$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft File: 0JnuqfXNtv5MbvmOjYzzNkudYmE.mft (raw, json) Hash identifier: rXI+9y/s3xAye1wFsYWswPQ5RX+A1xgc2VvMEOGNyqc= Subject key identifier: 1B:59:8E:46:F4:52:CA:A1:77:ED:01:21:66:69:3D:C9:31:66:27:A8 Authority key identifier: D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61 Certificate issuer: /CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft Manifest number: 013F Signing time: Wed 25 Mar 2026 04:33:25 +0000 Manifest this update: Wed 25 Mar 2026 04:33:24 +0000 Manifest next update: Wed 01 Apr 2026 04:33:24 +0000 Files and hashes: 1: 0JnuqfXNtv5MbvmOjYzzNkudYmE.crl (hash: /GV0xBidyBZmJQpjdzcvMuPGRRoJZRLHRnke7RqswUo=) 2: 63CE609A48CB11EF94C2AA83C4F9AE02.roa (hash: /BN7j32CMdvrqvlXZabxDixoXk3rcdIFkodBJE1okdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D88, serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261 Validity Not Before: Mar 25 04:33:24 2026 GMT Not After : Apr 1 04:33:24 2026 GMT Subject: CN=69c36595-6366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e4:20:1e:80:98:43:32:f7:7d:a6:94:ab:ad: 0f:00:44:21:b6:71:49:74:27:af:c3:00:a8:79:15: 73:bf:db:84:78:ca:72:1f:d7:04:bb:5d:65:43:74: 3d:f4:82:5f:ca:ef:ee:fa:48:42:7f:37:16:61:15: 33:74:e5:49:7c:62:b6:ef:13:5e:01:5d:53:f2:58: b9:89:2b:7d:d1:56:89:e3:d9:4d:a0:5f:dd:47:e5: 12:1e:5e:98:f9:c0:21:a0:55:3f:99:64:6b:0a:30: af:50:ba:6a:03:b6:c8:96:7d:79:df:3e:b9:d7:42: d9:d8:54:25:a1:c3:ec:24:86:01:c2:32:00:62:82: d1:62:58:09:bb:44:b3:2e:15:ab:42:d7:76:ee:05: 9b:72:07:ba:08:b6:28:8e:45:8e:5e:39:f6:15:74: ab:29:d5:40:b3:86:54:64:dd:ad:e9:dc:32:20:a2: 8e:ca:bd:7e:4e:21:66:99:fb:c9:45:2e:48:da:ab: 04:da:80:df:31:05:31:87:5c:c9:2d:25:36:ec:7b: a2:78:0e:ff:30:fd:a0:c9:14:6b:4a:9e:02:b2:3f: 2f:e4:90:81:f7:64:bc:1a:a4:8e:b8:c6:e3:15:b1: 69:ef:9d:7d:dd:62:a5:f7:a2:40:a3:db:68:77:26: db:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:59:8E:46:F4:52:CA:A1:77:ED:01:21:66:69:3D:C9:31:66:27:A8 X509v3 Authority Key Identifier: keyid:D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:52:72:99:f3:07:6e:f5:7c:be:f2:b5:be:d0:f2:ae:37:9a: 52:db:5a:cc:00:08:a3:21:88:63:54:11:69:4c:20:1d:1a:de: ad:d3:89:2d:2b:9c:e2:40:f0:8e:e8:f1:e6:e2:4c:43:12:22: 55:8b:79:1d:56:09:c9:57:7f:1d:8b:51:38:63:1b:12:4c:f2: 3b:72:c4:7f:f7:6e:25:3e:74:79:0e:21:17:17:38:40:2a:4d: b4:2c:06:96:bd:ff:8a:8f:77:67:f7:16:db:4d:a4:3b:d7:19: ab:8d:a8:6d:85:cd:e7:34:69:52:42:1f:e2:1e:e3:73:df:9b: 38:bc:d6:36:83:35:4a:f4:7c:6b:48:a2:6d:7d:c5:48:fd:cb: 65:aa:38:d3:94:3d:32:6e:35:2b:eb:de:d2:86:bb:8d:a2:ef: 07:fd:3b:9a:c0:ec:e5:1d:32:a7:be:e1:de:27:ae:c3:0a:9d: 91:d3:2d:7f:72:5f:f9:8b:44:3a:65:25:63:32:a7:5d:7a:9b: c1:df:e7:19:98:48:eb:af:78:35:93:bf:e2:29:20:e8:02:78: 1d:ae:e6:66:eb:2d:bc:1a:96:56:cd:81:f8:ea:4c:33:81:c7: 8a:59:24:27:17:c0:7b:f2:aa:53:9f:e7:de:cd:bb:15:3a:ff: 7a:e9:54:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEODgxMTAvBgNVBAUTKEQwOTlFRUE5RjVDREI2RkU0QzZFRjk4RThEOENGMzM2 NEI5RDYyNjEwHhcNMjYwMzI1MDQzMzI0WhcNMjYwNDAxMDQzMzI0WjAYMRYwFAYD VQQDEw02OWMzNjU5NS02MzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOQgHoCYQzL3faaUq60PAEQhtnFJdCevwwCoeRVzv9uEeMpyH9cEu11lQ3Q9 9IJfyu/u+khCfzcWYRUzdOVJfGK27xNeAV1T8li5iSt90VaJ49lNoF/dR+USHl6Y +cAhoFU/mWRrCjCvULpqA7bIln153z6510LZ2FQlocPsJIYBwjIAYoLRYlgJu0Sz LhWrQtd27gWbcge6CLYojkWOXjn2FXSrKdVAs4ZUZN2t6dwyIKKOyr1+TiFmmfvJ RS5I2qsE2oDfMQUxh1zJLSU27HuieA7/MP2gyRRrSp4Csj8v5JCB92S8GqSOuMbj FbFp75193WKl96JAo9todybbPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBtZjkb0 Usqhd+0BIWZpPckxZieoMB8GA1UdIwQYMBaAFNCZ7qn1zbb+TG75jo2M8zZLnWJh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQ4OC9COTg2RDkxQTQz MTAxMUVGODg0MTE3ODJDNEY5QUUwMi8wSm51cWZYTnR2NU1idm1Pall6ek5rdWRZ bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBKbnVxZlhOdHY1TWJ2bU9qWXp6Tmt1ZFltRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQ4OC9COTg2RDkxQTQzMTAxMUVGODg0MTE3ODJDNEY5QUUwMi8wSm51cWZYTnR2 NU1idm1Pall6ek5rdWRZbUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXFJymfMHbvV8vvK1vtDyrjeaUttazAAIoyGIY1QRaUwgHRrerdOJLSuc4kDw jujx5uJMQxIiVYt5HVYJyVd/HYtROGMbEkzyO3LEf/duJT50eQ4hFxc4QCpNtCwG lr3/io93Z/cW202kO9cZq42obYXN5zRpUkIf4h7jc9+bOLzWNoM1SvR8a0iibX3F SP3LZao405Q9Mm41K+ve0oa7jaLvB/07msDs5R0yp77h3ieuwwqdkdMtf3Jf+YtE OmUlYzKnXXqbwd/nGZhI6694NZO/4ikg6AJ4Ha7mZustvBqWVs2B+OpMM4HHilkk JxfAe/KqU5/n3s27FTr/eulUaA== -----END CERTIFICATE-----Generated at Thu Mar 26 00:59:49 2026 by rpki-client