$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft File: _JvUY9Aun9Lfw8Oa5M1asyJljCo.mft (raw, json) Hash identifier: pxYu1pVP24Yf8jDDHMK9mYByf0Jxj3x1RpPL+jD90Xw= Subject key identifier: 3D:E9:57:49:46:7F:8F:20:90:07:4B:30:23:DF:E2:38:53:9D:24:85 Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A Certificate issuer: /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A Certificate serial: 0B79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft Manifest number: 0AB8 Signing time: Tue 24 Mar 2026 19:32:58 +0000 Manifest this update: Tue 24 Mar 2026 19:32:58 +0000 Manifest next update: Tue 31 Mar 2026 19:32:58 +0000 Files and hashes: 1: _JvUY9Aun9Lfw8Oa5M1asyJljCo.crl (hash: PzBcmiPRbLLTnseiilAwhpOq1h9VzdVRcMhTHOzoys0=) 2: 1517BF2ED77711EF8E6D7517C4F9AE02.roa (hash: Ux1l+IgfbwyG+tZBBceLnM6t2MUyOqaW+9GorRGnVbc=) 3: 22E7F194D74C11EF9514995EC4F9AE02.roa (hash: KEYXaiiBWJFHMcfHnLqrqVdSkVFoqO7wRbUVLg149Lc=) 4: 23A38F44D74C11EF9514995EC4F9AE02.roa (hash: YlPGKsDv7idOkXKbw0yX7xAS3MzGrLN5MJqNWuwPTSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2937 (0xb79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB6EB, serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A Validity Not Before: Mar 24 19:32:58 2026 GMT Not After : Mar 31 19:32:58 2026 GMT Subject: CN=69c2e6ea-c94a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:84:ef:db:93:42:4b:bb:b6:68:90:4b:8e:70: cd:64:cf:f4:2d:66:38:c0:fa:b2:24:0c:f7:ec:a8: 1d:4a:55:53:9a:ae:c3:6f:2c:a3:42:82:63:a4:0b: 02:3b:61:0d:5f:8c:c6:a5:a1:f2:09:6e:63:5c:17: 5d:2f:ec:33:6e:be:11:bb:13:e2:06:fe:fe:5c:2f: 12:b8:b3:fd:2f:09:d5:bd:9c:da:ef:38:d8:e6:5a: fe:df:ae:02:3c:ab:1c:7f:b0:55:75:73:1b:90:c8: 5c:3a:2e:83:1a:61:2b:62:b1:90:2d:2b:51:50:07: f4:be:81:24:64:02:df:ea:ff:5e:97:ba:03:83:26: a9:87:46:a0:a9:00:cb:ce:dc:1c:51:7a:b5:cf:81: 22:58:c1:0b:8c:d1:93:86:75:c2:59:d1:3a:e9:b9: 0c:26:c2:d7:2c:b3:69:3f:39:b0:97:10:34:75:da: eb:3b:7f:75:16:9c:5b:63:25:0e:7d:c5:86:c0:6a: f0:bc:41:e3:e2:7b:4c:56:34:f4:d4:58:59:c8:e9: f6:b4:1e:0a:bf:20:cb:9d:c7:da:99:42:07:29:ec: 58:98:d8:34:e0:50:47:78:f6:44:b3:0f:dc:ff:45: c4:a8:9a:3d:38:79:93:df:14:15:f6:f9:c5:2d:93: 4f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E9:57:49:46:7F:8F:20:90:07:4B:30:23:DF:E2:38:53:9D:24:85 X509v3 Authority Key Identifier: keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:f1:56:57:f3:87:8c:c4:bf:fe:24:16:69:04:ca:e1:bb:bb: 