$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft File: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft (raw, json) Hash identifier: +vSbj/j+J8fHjmpH+dgjQRgBy2Z+AP+LGI3XCXw8WZ0= Subject key identifier: DA:6A:0E:F0:DE:69:95:E6:4B:7F:7D:44:CA:D6:AA:28:1A:16:84:FD Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Certificate serial: 032E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft Manifest number: 0321 Signing time: Wed 25 Mar 2026 00:45:57 +0000 Manifest this update: Wed 25 Mar 2026 00:45:57 +0000 Manifest next update: Wed 01 Apr 2026 00:45:57 +0000 Files and hashes: 1: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl (hash: 2T/pwcJg7jo+AEmULnSix31Tgp5lq/aI9+QLXcY0Ao8=) 2: CD9B103E08DD11ED830BEB5CC4F9AE02.roa (hash: LAY/2oYEWNptyjPMrgoY8aWftbMtB6LPjdcoOOw1Kqc=) 3: 47C07DB84F9C11ED8B9E4333C4F9AE02.roa (hash: nElsT+N/MIrrr9qtcoSmG1v+rPEG+QrKjb++ePTIoWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 814 (0x32e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Validity Not Before: Mar 25 00:45:57 2026 GMT Not After : Apr 1 00:45:57 2026 GMT Subject: CN=69c33045-785e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:39:b9:94:38:56:7a:b6:2e:1c:68:58:31:a6: 17:cb:19:79:83:61:80:3e:bc:df:02:b2:06:14:fa: 41:f2:1e:61:8d:7b:5d:3b:c9:37:89:79:28:7b:84: 8b:43:b1:30:98:d8:57:4a:45:7a:58:01:45:8e:86: e3:db:02:cc:75:35:df:10:d7:40:fc:7a:bd:15:2a: 1f:17:99:96:f2:63:12:e4:d6:c5:96:b7:0a:19:e3: 8a:62:52:6c:53:73:98:cc:81:e1:c9:c3:ba:36:58: c4:e5:80:fd:f7:6e:f5:37:61:20:5f:f5:22:4f:37: b2:f7:f7:cc:ec:20:da:82:32:e3:ec:94:08:28:72: 6d:5c:2b:e6:20:ed:de:26:12:39:65:a3:f3:c7:0e: aa:9a:22:5a:d4:6d:16:fe:ef:99:3a:ec:88:ff:b6: 90:12:b4:d8:9a:8e:f3:56:6a:2c:e6:9b:5d:98:04: c7:d4:ed:f2:28:f1:cc:d3:6b:07:2f:6d:ab:e0:5e: 4c:da:12:65:3d:ed:54:cb:d0:16:36:14:1f:d2:52: 91:11:3b:f7:73:14:0f:40:9f:c0:39:87:0a:33:ac: 2b:7f:52:bc:37:dd:4a:db:d8:f5:ca:f4:4a:03:14: 3c:a9:bc:0d:cd:72:8a:4d:85:b1:ae:74:a4:cd:8b: de:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6A:0E:F0:DE:69:95:E6:4B:7F:7D:44:CA:D6:AA:28:1A:16:84:FD X509v3 Authority Key Identifier: keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:cc:b8:46:ec:b0:c3:26:0b:6e:f2:cd:73:cd:4b:fa:fb:97: bb:1a:16:dd:ad:98:4f:90:ea:c6:3a:43:29:3c:2c:f0:16:ee: f6:21:d1:f4:d3:91:53:e6:45:34:95:3e:77:10:f8:f1:bf:ab: 11:2e:39:6b:ad:4b:fd:a8:4f:0f:03:6a:c8:54:22:61:c5:54: d0:43:b9:4a:f0:cf:c0:3a:7d:21:72:cd:f9:08:bf:50:68:9b: 05:e2:63:66:66:b8:8a:ef:fb:b3:45:01:ab:23:e2:f2:3d:bc: f9:8a:31:25:40:56:d8:50:cd:35:60:cf:2e:fc:99:6a:66:8b: a4:c0:92:48:c0:f0:57:b3:53:af:bd:0e:38:f6:9b:41:5c:6a: 22:6f:18:75:73:86:d6:7e:aa:a1:26:12:ef:94:e5:b4:7a:fb: d4:48:0c:b6:d6:5f:c1:a1:97:f9:f8:c6:3c:7a:b0:0c:da:37: 56:f2:5a:bd:68:24:62:e6:f7:9c:34:6e:68:f9:53:66:c9:23: 7d:53:53:22:f5:a6:30:f8:08:81:25:fb:d5:49:c0:a2:e7:4f: aa:2f:71:29:6a:99:62:10:f7:69:e7:e1:9d:16:ba:10:57:28: b5:51:42:2b:7e:f1:57:9d:6d:29:6a:d4:7a:73:1f:92:19:62: 63:90:3b:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKDI1MjkzQjBBNzAzNkM4MTNBOUNEMDIwMDZERkMyOTBB QUYyNTMyNzQwHhcNMjYwMzI1MDA0NTU3WhcNMjYwNDAxMDA0NTU3WjAYMRYwFAYD VQQDEw02OWMzMzA0NS03ODVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszm5lDhWerYuHGhYMaYXyxl5g2GAPrzfArIGFPpB8h5hjXtdO8k3iXkoe4SL Q7EwmNhXSkV6WAFFjobj2wLMdTXfENdA/Hq9FSofF5mW8mMS5NbFlrcKGeOKYlJs U3OYzIHhycO6NljE5YD99271N2EgX/UiTzey9/fM7CDagjLj7JQIKHJtXCvmIO3e JhI5ZaPzxw6qmiJa1G0W/u+ZOuyI/7aQErTYmo7zVmos5ptdmATH1O3yKPHM02sH L22r4F5M2hJlPe1Uy9AWNhQf0lKRETv3cxQPQJ/AOYcKM6wrf1K8N91K29j1yvRK AxQ8qbwNzXKKTYWxrnSkzYvetwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNpqDvDe aZXmS399RMrWqigaFoT9MB8GA1UdIwQYMBaAFCUpOwpwNsgTqc0CAG38KQqvJTJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9EM0FEMDdFMjA4 RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlCT3B6UUlBYmZ3cENxOGxN blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTazdDbkEyeUJPcHpRSUFiZndwQ3E4bE1uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9EM0FEMDdFMjA4RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlC T3B6UUlBYmZ3cENxOGxNblEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArMy4RuywwyYLbvLNc81L+vuXuxoW3a2YT5DqxjpDKTws8Bbu9iHR9NORU+ZF NJU+dxD48b+rES45a61L/ahPDwNqyFQiYcVU0EO5SvDPwDp9IXLN+Qi/UGibBeJj Zma4iu/7s0UBqyPi8j28+YoxJUBW2FDNNWDPLvyZamaLpMCSSMDwV7NTr70OOPab QVxqIm8YdXOG1n6qoSYS75TltHr71EgMttZfwaGX+fjGPHqwDNo3VvJavWgkYub3 nDRuaPlTZskjfVNTIvWmMPgIgSX71UnAoudPqi9xKWqZYhD3aefhnRa6EFcotVFC K37xV51tKWrUenMfkhliY5A7WA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:57:32 2026 by rpki-client