$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft File: 75XL1Zg1JkDUKwqsYABBBltNxEI.mft (raw, json) Hash identifier: 2YY3Y08/ksRjAQnu7O0JnFPgdp7FkNb5e2O9zk+sW0M= Subject key identifier: F2:29:10:B4:01:8C:54:8B:3C:3E:41:B1:B8:C2:DB:F6:49:E5:2E:9B Authority key identifier: EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 Certificate issuer: /CN=A91DE8C5/serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Certificate serial: 0D06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft Manifest number: 0CF3 Signing time: Tue 24 Mar 2026 18:01:40 +0000 Manifest this update: Tue 24 Mar 2026 18:01:40 +0000 Manifest next update: Tue 31 Mar 2026 18:01:40 +0000 Files and hashes: 1: 75XL1Zg1JkDUKwqsYABBBltNxEI.crl (hash: AP1bjjUq2zyAH8evuT3xjV1OxadbD9bPN9sDQX3mz3o=) 2: 44B3B572011611EA972FFC57C4F9AE02.roa (hash: 3w1ZCU5DBe8qob2yfo+1JFPIsMpuEFgSBiA3mSkvjmQ=) 3: 452DDFB4011611EA972FFC57C4F9AE02.roa (hash: UvXINsVdmgJ+8axZ9DhL372u1E0J1vH5XbDCRfLraeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3334 (0xd06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE8C5, serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Validity Not Before: Mar 24 18:01:40 2026 GMT Not After : Mar 31 18:01:40 2026 GMT Subject: CN=69c2d184-20ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:59:6c:bf:94:8d:fa:e6:be:4f:b5:a2:a8:7b: b7:c5:97:e5:5c:93:21:ff:f7:69:61:3a:60:f0:90: 56:97:ae:e0:9f:97:6b:78:67:ff:fc:3e:e8:24:9c: 68:ea:b1:f8:f5:1b:88:d8:e1:17:0a:3d:f6:01:4c: ac:46:92:fe:7d:21:ec:ac:e5:2a:b8:d6:1b:37:ce: 8c:f5:bb:cf:4e:5c:38:45:17:60:e9:fb:28:4f:1e: 5f:b5:2c:14:26:49:a0:3e:f9:a4:3d:a0:b6:59:7c: a0:f6:18:4d:c3:68:1d:e7:43:ad:40:bb:76:e4:d2: f9:a5:d8:2d:c3:92:d4:9d:da:cf:2a:6f:81:30:c4: 47:b6:6b:f1:6f:91:55:dc:49:bc:2f:f3:df:54:26: 79:63:3c:cf:53:0d:e4:06:94:ad:a3:3c:33:79:9f: e0:a2:0f:bb:36:d8:79:0c:2d:60:bc:ee:7d:5a:12: 22:6d:de:58:fc:f4:33:19:28:e2:a3:9c:e4:e0:0a: 1f:bc:62:9b:df:bf:0a:d0:f0:a5:a0:ca:e5:da:b8: 50:dc:8a:7b:6c:e4:8e:60:97:83:1c:6b:22:09:72: 62:f3:43:6f:33:6f:24:1b:15:6d:af:46:eb:09:82: c4:c3:b8:29:05:f1:33:fd:9e:16:68:f9:73:6f:9a: a5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:29:10:B4:01:8C:54:8B:3C:3E:41:B1:B8:C2:DB:F6:49:E5:2E:9B X509v3 Authority Key Identifier: keyid:EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:4e:a1:76:87:45:e7:16:3e:17:c0:be:e7:f5:66:94:13:5f: 