$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft File: -JbMT1PCpnswRuerKQM9UPSC1Ig.mft (raw, json) Hash identifier: K8hWjdy2CjC4YncK6e4xCBoBH0d8ynT1yxPkY/1FN30= Subject key identifier: 6D:4D:18:CC:EB:FD:E9:C5:8E:CC:90:7B:90:84:DC:CA:B7:83:6F:95 Authority key identifier: F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 Certificate issuer: /CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Certificate serial: 0F21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft Manifest number: 0F0C Signing time: Thu 26 Mar 2026 17:32:53 +0000 Manifest this update: Thu 26 Mar 2026 17:32:52 +0000 Manifest next update: Thu 02 Apr 2026 17:32:52 +0000 Files and hashes: 1: -JbMT1PCpnswRuerKQM9UPSC1Ig.crl (hash: u12hNXAe7L3NZydLAVAGIusgSgN6RmpkFMBD/vgw0JY=) 2: 1D59FA3EADF311E980380735C4F9AE02.roa (hash: 0pDPKVbVvWSeAR338iLPukYfLq9BMpbP9fcDOLwkjEE=) 3: 1D2E7286A6B111E997D5EA57C4F9AE02.roa (hash: QgnZ4sc6Puwjs/s8k5cb77PzqC45+lyxM26KCi/2eRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 17:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3873 (0xf21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E, serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Validity Not Before: Mar 26 17:32:52 2026 GMT Not After : Apr 2 17:32:52 2026 GMT Subject: CN=69c56dc5-b82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:42:a1:f0:88:36:6f:d2:72:10:4c:2f:46:5e: 0c:cb:38:40:93:9c:f9:0d:c4:42:97:0b:f9:87:f7: 64:db:e5:30:ab:41:d5:2b:cd:af:ec:90:2c:a7:9f: 4d:d6:b4:29:e5:43:43:83:70:b4:3a:29:76:30:91: 62:f3:95:68:7f:66:ac:bd:c3:bd:22:75:a4:cf:fb: 60:38:37:7e:cc:53:b4:39:68:86:98:57:a2:bd:fc: 0b:0d:20:a4:12:fc:60:26:0d:3a:39:d6:53:42:b4: 42:36:87:9a:53:a4:95:2f:fd:c4:5f:2b:2f:f9:20: 8c:2c:f4:8a:35:19:bd:55:95:13:fa:78:0c:a6:70: ac:77:ad:58:be:e8:89:5c:e1:03:e8:f4:ab:f8:64: 11:ac:35:09:05:f7:ee:c8:7d:41:c9:58:a5:71:f0: 22:d9:f8:1a:21:e8:51:db:c1:15:8a:f3:38:08:3a: 53:15:3f:42:2b:02:3b:db:d0:c6:b3:da:18:a6:41: bd:02:04:54:68:94:52:6a:b1:43:00:0c:38:81:d0: bc:49:b1:d3:7e:e4:46:c9:c2:b7:48:eb:87:a4:be: 6d:b8:b6:a7:5f:9d:b5:d4:1f:b8:f7:1f:38:9f:a8: 7b:4d:12:3c:70:a1:e8:ac:20:a6:bf:b6:5b:bd:a6: 00:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4D:18:CC:EB:FD:E9:C5:8E:CC:90:7B:90:84:DC:CA:B7:83:6F:95 X509v3 Authority Key Identifier: keyid:F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:54:d3:c3:88:c6:5f:1a:72:d3:d7:cd:42:95:4d:13:a1:ed: 15:a1:18:b0:2f:a6:11:72:f7:6b:82:23:b0:15:73:bb:eb:24: 5c:6c:6a:13:0e:42:85:87:6a:19:80:ed:75:b7:f8:00:2a:dd: 4b:25:6c:c4:86:42:57:96:5c:78:90:29:d8:61:f5:a3:01:51: 8b:72:b3:95:08:ad:b8:1f:ed:80:ff:ee:0c:6f:22:53:d3:66: 56:8c:aa:5e:3e:4e:27:b3:78:aa:76:c1:69:c8:9b:ba:a1:c5: 8b:3a:bb:3f:58:ac:02:b7:7c:cd:eb:ca:fe:1a:ad:2c:d8:0d: a7:54:8a:fe:b2:a1:35:f5:1b:88:cd:82:f6:1a:03:37:e2:bb: 51:fb:64:a8:0b:b7:ad:f5:74:ac:b1:b9:f1:db:71:18:91:4a: e0:cf:91:08:21:33:72:2d:07:b5:23:28:b9:4b:bd:ac:70:d4: da:3d:99:17:7b:a7:21:55:56:40:a8:cc:90:88:1c:83:2c:74: a0:a0:e4:1a:84:ac:02:37:6a:6e:f2:3d:92:ec:1e:58:da:0e: 0e:24:99:0f:6f:b6:7e:85:70:be:fc:fd:e5:2b:35:e0:a3:e4: 32:75:08:33:3f:d3:cd:78:01:86:4f:02:f3:f9:92:08:d8:cb: 98:ca:90:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKEY4OTZDQzRGNTNDMkE2N0IzMDQ2RTdBQjI5MDMzRDUw RjQ4MkQ0ODgwHhcNMjYwMzI2MTczMjUyWhcNMjYwNDAyMTczMjUyWjAYMRYwFAYD VQQDEw02OWM1NmRjNS1iODJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkEKh8Ig2b9JyEEwvRl4MyzhAk5z5DcRClwv5h/dk2+Uwq0HVK82v7JAsp59N 1rQp5UNDg3C0Oil2MJFi85Vof2asvcO9InWkz/tgODd+zFO0OWiGmFeivfwLDSCk EvxgJg06OdZTQrRCNoeaU6SVL/3EXysv+SCMLPSKNRm9VZUT+ngMpnCsd61YvuiJ XOED6PSr+GQRrDUJBffuyH1ByVilcfAi2fgaIehR28EVivM4CDpTFT9CKwI729DG s9oYpkG9AgRUaJRSarFDAAw4gdC8SbHTfuRGycK3SOuHpL5tuLanX5211B+49x84 n6h7TRI8cKHorCCmv7ZbvaYA8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG1NGMzr /enFjsyQe5CE3Mq3g2+VMB8GA1UdIwQYMBaAFPiWzE9TwqZ7MEbnqykDPVD0gtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9EMjU0QjVDNDk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Buc3dSdWVyS1FNOVVQU0Mx SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KYk1UMVBDcG5zd1J1ZXJLUU05VVBTQzFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9EMjU0QjVDNDk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Bu c3dSdWVyS1FNOVVQU0MxSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsFTTw4jGXxpy09fNQpVNE6HtFaEYsC+mEXL3a4IjsBVzu+skXGxqEw5ChYdq GYDtdbf4ACrdSyVsxIZCV5ZceJAp2GH1owFRi3KzlQituB/tgP/uDG8iU9NmVoyq Xj5OJ7N4qnbBacibuqHFizq7P1isArd8zevK/hqtLNgNp1SK/rKhNfUbiM2C9hoD N+K7UftkqAu3rfV0rLG58dtxGJFK4M+RCCEzci0HtSMouUu9rHDU2j2ZF3unIVVW QKjMkIgcgyx0oKDkGoSsAjdqbvI9kuweWNoODiSZD2+2foVwvvz95Ss14KPkMnUI Mz/TzXgBhk8C8/mSCNjLmMqQHg== -----END CERTIFICATE-----Generated at Sat Mar 28 10:41:55 2026 by rpki-client