllTVBlQmhxQXEy TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLWE1ZUtwM0lDMUhxcDFkeWVNUGVCaHFBcTJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC QUEzLzFDMTc5MTNBRDkwRDExRjA4NjgwRDVGMTdDRDM2NDFELy1hNWVLcDNJQzFI cXAxZHllTVBlQmhxQXEyTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDMGAfb21Lue7OlrVYnbQb0SLNw3Tjp6MJmVnhHrD9683UNM8Saliliu019CYac XQnccOArvL8jyLcj6Ed0VEEPupHn9NL0RTzPOqyux3ZGUxQb9GQLaNonV56738T2 q2aHKZd5sSfMntsZCCmc7nWjNZ+dzBP4R2jOUVqBcxBYtTLkEhoRrIEz6FLZKq7g xiIJUYZFdLHgvT7imw9BPG6j5yzvxWDlQstkLV3udsudVOCM/V6jvuueasD7nr8H VNtJDq2rMCBLi5lkk0O0QJXpHCCott3JRu8OFjVDqEpwwESbw1eYVUnN1jZ5njq6 COMu5POjYCLAQEWiiAxbNvcp -----END CERTIFICATE-----Generated at Mon Mar 30 15:39:25 2026 by rpki-client