$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft File: crVJ4D_3UKU5edANyx2mRLtSrKw.mft (raw, json) Hash identifier: kleiS0GBuqXsu3m2OQc92p/+a0WJHSAhw42uLyBE010= Subject key identifier: 5E:0A:1C:41:38:1B:E4:14:CE:3A:02:96:A5:E9:84:ED:33:30:D1:19 Authority key identifier: 72:B5:49:E0:3F:F7:50:A5:39:79:D0:0D:CB:1D:A6:44:BB:52:AC:AC Certificate issuer: /CN=A91BFDE1/serialNumber=72B549E03FF750A53979D00DCB1DA644BB52ACAC Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft Manifest number: 0F Signing time: Wed 25 Mar 2026 08:18:08 +0000 Manifest this update: Wed 25 Mar 2026 08:18:07 +0000 Manifest next update: Wed 01 Apr 2026 08:18:07 +0000 Files and hashes: 1: crVJ4D_3UKU5edANyx2mRLtSrKw.crl (hash: 5Jn75ro/z7Utk4L0SMhGXuwUxJpxBNookeR+a9bgTXQ=) 2: 00B077D6187D11F19A5CAFE7383D8C67.roa (hash: mW9wCzHROG2faL3zV7IIUqQz5qp+XENd/4NuYNOgCwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.crl rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFDE1, serialNumber=72B549E03FF750A53979D00DCB1DA644BB52ACAC Validity Not Before: Mar 25 08:18:07 2026 GMT Not After : Apr 1 08:18:07 2026 GMT Subject: CN=69c39a40-29ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5b:d5:58:29:13:b9:fe:b2:38:64:b9:c1:ff: 54:94:a6:f0:ff:cd:1b:30:18:82:66:3a:84:ef:7b: 0e:ce:6b:7c:19:5a:6a:15:4e:64:46:a6:16:23:dc: 1a:3a:f4:7a:c3:da:02:e1:b7:fe:05:bf:e1:eb:9c: 80:19:bd:21:1f:bd:5a:45:a1:1b:08:95:4a:9c:aa: 21:57:61:f9:56:b7:e1:24:6b:ba:54:50:cb:58:bc: b7:4a:b5:07:3a:86:5d:34:9e:4b:e0:15:a0:03:cd: 67:0f:83:0a:0f:09:f3:84:36:7f:d6:cc:19:ff:90: 47:97:a3:c5:27:ad:36:66:c0:ef:ef:12:a8:0f:65: ca:54:be:a4:36:bd:6d:ef:d3:94:de:4e:80:98:06: a5:64:c4:4e:69:51:86:68:4c:71:b0:79:0c:ed:85: 9a:72:bf:d5:81:3f:2a:35:f4:e4:0d:98:b3:ce:4c: 8c:a9:dd:b3:82:72:1c:22:b1:4f:6e:86:40:29:42: 4c:90:f5:34:1d:e0:34:6d:75:e1:16:3b:42:39:ef: 5c:77:91:d2:80:d4:0d:0e:21:ba:89:4e:66:64:7f: e9:76:67:8a:8d:78:03:1f:5d:d7:c3:3c:c4:ae:3f: 8b:be:51:61:2f:a9:40:e7:a8:a1:96:d6:69:b4:40: 11:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0A:1C:41:38:1B:E4:14:CE:3A:02:96:A5:E9:84:ED:33:30:D1:19 X509v3 Authority Key Identifier: keyid:72:B5:49:E0:3F:F7:50:A5:39:79:D0:0D:CB:1D:A6:44:BB:52:AC:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:d9:ee:4e:e5:c5:de:e3:f7:25:e3:7e:5d:d6:bc:53:40:29: 