$ rpki-client -vvf rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft File: d4fx5T6beBMt6aeHEQiDFt1gVbM.mft (raw, json) Hash identifier: MCb5cFpxrF4NZe4WY2J0XDD0ytNtd26k/GzeGN9bATY= Subject key identifier: 89:35:9E:21:95:14:6B:B3:B6:EC:2C:DC:0A:54:0C:22:83:82:43:F4 Authority key identifier: 77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3 Certificate issuer: /CN=A91A60A9/serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3 Certificate serial: 3556 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft Manifest number: 3531 Signing time: Thu 26 Mar 2026 14:24:00 +0000 Manifest this update: Thu 26 Mar 2026 14:23:59 +0000 Manifest next update: Thu 02 Apr 2026 14:23:59 +0000 Files and hashes: 1: d4fx5T6beBMt6aeHEQiDFt1gVbM.crl (hash: gKaaYi1pNl8/gdo5f8CxyEeZnRfNA+7pwEXAuPkEGek=) 2: C28E34620A2011EC8B517885C4F9AE02.roa (hash: 4c64YIFR5i1jys+se/EAtLozRy8qGvjic4t8YcggS5o=) 3: 8F368BEEF9C411EB9F9E645DC4F9AE02.roa (hash: hu4/Lak7f/lOdT0sej4Iilh6Wr2QTf9+LdnHpbx9BwY=) 4: C3C5C43A0A2011EC8B517885C4F9AE02.roa (hash: wACutP1f1rqOkMuUfI0y6o4RkmpusyPFR7IEkRsm+4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13654 (0x3556) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A60A9, serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3 Validity Not Before: Mar 26 14:23:59 2026 GMT Not After : Apr 2 14:23:59 2026 GMT Subject: CN=69c5417f-624b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:65:6a:95:8d:be:09:7c:fc:e9:f6:45:ff:b1: 3f:03:8d:f0:4b:9a:6b:cd:3c:19:b1:60:cc:fe:0e: 81:d7:56:3a:57:05:e4:06:2d:98:65:5d:a6:ec:50: 07:9d:ff:39:b0:c9:3c:d1:fa:6d:8b:34:55:d4:e2: d0:35:0d:0f:8d:d7:22:b0:96:ef:a1:16:98:0b:95: 8e:b8:1d:d5:0c:7f:f9:c0:9d:78:61:c8:15:32:85: 77:0e:18:e9:90:08:d5:50:e9:0b:5f:d5:37:ba:21: a0:9f:6b:58:8b:88:d2:a7:c3:a6:60:fd:63:68:39: 59:66:51:57:07:5b:ed:5d:7e:c4:3b:21:0f:d7:29: c9:30:db:28:5b:47:5c:1d:8b:d6:d8:09:df:e6:4a: bb:bb:0f:53:73:cc:05:46:a3:c8:3f:c6:6a:a5:8a: 81:f3:de:50:8d:1b:0b:5d:60:06:48:08:59:97:19: 1d:00:1c:cf:1b:cd:67:3a:04:30:b2:c6:2b:fa:e7: e5:ec:9a:9c:08:57:23:f5:4c:e1:e1:04:04:f2:bb: 4f:d3:e0:00:b4:93:49:60:56:ef:55:08:86:ac:bd: 85:3b:e2:0d:e2:f1:d9:aa:b6:4e:7d:f0:21:30:84: 4f:69:a8:61:c0:9d:b6:95:26:a0:af:74:89:78:1c: 69:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:35:9E:21:95:14:6B:B3:B6:EC:2C:DC:0A:54:0C:22:83:82:43:F4 X509v3 Authority Key Identifier: