$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft File: -4BdU3nLB9UqQR7__QSRyjm3vyc.mft (raw, json) Hash identifier: 4N8ibDiSsYOtk0iq/4LKxFIovhTuBE4dpLb/E0h0OIY= Subject key identifier: 1F:25:21:E9:95:0F:D2:D5:E7:6C:71:36:4B:4F:F3:4D:AC:AA:EA:3A Authority key identifier: FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 Certificate issuer: /CN=A91D5ECA/serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Certificate serial: 0684 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft Manifest number: 067A Signing time: Tue 24 Mar 2026 22:14:31 +0000 Manifest this update: Tue 24 Mar 2026 22:14:30 +0000 Manifest next update: Tue 31 Mar 2026 22:14:30 +0000 Files and hashes: 1: -4BdU3nLB9UqQR7__QSRyjm3vyc.crl (hash: +bIPH5ySzccP5pk27ehG0Wk4c+5HnrUadQ41t9IOM9s=) 2: F4740B2CB92711EBA6B43A86C4F9AE02.roa (hash: yQsqpKMv8rgRbiaQKL3AGw4YslsRjw5DT4NwooJEjZ4=) 3: F78605D8778A11F08EDAFE28C4F9AE02.roa (hash: IyYyXX21JMsFvai4l/nAme3o48dFg96SndHkjGkApLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1668 (0x684) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5ECA, serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Validity Not Before: Mar 24 22:14:30 2026 GMT Not After : Mar 31 22:14:30 2026 GMT Subject: CN=69c30cc7-17a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fa:3a:cf:39:59:66:1f:3b:16:79:77:0f:1c: 57:14:77:8d:43:fc:56:57:b8:1a:36:a9:7d:64:bc: 37:cc:9c:19:3c:78:dd:ab:0d:e1:9e:45:ce:24:67: b0:4a:ce:71:e7:c6:11:a7:b4:ca:9d:f3:e2:ed:ea: 8e:9e:1d:54:18:2a:57:32:9d:01:09:40:fb:bc:ae: 76:4f:8a:19:fa:aa:85:9f:3e:d7:7e:92:9d:4b:bd: 32:bf:d4:8a:71:83:a6:00:22:77:f4:46:ad:2c:83: 53:af:db:80:c5:49:11:8e:6c:2a:42:01:d3:4e:bd: e1:4a:15:1e:41:e7:bd:22:66:5a:9a:66:29:2d:36: fc:0a:cf:40:7e:5f:5e:00:7d:ee:22:f0:79:ea:94: 95:8a:fb:d7:4c:03:d7:6b:d9:e3:66:01:a0:a9:ed: 51:df:66:f5:09:58:0f:72:32:f4:c8:a4:42:1d:9f: 2d:01:fe:52:49:5d:a7:aa:86:d6:99:6a:06:0c:d6: 68:d0:ff:8a:78:99:a5:fd:ba:15:ae:5b:81:a1:3f: 3b:e8:81:31:44:82:21:65:f9:45:12:e1:4c:e2:0c: d3:fa:5a:53:ed:69:98:12:93:19:c9:93:85:2e:6c: ec:ce:84:11:7a:ee:82:f8:49:30:39:e8:5d:bd:46: 8a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:25:21:E9:95:0F:D2:D5:E7:6C:71:36:4B:4F:F3:4D:AC:AA:EA:3A X509v3 Authority Key Identifier: keyid:FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:8c:6b:2d:6b:8b:e2:b6:4e:de:8b:a1:57:b6:ab:ab:db:f4: 09:5d:b8:93:38:17:bd:5e:83:ff:5d:d9:21:1c:16:5b:11:90: 86:e8:fc:37:58:61:39:81:ee:e5:ed:6a:1e:00:60:34:de:db: 62:bf:e5:b6:e3:9b:b5:33:7e:d9:38:17:8d:3a:27:1a:62:1d: db:ea:05:f6:38:92:c6:e2:cc:07:16:84:23:99:b8:4f:5a:1c: 86:78:b3:69:15:0e:da:37:fd:8f:1a:c6:34:69:09:e4:0c:fb: 8f:61:18:20:62:75:f4:99:52:6c:1a:2d:c5:0e:04:d3:7e:be: 34:95:a2:32:11:41:97:52:55:a7:02:4e:b9:3e:ef:98:4a:83: a1:8f:5b:39:ee:ee:43:38:ac:8b:04:2e:6b:42:48:49:00:a8: 8f:7e:19:c3:61:e8:38:d5:8d:57:ba:69:03:e4:b0:ab:f7:42: 57:b2:c1:49:e7:44:9a:1c:6b:d5:df:1f:8e:0c:40:76:29:9d: 91:c4:f4:ac:5a:dd:03:a0:68:05:49:c0:fb:27:33:c6:96:2d: 9f:7e:71:7d:53:f8:de:54:e3:6d:14:8d:d6:fc:ac:03:04:19: 74:91:4a:2d:64:ef:35:25:c4:8f:fb:1a:50:d3:1f:51:bc:95: e8:bd:f1:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVFQ0ExMTAvBgNVBAUTKEZCODA1RDUzNzlDQjA3RDUyQTQxMUVGRkZEMDQ5MUNB MzlCN0JGMjcwHhcNMjYwMzI0MjIxNDMwWhcNMjYwMzMxMjIxNDMwWjAYMRYwFAYD VQQDEw02OWMzMGNjNy0xN2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/o6zzlZZh87Fnl3DxxXFHeNQ/xWV7gaNql9ZLw3zJwZPHjdqw3hnkXOJGew Ss5x58YRp7TKnfPi7eqOnh1UGCpXMp0BCUD7vK52T4oZ+qqFnz7XfpKdS70yv9SK cYOmACJ39EatLINTr9uAxUkRjmwqQgHTTr3hShUeQee9ImZammYpLTb8Cs9Afl9e AH3uIvB56pSVivvXTAPXa9njZgGgqe1R32b1CVgPcjL0yKRCHZ8tAf5SSV2nqobW mWoGDNZo0P+KeJml/boVrluBoT876IExRIIhZflFEuFM4gzT+lpT7WmYEpMZyZOF LmzszoQReu6C+EkwOehdvUaKpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB8lIemV D9LV52xxNktP802squo6MB8GA1UdIwQYMBaAFPuAXVN5ywfVKkEe//0Ekco5t78n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUVDQS9CRkQyMzIwNkI5 MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5VXFRUjdfX1FTUnlqbTN2 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy00QmRVM25MQjlVcVFSN19fUVNSeWptM3Z5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUVDQS9CRkQyMzIwNkI5MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5 VXFRUjdfX1FTUnlqbTN2eWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmYxrLWuL4rZO3ouhV7arq9v0CV24kzgXvV6D/13ZIRwWWxGQhuj8N1hhOYHu 5e1qHgBgNN7bYr/ltuObtTN+2TgXjTonGmId2+oF9jiSxuLMBxaEI5m4T1ochniz aRUO2jf9jxrGNGkJ5Az7j2EYIGJ19JlSbBotxQ4E036+NJWiMhFBl1JVpwJOuT7v mEqDoY9bOe7uQzisiwQua0JISQCoj34Zw2HoONWNV7ppA+Swq/dCV7LBSedEmhxr 1d8fjgxAdimdkcT0rFrdA6BoBUnA+yczxpYtn35xfVP43lTjbRSN1vysAwQZdJFK LWTvNSXEj/saUNMfUbyV6L3x0Q== -----END CERTIFICATE-----Generated at Thu Mar 26 00:54:21 2026 by rpki-client