$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft File: gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft (raw, json) Hash identifier: NHZvO2ZNd86tr1DRhAx+55HpEecHS6y3sQpwlORaY2A= Subject key identifier: 7F:20:D8:0E:C7:2E:7D:4E:04:0A:7E:7B:F5:E8:DD:D9:87:21:71:77 Authority key identifier: 82:1F:4D:B2:2E:E5:9A:FD:59:3A:7E:68:9E:DA:9F:C9:4B:E5:85:DD Certificate issuer: /CN=A91C1C49/serialNumber=821F4DB22EE59AFD593A7E689EDA9FC94BE585DD Certificate serial: 3525 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft Manifest number: 41CF Signing time: Tue 24 Mar 2026 15:00:52 +0000 Manifest this update: Tue 24 Mar 2026 15:00:52 +0000 Manifest next update: Tue 31 Mar 2026 15:00:52 +0000 Files and hashes: 1: gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl (hash: gRYO+PpndHdcPBBIAlAhZVgkwZj5cssaNNPlfqR/6w4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13605 (0x3525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1C49, serialNumber=821F4DB22EE59AFD593A7E689EDA9FC94BE585DD Validity Not Before: Mar 24 15:00:52 2026 GMT Not After : Mar 31 15:00:52 2026 GMT Subject: CN=69c2a724-7884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d0:e7:30:0b:34:4a:ea:1e:80:f9:86:b1:30: fa:ff:25:58:e6:d8:52:71:77:d9:38:20:fa:d7:a8: d2:50:eb:04:00:d2:ea:8e:23:3d:7e:94:11:9b:e5: 35:71:ac:06:9d:48:8d:4a:3f:69:47:21:67:35:3f: 63:f5:1d:77:03:7b:3a:95:37:7a:08:26:23:91:a2: d1:5f:25:07:98:a1:53:80:1a:d8:78:23:78:a2:f3: fc:46:0b:a3:25:0c:9e:29:a7:63:15:e2:22:b8:b4: c0:63:01:cf:92:6a:b1:f1:7c:98:fa:86:11:73:7d: 33:83:5f:37:c4:97:e6:8d:35:f6:89:4b:32:31:93: 2a:ae:8c:ae:14:b4:6e:ac:d2:f2:f0:6f:b7:f7:fa: bf:71:17:0c:cb:26:6c:ce:69:cb:33:03:0e:d1:b6: 4c:81:47:38:76:ac:50:30:31:2d:9d:21:5c:ee:d9: 40:a5:d5:be:8e:6a:54:7d:86:87:37:c6:a8:38:78: 52:8d:fd:3c:a0:ea:2e:a3:8c:30:3f:16:66:b6:23: 21:b9:49:f1:a9:4a:4d:09:1d:71:73:e4:b2:9d:70: a0:18:91:aa:6a:6e:c2:9d:6c:3e:b3:00:9a:cb:35: 84:62:0e:3a:3b:dc:25:eb:a2:85:9f:5c:4e:a1:f8: 88:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:20:D8:0E:C7:2E:7D:4E:04:0A:7E:7B:F5:E8:DD:D9:87:21:71:77 X509v3 Authority Key Identifier: keyid:82:1F:4D:B2:2E:E5:9A:FD:59:3A:7E:68:9E:DA:9F:C9:4B:E5:85:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c9:93:5b:84:1b:e2:b1:5b:06:3b:0d:4b:50:38:fe:a4:a0: bd:24:4c:e2:46:1f:cc:fc:a4:00:d5:f3:9e:26:a9:3a:28:f2: d8:47:11:59:3a:4b:3e:8a:31:d9:4c:2e:44:e6:c1:1e:67:ac: df:9b:70:8e:13:0e:2a:cc:df:33:8f:c8:45:a3:46:d3:d5:96: 1b:fe:f7:60:48:6d:52:2f:2e:d5:e2:52:54:51:b2:ec:dc:f9: 68:17:71:39:98:a2:18:78:4a:3b:30:85:12:0a:0c:77:97:21: 7b:f9:1e:fe:6b:ec:d7:cc:f7:b6:4a:1d:74:0b:c6:8e:80:bf: 97:87:dd:83:9b:fc:48:f0:e3:bd:0e:fb:87:b2:a2:b5:ca:d8: f2:23:15:79:c0:64:fe:bf:a1:4b:10:1a:56:ba:58:cf:da:06: ad:93:64:30:3a:30:09:fb:f4:0d:e6:c7:96:b8:2c:6a:f4:9a: 4d:0a:21:da:68:11:26:54:14:d3:78:77:5c:e3:25:b2:56:26: b4:ef:a0:78:0a:12:80:41:e8:0d:da:a2:0e:66:25:30:46:94: 39:32:74:06:a5:81:7e:e4:f5:52:31:ac:71:8a:da:8c:e4:9c: 49:db:c2:58:71:96:b2:d5:04:2f:a4:2b:4e:5c:ab:1d:e7:74: 5f:3d:4d:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFDNDkxMTAvBgNVBAUTKDgyMUY0REIyMkVFNTlBRkQ1OTNBN0U2ODlFREE5RkM5 NEJFNTg1REQwHhcNMjYwMzI0MTUwMDUyWhcNMjYwMzMxMTUwMDUyWjAYMRYwFAYD VQQDEw02OWMyYTcyNC03ODg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7dDnMAs0SuoegPmGsTD6/yVY5thScXfZOCD616jSUOsEANLqjiM9fpQRm+U1 cawGnUiNSj9pRyFnNT9j9R13A3s6lTd6CCYjkaLRXyUHmKFTgBrYeCN4ovP8Rguj JQyeKadjFeIiuLTAYwHPkmqx8XyY+oYRc30zg183xJfmjTX2iUsyMZMqroyuFLRu rNLy8G+39/q/cRcMyyZszmnLMwMO0bZMgUc4dqxQMDEtnSFc7tlApdW+jmpUfYaH N8aoOHhSjf08oOouo4wwPxZmtiMhuUnxqUpNCR1xc+SynXCgGJGqam7CnWw+swCa yzWEYg46O9wl66KFn1xOofiInQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH8g2A7H Ln1OBAp+e/Xo3dmHIXF3MB8GA1UdIwQYMBaAFIIfTbIu5Zr9WTp+aJ7an8lL5YXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUM0OS9DNDlGNzVGODFE OUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9naDlOc2k3bG12MVpPbjVvbnRxZnlVdmxo ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doOU5zaTdsbXYxWk9uNW9udHFmeVV2bGhkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUM0OS9DNDlGNzVGODFEOUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9naDlOc2k3bG12 MVpPbjVvbnRxZnlVdmxoZDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWsmTW4Qb4rFbBjsNS1A4/qSgvSRM4kYfzPykANXzniapOijy2EcRWTpLPoox 2UwuRObBHmes35twjhMOKszfM4/IRaNG09WWG/73YEhtUi8u1eJSVFGy7Nz5aBdx OZiiGHhKOzCFEgoMd5che/ke/mvs18z3tkoddAvGjoC/l4fdg5v8SPDjvQ77h7Ki tcrY8iMVecBk/r+hSxAaVrpYz9oGrZNkMDowCfv0DebHlrgsavSaTQoh2mgRJlQU 03h3XOMlslYmtO+geAoSgEHoDdqiDmYlMEaUOTJ0BqWBfuT1UjGscYrajOScSdvC WHGWstUEL6QrTlyrHed0Xz1N9w== -----END CERTIFICATE-----Generated at Thu Mar 26 11:32:07 2026 by rpki-client