$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft File: rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft (raw, json) Hash identifier: VWwmb8cYPgOX8MIYmhwo+QY2sDy21mBWRRILEYutvQM= Subject key identifier: E4:65:52:8E:DC:A5:8A:97:48:EF:80:79:24:B4:DA:F1:AB:74:62:6C Authority key identifier: AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 Certificate issuer: /CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Certificate serial: 058D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft Manifest number: 057A Signing time: Tue 24 Mar 2026 23:00:07 +0000 Manifest this update: Tue 24 Mar 2026 23:00:07 +0000 Manifest next update: Tue 31 Mar 2026 23:00:07 +0000 Files and hashes: 1: rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl (hash: jMgDfy2NiUvscRnNs13MSJNkrULTwaE9XEZ+nFFnjdY=) 2: E66070EE36F911F0B0111510C4F9AE02.roa (hash: KwF38ZBP8Utf4qS1kbQsJebYoDtue89xp1vHyUdKSU0=) 3: F9A8F3561F3D11ECB2E88C32C4F9AE02.roa (hash: nMAueD71AbMo3NTxzg/tId7Satepp1btvdBVnm0IwvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1421 (0x58d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB765, serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Validity Not Before: Mar 24 23:00:07 2026 GMT Not After : Mar 31 23:00:07 2026 GMT Subject: CN=69c31777-c132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:74:92:fb:b5:75:73:6a:8a:c1:85:be:eb:34: 9f:f9:c5:d7:99:80:dd:c2:1a:be:d8:3d:7d:00:14: fa:2c:6b:70:d5:bb:bf:ab:14:c0:b3:5f:fb:7f:9d: c3:20:a6:0d:39:67:d0:bf:fa:45:82:99:65:30:92: 64:c0:1e:a6:12:a4:ec:4a:14:39:54:d6:51:c6:1e: 0d:43:fe:51:c6:29:5f:3a:bc:a3:9e:3d:59:e7:cb: 2f:76:59:67:4c:f3:53:36:6b:63:7a:75:ca:5d:a4: f1:35:87:84:bf:d8:82:04:81:2b:dc:8a:a0:35:3d: 9f:d5:51:d3:05:13:39:63:26:da:1c:50:93:41:2e: c2:6a:cb:43:e0:3a:b2:b4:68:6c:ef:48:aa:f9:b2: ae:32:5b:8e:d8:b7:fe:c2:34:c0:97:19:30:68:61: f6:2c:76:ac:70:c6:05:35:eb:b4:00:61:b6:52:ee: 54:05:4a:cb:26:53:78:09:fc:62:3a:ea:93:33:89: cf:f0:89:1a:a4:49:48:3f:ce:85:b7:fa:fc:c3:24: a2:08:29:d5:a6:ca:c5:63:c4:11:d8:5c:f7:a0:c4: 21:fc:a3:02:06:bf:b5:5e:8d:32:3c:f2:d7:ad:d1: 84:36:2c:44:ed:65:84:4b:91:bd:e3:8d:b9:3e:89: 29:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:65:52:8E:DC:A5:8A:97:48:EF:80:79:24:B4:DA:F1:AB:74:62:6C X509v3 Authority Key Identifier: keyid:AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:4a:2b:a2:5a:f7:62:f2:87:8a:fc:42:55:c7:db:44:f6:6d: 53:fd:43:2f:62:b9:d1:5d:db:56:08:c6:f5:92:e9:1a:33:20: 3b:71:0e:07:13:4e:95:52:7a:c7:10:f6:c2:08:1b:95:07:1d: 33:75:b2:f3:ce:43:8b:8e:89:a3:5e:16:b6:ff:f4:f5:c8:34: d0:0d:a1:67:08:6d:0c:fb:73:0c:91:3b:d2:af:c3:b2:5f:69: 8b:37:ac:87:c3:bd:75:ca:20:21:98:f0:da:3e:db:36:85:fe: 2a:bf:f0:51:bd:d5:90:cc:56:65:c3:2f:70:3c:d5:14:4c:a7: 9d:6a:9b:a0:af:d4:9b:ec:2a:aa:86:de:ab:7c:13:ef:c8:8c: 4d:f9:cf:8d:85:21:3f:e4:81:92:ef:46:19:c0:74:8f:99:ed: a3:d8:3c:1c:f3:c6:74:17:32:90:95:65:cc:3b:7e:7d:60:5e: f0:34:59:06:a6:15:92:55:ff:21:1a:75:95:d4:27:26:0b:b2: b8:71:3d:df:42:55:40:40:37:cb:5b:6b:30:aa:80:01:df:8a: 58:c5:16:b1:ec:a9:43:81:b5:a7:f7:d5:d5:dd:d4:cc:b9:3c: 71:b4:05:b8:ff:9e:7d:e1:5d:df:94:c6:39:7d:90:4a:18:c4: a6:ca:eb:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I3NjUxMTAvBgNVBAUTKEFERjMxMkVBNjhCN0YwNURBNjEwMTA4MEY5ODMyMkZC RDY1OTE4QjIwHhcNMjYwMzI0MjMwMDA3WhcNMjYwMzMxMjMwMDA3WjAYMRYwFAYD VQQDEw02OWMzMTc3Ny1jMTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXSS+7V1c2qKwYW+6zSf+cXXmYDdwhq+2D19ABT6LGtw1bu/qxTAs1/7f53D IKYNOWfQv/pFgpllMJJkwB6mEqTsShQ5VNZRxh4NQ/5RxilfOryjnj1Z58svdlln TPNTNmtjenXKXaTxNYeEv9iCBIEr3IqgNT2f1VHTBRM5YybaHFCTQS7CastD4Dqy tGhs70iq+bKuMluO2Lf+wjTAlxkwaGH2LHascMYFNeu0AGG2Uu5UBUrLJlN4Cfxi OuqTM4nP8IkapElIP86Ft/r8wySiCCnVpsrFY8QR2Fz3oMQh/KMCBr+1Xo0yPPLX rdGENixE7WWES5G94425PokpMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFORlUo7c pYqXSO+AeSS02vGrdGJsMB8GA1UdIwQYMBaAFK3zEupot/BdphAQgPmDIvvWWRiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjc2NS9BNERERkE5NDFG M0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhGMm1FQkNBLVlNaS05WlpH TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JmTVM2bWkzOEYybUVCQ0EtWU1pLTlaWkdMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qjc2NS9BNERERkE5NDFGM0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhG Mm1FQkNBLVlNaS05WlpHTEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQkorolr3YvKHivxCVcfbRPZtU/1DL2K50V3bVgjG9ZLpGjMgO3EOBxNOlVJ6 xxD2wggblQcdM3Wy885Di46Jo14Wtv/09cg00A2hZwhtDPtzDJE70q/Dsl9pizes h8O9dcogIZjw2j7bNoX+Kr/wUb3VkMxWZcMvcDzVFEynnWqboK/Um+wqqobeq3wT 78iMTfnPjYUhP+SBku9GGcB0j5nto9g8HPPGdBcykJVlzDt+fWBe8DRZBqYVklX/ IRp1ldQnJguyuHE930JVQEA3y1trMKqAAd+KWMUWseypQ4G1p/fV1d3UzLk8cbQF uP+efeFd35TGOX2QShjEpsrryA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:21:05 2026 by rpki-client