$ rpki-client -vvf rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft File: 23LIuvHa9pOYGFLuAyIwMF7ICRA.mft (raw, json) Hash identifier: RHGQlOhv9phsl8Do8a6jvrS2W7Rt8QQd97aXkcbgKFU= Subject key identifier: 73:F1:85:8D:22:78:CC:12:D5:F9:20:38:D8:E6:EB:82:F0:8B:BE:15 Authority key identifier: DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 Certificate issuer: /CN=A91B289C/serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Certificate serial: 0939 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft Manifest number: 0930 Signing time: Tue 24 Mar 2026 19:59:06 +0000 Manifest this update: Tue 24 Mar 2026 19:59:06 +0000 Manifest next update: Tue 31 Mar 2026 19:59:06 +0000 Files and hashes: 1: 23LIuvHa9pOYGFLuAyIwMF7ICRA.crl (hash: 8SoPr1n1rp1Sn6A4DhUfF5IjqqHYl0cxhzBiQ0XnvGM=) 2: E6F3687CBCE711EAACD6466CC4F9AE02.roa (hash: AJajG2Lmw5CKAEEdhqoEdtkkiOQieReMgo4pezqlWDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2361 (0x939) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B289C, serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Validity Not Before: Mar 24 19:59:06 2026 GMT Not After : Mar 31 19:59:06 2026 GMT Subject: CN=69c2ed0a-9504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:48:a4:3a:77:19:46:66:da:2d:9b:6f:21:25: de:ba:27:3c:d8:7c:9f:a1:5e:fd:25:b0:72:d6:0b: 57:bc:63:8b:7a:85:dd:22:0a:94:92:b4:ba:26:32: 4d:a9:0a:11:1b:68:35:4f:76:2d:c0:5e:8f:dd:91: 9c:a8:41:57:8b:f8:b0:3c:49:1a:06:58:1b:96:d7: f9:e3:0d:53:b1:72:42:5f:8c:29:00:7e:85:56:5a: 5c:63:b3:a0:4f:6d:24:93:90:57:85:4c:16:b6:d8: 01:9f:66:cc:9c:7e:f8:2a:8e:d1:d5:a6:5d:c2:ac: e3:70:ca:54:34:42:1d:3d:6a:d0:fe:3b:80:b0:e0: e5:f6:08:59:5a:c0:61:51:9a:62:c3:5e:9b:62:56: b0:d5:ab:fa:50:84:81:b2:ce:89:b0:0e:ac:6d:24: f9:61:fb:e5:9b:09:c7:04:fc:7f:45:b5:75:bc:0a: 17:3e:c8:b5:49:5e:6b:5c:4d:bc:0c:d2:f9:a1:43: de:f6:b1:a5:a1:1e:d9:bf:00:e8:52:b1:62:05:69: 06:b0:97:b3:ba:ab:39:b4:15:00:43:af:1f:3b:94: 23:94:98:ad:51:4c:c8:ab:67:42:b6:11:7a:49:68: a4:f6:3b:04:1d:d6:f1:4e:67:e9:98:e2:93:3a:55: 7d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F1:85:8D:22:78:CC:12:D5:F9:20:38:D8:E6:EB:82:F0:8B:BE:15 X509v3 Authority Key Identifier: keyid:DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:77:6f:c8:b1:07:e8:d0:e0:f8:95:d4:66:00:a0:fd:52:4e: a0:17:87:1a:63:13:9d:33:7c:91:bd:8f:ca:c7:70:33:fa:00: ce:ce:35:e8:0c:b1:55:4b:51:1b:7a:70:c3:27:6d:99:9f:d1: eb:79:e1:2a:02:9f:33:d1:60:ca:81:8b:d3:37:1d:52:3c:18: ef:ba:46:78:d9:a7:15:63:7c:a7:f9:bb:c3:66:c5:89:af:9e: fb:f1:cf:5a:a1:8a:48:ab:81:50:76:9c:d4:f3:25:ee:5a:6f: 9f:3a:5e:70:c6:60:a5:b6:54:bd:5f:d6:be:c3:30:03:56:1e: 1d:9d:d1:58:72:c2:61:2a:18:d6:97:85:4d:42:6f:de:73:ee: ed:5a:d4:d0:0a:86:fd:e7:2f:b5:79:7a:28:35:ab:3d:75:24: 63:13:b8:c0:94:79:7a:66:e5:b7:05:45:97:5f:77:12:de:8e: 3f:bb:59:1e:a5:b7:6d:be:2e:7b:0d:6e:96:29:d9:ee:20:74: 6b:bf:a0:7e:c2:37:22:4d:57:a2:de:7f:1f:f9:28:78:1f:14: db:06:54:fd:3e:eb:14:c2:f9:8f:d5:de:24:af:f0:a5:3e:3a: 7f:10:ec:42:0f:3f:da:3a:63:d6:6c:85:67:06:cc:8a:d7:2e: c4:10:8b:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI4OUMxMTAvBgNVBAUTKERCNzJDOEJBRjFEQUY2OTM5ODE4NTJFRTAzMjIzMDMw NUVDODA5MTAwHhcNMjYwMzI0MTk1OTA2WhcNMjYwMzMxMTk1OTA2WjAYMRYwFAYD VQQDEw02OWMyZWQwYS05NTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7EikOncZRmbaLZtvISXeuic82HyfoV79JbBy1gtXvGOLeoXdIgqUkrS6JjJN qQoRG2g1T3YtwF6P3ZGcqEFXi/iwPEkaBlgbltf54w1TsXJCX4wpAH6FVlpcY7Og T20kk5BXhUwWttgBn2bMnH74Ko7R1aZdwqzjcMpUNEIdPWrQ/juAsODl9ghZWsBh UZpiw16bYlaw1av6UISBss6JsA6sbST5YfvlmwnHBPx/RbV1vAoXPsi1SV5rXE28 DNL5oUPe9rGloR7ZvwDoUrFiBWkGsJezuqs5tBUAQ68fO5QjlJitUUzIq2dCthF6 SWik9jsEHdbxTmfpmOKTOlV9lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHPxhY0i eMwS1fkgONjm64Lwi74VMB8GA1UdIwQYMBaAFNtyyLrx2vaTmBhS7gMiMDBeyAkQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjg5Qy8zQUIxRTJEQ0JD RTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlwT1lHRkx1QXlJd01GN0lD UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzTEl1dkhhOXBPWUdGTHVBeUl3TUY3SUNSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Mjg5Qy8zQUIxRTJEQ0JDRTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlw T1lHRkx1QXlJd01GN0lDUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuXdvyLEH6NDg+JXUZgCg/VJOoBeHGmMTnTN8kb2PysdwM/oAzs416AyxVUtR G3pwwydtmZ/R63nhKgKfM9FgyoGL0zcdUjwY77pGeNmnFWN8p/m7w2bFia+e+/HP WqGKSKuBUHac1PMl7lpvnzpecMZgpbZUvV/WvsMwA1YeHZ3RWHLCYSoY1peFTUJv 3nPu7VrU0AqG/ecvtXl6KDWrPXUkYxO4wJR5embltwVFl193Et6OP7tZHqW3bb4u ew1ulinZ7iB0a7+gfsI3Ik1Xot5/H/koeB8U2wZU/T7rFML5j9XeJK/wpT46fxDs Qg8/2jpj1myFZwbMitcuxBCLNw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:28:13 2026 by rpki-client