$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft File: jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft (raw, json) Hash identifier: B6R2R6gPKk+AFoK96ivA9wWMqye8gKzfzOV9IRF9uIU= Subject key identifier: 3C:14:6C:FD:A8:FC:1B:B6:4A:BD:34:4F:7D:6E:AF:F5:12:B9:9A:DE Authority key identifier: 8C:D3:E1:BC:FC:77:88:88:73:F6:F5:86:F6:4A:64:31:A3:B5:6C:FF Certificate issuer: /CN=A91CEE6D/serialNumber=8CD3E1BCFC77888873F6F586F64A6431A3B56CFF Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNPhvPx3iIhz9vWG9kpkMaO1bP8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft Manifest number: 60 Signing time: Wed 25 Mar 2026 07:13:33 +0000 Manifest this update: Wed 25 Mar 2026 07:13:33 +0000 Manifest next update: Wed 01 Apr 2026 07:13:33 +0000 Files and hashes: 1: jNPhvPx3iIhz9vWG9kpkMaO1bP8.crl (hash: MV128gpqvw33l6Tl893XGELC+PuVOkh8W90JUdEY4QQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.crl rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNPhvPx3iIhz9vWG9kpkMaO1bP8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE6D, serialNumber=8CD3E1BCFC77888873F6F586F64A6431A3B56CFF Validity Not Before: Mar 25 07:13:33 2026 GMT Not After : Apr 1 07:13:33 2026 GMT Subject: CN=69c38b1d-a2ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:36:b9:ba:0e:bd:60:d5:82:80:d4:f7:ca:7a: c0:35:ce:f5:66:54:53:3a:ba:a9:b6:53:5a:5a:d9: 9e:8c:e7:04:17:8d:ac:4a:af:fe:4a:6b:5c:88:65: c8:5a:9d:8e:52:c6:b7:6a:e0:b4:44:ce:9b:48:0d: b4:16:51:0a:ea:28:65:32:a7:ba:73:73:95:1d:2d: 68:32:df:2e:cf:6f:6f:0d:ef:51:70:06:68:4d:bb: dc:8e:f6:75:ec:4b:ba:16:b3:fb:d2:4f:af:a8:6e: 12:ca:43:5b:d6:9b:1c:9b:5d:40:db:79:59:13:61: ae:b0:30:1a:71:97:5f:17:5c:25:cf:7e:39:15:62: ba:ae:1c:b8:f3:50:4f:7a:bd:91:e0:4d:1b:61:5d: 9b:c3:c0:99:34:c3:fe:95:2c:15:20:d2:3a:2e:8d: ce:17:98:6b:88:12:01:70:3a:57:7a:2b:53:f5:86: d8:74:2f:5d:08:c7:07:7a:bd:ec:2e:94:b8:ab:84: 23:03:e1:27:7f:3c:87:91:6f:91:5e:4f:cd:82:1a: 4b:33:eb:ee:d8:de:4f:96:a8:a4:57:b9:ac:fb:20: dc:2f:dd:fa:aa:3e:23:e1:55:da:7e:e4:12:45:7d: ce:7d:8c:15:37:1f:5e:d9:43:4c:c2:94:81:ce:90: 22:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:14:6C:FD:A8:FC:1B:B6:4A:BD:34:4F:7D:6E:AF:F5:12:B9:9A:DE X509v3 Authority Key Identifier: keyid:8C:D3:E1:BC:FC:77:88:88:73:F6:F5:86:F6:4A:64:31:A3:B5:6C:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNPhvPx3iIhz9vWG9kpkMaO1bP8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:75:b0:0d:66:df:90:28:3b:f3:47:cd:b0:9a:11:53:3f:5a: f8:92:e9:27:99:e2:a5:b9:53:8f:49:e7:0d:24:c5:7d:fd:3e: 69:14:92:a9:3c:c8:75:1e:81:2a:52:28:83:4e:db:15:71:b6: 12:b2:93:5b:37:1b:10:42:c8:ef:8b:a0:7c:49:48:75:86:44: d3:0f:b8:4a:2e:4e:cd:48:02:0c:f3:09:0b:17:42:f3:89:46: 4f:47:39:84:4d:fd:66:e8:3e:db:2b:48:a7:68:f3:88:cb:70: 00:0c:23:f8:63:41:7a:b0:6f:c0:fe:a7:a2:c2:f9:d8:7d:5a: 56:17:63:70:e7:6c:45:a3:07:36:6a:5b:e4:1e:ae:ea:47:df: 72:ae:35:d6:21:00:cb:e7:1f:d6:df:66:78:2b:85:79:88:d0: c4:2d:80:fc:4e:f6:ae:e4:19:72:b1:d2:5f:c7:c4:e8:12:32: b3:7e:df:85:cf:bd:43:48:6e:f7:b3:14:2b:16:2f:77:61:1c: 21:a2:e7:2a:c4:db:40:09:37:03:45:8a:0c:57:63:52:f7:b4: 18:ba:92:9c:80:65:ab:57:21:8d:b1:ef:b7:78:e3:b1:c8:28: f9:31:d0:04:6a:6d:04:fb:75:25:63:24:b0:16:cf:60:fc:0a: 65:c2:f2:5f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RUU2RDExMC8GA1UEBRMoOENEM0UxQkNGQzc3ODg4ODczRjZGNTg2RjY0QTY0MzFB M0I1NkNGRjAeFw0yNjAzMjUwNzEzMzNaFw0yNjA0MDEwNzEzMzNaMBgxFjAUBgNV BAMTDTY5YzM4YjFkLWEyY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCINrm6Dr1g1YKA1PfKesA1zvVmVFM6uqm2U1pa2Z6M5wQXjaxKr/5Ka1yIZcha nY5Sxrdq4LREzptIDbQWUQrqKGUyp7pzc5UdLWgy3y7Pb28N71FwBmhNu9yO9nXs S7oWs/vST6+obhLKQ1vWmxybXUDbeVkTYa6wMBpxl18XXCXPfjkVYrquHLjzUE96 vZHgTRthXZvDwJk0w/6VLBUg0joujc4XmGuIEgFwOld6K1P1hth0L10Ixwd6vewu lLirhCMD4Sd/PIeRb5FeT82CGksz6+7Y3k+WqKRXuaz7INwv3fqqPiPhVdp+5BJF fc59jBU3H17ZQ0zClIHOkCKzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPBRs/aj8 G7ZKvTRPfW6v9RK5mt4wHwYDVR0jBBgwFoAUjNPhvPx3iIhz9vWG9kpkMaO1bP8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFRTZELzVBMjlBQjFFOTc2 NTExRjA5MjNBNjcwQ0M0RjlBRTAyL2pOUGh2UHgzaUloejl2V0c5a3BrTWFPMWJQ OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvak5QaHZQeDNpSWh6OXZXRzlrcGtNYU8xYlA4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF RTZELzVBMjlBQjFFOTc2NTExRjA5MjNBNjcwQ0M0RjlBRTAyL2pOUGh2UHgzaUlo ejl2V0c5a3BrTWFPMWJQOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB9dbANZt+QKDvzR82wmhFTP1r4kuknmeKluVOPSecNJMV9/T5pFJKpPMh1HoEq UiiDTtsVcbYSspNbNxsQQsjvi6B8SUh1hkTTD7hKLk7NSAIM8wkLF0LziUZPRzmE Tf1m6D7bK0inaPOIy3AADCP4Y0F6sG/A/qeiwvnYfVpWF2Nw52xFowc2alvkHq7q R99yrjXWIQDL5x/W32Z4K4V5iNDELYD8Tvau5BlysdJfx8ToEjKzft+Fz71DSG73 sxQrFi93YRwhoucqxNtACTcDRYoMV2NS97QYupKcgGWrVyGNse+3eOOxyCj5MdAE am0E+3UlYySwFs9g/AplwvJf -----END CERTIFICATE-----Generated at Thu Mar 26 16:58:45 2026 by rpki-client