$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft File: e1kFUhKEkQWtbznliB2ELnB0Oa8.mft (raw, json) Hash identifier: hl18sLq0C8k5xlPgMCR6lUy7WgeQMUimOynP3RlFbfM= Subject key identifier: 51:11:40:FE:21:FD:3B:3B:C4:D4:31:7F:60:B7:3F:CB:71:9E:2F:89 Authority key identifier: 7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF Certificate issuer: /CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF Certificate serial: 0D74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft Manifest number: 0D4F Signing time: Tue 24 Mar 2026 17:53:55 +0000 Manifest this update: Tue 24 Mar 2026 17:53:54 +0000 Manifest next update: Tue 31 Mar 2026 17:53:54 +0000 Files and hashes: 1: e1kFUhKEkQWtbznliB2ELnB0Oa8.crl (hash: Qv2QIXnFWzTnh1QSl6JLaygQDzUZJfTpTxcF42fIO0w=) 2: B70BB8BA0BEE11F1B88CA9ED363D8C67.roa (hash: Wd06bOOHQlxEYDwnoV/cxJP3086dYyhZ/SXoJ+BOwSI=) 3: D5FC2548F12211F0893A96874F6F56BC.roa (hash: hiCv6pQDsLM27UxQqNoBRWWzV6cQZPkdjEvW4VbBbJ0=) 4: C9A309F60BEE11F1B8168AEE363D8C67.roa (hash: qzCZpmfI1dDw7fXbRpeHYT+Qp4Si5AmJFJpDr6hKsFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3444 (0xd74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5308, serialNumber=7B59055212849105AD6F39E5881D842E707439AF Validity Not Before: Mar 24 17:53:54 2026 GMT Not After : Mar 31 17:53:54 2026 GMT Subject: CN=69c2cfb2-7785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:f3:31:23:e7:d4:4a:91:88:68:c4:84:fe: 94:5d:c5:68:dc:22:18:a1:04:bb:66:c6:32:69:79: e3:10:a7:0e:a3:6a:4d:1d:f1:88:28:b6:91:81:4b: e7:7e:6b:af:3d:5d:ab:52:c9:4f:a4:ca:b1:e1:47: ae:e7:36:63:4a:83:7a:bd:7e:40:ae:8f:fb:75:6f: 70:e8:bd:9a:81:fb:d5:83:5f:7d:9d:6f:da:06:54: 69:f2:6b:78:af:92:30:8a:97:0a:98:d9:c3:b6:e7: 0c:8a:a4:8b:be:f0:a4:33:74:f0:66:5f:1a:5a:d5: 13:ad:21:ef:b3:f7:d2:2a:99:7f:78:03:f8:90:4f: 41:6d:88:b6:0b:e2:88:95:de:95:37:07:3d:20:92: 6b:f9:d5:26:b2:4b:3b:3b:7e:1e:72:78:5b:53:a6: ab:70:d6:b3:32:79:ca:36:bd:d4:8a:bb:56:ab:a1: d9:23:3c:1d:56:27:92:fa:8e:8c:32:00:d9:9d:9d: 8e:97:34:be:6d:f4:16:d5:46:96:ad:99:f5:65:9b: a2:f0:09:22:e6:ac:1d:2c:a9:e4:59:c8:54:f9:98: e7:4a:12:12:a5:37:72:bd:89:93:b7:1e:3e:36:21: 17:bf:fd:50:9a:68:a1:ef:33:e9:a7:d5:d1:1d:b0: 6d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:11:40:FE:21:FD:3B:3B:C4:D4:31:7F:60:B7:3F:CB:71:9E:2F:89 X509v3 Authority Key Identifier: keyid:7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:bd:ad:c6:47:4c:db:40:bd:78:d6:2e:18:ad:e0:9b:8f:a6: ce:c5:e4:c1:c3:2f:06:88:4c:57:d8:47:59:3d:bd:36:23:08: 7c:73:77:2d:30:dc:ab:80:0e:d1:6c:dd:85:65:32:90:f7:08: 07:4c:a6:aa:91:42:5f:5a:a9:ad:7f:05:83:fc:42:11:14:2d: e3:84:2c:6f:0d:88:1d:cc:75:aa:4d:4d:4e:74:3d:e6:87:de: 50:b7:be:bf:36:c6:2e:41:c9:f8:f3:fb:89:80:5e:b6:29:88: 70:af:35:cc:fe:67:c5:00:8f:43:a2:8a:dc:40:6c:87:7a:a1: 76:e7:0c:6c:9c:06:78:ef:bc:aa:a7:15:35:b5:75:16:d6:a8: 7c:74:f8:ba:89:a4:ec:7f:cf:c1:55:3f:28:c4:7f:b3:d2:d7: 54:a6:c5:60:1f:b0:9a:4b:89:84:68:2d:b9:76:3d:f6:85:70: 8f:ba:e4:61:9a:c9:e8:65:cd:24:23:93:58:7d:00:34:74:22: 33:88:1b:fe:f6:b0:b1:d6:7d:4d:84:45:27:80:cd:4a:8c:5f: 0e:d8:1a:1b:43:b6:9a:ee:5e:3e:92:70:b1:0f:20:60:14:a7: da:87:58:44:3d:14:02:39:15:71:88:45:ea:4c:72:72:01:69: 08:14:10:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMDgxMTAvBgNVBAUTKDdCNTkwNTUyMTI4NDkxMDVBRDZGMzlFNTg4MUQ4NDJF NzA3NDM5QUYwHhcNMjYwMzI0MTc1MzU0WhcNMjYwMzMxMTc1MzU0WjAYMRYwFAYD VQQDEw02OWMyY2ZiMi03Nzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPPzMSPn1EqRiGjEhP6UXcVo3CIYoQS7ZsYyaXnjEKcOo2pNHfGIKLaRgUvn fmuvPV2rUslPpMqx4Ueu5zZjSoN6vX5Aro/7dW9w6L2agfvVg199nW/aBlRp8mt4 r5IwipcKmNnDtucMiqSLvvCkM3TwZl8aWtUTrSHvs/fSKpl/eAP4kE9BbYi2C+KI ld6VNwc9IJJr+dUmsks7O34ecnhbU6arcNazMnnKNr3UirtWq6HZIzwdVieS+o6M MgDZnZ2OlzS+bfQW1UaWrZn1ZZui8Aki5qwdLKnkWchU+ZjnShISpTdyvYmTtx4+ NiEXv/1Qmmih7zPpp9XRHbBtywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFERQP4h /Ts7xNQxf2C3P8txni+JMB8GA1UdIwQYMBaAFHtZBVIShJEFrW855YgdhC5wdDmv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMwOC9BODE5MTRFMkY0 RDUxMUU5QjkxN0YzNDlDNEY5QUUwMi9lMWtGVWhLRWtRV3Riem5saUIyRUxuQjBP YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Uxa0ZVaEtFa1FXdGJ6bmxpQjJFTG5CME9hOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMwOC9BODE5MTRFMkY0RDUxMUU5QjkxN0YzNDlDNEY5QUUwMi9lMWtGVWhLRWtR V3Riem5saUIyRUxuQjBPYTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK72txkdM20C9eNYuGK3gm4+mzsXkwcMvBohMV9hHWT29NiMIfHN3LTDcq4AO 0WzdhWUykPcIB0ymqpFCX1qprX8Fg/xCERQt44Qsbw2IHcx1qk1NTnQ95ofeULe+ vzbGLkHJ+PP7iYBetimIcK81zP5nxQCPQ6KK3EBsh3qhducMbJwGeO+8qqcVNbV1 FtaofHT4uomk7H/PwVU/KMR/s9LXVKbFYB+wmkuJhGgtuXY99oVwj7rkYZrJ6GXN JCOTWH0ANHQiM4gb/vawsdZ9TYRFJ4DNSoxfDtgaG0O2mu5ePpJwsQ8gYBSn2odY RD0UAjkVcYhF6kxycgFpCBQQcA== -----END CERTIFICATE-----Generated at Thu Mar 26 11:19:01 2026 by rpki-client