$ rpki-client -vvf rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft File: 9fW2D5FdvXIk_85g8fnQXoNwLvM.mft (raw, json) Hash identifier: utXboq6Xr0hCkTC+wpE+2kmaW8LUsVbKwt4yp3Y9yu0= Subject key identifier: 8E:97:96:42:94:8D:39:AC:A7:E6:DE:F0:99:F3:FE:4B:03:8E:D1:83 Authority key identifier: F5:F5:B6:0F:91:5D:BD:72:24:FF:CE:60:F1:F9:D0:5E:83:70:2E:F3 Certificate issuer: /CN=A91E585B/serialNumber=F5F5B60F915DBD7224FFCE60F1F9D05E83702EF3 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fW2D5FdvXIk_85g8fnQXoNwLvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft Manifest number: 22 Signing time: Sun 15 Mar 2026 07:30:28 +0000 Manifest this update: Sun 15 Mar 2026 07:30:28 +0000 Manifest next update: Sun 22 Mar 2026 07:30:28 +0000 Files and hashes: 1: 9fW2D5FdvXIk_85g8fnQXoNwLvM.crl (hash: tNyRhNnPV6iipHPek2i7Cpcy9PFsI6rlvDxA04N9jis=) 2: F59E9504F20611F0B4D6054A4A6F56BC.roa (hash: fJ10i1I3CVn/cq/HNYJ87da7lOqBMrG/ft9ahjiVUac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.crl rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fW2D5FdvXIk_85g8fnQXoNwLvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 05:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E585B, serialNumber=F5F5B60F915DBD7224FFCE60F1F9D05E83702EF3 Validity Not Before: Mar 15 07:30:28 2026 GMT Not After : Mar 22 07:30:28 2026 GMT Subject: CN=69b66014-6364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:69:c0:0d:e6:d1:1a:6a:fe:01:01:2b:6d:3b: bf:ca:71:11:f9:4c:9a:5c:36:ea:8a:3b:d2:05:a3: 4b:f1:d7:47:b4:55:ba:4b:d6:f8:e9:5b:1a:f7:2a: 5c:d5:b4:47:5c:63:3d:48:90:33:65:f1:d4:3b:33: c7:ba:3e:82:4f:fc:b1:da:6d:3c:ee:3a:af:d8:5b: 61:5e:44:a0:19:f9:6c:6d:9b:2c:a7:64:a7:06:9f: 7c:61:1b:fe:08:92:fb:18:8c:bc:56:70:28:64:3b: c2:5d:c7:0c:73:37:0e:76:b0:c5:8e:0b:98:bb:d0: 2e:85:fa:c7:ea:a0:36:bc:d6:5d:6c:34:67:c0:05: 56:24:f4:b4:0b:04:2a:48:b3:2f:03:24:42:c1:37: 9e:af:af:1c:57:6f:e8:4c:44:04:18:f5:c3:1f:f1: f6:13:89:bc:b4:04:8e:65:0d:cc:65:68:89:9e:df: c4:2d:69:08:b8:fa:b4:a3:de:61:aa:c2:10:f6:bd: 1a:df:3d:35:5f:e5:c7:c4:30:8c:4d:ec:92:df:c5: d4:80:77:be:6d:11:09:ed:30:a2:52:bd:2a:f1:a3: c7:21:d0:22:cb:a7:6f:c4:4c:ca:6f:37:91:32:3b: 5f:ca:d1:41:97:21:e0:78:94:be:f6:52:70:16:9c: 7c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:97:96:42:94:8D:39:AC:A7:E6:DE:F0:99:F3:FE:4B:03:8E:D1:83 X509v3 Authority Key Identifier: