$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft File: J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json) Hash identifier: Z7VtzMyzbg6kFu2UV4qpfZ8qUJZq/rOf2/Q4bv8NweQ= Subject key identifier: B1:09:9C:07:EB:2C:47:FB:4D:6F:ED:7C:CE:D8:BB:37:E2:02:6F:07 Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Certificate serial: 1043 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft Manifest number: 1039 Signing time: Tue 24 Mar 2026 17:18:20 +0000 Manifest this update: Tue 24 Mar 2026 17:18:19 +0000 Manifest next update: Tue 31 Mar 2026 17:18:19 +0000 Files and hashes: 1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: MpV0Wvum2EAvzE8UHysPg1wr9GKd1i+sfU/g4TAkyHU=) 2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: Ga6llXWosOhlY6bWFrZdjYL71sbRZ2RwBlUrKw2k6Pk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4163 (0x1043) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Validity Not Before: Mar 24 17:18:19 2026 GMT Not After : Mar 31 17:18:19 2026 GMT Subject: CN=69c2c75b-a253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7e:72:dc:07:7e:50:8a:7c:0e:df:06:fe:ec: a5:20:57:c5:15:a8:37:c1:22:b2:da:39:7d:27:72: 92:84:9b:fe:48:a8:b7:cd:35:52:94:9b:bd:50:8c: 43:0e:cb:49:ce:9a:0a:06:df:20:77:94:9c:03:c7: bb:df:7c:c1:1d:40:34:a3:de:97:77:00:16:6d:6e: 49:0a:4c:e6:eb:39:67:18:76:fe:51:a6:f8:80:61: da:97:75:64:9c:fa:24:9d:f1:f3:38:80:cd:44:fb: 52:88:b1:b1:ce:16:14:e9:51:22:a6:33:9c:a3:36: c1:ea:d0:cc:a6:ca:47:cb:39:82:84:ca:a8:0a:9e: 41:8d:2d:d7:33:b4:a0:38:0a:fc:c6:b8:92:74:0b: 79:27:90:e7:15:7b:48:c2:80:fd:89:e8:ef:47:e5: b7:aa:e1:92:50:94:ed:8e:c0:c9:78:4b:f0:f0:5a: 42:d4:d8:2f:0e:6b:ee:72:7e:cc:b2:a9:c9:54:18: c6:3e:8b:02:9d:32:98:2a:62:8c:1e:87:5f:f8:77: 2a:51:71:08:c5:41:80:ce:8b:a8:6a:4f:2f:0b:2c: 27:ed:a8:ca:f5:f8:7e:fe:85:42:af:b2:8e:ea:8b: 11:61:72:6a:3b:b2:7d:7d:19:2d:3c:44:2a:f1:21: aa:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:09:9C:07:EB:2C:47:FB:4D:6F:ED:7C:CE:D8:BB:37:E2:02:6F:07 X509v3 Authority Key Identifier: keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:f7:57:00:39:c5:ea:34:2b:91:db:13:05:bf:09:8d:8f:ca: 71:8f:c3:0a:c7:f1:cf:c9:ba:a8:98:65:74:0e:3c:ca:a7:ac: 12:0a:38:ef:67:28:74:90:57:15:1a:ed:a7:1b:cf:1d:3f:12: c3:fd:62:ca:27:96:8d:bb:76:f3:2d:1b:2d:cc:86:26:bf:13: c7:d1:d0:e9:e8:98:28:ed:01:f5:78:a9:b7:0e:d3:f9:ad:a2: 34:bc:99:a6:2d:02:0c:b0:a3:ce:54:84:5f:90:72:33:d0:4e: aa:d6:3a:92:51:a4:d5:a2:08:50:80:6b:74:46:86:0f:6e:e3: 9c:0f:83:fb:95:77:80:3c:42:79:0a:74:6e:bb:16:bf:4e:c9: 83:12:28:a4:45:49:5f:1a:fe:9b:f7:1d:dc:f8:cd:07:60:6e: c7:d8:d2:b1:c9:94:77:e3:86:8f:43:c8:13:5a:2e:41:af:c9: 86:cf:b3:d6:4c:38:a4:3b:39:4e:d9:19:26:07:17:b0:68:7b: e0:c7:49:c6:c9:2e:ed:55:2c:6c:c3:4c:04:91:02:da:5c:54: 29:2f:22:dc:4f:b2:29:63:25:82:84:a5:dd:86:5e:76:04:d1: b2:6c:4a:c9:1e:c9:79:5a:60:49:6a:1a:17:bb:d7:70:53:c7: f2:8e:50:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBRjExMTAvBgNVBAUTKDI3NzUzQ0ZENEU5RDk4RUI0QzM2RUIzNzdCQUI2REUy RjkyRTZCRTgwHhcNMjYwMzI0MTcxODE5WhcNMjYwMzMxMTcxODE5WjAYMRYwFAYD VQQDEw02OWMyYzc1Yi1hMjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArn5y3Ad+UIp8Dt8G/uylIFfFFag3wSKy2jl9J3KShJv+SKi3zTVSlJu9UIxD DstJzpoKBt8gd5ScA8e733zBHUA0o96XdwAWbW5JCkzm6zlnGHb+Uab4gGHal3Vk nPoknfHzOIDNRPtSiLGxzhYU6VEipjOcozbB6tDMpspHyzmChMqoCp5BjS3XM7Sg OAr8xriSdAt5J5DnFXtIwoD9iejvR+W3quGSUJTtjsDJeEvw8FpC1NgvDmvucn7M sqnJVBjGPosCnTKYKmKMHodf+HcqUXEIxUGAzouoak8vCywn7ajK9fh+/oVCr7KO 6osRYXJqO7J9fRktPEQq8SGqDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLEJnAfr LEf7TW/tfM7YuzfiAm8HMB8GA1UdIwQYMBaAFCd1PP1OnZjrTDbrN3urbeL5Lmvo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEFGMS9DQTFBMDNDMjVD MTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1PdE1OdXMzZTZ0dDR2a3Vh LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozVThfVTZkbU90TU51czNlNnR0NHZrdWEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEFGMS9DQTFBMDNDMjVDMTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1P dE1OdXMzZTZ0dDR2a3VhLWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqPdXADnF6jQrkdsTBb8JjY/KcY/DCsfxz8m6qJhldA48yqesEgo472codJBX FRrtpxvPHT8Sw/1iyieWjbt28y0bLcyGJr8Tx9HQ6eiYKO0B9Xiptw7T+a2iNLyZ pi0CDLCjzlSEX5ByM9BOqtY6klGk1aIIUIBrdEaGD27jnA+D+5V3gDxCeQp0brsW v07JgxIopEVJXxr+m/cd3PjNB2Bux9jSscmUd+OGj0PIE1ouQa/Jhs+z1kw4pDs5 TtkZJgcXsGh74MdJxsku7VUsbMNMBJEC2lxUKS8i3E+yKWMlgoSl3YZedgTRsmxK yR7JeVpgSWoaF7vXcFPH8o5Q4g== -----END CERTIFICATE-----Generated at Thu Mar 26 17:22:20 2026 by rpki-client