$ rpki-client -vvf rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft File: D-jKZIcKPWORHI0tZRuinKztDso.mft (raw, json) Hash identifier: 9RZAjMUMhXGFZ7gcAZYH/lULrtLhUJe5m7SZbr7gT4U= Subject key identifier: 53:67:3D:1A:70:0D:CF:72:FF:1B:3F:D4:44:03:01:13:BF:44:5F:93 Authority key identifier: 0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA Certificate issuer: /CN=A91B428B/serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA Certificate serial: 0A58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft Manifest number: 0A50 Signing time: Tue 24 Mar 2026 19:28:19 +0000 Manifest this update: Tue 24 Mar 2026 19:28:19 +0000 Manifest next update: Tue 31 Mar 2026 19:28:19 +0000 Files and hashes: 1: D-jKZIcKPWORHI0tZRuinKztDso.crl (hash: rEtSCKk0XhR80zt6FXyddbxHqsWR5PHtTeKKnI3pdZI=) 2: 319DF660847811EA8EE07E81C4F9AE02.roa (hash: bp4o6x+4WVat+L6fBmKbMiI+z6fNEDUgFZSzD/cLCUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2648 (0xa58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B428B, serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA Validity Not Before: Mar 24 19:28:19 2026 GMT Not After : Mar 31 19:28:19 2026 GMT Subject: CN=69c2e5d3-4f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d0:9a:a6:0e:29:21:2a:83:9e:65:55:3f:ed: 4c:ff:31:fe:b8:45:2e:2a:93:9d:ce:0d:05:bc:81: de:2e:59:09:86:9d:b6:d4:de:25:f4:b3:51:16:e9: d5:0c:bc:ea:75:d0:0b:d4:5d:08:8c:09:21:5f:1f: 31:b9:28:fc:a5:6b:b0:ca:7f:3b:68:50:2b:00:80: 7f:7f:0f:fb:8f:8e:f6:e4:ed:d1:ea:96:cd:0e:08: 31:45:47:a9:aa:0e:0c:be:a6:07:b2:80:88:d5:32: e0:86:ad:b6:cc:c6:5c:b2:09:44:21:7d:8c:1d:40: e6:c7:0c:68:bc:38:ef:83:26:ec:7c:e0:47:0c:f9: 0b:33:e3:68:32:31:a9:01:d3:c0:b6:b7:14:8d:8f: 62:71:b1:c2:f7:98:65:d6:de:f0:f0:90:46:a2:bf: f5:10:bf:3e:7a:97:1e:ac:05:40:bd:51:80:df:c0: 36:d5:6a:44:13:03:cf:29:e5:ff:b8:07:2f:df:52: f4:14:f9:6b:52:c1:c9:fa:82:7b:a9:05:45:b0:6a: 01:33:e2:5b:d3:e0:25:5e:f1:5c:59:45:d8:67:85: 1e:c8:18:ae:5b:1a:16:f8:e0:a5:87:35:14:e6:02: 56:1e:76:5c:44:40:83:a8:83:3c:a5:35:2b:a0:ec: ae:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:67:3D:1A:70:0D:CF:72:FF:1B:3F:D4:44:03:01:13:BF:44:5F:93 X509v3 Authority Key Identifier: keyid:0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:cd:12:76:10:32:80:01:bf:54:f0:05:63:56:c7:f0:1a:56: 24:86:69:88:83:2c:5c:fa:78:53:8b:aa:7f:4a:d8:63:8f:0a: 5f:37:53:02:df:eb:41:cb:bb:5b:e7:7f:51:b2:78:d3:1c:e5: 5c:71:3b:52:2e:3f:f3:bc:73:7c:94:46:1d:54:24:85:a9:1d: e9:4b:15:96:f6:91:2f:eb:b5:2e:77:49:56:e3:99:22:4f:2b: c5:e7:0e:0a:59:ab:01:1e:8d:81:8e:6f:16:e2:ae:42:7b:f7: cd:f4:b8:27:66:a2:ca:62:89:3c:1c:85:29:ac:a8:f7:0e:39: ad:fd:af:f8:71:4a:cc:4d:a2:06:e0:e7:76:cf:68:e4:a9:50: 62:1b:7d:bc:d0:55:10:d2:53:a7:3a:fb:8d:55:31:9e:54:83: 31:2b:03:74:ff:9c:70:5b:2d:d5:7a:7e:ec:ee:ca:68:d9:2c: 31:b9:a3:d4:94:e1:57:e3:eb:34:74:14:85:2d:54:a9:a4:81: 7c:9b:92:ec:c6:bd:2d:0d:be:39:41:5f:77:37:42:ba:3b:04: 0f:cf:7a:40:04:43:d1:34:38:1d:60:14:51:43:2e:e8:64:a8: 31:ae:d1:fd:26:14:69:30:b7:b8:22:99:c6:04:df:73:c4:31: 8a:22:ad:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICClgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyOEIxMTAvBgNVBAUTKDBGRThDQTY0ODcwQTNENjM5MTFDOEQyRDY1MUJBMjlD QUNFRDBFQ0EwHhcNMjYwMzI0MTkyODE5WhcNMjYwMzMxMTkyODE5WjAYMRYwFAYD VQQDEw02OWMyZTVkMy00ZjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNCapg4pISqDnmVVP+1M/zH+uEUuKpOdzg0FvIHeLlkJhp221N4l9LNRFunV DLzqddAL1F0IjAkhXx8xuSj8pWuwyn87aFArAIB/fw/7j4725O3R6pbNDggxRUep qg4MvqYHsoCI1TLghq22zMZcsglEIX2MHUDmxwxovDjvgybsfOBHDPkLM+NoMjGp AdPAtrcUjY9icbHC95hl1t7w8JBGor/1EL8+epcerAVAvVGA38A21WpEEwPPKeX/ uAcv31L0FPlrUsHJ+oJ7qQVFsGoBM+Jb0+AlXvFcWUXYZ4UeyBiuWxoW+OClhzUU 5gJWHnZcRECDqIM8pTUroOyutwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFNnPRpw Dc9y/xs/1EQDARO/RF+TMB8GA1UdIwQYMBaAFA/oymSHCj1jkRyNLWUbopys7Q7K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Qi8zQTBCNkMwQzg0 NzcxMUVBQjNCNDM2ODBDNEY5QUUwMi9ELWpLWkljS1BXT1JISTB0WlJ1aW5LenRE c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QtaktaSWNLUFdPUkhJMHRaUnVpbkt6dERzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDI4Qi8zQTBCNkMwQzg0NzcxMUVBQjNCNDM2ODBDNEY5QUUwMi9ELWpLWkljS1BX T1JISTB0WlJ1aW5LenREc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHs0SdhAygAG/VPAFY1bH8BpWJIZpiIMsXPp4U4uqf0rYY48KXzdTAt/rQcu7 W+d/UbJ40xzlXHE7Ui4/87xzfJRGHVQkhakd6UsVlvaRL+u1LndJVuOZIk8rxecO ClmrAR6NgY5vFuKuQnv3zfS4J2aiymKJPByFKayo9w45rf2v+HFKzE2iBuDnds9o 5KlQYht9vNBVENJTpzr7jVUxnlSDMSsDdP+ccFst1Xp+7O7KaNksMbmj1JThV+Pr NHQUhS1UqaSBfJuS7Ma9LQ2+OUFfdzdCujsED896QARD0TQ4HWAUUUMu6GSoMa7R /SYUaTC3uCKZxgTfc8QxiiKtjg== -----END CERTIFICATE-----Generated at Thu Mar 26 16:32:23 2026 by rpki-client