$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft File: J8OQD7137iLLcempDoFXTN5GRK0.mft (raw, json) Hash identifier: no/5mI4kbAPXtjNDrHjFWP8TgHEljYO2+9DQcfdg7So= Subject key identifier: 79:7B:1B:C2:E3:13:17:CB:F0:D1:52:B3:46:22:4F:D2:01:97:99:74 Authority key identifier: 27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD Certificate issuer: /CN=A91B1A23/serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD Certificate serial: 07F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft Manifest number: 07E7 Signing time: Thu 26 Mar 2026 21:07:33 +0000 Manifest this update: Thu 26 Mar 2026 21:07:33 +0000 Manifest next update: Thu 02 Apr 2026 21:07:33 +0000 Files and hashes: 1: J8OQD7137iLLcempDoFXTN5GRK0.crl (hash: twNupG8B+Fp2iLReKQTsijdqGU56+/KjoaOeVuyyAPg=) 2: 594EEA2CAEA711EE961B0558C4F9AE02.roa (hash: MGp5NvaWmsdbvQARv7j0xLY5ZLqFaH4JtDxSWJQ+zS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 21:07:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2033 (0x7f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1A23, serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD Validity Not Before: Mar 26 21:07:33 2026 GMT Not After : Apr 2 21:07:33 2026 GMT Subject: CN=69c5a015-487c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:66:5b:c6:ad:42:bf:a0:3a:bd:a3:b5:63:e8: cb:9e:cf:b7:77:84:77:a5:b6:99:67:3d:e8:a5:45: ad:ad:98:8f:e3:51:be:1a:60:b0:f9:ab:0c:65:85: 7e:c8:ef:a2:c5:ce:14:51:4e:4b:bc:3c:16:1f:b3: a3:cc:50:19:d9:1a:5e:4c:99:fa:5b:b2:56:1d:93: e2:06:d9:a1:92:fd:26:0a:b3:d7:52:c5:88:e7:e8: e5:ad:8f:41:cf:96:60:21:e6:1a:53:8c:08:f7:4c: c6:7f:5a:cb:60:a5:20:e6:dc:2b:9b:24:dd:c1:23: 66:e3:c7:99:c1:09:39:ae:74:76:bd:9a:1c:fc:73: 84:9e:cb:4e:ce:15:a2:bb:73:cd:e3:2b:6c:d5:d2: 04:0f:b8:b1:d0:fa:c0:9f:4f:2a:ba:c7:04:b1:b4: 01:f9:3f:e8:11:08:44:f1:15:0d:a3:1a:2c:7f:93: 4f:3f:fc:22:db:0d:9f:40:6f:97:07:10:28:bd:73: a4:85:aa:94:c9:86:53:3b:23:cd:f1:6d:fa:bb:39: 6e:c8:b5:41:3c:62:1e:30:b7:c8:19:14:55:f0:d7: 39:d5:76:ac:7f:99:e6:af:e8:9e:3c:83:e1:9e:4a: dd:85:f1:aa:7f:84:3a:57:4c:b8:f5:fc:49:40:fa: 39:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7B:1B:C2:E3:13:17:CB:F0:D1:52:B3:46:22:4F:D2:01:97:99:74 X509v3 Authority Key Identifier: keyid:27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:1d:df:49:d6:16:57:7e:41:d0:41:99:81:8f:ea:72:b6:c7: ec:e6:cc:93:64:cd:ad:84:0b:68:b4:57:19:ad:d8:4c:5c:55: 37:76:9a:e3:7d:6f:09:cd:26:fd:16:84:19:84:b2:d3:52:89: 75:6c:11:f7:82:9b:54:54:81:f5:fa:3d:d7:db:72:b5:d4:b4: e9:d8:d2:49:3c:42:f5:e6:a0:f1:33:d8:b8:3c:2c:ad:e2:e0: 1b:6c:56:29:99:71:51:38:bc:2e:0a:e9:89:73:a0:9f:77:ab: 6f:aa:a3:3b:5a:ab:89:37:07:ab:ab:53:4a:ec:fe:fc:60:10: 99:45:c1:b0:20:c1:9a:cd:bb:d0:86:33:1b:a5:05:08:e7:be: f4:3e:6a:dd:22:e0:d3:9f:eb:cd:68:94:17:0e:ae:6c:bc:b5: f2:a0:75:f5:ea:fd:91:43:90:a1:81:53:a3:4a:76:5c:81:b4: 12:a4:36:ec:bf:b9:f4:08:fc:7c:f8:ed:d4:84:5f:5a:b3:fa: ff:2d:1e:a5:24:37:61:a7:02:75:ce:46:37:8a:18:f0:28:9e: c6:5d:1d:66:cc:53:9b:83:02:8b:c6:bc:4a:de:8d:06:59:2e: 62:a5:1f:f9:5c:27:d3:ba:30:14:bf:38:45:6c:9e:d7:17:41: 33:e5:60:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFBMjMxMTAvBgNVBAUTKDI3QzM5MDBGQkQ3N0VFMjJDQjcxRTlBOTBFODE1NzRD REU0NjQ0QUQwHhcNMjYwMzI2MjEwNzMzWhcNMjYwNDAyMjEwNzMzWjAYMRYwFAYD VQQDEw02OWM1YTAxNS00ODdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2Zbxq1Cv6A6vaO1Y+jLns+3d4R3pbaZZz3opUWtrZiP41G+GmCw+asMZYV+ yO+ixc4UUU5LvDwWH7OjzFAZ2RpeTJn6W7JWHZPiBtmhkv0mCrPXUsWI5+jlrY9B z5ZgIeYaU4wI90zGf1rLYKUg5twrmyTdwSNm48eZwQk5rnR2vZoc/HOEnstOzhWi u3PN4yts1dIED7ix0PrAn08quscEsbQB+T/oEQhE8RUNoxosf5NPP/wi2w2fQG+X BxAovXOkhaqUyYZTOyPN8W36uzluyLVBPGIeMLfIGRRV8Nc51Xasf5nmr+iePIPh nkrdhfGqf4Q6V0y49fxJQPo5ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHl7G8Lj ExfL8NFSs0YiT9IBl5l0MB8GA1UdIwQYMBaAFCfDkA+9d+4iy3HpqQ6BV0zeRkSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUEyMy9BQzUzM0RFRTI4 OTYxMUVCQkFBRDU3MjFDNEY5QUUwMi9KOE9RRDcxMzdpTExjZW1wRG9GWFRONUdS SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o4T1FENzEzN2lMTGNlbXBEb0ZYVE41R1JLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUEyMy9BQzUzM0RFRTI4OTYxMUVCQkFBRDU3MjFDNEY5QUUwMi9KOE9RRDcxMzdp TExjZW1wRG9GWFRONUdSSzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkx3fSdYWV35B0EGZgY/qcrbH7ObMk2TNrYQLaLRXGa3YTFxVN3aa431vCc0m /RaEGYSy01KJdWwR94KbVFSB9fo919tytdS06djSSTxC9eag8TPYuDwsreLgG2xW KZlxUTi8LgrpiXOgn3erb6qjO1qriTcHq6tTSuz+/GAQmUXBsCDBms270IYzG6UF COe+9D5q3SLg05/rzWiUFw6ubLy18qB19er9kUOQoYFTo0p2XIG0EqQ27L+59Aj8 fPjt1IRfWrP6/y0epSQ3YacCdc5GN4oY8Ciexl0dZsxTm4MCi8a8St6NBlkuYqUf +Vwn07owFL84RWye1xdBM+Vgfg== -----END CERTIFICATE-----Generated at Sat Mar 28 10:27:00 2026 by rpki-client