$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft File: 1j3oKnWfllf48HOyUSUarme6S6Y.mft (raw, json) Hash identifier: X+Rhdv+EIshcafQziSGi/jUmqXlGByexklgvq/INi+I= Subject key identifier: 37:07:98:3E:DC:1E:9A:55:6A:A9:92:A0:80:8C:89:D1:6B:E9:FD:A4 Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6 Certificate issuer: /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6 Certificate serial: 0534 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft Manifest number: 04A9 Signing time: Tue 24 Mar 2026 23:49:35 +0000 Manifest this update: Tue 24 Mar 2026 23:49:35 +0000 Manifest next update: Tue 31 Mar 2026 23:49:35 +0000 Files and hashes: 1: 1j3oKnWfllf48HOyUSUarme6S6Y.crl (hash: ZS7m349sYbxHlXnv+l34rtS6LvXy6EZh7zzRt6xbt/k=) 2: F563D916248D11EF93237035C4F9AE02.roa (hash: hBH+sTV1EiMubSY3WwYm2Uh2qOcd3e+lc/yMbXN25cs=) 3: 1DFB74B4693511F098DA961FC4F9AE02.roa (hash: yGbuX7djLfgfGdTsOwwr5o9SRyhKavrZbjHv3qaR1NU=) 4: 9EB0F9FADF3E11EC83CCFE1EC4F9AE02.roa (hash: zdcdiMbBZ6fnqhqtsh4JjSi3qiy0wngzFd6cDMXw3Q4=) 5: 86C8EBA2B12A11EF985A2D32C4F9AE02.roa (hash: 5ei1Pf2BFe+GGZMzUH0jNMbQdUw4QmZ26uLjm4CIyKk=) 6: 56EC4CB4927911EFABEC2D46C4F9AE02.roa (hash: Vg+3UEU28kUVBfAjWiElgD4QvPYtjgOIKdHI6i8KBtw=) 7: A15115E6DF3E11EC83CCFE1EC4F9AE02.roa (hash: hi3WlnCuIsVxYwmdTuFYuyRcQz4FIsMaP/7U8XUNfSM=) 8: A1FED136DF3E11EC83CCFE1EC4F9AE02.roa (hash: AOZmmYeLnSI49490eoUMSsnulhK+wQ7Ylskf13YZSuA=) 9: 9D13F282DF3E11EC83CCFE1EC4F9AE02.roa (hash: jXGTnw/tsqcAu91xGU6v2HfXtRdayM9lNp5kbKAgr+4=) 10: ABE3468CBB5611EE936F4785C4F9AE02.roa (hash: Yhm1YFhiIa7R+q38Dt/6clsm6VHP6vg6ootMhjnocfY=) 11: 9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa (hash: X9aul/hRgPk68N6AmoCtSGzTWlW5UtIGtVxtQ1hm0tU=) 12: BA39BBAE524E11F099DE067AC4F9AE02.roa (hash: jFHb2Xi2Zj1iFLL1Si72692s8uXbi8VyaCZ+u1E3ggk=) 13: 05163DEADD8711EC9BF56E5BC4F9AE02.roa (hash: 63cio2MUFm7vWLjvaTxI8FgoeyjASbbb5Aorm9U3n2I=) 14: A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa (hash: ojYiriadBdeJ4BH7NXIPyFN9GoN0YxbKy4QT6N+XslQ=) 15: 9F598EEEDF3E11EC83CCFE1EC4F9AE02.roa (hash: mV2Ali2A9Nwpmh5pLmGmrns//aSQ4eK5cx9Smgvt4so=) 16: 9DEFF2FADF3E11EC83CCFE1EC4F9AE02.roa (hash: Wm1/eKkjwSdENyF9XhaIgMMIMyZWJ8FdprbIASCO2bc=) 17: B5036DB4694211F08D05BF0AC4F9AE02.roa (hash: 1yc+Fti6INTStmk0z+PF6B3gBIJd9xdIKHjdncMI12M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1332 (0x534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6 Validity Not Before: Mar 24 23:49:35 2026 GMT Not After : Mar 31 23:49:35 2026 GMT Subject: CN=69c3230f-0218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4c:6c:87:21:a2:97:f4:a4:96:e6:20:fb:94: f1:f4:58:56:a6:5f:b8:2f:99:26:91:f9:05:1a:cb: fb:16:9f:c2:0e:f0:b6:be:6e:c4:b7:7e:20:d5:1d: 76:d4:6f:2e:05:9d:ed:57:48:b0:ae:5c:9a:8b:f8: f9:fa:99:bc:d8:f7:64:c3:40:19:59:dc:fd:ea:6a: 4a:91:0c:3d:1f:ca:9d:8d:5a:e5:68:c6:4f:eb:3c: c5:5f:bd:bc:d8:9c:fe:cd:01:7b:d3:95:a9:d5:41: 29:13:61:f3:65:5d:d5:e4:97:e0:74:17:c8:48:b2: 85:32:bc:c5:7d:25:b6:2d:22:c2:0d:71:57:10:4f: 