$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft File: -apja1w-MMegupdDAVtbEhBMt6g.mft (raw, json) Hash identifier: NrVqlZDaA/MFuWO2EX2UAl19oqcM9lGb7GtWrA11WV4= Subject key identifier: 58:6C:77:3E:23:F3:53:CE:4A:F8:CE:3C:A0:15:A4:2D:34:42:BA:8B Authority key identifier: F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8 Certificate issuer: /CN=A91EE099/serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8 Certificate serial: 020E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft Manifest number: 01FC Signing time: Sat 21 Mar 2026 02:25:03 +0000 Manifest this update: Sat 21 Mar 2026 02:25:03 +0000 Manifest next update: Sat 28 Mar 2026 02:25:03 +0000 Files and hashes: 1: -apja1w-MMegupdDAVtbEhBMt6g.crl (hash: Lwpzp76FP/TAVPRA3K1+ygCnh+E0dFIyEBq+2KvsJZ4=) 2: 804FEC802F6711EEB6EECA5BC4F9AE02.roa (hash: eyr8NymwonEMsBAoYqcO5uIS3VzQALB/L7GTWt3kg9k=) 3: F5AA194CB2C911EF91AE9209C4F9AE02.roa (hash: jsG4A9B1X5RWld/1WjKWMW5kvn6PEfUEqCveLWYyYLU=) 4: 89BDDA4A2F6F11EEB73F3231C4F9AE02.roa (hash: JS/I83lnkJ+yXv//aUKTuv7mn22oJXxijweaV/2/Tbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:25:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE099, serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8 Validity Not Before: Mar 21 02:25:03 2026 GMT Not After : Mar 28 02:25:03 2026 GMT Subject: CN=69be017f-c573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e8:be:68:cf:c1:5a:80:8d:a6:12:e4:ba:89: 85:19:1a:de:27:da:68:60:7b:40:c3:a0:30:e8:d0: 45:1b:09:b4:a4:8a:4c:76:92:6e:e6:27:d3:af:ff: 99:f3:72:34:ec:a3:4d:76:98:64:fd:ee:3a:1b:18: 35:6d:db:e7:41:8f:11:6d:99:43:cf:2c:f3:46:de: 9c:33:6b:4c:d6:b8:5c:aa:e7:c7:6f:af:f0:c7:75: 2d:0e:ba:65:9c:d4:ee:c3:82:18:90:6e:05:5b:5c: 87:e2:56:48:3a:c7:51:b4:39:9d:ae:98:8b:cd:06: 69:bc:96:2d:df:6d:0c:b2:1e:55:7d:d9:7d:8e:36: b7:75:32:11:d9:66:0c:1f:2e:36:aa:4a:a7:f6:1f: 23:79:a0:c6:25:a0:90:8e:cc:01:05:34:dc:75:ea: 29:9c:a4:be:61:d0:95:d4:21:39:5a:4f:d2:d1:db: df:72:37:03:4b:d6:c7:cf:0a:80:50:cf:51:98:e1: 0d:fd:9f:95:fa:ab:fe:9a:a2:04:4a:41:50:f5:cc: 61:07:c4:51:76:e0:f5:99:9b:c4:8a:d0:ef:87:05: b9:55:6a:dc:7d:ec:d0:98:a4:10:9a:6f:e8:0f:87: b7:15:8e:0d:e6:77:ea:14:64:79:c7:1c:87:bc:66: 63:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6C:77:3E:23:F3:53:CE:4A:F8:CE:3C:A0:15:A4:2D:34:42:BA:8B X509v3 Authority Key Identifier: keyid:F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:06:66:13:14:09:53:5b:49:cb:cc:ba:f1:f8:51:c6:69:0f: f8:4e:d2:9a:58:f3:2f:76:98:f1:08:ee:ff:08:72:ed:dc:05: 20:d9:a7:c4:e2:e5:43:03:ac:4c:e4:e4:ee:11:c2:6a:8c:9c: b6:ad:35:92:3b:0c:ad:26:6e:53:21:5e:20:b5:5c:60:e4:f6: 27:59:60:16:1c:c4:1a:9a:86:2b:c5:4a:e8:02:46:0c:b3:8c: c3:4b:ce:91:0f:e6:26:23:1c:36:33:a3:b8:4e:44:af:83:68: 7b:e1:c1:5f:0f:f1:ff:e6:fd:67:5e:00:6b:8b:41:18:e2:a1: 6a:fb:2e:66:4c:eb:44:3c:a0:33:5b:d4:f8:d0:22:ca:a5:db: 11:98:88:ad:5e:98:c4:03:76:94:cc:fe:33:8c:72:e4:1a:78: ab:55:a2:80:05:82:f7:27:3c:65:b4:d6:29:70:29:a1:af:0d: cb:40:04:97:f0:b7:a2:1c:3f:0d:32:47:47:2d:af:21:db:30: 9b:68:2c:e0:53:67:23:1c:0c:cd:e7:a0:18:fa:a8:61:b7:23: b1:7f:bc:48:60:72:fa:39:13:bd:00:40:3c:86:59:70:0b:a3: 3d:79:17:62:e0:4d:74:76:de:f5:31:df:3c:49:e6:d0:7c:52: d2:7b:67:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOTkxMTAvBgNVBAUTKEY5QUE2MzZCNUMzRTMwQzdBMEJBOTc0MzAxNUI1QjEy MTA0Q0I3QTgwHhcNMjYwMzIxMDIyNTAzWhcNMjYwMzI4MDIyNTAzWjAYMRYwFAYD VQQDEw02OWJlMDE3Zi1jNTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ei+aM/BWoCNphLkuomFGRreJ9poYHtAw6Aw6NBFGwm0pIpMdpJu5ifTr/+Z 83I07KNNdphk/e46Gxg1bdvnQY8RbZlDzyzzRt6cM2tM1rhcqufHb6/wx3UtDrpl nNTuw4IYkG4FW1yH4lZIOsdRtDmdrpiLzQZpvJYt320Msh5Vfdl9jja3dTIR2WYM Hy42qkqn9h8jeaDGJaCQjswBBTTcdeopnKS+YdCV1CE5Wk/S0dvfcjcDS9bHzwqA UM9RmOEN/Z+V+qv+mqIESkFQ9cxhB8RRduD1mZvEitDvhwW5VWrcfezQmKQQmm/o D4e3FY4N5nfqFGR5xxyHvGZj4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFhsdz4j 81POSvjOPKAVpC00QrqLMB8GA1UdIwQYMBaAFPmqY2tcPjDHoLqXQwFbWxIQTLeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5OS8wMjIxRDdDRTJG NjcxMUVFODI0QURDNTlDNEY5QUUwMi8tYXBqYTF3LU1NZWd1cGREQVZ0YkVoQk10 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1hcGphMXctTU1lZ3VwZERBVnRiRWhCTXQ2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTA5OS8wMjIxRDdDRTJGNjcxMUVFODI0QURDNTlDNEY5QUUwMi8tYXBqYTF3LU1N ZWd1cGREQVZ0YkVoQk10NmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJQZmExQJU1tJy8y68fhRxmkP+E7SmljzL3aY8Qju/why7dwFINmnxOLlQwOs TOTk7hHCaoyctq01kjsMrSZuUyFeILVcYOT2J1lgFhzEGpqGK8VK6AJGDLOMw0vO kQ/mJiMcNjOjuE5Er4Noe+HBXw/x/+b9Z14Aa4tBGOKhavsuZkzrRDygM1vU+NAi yqXbEZiIrV6YxAN2lMz+M4xy5Bp4q1WigAWC9yc8ZbTWKXApoa8Ny0AEl/C3ohw/ DTJHRy2vIdswm2gs4FNnIxwMzeegGPqoYbcjsX+8SGBy+jkTvQBAPIZZcAujPXkX YuBNdHbe9THfPEnm0HxS0ntnsQ== -----END CERTIFICATE-----Generated at Sat Mar 21 18:45:33 2026 by rpki-client