keyid:F5:F5:B6:0F:91:5D:BD:72:24:FF:CE:60:F1:F9:D0:5E:83:70:2E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fW2D5FdvXIk_85g8fnQXoNwLvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ef:7b:bb:3a:9a:45:8e:8c:83:5a:52:af:ab:de:c0:16:52: 80:07:af:7e:98:a9:35:28:3d:a0:67:1e:79:a5:d2:61:fc:4d: 28:54:be:d9:db:d2:ce:bf:83:e3:ab:62:84:6a:46:ab:02:e2: 21:dd:47:40:dd:a7:8b:bd:21:9a:55:5a:47:86:11:b3:9d:3d: a8:9d:b7:3b:ec:82:a3:05:10:f4:3a:b8:9e:57:ad:00:1e:a6: f2:42:f1:62:fe:33:30:c8:d2:01:f1:d5:80:0c:95:74:76:31: b9:fb:dd:f9:80:80:04:87:d6:79:ae:d6:f7:a1:b8:1f:a1:1d: 77:fd:d2:1c:11:c3:67:ee:58:c5:bc:0d:aa:4e:56:ce:08:fd: 13:27:bc:ba:03:fa:5e:53:9a:f2:4a:9e:47:8e:cf:2d:a0:f3: f6:6e:3a:37:6b:fb:7f:8f:51:a1:96:d0:5d:33:9b:e9:ae:8c: 89:a7:8c:fd:0b:f5:d6:be:57:0e:a5:60:5d:90:9a:50:ab:ec: 46:08:e0:61:0d:fd:3a:ed:4f:5c:9a:ce:40:09:6a:90:3a:8a: a0:30:cf:eb:fc:41:d1:99:12:7c:51:87:bb:d2:f7:09:b7:e5: c6:5d:30:34:f7:29:58:b8:51:49:4e:b7:2a:f2:30:8a:f7:f6: 06:ea:51:8c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTg1QjExMC8GA1UEBRMoRjVGNUI2MEY5MTVEQkQ3MjI0RkZDRTYwRjFGOUQwNUU4 MzcwMkVGMzAeFw0yNjAzMTUwNzMwMjhaFw0yNjAzMjIwNzMwMjhaMBgxFjAUBgNV BAMTDTY5YjY2MDE0LTYzNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHacAN5tEaav4BASttO7/KcRH5TJpcNuqKO9IFo0vx10e0VbpL1vjpWxr3KlzV tEdcYz1IkDNl8dQ7M8e6PoJP/LHabTzuOq/YW2FeRKAZ+WxtmyynZKcGn3xhG/4I kvsYjLxWcChkO8JdxwxzNw52sMWOC5i70C6F+sfqoDa81l1sNGfABVYk9LQLBCpI sy8DJELBN56vrxxXb+hMRAQY9cMf8fYTiby0BI5lDcxlaIme38QtaQi4+rSj3mGq whD2vRrfPTVf5cfEMIxN7JLfxdSAd75tEQntMKJSvSrxo8ch0CLLp2/ETMpvN5Ey O1/K0UGXIeB4lL72UnAWnHwXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUjpeWQpSN Oayn5t7wmfP+SwOO0YMwHwYDVR0jBBgwFoAU9fW2D5FdvXIk/85g8fnQXoNwLvMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1ODVCL0I4NkNDRjU4RjIw NTExRjA4MThCNzczMjRBNkY1NkJDLzlmVzJENUZkdlhJa184NWc4Zm5RWG9Od0x2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWZXMkQ1RmR2WElrXzg1ZzhmblFYb053THZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 ODVCL0I4NkNDRjU4RjIwNTExRjA4MThCNzczMjRBNkY1NkJDLzlmVzJENUZkdlhJ a184NWc4Zm5RWG9Od0x2TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCN73u7OppFjoyDWlKvq97AFlKAB69+mKk1KD2gZx55pdJh/E0oVL7Z29LOv4Pj q2KEakarAuIh3UdA3aeLvSGaVVpHhhGznT2onbc77IKjBRD0OrieV60AHqbyQvFi /jMwyNIB8dWADJV0djG5+935gIAEh9Z5rtb3obgfoR13/dIcEcNn7ljFvA2qTlbO CP0TJ7y6A/peU5rySp5Hjs8toPP2bjo3a/t/j1GhltBdM5vproyJp4z9C/XWvlcO pWBdkJpQq+xGCOBhDf067U9cms5ACWqQOoqgMM/r/EHRmRJ8UYe70vcJt+XGXTA0 9ylYuFFJTrcq8jCK9/YG6lGM -----END CERTIFICATE-----Generated at Sun Mar 15 09:17:53 2026 by rpki-client