$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft File: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft (raw, json) Hash identifier: cVdPkuI7HJjxf/jnvIOXeh/95pOCzpTFYkrEP+BZqtM= Subject key identifier: 47:CB:17:2C:EC:55:DD:FA:7B:89:17:33:0C:4E:50:40:53:88:1D:AF Authority key identifier: 37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB Certificate issuer: /CN=A91E3E33/serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Certificate serial: 12B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft Manifest number: 128A Signing time: Wed 18 Mar 2026 16:55:45 +0000 Manifest this update: Wed 18 Mar 2026 16:55:44 +0000 Manifest next update: Wed 25 Mar 2026 16:55:44 +0000 Files and hashes: 1: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl (hash: ylZyJrL2Wvkmjs1x1WuyGmVUIWQzpqLc3UamW0zBKQI=) 2: 29ED0D46839011EE946C5E63C4F9AE02.roa (hash: Mk7axMLu02fCkeBHGlKgm1yoa0p6/cjOgQ2Y7Q06Kao=) 3: D0B8C09E1BBF11EAA64ECF70C4F9AE02.roa (hash: QNLelKdMSlDKmsbvqvRzrLkhu/2hfJJqmOa+I6J1bAk=) 4: 4551BE2CD19D11EAA120EE14C4F9AE02.roa (hash: yX0Uzg9eTPoxhzg9lrLk/1K20OmA34T+jetmGie5oOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 16:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4786 (0x12b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E33, serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Validity Not Before: Mar 18 16:55:44 2026 GMT Not After : Mar 25 16:55:44 2026 GMT Subject: CN=69bad911-f447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d1:50:d1:d0:9e:21:43:7e:f0:4b:27:10:16: 4e:45:43:0e:4f:78:51:b8:48:fa:e3:f5:ef:22:8e: c9:03:7d:a2:12:45:00:a8:97:f4:79:82:db:6b:d6: 42:46:68:34:1b:f3:eb:66:24:80:88:ed:09:fe:68: 2e:e6:88:66:ae:6e:0c:51:b5:08:ed:86:e2:ce:21: bf:08:ba:41:45:2d:8e:e9:cd:19:1a:49:5c:c0:b0: 3b:b8:52:25:8b:ce:74:60:09:ad:32:53:00:4f:b3: 0c:81:95:60:fe:5d:c4:8b:6f:88:e6:e4:4d:73:99: 43:c1:2f:24:7e:38:c4:b9:c6:8f:4a:17:62:eb:5b: 47:73:ff:35:dc:5a:fc:f4:1c:ce:ef:ef:c7:72:cf: 88:8a:c1:ac:64:7e:27:74:c0:73:ab:66:5b:8a:34: 75:10:43:a2:06:90:63:80:86:5c:1c:c2:d7:7f:f8: 9a:72:37:4d:66:da:82:63:ff:cf:a9:8b:de:08:a1: e7:7c:88:34:f1:47:bc:55:57:fe:b0:e3:bb:8f:a5: 93:54:73:4e:cf:90:d9:99:8e:3e:b3:bf:a7:20:7d: 69:41:dd:e2:39:9b:e5:b6:b7:c0:8f:59:f4:b0:5d: e9:bd:6a:94:8f:dc:7b:52:fa:a4:b0:de:b3:d2:6e: 86:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CB:17:2C:EC:55:DD:FA:7B:89:17:33:0C:4E:50:40:53:88:1D:AF X509v3 Authority Key Identifier: keyid:37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:32:15:bc:30:74:63:0b:35:e0:b0:c2:0e:79:df:ab:af:d2: 59:a9:19:57:be:35:be:c3:1b:58:0f:06:f0:af:bc:16:03:68: df:7c:d8:c9:af:75:b1:26:41:92:cd:46:f7:7a:c0:98:f4:ec: 32:1b:dd:24:a3:d3:56:bd:53:61:8d:82:b5:85:ed:e6:9e:0b: cf:a5:5e:62:3e:12:33:81:22:5d:83:3d:7d:5c:1f:bf:7d:09: 56:65:0d:39:5b:5a:ee:f8:00:87:e8:9a:73:db:6c:b5:4f:93: d9:1a:36:4f:2b:5b:b5:46:ff:1a:a9:65:34:90:60:9f:ba:24: 2c:82:04:74:6f:37:fd:39:bb:cf:95:6a:c1:e1:6a:35:50:f7: 82:f7:2e:e5:06:df:12:53:3c:de:7f:4f:43:8d:cc:fb:0d:19: 6b:a7:07:1d:63:ce:14:c5:c3:c6:9d:bb:1e:ae:d5:69:9a:ac: 81:08:43:f8:4f:fd:c2:0c:15:ec:ee:e9:a0:8c:1a:95:35:7b: cc:1f:ad:41:af:43:c9:36:05:60:fe:30:be:59:a3:ed:e7:9b: f1:08:31:a3:88:66:b5:9b:03:b9:0f:1e:8d:b5:0f:e7:60:a4: a5:25:7b:3f:61:6f:f4:ce:0c:55:f3:f5:ba:0f:c3:d9:c0:40: 1b:c1:74:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICErIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFMzMxMTAvBgNVBAUTKDM3OTc0MzcxNENFMDEyMjMwQUE5NzhCQjFBQThDNzkw RTcwNjY3QUIwHhcNMjYwMzE4MTY1NTQ0WhcNMjYwMzI1MTY1NTQ0WjAYMRYwFAYD VQQDEw02OWJhZDkxMS1mNDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNFQ0dCeIUN+8EsnEBZORUMOT3hRuEj64/XvIo7JA32iEkUAqJf0eYLba9ZC Rmg0G/PrZiSAiO0J/mgu5ohmrm4MUbUI7YbiziG/CLpBRS2O6c0ZGklcwLA7uFIl i850YAmtMlMAT7MMgZVg/l3Ei2+I5uRNc5lDwS8kfjjEucaPShdi61tHc/813Fr8 9BzO7+/Hcs+IisGsZH4ndMBzq2ZbijR1EEOiBpBjgIZcHMLXf/iacjdNZtqCY//P qYveCKHnfIg08Ue8VVf+sOO7j6WTVHNOz5DZmY4+s7+nIH1pQd3iOZvltrfAj1n0 sF3pvWqUj9x7UvqksN6z0m6GswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEfLFyzs Vd36e4kXMwxOUEBTiB2vMB8GA1UdIwQYMBaAFDeXQ3FM4BIjCql4uxqox5DnBmer MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UzMy84NzdBNzlCNkU5 RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0VpTUtxWGk3R3FqSGtPY0da NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041ZERjVXpnRWlNS3FYaTdHcWpIa09jR1o2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0UzMy84NzdBNzlCNkU5RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0Vp TUtxWGk3R3FqSGtPY0daNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfTIVvDB0Yws14LDCDnnfq6/SWakZV741vsMbWA8G8K+8FgNo33zYya91sSZB ks1G93rAmPTsMhvdJKPTVr1TYY2CtYXt5p4Lz6VeYj4SM4EiXYM9fVwfv30JVmUN OVta7vgAh+iac9tstU+T2Ro2TytbtUb/GqllNJBgn7okLIIEdG83/Tm7z5VqweFq NVD3gvcu5QbfElM83n9PQ43M+w0Za6cHHWPOFMXDxp27Hq7VaZqsgQhD+E/9wgwV 7O7poIwalTV7zB+tQa9DyTYFYP4wvlmj7eeb8Qgxo4hmtZsDuQ8ejbUP52CkpSV7 P2Fv9M4MVfP1ug/D2cBAG8F02Q== -----END CERTIFICATE-----Generated at Fri Mar 20 14:37:53 2026 by rpki-client