$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft File: J23PPyNBrcfQvEbzY0T3FWANmlg.mft (raw, json) Hash identifier: u4AL5mO2jpaFJeLdU73CJwJQQ+aFPHsJrmAkQL2W96Q= Subject key identifier: CB:69:15:70:54:76:76:70:D4:82:CC:84:2F:6E:20:83:D0:7A:EA:1F Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 Certificate issuer: /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft Manifest number: E2 Signing time: Wed 25 Mar 2026 05:44:45 +0000 Manifest this update: Wed 25 Mar 2026 05:44:45 +0000 Manifest next update: Wed 01 Apr 2026 05:44:45 +0000 Files and hashes: 1: J23PPyNBrcfQvEbzY0T3FWANmlg.crl (hash: 6ISeU0hjqYBAaAEEbxngGMoZtd96x8WUWOJKdmmFQ80=) 2: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (hash: LydSAbFEgXunoPXmnpZMts641lpnMB3u48Fdl0a+zxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A04B9, serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Validity Not Before: Mar 25 05:44:45 2026 GMT Not After : Apr 1 05:44:45 2026 GMT Subject: CN=69c3764d-bd76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:56:b9:d1:23:fa:6e:0f:90:d7:5f:fc:1b:90: 5a:98:86:d5:84:eb:39:ed:98:57:c4:a0:c1:ff:1b: 2c:bf:cc:2b:71:7c:7b:7c:4b:1c:56:69:78:e0:dc: f3:e2:e6:1d:5a:c2:fe:a9:fd:72:08:d9:59:93:98: d2:2a:fd:e0:d3:92:7b:84:b7:4c:fa:33:53:88:da: 49:0e:b7:d2:9f:9d:cb:84:2b:e2:2f:09:84:5d:0b: a5:b9:a3:c0:a5:a3:64:65:87:49:b2:d3:18:e6:a0: 51:36:bd:10:c6:15:85:1f:7c:34:03:6e:f7:8c:5b: 41:a4:29:c3:cb:9b:58:8c:bf:c9:65:db:70:47:95: 90:a7:40:c0:21:88:f5:f4:04:59:7e:b4:3a:0d:0a: da:bb:9e:ac:0d:8f:d9:82:0a:4e:fc:f5:3b:d1:22: a9:4d:83:4e:ae:a4:07:06:73:fb:9e:f7:36:88:1a: 32:ad:da:05:bc:5b:9b:9a:69:3a:db:59:32:82:2e: 19:9f:07:cd:d0:97:d4:ca:15:c7:8c:95:32:4d:ac: c1:af:42:02:0a:0d:e7:70:ea:c4:44:28:c1:0b:e5: e7:c2:07:91:df:c6:d9:ab:90:90:85:8f:45:e9:58: 37:6c:2c:09:a2:23:5e:ef:38:de:b2:12:df:b3:de: d4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:69:15:70:54:76:76:70:D4:82:CC:84:2F:6E:20:83:D0:7A:EA:1F X509v3 Authority Key Identifier: keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:cf:a5:43:f0:7f:90:b9:f9:bf:c8:d1:ed:7e:b6:89:f2:b1: 10:95:5f:1d:6b:36:15:bd:3d:4b:aa:db:8d:f1:9c:87:12:1f: 36:27:b3:ca:04:3d:7a:c4:d9:80:b9:04:16:c9:a5:99:d9:84: b0:e1:51:4a:7b:d8:04:5b:19:ec:f9:ae:51:82:2a:d7:b4:d2: 41:66:36:82:d3:98:a9:f2:0d:4f:8d:a9:e0:a3:28:53:68:de: f0:97:03:07:7a:24:44:dd:51:a0:49:bb:52:39:ac:a1:3d:aa: cb:e3:66:4e:b6:91:a1:de:b2:ba:c6:cf:4e:fe:5e:57:6d:30: f1:11:05:27:ef:ca:77:84:21:a6:80:f4:27:57:48:7c:41:59: 8b:c5:32:df:1c:d8:a8:a8:67:55:ef:b8:d0:5b:d5:b6:92:af: ee:c8:56:b4:37:5d:af:e3:10:d9:78:75:f7:64:4f:df:95:9c: 1b:7d:57:4f:5f:24:f5:26:db:68:43:4a:88:13:12:f2:1a:3e: 53:3e:40:1a:7c:f8:3a:cf:0b:66:bf:7d:d1:3e:b8:ef:22:c8: 22:04:a5:22:8d:d7:06:10:38:d6:42:47:b2:6b:4a:9b:46:e3: 4f:ee:77:f1:6e:43:4d:96:9e:d0:16:91:b8:bd:08:bf:59:67: 1b:02:e5:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0QjkxMTAvBgNVBAUTKDI3NkRDRjNGMjM0MUFEQzdEMEJDNDZGMzYzNDRGNzE1 NjAwRDlBNTgwHhcNMjYwMzI1MDU0NDQ1WhcNMjYwNDAxMDU0NDQ1WjAYMRYwFAYD VQQDEw02OWMzNzY0ZC1iZDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwla50SP6bg+Q11/8G5BamIbVhOs57ZhXxKDB/xssv8wrcXx7fEscVml44Nzz 4uYdWsL+qf1yCNlZk5jSKv3g05J7hLdM+jNTiNpJDrfSn53LhCviLwmEXQuluaPA paNkZYdJstMY5qBRNr0QxhWFH3w0A273jFtBpCnDy5tYjL/JZdtwR5WQp0DAIYj1 9ARZfrQ6DQrau56sDY/ZggpO/PU70SKpTYNOrqQHBnP7nvc2iBoyrdoFvFubmmk6 21kygi4ZnwfN0JfUyhXHjJUyTazBr0ICCg3ncOrERCjBC+XnwgeR38bZq5CQhY9F 6Vg3bCwJoiNe7zjeshLfs97UCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMtpFXBU dnZw1ILMhC9uIIPQeuofMB8GA1UdIwQYMBaAFCdtzz8jQa3H0LxG82NE9xVgDZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDRCOS9DRTg0MDU2OEQy MzUxMUVGOEZFMjlDNUNDNEY5QUUwMi9KMjNQUHlOQnJjZlF2RWJ6WTBUM0ZXQU5t bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oyM1BQeU5CcmNmUXZFYnpZMFQzRldBTm1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDRCOS9DRTg0MDU2OEQyMzUxMUVGOEZFMjlDNUNDNEY5QUUwMi9KMjNQUHlOQnJj ZlF2RWJ6WTBUM0ZXQU5tbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR8+lQ/B/kLn5v8jR7X62ifKxEJVfHWs2Fb09S6rbjfGchxIfNiezygQ9esTZ gLkEFsmlmdmEsOFRSnvYBFsZ7PmuUYIq17TSQWY2gtOYqfINT42p4KMoU2je8JcD B3okRN1RoEm7UjmsoT2qy+NmTraRod6yusbPTv5eV20w8REFJ+/Kd4QhpoD0J1dI fEFZi8Uy3xzYqKhnVe+40FvVtpKv7shWtDddr+MQ2Xh192RP35WcG31XT18k9Sbb aENKiBMS8ho+Uz5AGnz4Os8LZr990T647yLIIgSlIo3XBhA41kJHsmtKm0bjT+53 8W5DTZae0BaRuL0Iv1lnGwLlYA== -----END CERTIFICATE-----Generated at Thu Mar 26 14:30:49 2026 by rpki-client