$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft File: jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft (raw, json) Hash identifier: YXvHCeEz7r7am7sZoUuNyocCz02cwKuVYguoc0xFsmc= Subject key identifier: 57:32:B4:B0:5C:9E:3C:E8:0A:7E:B8:8B:FF:2D:88:0D:45:65:E0:7F Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 Certificate issuer: /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Certificate serial: 0AD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft Manifest number: 0ACA Signing time: Tue 24 Mar 2026 19:15:20 +0000 Manifest this update: Tue 24 Mar 2026 19:15:20 +0000 Manifest next update: Tue 31 Mar 2026 19:15:20 +0000 Files and hashes: 1: jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl (hash: GLonsynR74wvpLD1YNJA8T5rZvUlIGyblbicFKPrJQ8=) 2: A59E2538BA0211F0892F7E0BC4F9AE02.roa (hash: U+jikQia2TmNT/0k3vINGgOcX5h8/2pprjsbUiUPbYk=) 3: BDC0899A1FF511ECAE74F266C4F9AE02.roa (hash: /3arRZXVLdrfm4u9cutgJAx+ZHiHzLIvVvAU7Zs/f38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2776 (0xad8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2A6F, serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Validity Not Before: Mar 24 19:15:20 2026 GMT Not After : Mar 31 19:15:20 2026 GMT Subject: CN=69c2e2c8-dc9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:07:5f:cf:52:80:c1:62:9a:84:ba:91:77:2c: 3b:b4:80:7c:5b:8f:bc:2c:58:13:8a:c9:de:11:f6: 59:28:f1:59:68:ff:31:c2:ea:a4:a5:73:fd:c1:de: f0:4a:93:1e:97:3e:fc:21:32:bc:79:6e:51:2b:6d: db:3c:2a:d9:08:68:61:d3:30:34:40:f5:f0:38:4e: 19:bc:34:9f:62:c0:9d:3c:b9:79:9f:27:88:1d:53: 8d:0b:3f:ce:d9:c5:7b:d7:b0:6c:f5:32:e8:ca:b0: 59:6a:c4:97:4b:c2:48:e8:0b:41:1a:2f:ad:36:85: a9:88:89:35:ec:54:e7:67:78:26:21:af:b1:5d:fd: d9:a9:75:74:6b:b1:da:f3:00:75:61:30:f9:c3:e2: 10:22:7d:be:0d:dd:1f:19:9b:a6:1c:d3:e1:ea:6d: 54:ba:0f:39:01:48:e6:41:67:44:43:b0:c1:b9:df: de:27:95:53:c6:b1:76:de:64:07:68:8e:d3:c3:47: 59:e9:90:24:a0:3a:d1:8e:61:f7:cc:06:3e:fe:a6: 71:10:84:58:27:5e:d4:fd:2e:7b:2c:ec:03:3e:41: 77:1b:59:fd:35:5d:33:91:49:2f:3a:56:98:81:22: dc:23:16:14:09:25:53:f0:0a:ff:84:2b:59:8a:c7: d0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:32:B4:B0:5C:9E:3C:E8:0A:7E:B8:8B:FF:2D:88:0D:45:65:E0:7F X509v3 Authority Key Identifier: keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:52:b4:3f:90:8b:d1:34:be:bf:52:ab:12:b9:36:53:97:7b: c5:16:62:1b:c0:2e:39:70:b5:60:6d:12:c7:57:84:5b:b6:01: 45:17:92:2d:8e:f1:1f:fd:a5:29:2b:10:e7:e2:b0:23:9c:cf: 72:23:85:30:1e:bc:86:bb:59:84:98:8a:e5:69:4f:8d:ec:91: 15:e7:72:d5:2b:58:87:01:ef:fb:1c:3f:70:6c:23:31:fb:61: 8b:46:df:f6:c0:06:23:a4:c3:7f:3f:7d:1b:5e:cf:a8:62:60: e9:52:cc:09:81:b6:2e:d5:bb:61:e6:a3:0d:2b:2d:1b:04:43: 18:25:cc:02:7c:ed:37:41:3d:d8:16:aa:ad:7c:ca:3e:a2:4b: a8:0e:b7:4f:3b:2b:1d:5e:39:d4:0c:a9:59:00:bf:6c:57:60: 3b:69:89:7e:24:e1:f4:8b:db:f5:2d:68:82:a8:33:d0:d1:7e: e7:fe:d6:4a:40:60:6b:b3:30:49:b0:33:80:7d:70:5f:c5:4e: 7c:e3:1f:db:c9:ad:20:d6:89:79:ff:15:02:af:2e:4c:ba:6c: 6e:75:21:ea:3b:25:07:7a:5b:15:32:74:b4:57:e3:d2:48:51: a0:ed:b5:d2:2e:25:cd:d0:a4:2a:a9:02:e3:4e:0d:68:2b:bb: 9a:e2:c4:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJBNkYxMTAvBgNVBAUTKDhDNUE4OTk3RkNBNUJGMDI3MEVBRjg2RUU4QzBDQjY1 NTFBQjk3RDEwHhcNMjYwMzI0MTkxNTIwWhcNMjYwMzMxMTkxNTIwWjAYMRYwFAYD VQQDEw02OWMyZTJjOC1kYzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwdfz1KAwWKahLqRdyw7tIB8W4+8LFgTisneEfZZKPFZaP8xwuqkpXP9wd7w SpMelz78ITK8eW5RK23bPCrZCGhh0zA0QPXwOE4ZvDSfYsCdPLl5nyeIHVONCz/O 2cV717Bs9TLoyrBZasSXS8JI6AtBGi+tNoWpiIk17FTnZ3gmIa+xXf3ZqXV0a7Ha 8wB1YTD5w+IQIn2+Dd0fGZumHNPh6m1Uug85AUjmQWdEQ7DBud/eJ5VTxrF23mQH aI7Tw0dZ6ZAkoDrRjmH3zAY+/qZxEIRYJ17U/S57LOwDPkF3G1n9NV0zkUkvOlaY gSLcIxYUCSVT8Ar/hCtZisfQzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFcytLBc njzoCn64i/8tiA1FZeB/MB8GA1UdIwQYMBaAFIxaiZf8pb8CcOr4bujAy2VRq5fR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkE2Ri9DQURGRjJGRTZF MzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3Snc2dmh1Nk1ETFpWR3Js OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pGcUpsX3lsdndKdzZ2aHU2TURMWlZHcmw5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkE2Ri9DQURGRjJGRTZFMzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3 Snc2dmh1Nk1ETFpWR3JsOUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADFK0P5CL0TS+v1KrErk2U5d7xRZiG8AuOXC1YG0Sx1eEW7YBRReSLY7xH/2l KSsQ5+KwI5zPciOFMB68hrtZhJiK5WlPjeyRFedy1StYhwHv+xw/cGwjMfthi0bf 9sAGI6TDfz99G17PqGJg6VLMCYG2LtW7YeajDSstGwRDGCXMAnztN0E92BaqrXzK PqJLqA63TzsrHV451AypWQC/bFdgO2mJfiTh9Ivb9S1ogqgz0NF+5/7WSkBga7Mw SbAzgH1wX8VOfOMf28mtINaJef8VAq8uTLpsbnUh6jslB3pbFTJ0tFfj0khRoO21 0i4lzdCkKqkC404NaCu7muLEyw== -----END CERTIFICATE-----Generated at Thu Mar 26 15:28:47 2026 by rpki-client