$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json) Hash identifier: /nbpkXOwmbWgCuOyi8iZgMzscr9ZkAbjcM8Uhu9QPtc= Subject key identifier: E8:79:28:96:54:B9:DE:AC:06:2C:10:FD:11:37:16:4E:40:83:8E:6D Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft Manifest number: 0127 Signing time: Wed 25 Mar 2026 09:08:03 +0000 Manifest this update: Wed 25 Mar 2026 09:08:02 +0000 Manifest next update: Wed 01 Apr 2026 09:08:02 +0000 Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: O+LhPu+d2o9xsOvzT88eOnlzr0cjAQ62ycYSSYmPuGA=) 2: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: vEc2jHNpgXkle7usC6cdkDSSfCMVfaEYA5yavxzJttQ=) 3: B8D1F4E8501411F09C0FE83FC4F9AE02.roa (hash: D4NRCko3MZFYJkLZPgAkzijOJifErlno5imf5X3ylHY=) 4: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (hash: GzfRPUDBbDs4K4+434Sr5sRN49sS17wbw5wNG+NNvFM=) 5: C243BFC4FCE511F0AACA4132716F56BC.roa (hash: eKzsF8gwTHd0fONSYl3Z08RvmhJ05i8QkQx5Tz+KBCU=) 6: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: rnduJ2NpU+LIFZlZ+rkpxldWRpJwaPya7QDINOEsPrs=) 7: 1E17772C282A11F18C2E09ECC4833773.roa (hash: oLpFDhJAkBM0IvUW0GrLcFvZpoWVqor11OTJu0OVZZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 09:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Mar 25 09:08:02 2026 GMT Not After : Apr 1 09:08:02 2026 GMT Subject: CN=69c3a5f2-a9ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:83:2a:15:d1:60:9b:ce:e7:4f:74:6c:cf:eb: e2:d2:ef:d9:55:c3:80:75:1e:33:f8:0d:0f:a3:15: d0:eb:21:f0:14:2b:02:ea:89:ad:41:bb:bf:a4:0c: 57:fc:35:9c:ea:77:5c:58:c5:f6:c4:63:a4:f1:76: a3:d1:a0:63:23:da:37:f8:38:61:03:d3:12:ea:e8: e0:8d:43:33:b1:1d:db:b8:c3:93:73:b7:4c:c0:8c: 02:f1:cb:a5:bf:09:70:f9:5d:9d:40:67:e1:75:c5: 39:66:3a:21:9f:8a:b5:c4:13:12:a1:33:44:82:20: 11:8d:e4:9a:a8:18:db:3c:ec:3f:31:67:d8:a0:fd: 4c:10:44:ce:3c:17:fc:e5:97:1f:31:9a:dd:3f:00: c7:41:b2:5e:d9:5a:05:10:66:c3:f7:9d:d9:e9:89: 29:3f:0b:7a:2d:d8:4d:b8:48:f3:60:92:4e:6f:d8: ce:58:32:e7:99:dd:81:69:8b:8f:4e:d6:bb:01:dd: 8b:a2:b5:65:f7:0e:5d:c1:c3:c6:dd:dd:9c:52:d1: 74:51:9a:d0:ba:83:ad:0b:da:a9:3b:fc:23:cb:e7: 32:fd:25:1e:31:1a:61:a8:e2:01:68:88:b7:7e:14: cf:f2:e8:b8:d2:bb:d9:37:2d:d2:bf:3f:11:f4:5a: a0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:79:28:96:54:B9:DE:AC:06:2C:10:FD:11:37:16:4E:40:83:8E:6D X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:16:40:b5:4d:b0:c6:43:95:b3:d1:59:82:6f:d3:53:4c:57: d1:c7:ad:95:ca:03:73:74:49:3c:48:c3:50:dd:84:d2:b8:f0: 2f:26:2a:b4:59:0b:cd:d3:29:65:23:86:81:21:19:0e:c3:48: b8:d2:86:a5:80:2f:01:a9:4d:6f:4c:7a:dc:85:a1:b7:89:fa: 61:c9:da:c0:f9:fc:50:14:79:21:ac:27:b4:37:17:2e:ff:3c: 4b:8d:06:a0:d7:d2:69:5e:6f:bb:a5:60:89:64:c0:f5:d2:0a: 63:c0:d0:fa:a2:03:fd:5d:3d:b0:2c:8c:8e:c1:b2:ce:7e:2f: 11:af:d7:d4:2e:8e:ba:64:d0:fc:63:79:7b:26:a2:25:6e:81: 23:a2:d8:c9:5b:ef:64:15:cf:6f:4c:8f:58:51:d7:7e:6d:ca: 2a:db:dd:74:03:65:0e:69:43:e5:d7:b6:bf:15:e6:05:48:44: aa:eb:e2:ba:dc:27:b2:81:00:f0:8a:8f:bc:85:af:91:71:f9: 29:02:d1:31:38:3e:68:5f:1a:eb:12:f3:f0:3e:06:50:8f:90: fd:7c:d0:c2:fc:d5:07:32:60:0d:f5:c4:ed:89:73:6c:39:7e: fd:34:bc:51:02:66:10:1a:4f:74:d3:c6:31:cc:d7:10:6d:84: 26:f4:ac:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjYwMzI1MDkwODAyWhcNMjYwNDAxMDkwODAyWjAYMRYwFAYD VQQDEw02OWMzYTVmMi1hOWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIMqFdFgm87nT3Rsz+vi0u/ZVcOAdR4z+A0PoxXQ6yHwFCsC6omtQbu/pAxX /DWc6ndcWMX2xGOk8Xaj0aBjI9o3+DhhA9MS6ujgjUMzsR3buMOTc7dMwIwC8cul vwlw+V2dQGfhdcU5Zjohn4q1xBMSoTNEgiARjeSaqBjbPOw/MWfYoP1MEETOPBf8 5ZcfMZrdPwDHQbJe2VoFEGbD953Z6YkpPwt6LdhNuEjzYJJOb9jOWDLnmd2BaYuP Tta7Ad2LorVl9w5dwcPG3d2cUtF0UZrQuoOtC9qpO/wjy+cy/SUeMRphqOIBaIi3 fhTP8ui40rvZNy3Svz8R9FqgfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOh5KJZU ud6sBiwQ/RE3Fk5Ag45tMB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0I0Qy9EQzlERTI4RThDNTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FR QjI1UFhfUW9hRjlqLXdqdDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFRZAtU2wxkOVs9FZgm/TU0xX0cetlcoDc3RJPEjDUN2E0rjwLyYqtFkLzdMp ZSOGgSEZDsNIuNKGpYAvAalNb0x63IWht4n6YcnawPn8UBR5IawntDcXLv88S40G oNfSaV5vu6VgiWTA9dIKY8DQ+qID/V09sCyMjsGyzn4vEa/X1C6OumTQ/GN5eyai JW6BI6LYyVvvZBXPb0yPWFHXfm3KKtvddANlDmlD5de2vxXmBUhEquviutwnsoEA 8IqPvIWvkXH5KQLRMTg+aF8a6xLz8D4GUI+Q/XzQwvzVBzJgDfXE7YlzbDl+/TS8 UQJmEBpPdNPGMczXEG2EJvSs7A== -----END CERTIFICATE-----Generated at Thu Mar 26 19:53:48 2026 by rpki-client