$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft File: d1_lofYadAjf7tR_FEfjRk2lCyo.mft (raw, json) Hash identifier: 32jLvGUb+yGfLhw7SRBqMFCpmuCHiQH4FeGXVb7sEWw= Subject key identifier: D4:82:89:9A:8D:A2:B1:9A:65:13:53:3B:5F:3F:78:3A:9D:73:A7:D9 Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Certificate serial: 04EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft Manifest number: 04AC Signing time: Tue 24 Mar 2026 23:38:06 +0000 Manifest this update: Tue 24 Mar 2026 23:38:06 +0000 Manifest next update: Tue 31 Mar 2026 23:38:06 +0000 Files and hashes: 1: d1_lofYadAjf7tR_FEfjRk2lCyo.crl (hash: i1Rj8G+swj+8+PnIqjXwPB+bRw1vzPIXc+tEPXkAFwY=) 2: 5B17230CDE9B11EC9AE23269C4F9AE02.roa (hash: epvnNXqY0NKQ5ppRcRBfLXB95BUJnWRwELFme7G+FAQ=) 3: 59230714DE9B11EC9AE23269C4F9AE02.roa (hash: RpVDZMT+Nv0Axr1oqRBB0G9hqkFqlnTO9St/IWj3aAQ=) 4: DEE5E3C49F0511EC9DA80B77C4F9AE02.roa (hash: AXOdS8FamXWGpVb8dVSV9L7c5bFjLM5GeduJrKDw4hE=) 5: 59D82E00DE9B11EC9AE23269C4F9AE02.roa (hash: E0If5HXOtdFlh/a2uN5bsvDoD3Zc0q3mzSBVdzz2GG8=) 6: 5879949ADE9B11EC9AE23269C4F9AE02.roa (hash: mdyDpI7YmoUcuIMuxi6wkeIY7XAJvlplT7aCIokh1+s=) 7: 57B53F64DE9B11EC9AE23269C4F9AE02.roa (hash: YBgWSZPd12SzkSv6+Yvkd/eLTpeiObJO+DoAErrQY6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1258 (0x4ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Validity Not Before: Mar 24 23:38:06 2026 GMT Not After : Mar 31 23:38:06 2026 GMT Subject: CN=69c3205e-9895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:bb:81:16:99:7b:2a:49:54:f2:8b:7b:0a:a5: 1c:78:6d:ef:eb:4a:4b:4e:8d:fb:80:fa:b1:9c:10: 11:0c:f8:ac:d1:d5:f8:8d:e7:4d:11:32:d4:12:9d: 2e:39:05:60:cf:0d:7b:a4:17:62:ea:73:4a:d1:ef: 5b:54:39:9c:47:ec:56:c3:b9:b9:dc:56:52:c0:4f: ed:35:a1:0d:1d:ec:cf:88:de:ab:d4:01:7d:e8:7d: d3:c9:6d:a9:45:5c:7b:ac:02:f8:36:00:c4:9b:54: b3:15:45:33:34:5e:c8:79:7c:94:60:15:6b:9b:2e: 4a:d4:0b:69:b2:ac:98:97:b6:47:0f:10:38:f2:44: 63:91:75:2d:9f:5b:4d:3c:2f:b6:18:2a:19:2e:b1: b5:1e:51:85:90:01:50:70:d5:70:f4:49:ec:8d:97: d4:00:dd:07:7a:df:5e:9f:7d:1f:07:1f:f8:cf:e2: e5:e5:27:ca:d7:65:67:57:20:41:4f:ff:0e:f0:18: b1:a9:0c:c8:d2:14:61:ce:66:11:2d:48:33:0c:14: 74:0d:41:06:62:97:0b:a9:6b:12:03:fc:09:92:25: 0f:cd:c2:f5:10:0c:7c:c5:c9:44:68:81:fc:bf:a8: e1:81:26:06:b4:3c:60:8e:9a:de:8d:92:c5:72:ee: 39:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:82:89:9A:8D:A2:B1:9A:65:13:53:3B:5F:3F:78:3A:9D:73:A7:D9 X509v3 Authority Key Identifier: keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:5a:d6:08:cb:eb:12:b5:92:02:97:f0:88:7d:bb:0e:7c:49: cc:e5:8b:34:38:07:e8:43:be:39:d7:2e:5e:d7:9c:be:e0:9e: 95:4c:fe:99:32:f5:46:0c:ca:7a:53:6b:98:40:bf:26:6d:70: 1f:b9:5c:6f:3b:2a:65:68:5c:33:7d:df:b5:23:1d:4c:4d:a9: 03:e4:d5:eb:4a:b1:52:dd:b4:8d:10:3e:ed:1a:d5:b0:c8:3c: ec:fd:a2:fa:0d:fa:2c:bf:bb:9d:a1:3e:53:a8:48:0e:46:0d: cf:36:8c:2e:22:a4:47:24:cb:4e:41:56:42:94:ee:96:63:51: 16:df:8e:d5:0c:d8:50:e6:f7:10:f1:5f:7f:48:1d:aa:79:67: dc:b4:94:d6:47:f0:d2:d6:dd:8d:a4:b6:8d:06:0d:15:eb:d6: cc:5f:52:a9:c3:6b:2c:ad:e3:e1:3c:e3:94:a6:f8:4f:06:a2: 87:60:47:27:b8:ce:75:d7:ae:e0:17:91:10:4e:db:da:da:25: d8:7e:ad:6f:4d:e4:41:ef:42:b0:7c:06:92:3b:c6:b7:56:68: 87:bd:e0:f8:c6:19:8c:cc:81:39:e0:41:ad:be:e8:0f:de:c4: 43:cf:cf:3a:e0:4b:39:d1:78:01:63:e7:ea:bf:8e:dc:00:7f: 53:ad:4d:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk4QTMxMTAvBgNVBAUTKDc3NUZFNUExRjYxQTc0MDhERkVFRDQ3RjE0NDdFMzQ2 NERBNTBCMkEwHhcNMjYwMzI0MjMzODA2WhcNMjYwMzMxMjMzODA2WjAYMRYwFAYD VQQDEw02OWMzMjA1ZS05ODk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ruBFpl7KklU8ot7CqUceG3v60pLTo37gPqxnBARDPis0dX4jedNETLUEp0u OQVgzw17pBdi6nNK0e9bVDmcR+xWw7m53FZSwE/tNaENHezPiN6r1AF96H3TyW2p RVx7rAL4NgDEm1SzFUUzNF7IeXyUYBVrmy5K1AtpsqyYl7ZHDxA48kRjkXUtn1tN PC+2GCoZLrG1HlGFkAFQcNVw9EnsjZfUAN0Het9en30fBx/4z+Ll5SfK12VnVyBB T/8O8BixqQzI0hRhzmYRLUgzDBR0DUEGYpcLqWsSA/wJkiUPzcL1EAx8xclEaIH8 v6jhgSYGtDxgjprejZLFcu45QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNSCiZqN orGaZRNTO18/eDqdc6fZMB8GA1UdIwQYMBaAFHdf5aH2GnQI3+7UfxRH40ZNpQsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThBMy9FMjE5QjYxQzcx MTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRBamY3dFJfRkVmalJrMmxD eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QxX2xvZllhZEFqZjd0Ul9GRWZqUmsybEN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OThBMy9FMjE5QjYxQzcxMTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRB amY3dFJfRkVmalJrMmxDeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgFrWCMvrErWSApfwiH27DnxJzOWLNDgH6EO+OdcuXtecvuCelUz+mTL1RgzK elNrmEC/Jm1wH7lcbzsqZWhcM33ftSMdTE2pA+TV60qxUt20jRA+7RrVsMg87P2i +g36LL+7naE+U6hIDkYNzzaMLiKkRyTLTkFWQpTulmNRFt+O1QzYUOb3EPFff0gd qnln3LSU1kfw0tbdjaS2jQYNFevWzF9SqcNrLK3j4TzjlKb4Twaih2BHJ7jOddeu 4BeREE7b2tol2H6tb03kQe9CsHwGkjvGt1Zoh73g+MYZjMyBOeBBrb7oD97EQ8/P OuBLOdF4AWPn6r+O3AB/U61NxQ== -----END CERTIFICATE-----Generated at Thu Mar 26 11:14:58 2026 by rpki-client