35:07:10:d9:3b:d5:5f:ec:4d:dd:f0:0b:7d:e9:1a:8b:ec:66: 9e:dc:2c:f5:25:9e:cb:67:ea:6b:37:be:b1:12:bf:81:7c:d8: fb:a9:a5:64:9b:5c:91:97:1f:7e:22:37:cf:f3:1c:c8:2d:09: 79:2c:be:36:8b:a7:c4:ca:71:ea:3b:5d:b5:72:c1:2b:13:87: 5c:df:15:21:60:61:fc:61:c1:a2:11:01:f5:20:ae:75:23:41: 90:6f:75:ba:a9:a3:19:8c:e3:30:b4:14:e7:cf:fa:c7:46:07: 22:90:9e:04:fe:60:69:a7:09:5c:1c:2f:f2:f6:65:af:2d:81: b1:7a:a8:83:c2:61:ee:38:ff:6f:fb:05:f8:97:53:05:e4:5a: 9e:7a:c3:94:03:ba:b4:51:e8:53:09:b0:f2:0d:1a:dd:f5:48: f0:f7:b2:15:86:04:d7:7f:cf:53:40:d8:81:ac:a6:c0:6c:a1: 20:4f:14:3d:01:fd:c2:06:a3:8e:1c:94:6c:66:07:09:62:7f: d2:75:e6:2c:bd:82:37:4b:74:b6:10:5d:8f:d0:65:9c:22:d1: 0e:1b:d7:49:13:3a:64:e7:c8:f4:7e:cb:f4:3d:85:9a:7b:db: fe:c3:9e:b2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RkRFMTExMC8GA1UEBRMoNzJCNTQ5RTAzRkY3NTBBNTM5NzlEMDBEQ0IxREE2NDRC QjUyQUNBQzAeFw0yNjAzMjUwODE4MDdaFw0yNjA0MDEwODE4MDdaMBgxFjAUBgNV BAMTDTY5YzM5YTQwLTI5YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClW9VYKRO5/rI4ZLnB/1SUpvD/zRswGIJmOoTvew7Oa3wZWmoVTmRGphYj3Bo6 9HrD2gLht/4Fv+HrnIAZvSEfvVpFoRsIlUqcqiFXYflWt+Eka7pUUMtYvLdKtQc6 hl00nkvgFaADzWcPgwoPCfOENn/WzBn/kEeXo8UnrTZmwO/vEqgPZcpUvqQ2vW3v 05TeToCYBqVkxE5pUYZoTHGweQzthZpyv9WBPyo19OQNmLPOTIyp3bOCchwisU9u hkApQkyQ9TQd4DRtdeEWO0I571x3kdKA1A0OIbqJTmZkf+l2Z4qNeAMfXdfDPMSu P4u+UWEvqUDnqKGW1mm0QBEhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXgocQTgb 5BTOOgKWpemE7TMw0RkwHwYDVR0jBBgwFoAUcrVJ4D/3UKU5edANyx2mRLtSrKww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGREUxLzI4MzEwMENBMTg1 MzExRjE4RTk3MEFEQzI5M0Q4QzY3L2NyVko0RF8zVUtVNWVkQU55eDJtUkx0U3JL dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvY3JWSjREXzNVS1U1ZWRBTnl4Mm1STHRTckt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG REUxLzI4MzEwMENBMTg1MzExRjE4RTk3MEFEQzI5M0Q4QzY3L2NyVko0RF8zVUtV NWVkQU55eDJtUkx0U3JLdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAD2e5O5cXe4/cl435d1rxTQCk1BxDZO9Vf7E3d8At96RqL7Gae3Cz1JZ7LZ+pr N76xEr+BfNj7qaVkm1yRlx9+IjfP8xzILQl5LL42i6fEynHqO121csErE4dc3xUh YGH8YcGiEQH1IK51I0GQb3W6qaMZjOMwtBTnz/rHRgcikJ4E/mBppwlcHC/y9mWv LYGxeqiDwmHuOP9v+wX4l1MF5FqeesOUA7q0UehTCbDyDRrd9Ujw97IVhgTXf89T QNiBrKbAbKEgTxQ9Af3CBqOOHJRsZgcJYn/SdeYsvYI3S3S2EF2P0GWcItEOG9dJ Ezpk58j0fsv0PYWae9v+w56y -----END CERTIFICATE-----Generated at Thu Mar 26 00:28:10 2026 by rpki-client