2b:c5:78:e2:f4:1b:e1:e1:93:2c:b5:9d:76:f3:44:d5:e8:fc: 06:ae:21:38:a7:c6:74:1d:5d:e5:9a:22:aa:a6:8c:8a:e9:ab: fb:86:51:6d:2d:21:48:3e:54:3d:02:5d:92:60:31:bf:64:ec: 2e:a6:5a:09:77:1a:bf:4c:69:90:99:1d:4d:28:63:62:14:2c: 88:bf:01:c8:bc:29:21:e9:25:a4:c7:a2:03:14:d8:79:b6:ef: a5:5f:25:cb:95:e5:35:38:90:ef:9d:5a:6c:e4:0c:9c:4c:48: 77:b0:8d:bf:ef:4b:49:79:d0:7a:6a:5a:02:4b:41:b6:94:f1: ac:e2:db:ca:44:50:ad:4f:82:93:e0:d1:49:e5:4a:80:ec:f5: e9:38:73:a8:4d:4b:0f:59:00:ec:c9:19:ce:92:41:0e:fd:c0: d0:0f:38:6b:26:0f:15:cf:97:e4:6c:0f:6e:df:a2:51:85:97: 73:b4:65:00:6e:30:7c:7e:d5:c5:3e:7d:38:79:fa:96:13:cf: 31:c7:bc:b2:4d:d5:c9:01:f2:b6:33:26:8f:8a:40:b4:6d:cd: 3b:08:a2:33:ba:3b:2c:a9:e6:a5:7e:64:25:40:2c:ad:f8:e7: 88:a2:83:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU4QzUxMTAvBgNVBAUTKEVGOTVDQkQ1OTgzNTI2NDBENDJCMEFBQzYwMDA0MTA2 NUI0REM0NDIwHhcNMjYwMzI0MTgwMTQwWhcNMjYwMzMxMTgwMTQwWjAYMRYwFAYD VQQDEw02OWMyZDE4NC0yMGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFlsv5SN+ua+T7WiqHu3xZflXJMh//dpYTpg8JBWl67gn5dreGf//D7oJJxo 6rH49RuI2OEXCj32AUysRpL+fSHsrOUquNYbN86M9bvPTlw4RRdg6fsoTx5ftSwU JkmgPvmkPaC2WXyg9hhNw2gd50OtQLt25NL5pdgtw5LUndrPKm+BMMRHtmvxb5FV 3Em8L/PfVCZ5YzzPUw3kBpStozwzeZ/gog+7Nth5DC1gvO59WhIibd5Y/PQzGSji o5zk4AofvGKb378K0PCloMrl2rhQ3Ip7bOSOYJeDHGsiCXJi80NvM28kGxVtr0br CYLEw7gpBfEz/Z4WaPlzb5ql6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPIpELQB jFSLPD5BsbjC2/ZJ5S6bMB8GA1UdIwQYMBaAFO+Vy9WYNSZA1CsKrGAAQQZbTcRC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERThDNS8wNTJDODRGQzAx MTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUprRFVLd3FzWUFCQkJsdE54 RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1WEwxWmcxSmtEVUt3cXNZQUJCQmx0TnhFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RThDNS8wNTJDODRGQzAxMTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUpr RFVLd3FzWUFCQkJsdE54RUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALE6hdodF5xY+F8C+5/VmlBNfK8V44vQb4eGTLLWddvNE1ej8Bq4hOKfGdB1d 5ZoiqqaMiumr+4ZRbS0hSD5UPQJdkmAxv2TsLqZaCXcav0xpkJkdTShjYhQsiL8B yLwpIeklpMeiAxTYebbvpV8ly5XlNTiQ751abOQMnExId7CNv+9LSXnQempaAktB tpTxrOLbykRQrU+Ck+DRSeVKgOz16ThzqE1LD1kA7MkZzpJBDv3A0A84ayYPFc+X 5GwPbt+iUYWXc7RlAG4wfH7VxT59OHn6lhPPMce8sk3VyQHytjMmj4pAtG3NOwii M7o7LKnmpX5kJUAsrfjniKKDyA== -----END CERTIFICATE-----Generated at Wed Mar 25 22:10:52 2026 by rpki-client