04:3d:53:f6:a3:3c:8a:0b:62:49:b3:26:74:7e:53: ed:70:8e:60:91:a0:71:d2:61:e0:4d:85:88:24:0e: 66:37:c0:dd:6c:cf:e6:e2:27:90:a3:ee:af:e6:d3: 1a:2f:9a:fc:2e:9e:a5:6a:bd:33:2f:52:03:12:ce: 79:ff:2f:9e:6b:c8:5b:a6:e8:f7:fe:51:c3:7e:0d: 9f:45:16:dd:e3:9c:1c:35:d6:27:a4:e1:68:28:eb: 5a:e5:8d:df:b9:f5:d4:75:d7:98:7c:7c:86:46:b3: bd:6f:6e:20:3c:1e:7e:1e:d3:c0:ae:b3:07:4a:a5: 2a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:07:98:3E:DC:1E:9A:55:6A:A9:92:A0:80:8C:89:D1:6B:E9:FD:A4 X509v3 Authority Key Identifier: keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:2f:df:cf:39:1d:5a:97:1e:69:00:d3:66:33:f2:3c:55:12: e8:00:49:41:90:6a:b1:6f:5a:05:2e:9c:ed:b6:6b:25:ab:2f: ed:6d:b9:a4:1f:8f:db:c6:d8:5b:2e:08:c3:44:ad:67:f5:8d: d4:74:4d:4f:7f:33:5c:ab:9d:06:d0:25:e3:d7:a7:2e:59:f4: 07:86:94:24:46:37:e3:4d:c9:88:76:1f:e5:7c:9c:c1:a9:cb: a5:85:b4:91:64:71:32:58:f9:21:16:66:68:08:86:16:dd:4d: 53:f2:5d:2b:c6:9e:50:1a:51:d4:a5:5f:d9:ca:71:0d:2a:c6: de:a0:b2:55:7e:35:28:de:07:2c:f4:c2:03:86:2f:94:3e:e7: 96:f9:b6:e3:1b:a5:e1:a7:9b:8a:55:30:25:dc:f8:24:c5:d9: b1:5e:53:90:49:19:0d:9d:f1:47:13:a3:72:3c:1e:fc:0f:e0: 19:be:23:d3:45:7a:80:ee:9c:31:16:b1:48:49:78:86:7e:85: 9d:f4:52:b2:99:ab:c4:05:60:1d:be:4f:b8:d6:3a:14:93:fd: bc:69:91:c0:1e:37:92:2a:29:98:70:5c:83:07:e5:eb:b9:13: 0a:bb:30:3f:2f:75:14:c7:5c:d1:01:38:05:64:f4:b5:b2:69: 90:bb:fa:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQ0ExMTAvBgNVBAUTKEQ2M0RFODJBNzU5Rjk2NTdGOEYwNzNCMjUxMjUxQUFF NjdCQTRCQTYwHhcNMjYwMzI0MjM0OTM1WhcNMjYwMzMxMjM0OTM1WjAYMRYwFAYD VQQDEw02OWMzMjMwZi0wMjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0xshyGil/SkluYg+5Tx9FhWpl+4L5kmkfkFGsv7Fp/CDvC2vm7Et34g1R12 1G8uBZ3tV0iwrlyai/j5+pm82Pdkw0AZWdz96mpKkQw9H8qdjVrlaMZP6zzFX728 2Jz+zQF705Wp1UEpE2HzZV3V5JfgdBfISLKFMrzFfSW2LSLCDXFXEE8EPVP2ozyK C2JJsyZ0flPtcI5gkaBx0mHgTYWIJA5mN8DdbM/m4ieQo+6v5tMaL5r8Lp6lar0z L1IDEs55/y+ea8hbpuj3/lHDfg2fRRbd45wcNdYnpOFoKOta5Y3fufXUddeYfHyG RrO9b24gPB5+HtPArrMHSqUqkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDcHmD7c HppVaqmSoICMidFr6f2kMB8GA1UdIwQYMBaAFNY96Cp1n5ZX+PBzslElGq5nukum MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9FQzFFRTY1MjhB NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxsZjQ4SE95VVNVYXJtZTZT NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFqM29LbldmbGxmNDhIT3lVU1Vhcm1lNlM2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjJDQS9FQzFFRTY1MjhBNTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxs ZjQ4SE95VVNVYXJtZTZTNlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHi/fzzkdWpceaQDTZjPyPFUS6ABJQZBqsW9aBS6c7bZrJasv7W25pB+P28bY Wy4Iw0StZ/WN1HRNT38zXKudBtAl49enLln0B4aUJEY3403JiHYf5XycwanLpYW0 kWRxMlj5IRZmaAiGFt1NU/JdK8aeUBpR1KVf2cpxDSrG3qCyVX41KN4HLPTCA4Yv lD7nlvm24xul4aebilUwJdz4JMXZsV5TkEkZDZ3xRxOjcjwe/A/gGb4j00V6gO6c MRaxSEl4hn6FnfRSspmrxAVgHb5PuNY6FJP9vGmRwB43kiopmHBcgwfl67kTCrsw Py91FMdc0QE4BWT0tbJpkLv6GQ== -----END CERTIFICATE-----Generated at Thu Mar 26 13:01:51 2026 by rpki-client