$ rpki-client -vvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft File: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft (raw, json) Hash identifier: vT281rbRmnqjnHWoFWldts9SX9ng5ZyxXfkCfcrGWcQ= Subject key identifier: 71:1B:4D:B8:6C:3C:86:AF:68:C0:89:47:57:6C:DE:1D:7E:60:EB:6D Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 Certificate issuer: /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft Manifest number: 01AE Signing time: Wed 25 Mar 2026 03:22:21 +0000 Manifest this update: Wed 25 Mar 2026 03:22:21 +0000 Manifest next update: Wed 01 Apr 2026 03:22:21 +0000 Files and hashes: 1: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl (hash: Jn88hGo0ZphhffS1mv1RCMZx1xYgp+6BFmZXbM6wgzo=) 2: 3F69EB4C1D0B11F08389C829C4F9AE02.roa (hash: 4YSK+iaPKx3acIazhk09lsImhU6+yUHomcj+4pCQSC4=) 3: 3EA78B421D0B11F08389C829C4F9AE02.roa (hash: UpXQLmw7cYNYgQoy2FdAYqD1shDQWt+tw0L6PWQgH4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Validity Not Before: Mar 25 03:22:21 2026 GMT Not After : Apr 1 03:22:21 2026 GMT Subject: CN=69c354ed-d9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:48:24:4e:94:bd:08:99:70:54:9b:cb:27:a4: d6:ec:ed:46:7c:1e:ed:f3:97:45:4c:e3:b6:49:36: 0d:a4:65:e8:a8:b1:51:00:4f:c4:13:aa:6d:05:1b: 08:c7:ea:67:22:85:48:13:02:66:94:e2:ae:10:9d: 2b:70:1a:c5:54:17:7e:1e:bb:6d:8b:1a:c8:66:68: 11:e8:33:7e:ef:bb:39:72:8c:bb:33:c6:e7:92:61: 38:d4:1a:f1:1d:89:a0:4d:7e:07:2d:6e:62:f8:85: 84:46:f4:04:45:37:92:b3:c5:34:23:cb:46:54:b3: 75:f8:40:06:61:41:93:93:7a:88:76:95:48:d9:29: b2:c1:15:33:8b:9d:ec:8d:d3:23:40:22:16:e6:05: 03:e7:e7:8f:7d:51:6f:a8:4c:03:67:98:ad:65:b7: cf:cd:e7:ba:73:54:f2:84:9c:d4:ba:94:9a:01:df: 9b:c2:a3:87:3a:50:1e:d6:75:64:0c:d7:9e:8c:be: 92:72:ce:a7:1a:19:ba:e9:02:36:b6:a6:af:e4:8b: ef:c6:4a:6b:78:fc:3c:15:8c:e4:8f:ed:68:a6:e8: 48:14:d9:60:86:bd:66:97:e4:24:c8:6c:bf:1d:c4: cc:15:0a:5c:59:6f:2f:a3:10:af:a2:e6:07:cf:10: 00:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1B:4D:B8:6C:3C:86:AF:68:C0:89:47:57:6C:DE:1D:7E:60:EB:6D X509v3 Authority Key Identifier: keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:73:fb:44:91:19:20:9b:da:dd:f6:6e:eb:68:10:01:19:72: f8:df:ed:d0:70:f1:4c:0d:70:0a:c2:77:c3:a5:64:c4:4f:f9: d1:6a:6c:b4:49:76:ae:03:51:46:d9:27:23:13:07:5b:6f:50: a2:ce:05:31:35:8c:e6:7b:91:05:8d:a5:c8:3a:32:46:a7:af: 26:c6:d5:fd:9c:ec:cd:d2:36:e3:47:b0:2f:81:6c:ec:00:2d: 46:8e:fd:a0:27:d1:5d:fe:8e:58:87:d1:8b:61:c6:1f:6e:c8: 77:f8:e5:b5:71:7d:dd:9a:c3:ed:e8:86:81:fb:08:e0:f1:60: 23:17:71:26:96:65:fd:b0:fb:00:3e:59:46:c8:20:65:3a:f3: 0c:e7:19:a2:4a:82:10:9a:27:c5:a3:7e:d5:ce:5f:7d:9c:d9: a1:37:61:a6:e1:e8:27:7a:2a:8f:a1:3f:5d:9a:4f:7a:38:7a: 70:d9:fd:15:60:b5:35:b8:6c:9f:24:96:5a:ca:2f:29:71:f3: 19:30:ba:c1:3c:9c:d5:70:ff:49:5a:1d:ee:ca:fd:10:f1:2a: bd:26:e2:2a:03:16:50:26:45:32:ad:e9:16:87:e0:12:b5:a7: a1:76:3b:7e:6b:9b:b4:8a:15:7a:69:54:f7:e8:b1:1d:ec:1d: fe:e7:aa:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU0QTExMTAvBgNVBAUTKDI0N0I1RDZFNjJFNEE0OUU5REY0REMyNEMzMUVDQTZF RDdBNDNCMjgwHhcNMjYwMzI1MDMyMjIxWhcNMjYwNDAxMDMyMjIxWjAYMRYwFAYD VQQDEw02OWMzNTRlZC1kOWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7kgkTpS9CJlwVJvLJ6TW7O1GfB7t85dFTOO2STYNpGXoqLFRAE/EE6ptBRsI x+pnIoVIEwJmlOKuEJ0rcBrFVBd+HrttixrIZmgR6DN+77s5coy7M8bnkmE41Brx HYmgTX4HLW5i+IWERvQERTeSs8U0I8tGVLN1+EAGYUGTk3qIdpVI2SmywRUzi53s jdMjQCIW5gUD5+ePfVFvqEwDZ5itZbfPzee6c1TyhJzUupSaAd+bwqOHOlAe1nVk DNeejL6Scs6nGhm66QI2tqav5IvvxkprePw8FYzkj+1opuhIFNlghr1ml+QkyGy/ HcTMFQpcWW8voxCvouYHzxAAzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHEbTbhs PIavaMCJR1ds3h1+YOttMB8GA1UdIwQYMBaAFCR7XW5i5KSenfTcJMMeym7XpDso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTRBMS83NDAyRDhEODlC NjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BKNmQ5Tndrd3g3S2J0ZWtP eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pIdGRibUxrcEo2ZDlOd2t3eDdLYnRla095Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTRBMS83NDAyRDhEODlCNjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BK NmQ5Tndrd3g3S2J0ZWtPeWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdHP7RJEZIJva3fZu62gQARly+N/t0HDxTA1wCsJ3w6VkxE/50WpstEl2rgNR RtknIxMHW29Qos4FMTWM5nuRBY2lyDoyRqevJsbV/ZzszdI240ewL4Fs7AAtRo79 oCfRXf6OWIfRi2HGH27Id/jltXF93ZrD7eiGgfsI4PFgIxdxJpZl/bD7AD5ZRsgg ZTrzDOcZokqCEJonxaN+1c5ffZzZoTdhpuHoJ3oqj6E/XZpPejh6cNn9FWC1Nbhs nySWWsovKXHzGTC6wTyc1XD/SVod7sr9EPEqvSbiKgMWUCZFMq3pFofgErWnoXY7 fmubtIoVemlU9+ixHewd/ueqrA== -----END CERTIFICATE-----Generated at Thu Mar 26 13:34:20 2026 by rpki-client