$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft File: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft (raw, json) Hash identifier: ISHs9Em2PNIlbIzmcQ2qajmY6S6mq/FLSIqTz4KQw2U= Subject key identifier: 22:87:E5:C0:1E:08:D6:E7:5F:53:D1:41:0D:00:A9:57:6F:31:7B:30 Authority key identifier: 8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B Certificate issuer: /CN=A91AB384/serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Certificate serial: 0BB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft Manifest number: 0BA3 Signing time: Tue 24 Mar 2026 18:53:20 +0000 Manifest this update: Tue 24 Mar 2026 18:53:20 +0000 Manifest next update: Tue 31 Mar 2026 18:53:20 +0000 Files and hashes: 1: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl (hash: O97sEAY13QJ9QwmorUBW+MjbMTZLrgj6OzKUXuFwspw=) 2: C66D2D8C467B11EA9717DF7CC4F9AE02.roa (hash: neCLfyxIjMZ9iLTUkHrvwgW7vvikcScIptIMYyahCcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3000 (0xbb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB384, serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Validity Not Before: Mar 24 18:53:20 2026 GMT Not After : Mar 31 18:53:20 2026 GMT Subject: CN=69c2dda0-8181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:eb:fa:1d:a9:78:e1:2d:d6:61:4a:80:8a:64: 62:e6:ea:22:52:cb:12:72:ee:28:0b:fe:e3:8c:99: a4:b0:c7:59:c4:ad:df:c4:8f:be:df:ed:ce:ca:c8: 4d:91:c7:ee:e7:0f:95:27:b3:4c:9a:d1:00:32:d4: 6a:6e:2c:53:34:33:98:5a:f6:2b:df:9a:df:ad:9a: ad:96:21:15:70:f7:c3:df:3c:5a:fb:ff:d3:8c:71: 5e:a5:6c:72:08:6a:c0:fb:f3:b9:30:1d:8d:37:8d: d3:77:cb:5e:f1:c7:f0:38:b2:35:71:9b:8e:0d:ac: 0f:fd:a0:24:b9:36:d4:ef:f7:45:48:19:4c:f6:7c: 1a:5b:6d:68:ab:85:86:70:bd:69:34:2a:2c:4c:81: de:00:7f:32:15:da:22:6a:07:e0:16:6e:f2:89:2b: fe:c6:f3:52:f7:e8:47:a1:75:e6:06:c2:f9:62:50: 47:c9:97:b1:7c:77:ea:d7:d2:0c:59:9b:66:4d:90: 34:c3:55:4e:96:33:d2:bf:c2:3a:c4:bc:69:d9:ed: e8:10:37:db:eb:dc:7c:2e:d2:27:e1:ab:ea:43:21: 64:45:78:99:69:7f:77:6a:d9:47:77:3a:eb:f3:18: f2:b3:ad:f5:38:57:99:b0:83:bb:6a:a3:84:ae:5c: 88:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:87:E5:C0:1E:08:D6:E7:5F:53:D1:41:0D:00:A9:57:6F:31:7B:30 X509v3 Authority Key Identifier: keyid:8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:8a:75:aa:d3:c2:db:9d:4b:ae:4d:74:8f:32:3d:aa:43:6f: 0e:d4:61:9c:08:ff:b0:91:ec:78:68:0f:9a:b8:a9:d4:65:f2: 2d:7d:3a:e6:d4:0b:81:6e:ae:66:1d:06:74:aa:4c:91:ca:54: bd:32:50:4e:be:cb:c8:7a:21:a1:f8:eb:7c:2c:c7:7f:6f:24: 4a:ef:2e:21:e9:50:87:14:26:7d:83:10:7a:39:ba:e5:ab:de: 05:8b:0a:1c:23:f2:5b:2b:b7:04:71:9b:58:63:09:de:d9:7c: 06:be:b7:0f:1a:52:8e:c0:37:b4:6c:d6:30:3d:57:30:a3:3c: 0d:46:2e:36:dc:90:b4:28:90:22:5a:33:b0:b4:4f:e8:32:8a: ce:3b:de:3e:6c:2f:b6:be:8c:a1:6f:af:01:17:2e:f0:14:c8: de:50:5e:8c:2a:ff:3a:6f:60:e8:79:e3:17:7a:8a:7e:9f:2f: 8c:a5:76:83:be:17:c1:15:c7:63:58:b2:af:35:47:e2:31:e5: 01:6a:7f:92:b6:b6:d2:8c:08:28:92:00:7d:3c:ec:e9:8f:2d: 62:17:78:85:da:fa:1f:1d:b0:06:e2:93:f2:90:c7:e3:0b:53: ee:d5:e6:21:25:36:ee:63:81:40:ec:71:8b:3d:0f:50:04:6b: 78:6c:fb:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODQxMTAvBgNVBAUTKDhDOUY0NDA3N0NDNTFEQjA5NDhGQjI5NUYwQ0E1MEZF RTAwNjI1NEIwHhcNMjYwMzI0MTg1MzIwWhcNMjYwMzMxMTg1MzIwWjAYMRYwFAYD VQQDEw02OWMyZGRhMC04MTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuv6Hal44S3WYUqAimRi5uoiUssScu4oC/7jjJmksMdZxK3fxI++3+3OyshN kcfu5w+VJ7NMmtEAMtRqbixTNDOYWvYr35rfrZqtliEVcPfD3zxa+//TjHFepWxy CGrA+/O5MB2NN43Td8te8cfwOLI1cZuODawP/aAkuTbU7/dFSBlM9nwaW21oq4WG cL1pNCosTIHeAH8yFdoiagfgFm7yiSv+xvNS9+hHoXXmBsL5YlBHyZexfHfq19IM WZtmTZA0w1VOljPSv8I6xLxp2e3oEDfb69x8LtIn4avqQyFkRXiZaX93atlHdzrr 8xjys631OFeZsIO7aqOErlyIFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCKH5cAe CNbnX1PRQQ0AqVdvMXswMB8GA1UdIwQYMBaAFIyfRAd8xR2wlI+ylfDKUP7gBiVL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4NC9CRjRCRDQ1ODQ0 ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6RkhiQ1VqN0tWOE1wUV91QUdK VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pKOUVCM3pGSGJDVWo3S1Y4TXBRX3VBR0pVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM4NC9CRjRCRDQ1ODQ0ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6Rkhi Q1VqN0tWOE1wUV91QUdKVXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN4p1qtPC251Lrk10jzI9qkNvDtRhnAj/sJHseGgPmrip1GXyLX065tQLgW6u Zh0GdKpMkcpUvTJQTr7LyHohofjrfCzHf28kSu8uIelQhxQmfYMQejm65aveBYsK HCPyWyu3BHGbWGMJ3tl8Br63DxpSjsA3tGzWMD1XMKM8DUYuNtyQtCiQIlozsLRP 6DKKzjvePmwvtr6MoW+vARcu8BTI3lBejCr/Om9g6HnjF3qKfp8vjKV2g74XwRXH Y1iyrzVH4jHlAWp/kra20owIKJIAfTzs6Y8tYhd4hdr6Hx2wBuKT8pDH4wtT7tXm ISU27mOBQOxxiz0PUARreGz7Ww== -----END CERTIFICATE-----Generated at Thu Mar 26 15:28:37 2026 by rpki-client