05:68:d2:ad:ef:66:c4:03:ee:bd:f1:0b:3e:d0:25:0b:65:79: f4:a1:8e:ba:67:73:55:c0:e1:f9:b4:92:9e:42:83:df:e3:e1: 23:76:60:99:d7:d7:14:4e:b5:ad:6f:e0:ff:45:49:1e:91:9d: 1c:1b:07:05:96:8d:d8:f9:d0:a4:81:b9:8c:44:30:17:9b:5a: b8:0a:aa:23:f9:ee:7d:39:ee:17:87:6d:22:9c:63:4f:b0:b8: 10:ea:c0:d1:a5:4e:8e:3c:53:c6:82:8e:28:b1:60:87:fb:3b: 60:ea:3c:8d:56:49:f8:32:d0:97:5a:ca:db:6b:8d:e6:bd:38: d6:fe:02:06:34:a2:f3:0f:46:83:d8:55:c4:7b:0d:e4:c4:9e: 30:33:de:25:c2:b4:da:c1:f8:9f:09:d1:1c:34:1b:c0:d4:9f: 49:ec:7c:c5:71:91:37:16:46:61:5e:a7:37:7b:71:76:e8:80: 7c:7c:bb:ac:7d:1c:ca:17:c9:a6:1d:02:c6:9f:61:9f:f9:7d: a7:fd:44:f6:f1:a0:cc:5b:bf:3d:f0:74:2b:ce:f2:42:2b:4b: 12:fb:ce:80:71:07:cb:cf:0e:e2:64:c8:fa:5e:63:e3:fb:a7: e1:45:a9:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI2RUIxMTAvBgNVBAUTKEZDOUJENDYzRDAyRTlGRDJERkMzQzM5QUU0Q0Q1QUIz MjI2NThDMkEwHhcNMjYwMzI0MTkzMjU4WhcNMjYwMzMxMTkzMjU4WjAYMRYwFAYD VQQDEw02OWMyZTZlYS1jOTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsoTv25NCS7u2aJBLjnDNZM/0LWY4wPqyJAz37KgdSlVTmq7DbyyjQoJjpAsC O2ENX4zGpaHyCW5jXBddL+wzbr4RuxPiBv7+XC8SuLP9LwnVvZza7zjY5lr+364C PKscf7BVdXMbkMhcOi6DGmErYrGQLStRUAf0voEkZALf6v9el7oDgyaph0agqQDL ztwcUXq1z4EiWMELjNGThnXCWdE66bkMJsLXLLNpPzmwlxA0ddrrO391FpxbYyUO fcWGwGrwvEHj4ntMVjT01FhZyOn2tB4KvyDLncfamUIHKexYmNg04FBHePZEsw/c /0XEqJo9OHmT3xQV9vnFLZNP+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD3pV0lG f48gkAdLMCPf4jhTnSSFMB8GA1UdIwQYMBaAFPyb1GPQLp/S38PDmuTNWrMiZYwq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjZFQi8wMTM5MUIwMDhF MkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45TGZ3OE9hNU0xYXN5Smxq Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19KdlVZOUF1bjlMZnc4T2E1TTFhc3lKbGpDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjZFQi8wMTM5MUIwMDhFMkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45 TGZ3OE9hNU0xYXN5SmxqQ28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASPFWV/OHjMS//iQWaQTK4bu7BWjSre9mxAPuvfELPtAlC2V59KGOumdzVcDh +bSSnkKD3+PhI3ZgmdfXFE61rW/g/0VJHpGdHBsHBZaN2PnQpIG5jEQwF5tauAqq I/nufTnuF4dtIpxjT7C4EOrA0aVOjjxTxoKOKLFgh/s7YOo8jVZJ+DLQl1rK22uN 5r041v4CBjSi8w9Gg9hVxHsN5MSeMDPeJcK02sH4nwnRHDQbwNSfSex8xXGRNxZG YV6nN3txduiAfHy7rH0cyhfJph0Cxp9hn/l9p/1E9vGgzFu/PfB0K87yQitLEvvO gHEHy88O4mTI+l5j4/un4UWp/w== -----END CERTIFICATE-----Generated at Thu Mar 26 00:52:23 2026 by rpki-client