keyid:77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:a5:5f:9a:0a:cd:1e:19:ca:48:b7:10:0b:28:c5:98:aa:0d: de:05:36:02:6e:94:3a:cb:8b:c6:31:86:e6:53:08:3e:f0:32: 04:96:b7:b6:d8:aa:07:3a:2a:77:cf:e8:e9:5a:f3:09:82:db: 8f:a3:42:e2:e5:f9:e5:cc:4c:17:5a:d8:ec:44:fd:73:f7:f6: d9:a2:e6:56:5f:d2:2d:15:ef:5f:fb:fb:ef:37:4c:69:43:a6: e1:f7:b2:63:85:e7:a9:03:ed:e1:0f:c7:bf:da:da:48:68:2f: 8b:27:d7:f6:af:8d:85:8e:2c:83:13:da:6f:43:c8:3e:37:93: 46:73:12:7e:31:12:32:be:fc:14:4f:65:c9:72:7e:39:5c:d4: 1c:c9:a7:2d:97:d0:9f:96:ae:31:1b:c6:5e:8d:26:14:f7:52: d3:bf:f2:25:18:26:12:51:04:6a:db:9c:e1:aa:49:8f:1a:f3: 33:7c:33:57:aa:be:c6:99:76:8a:c4:48:85:86:85:d5:f4:a6: 8b:fd:4e:81:0b:05:6b:d6:8d:2d:09:48:14:7b:c6:63:43:61: 97:45:79:11:07:83:99:5f:cb:ef:b7:45:d4:fe:6d:4d:f3:6a: 09:b7:ab:11:21:cf:09:28:ab:e1:02:3c:1e:0d:81:5b:3c:39: 22:7e:24:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYwQTkxMTAvBgNVBAUTKDc3ODdGMUU1M0U5Qjc4MTMyREU5QTc4NzExMDg4MzE2 REQ2MDU1QjMwHhcNMjYwMzI2MTQyMzU5WhcNMjYwNDAyMTQyMzU5WjAYMRYwFAYD VQQDEw02OWM1NDE3Zi02MjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5WVqlY2+CXz86fZF/7E/A43wS5przTwZsWDM/g6B11Y6VwXkBi2YZV2m7FAH nf85sMk80fptizRV1OLQNQ0PjdcisJbvoRaYC5WOuB3VDH/5wJ14YcgVMoV3Dhjp kAjVUOkLX9U3uiGgn2tYi4jSp8OmYP1jaDlZZlFXB1vtXX7EOyEP1ynJMNsoW0dc HYvW2Anf5kq7uw9Tc8wFRqPIP8ZqpYqB895QjRsLXWAGSAhZlxkdABzPG81nOgQw ssYr+ufl7JqcCFcj9Uzh4QQE8rtP0+AAtJNJYFbvVQiGrL2FO+IN4vHZqrZOffAh MIRPaahhwJ22lSagr3SJeBxpQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIk1niGV FGuztuws3ApUDCKDgkP0MB8GA1UdIwQYMBaAFHeH8eU+m3gTLemnhxEIgxbdYFWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjBBOS82QkE4MDYxQTFE ODQxMUUyQjNBNTRGREEwOEIwMkNEMi9kNGZ4NVQ2YmVCTXQ2YWVIRVFpREZ0MWdW Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q0Zng1VDZiZUJNdDZhZUhFUWlERnQxZ1ZiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjBBOS82QkE4MDYxQTFEODQxMUUyQjNBNTRGREEwOEIwMkNEMi9kNGZ4NVQ2YmVC TXQ2YWVIRVFpREZ0MWdWYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgKVfmgrNHhnKSLcQCyjFmKoN3gU2Am6UOsuLxjGG5lMIPvAyBJa3ttiqBzoq d8/o6VrzCYLbj6NC4uX55cxMF1rY7ET9c/f22aLmVl/SLRXvX/v77zdMaUOm4fey Y4XnqQPt4Q/Hv9raSGgviyfX9q+NhY4sgxPab0PIPjeTRnMSfjESMr78FE9lyXJ+ OVzUHMmnLZfQn5auMRvGXo0mFPdS07/yJRgmElEEatuc4apJjxrzM3wzV6q+xpl2 isRIhYaF1fSmi/1OgQsFa9aNLQlIFHvGY0Nhl0V5EQeDmV/L77dF1P5tTfNqCber ESHPCSir4QI8Hg2BWzw5In4kmg== -----END CERTIFICATE-----Generated at Sat Mar 28 10:41:56 2026 by rpki-client