$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft File: jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft (raw, json) Hash identifier: 2muBISkO0HyaOy4Lnh8OI34o7xS6T/q8AyDLFFFbCtQ= Subject key identifier: 99:69:4E:C3:38:DB:E5:E1:84:0C:26:3B:8C:16:4C:06:EB:73:5A:D3 Authority key identifier: 8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D Certificate issuer: /CN=A91D94CD/serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft Manifest number: 5D Signing time: Fri 27 Mar 2026 07:37:06 +0000 Manifest this update: Fri 27 Mar 2026 07:37:05 +0000 Manifest next update: Fri 03 Apr 2026 07:37:05 +0000 Files and hashes: 1: jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl (hash: IXTKGEfEPxvHaoeksZT7Q7le3Klj1F+38j9dHHZBvPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 07:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D94CD, serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D Validity Not Before: Mar 27 07:37:05 2026 GMT Not After : Apr 3 07:37:05 2026 GMT Subject: CN=69c633a2-c6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cc:c9:cd:b5:01:00:be:31:1e:c0:fb:5b:ad: 01:4f:38:a2:b7:27:64:f1:5a:b6:21:9f:97:b4:fa: fc:43:4b:3c:58:19:e6:59:fe:58:33:d7:c1:ec:6a: 5b:33:f5:96:25:05:5d:8a:35:9c:d9:34:6f:d1:9c: 17:50:c3:4c:b3:9f:22:13:d2:20:0c:4b:dc:43:88: ea:91:f1:2b:a5:50:71:50:70:27:47:19:49:cc:89: 99:26:95:34:7b:15:91:dc:c6:58:a3:52:db:8d:b9: ff:97:c1:7e:93:13:d6:f1:c8:a3:e2:e4:47:a8:ce: 03:f0:57:1d:b4:c1:84:0c:cf:d1:ea:19:a2:46:57: 0a:75:08:09:47:70:37:c9:51:0a:c6:9b:b5:c5:89: 1b:95:a1:55:29:94:af:79:9d:df:4d:0f:3a:7e:04: 4d:d1:05:df:36:b3:4d:db:ff:f1:20:78:c4:85:62: 57:4b:62:7e:9f:ea:67:db:8c:3e:ca:00:03:a9:a0: 57:35:04:24:10:1c:a3:d4:22:46:6a:b5:46:3c:f2: 84:9f:51:07:01:5d:8c:e4:07:8a:02:c1:6c:29:11: 43:ce:7e:b3:3e:e7:8c:77:67:0a:36:be:ab:ab:7d: 73:37:00:05:27:44:c5:fd:48:a1:96:34:97:57:bf: aa:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:69:4E:C3:38:DB:E5:E1:84:0C:26:3B:8C:16:4C:06:EB:73:5A:D3 X509v3 Authority Key Identifier: keyid:8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:1e:ed:0f:63:9e:21:8d:f7:f7:10:07:f9:33:53:f9:a8:f4: 44:6c:a4:11:34:af:b8:b9:fe:d9:d9:35:08:be:9e:87:7c:5f: 9b:97:a5:60:ed:ae:d5:68:a6:ee:73:29:29:5b:99:4a:4f:68: f6:2c:fc:70:9a:3b:b6:1f:24:b6:99:12:51:06:9b:bb:cd:14: ba:db:9f:8d:66:ec:68:de:36:5a:e2:1e:49:f4:90:64:ab:17: c0:0f:14:d8:c5:00:59:f2:1d:18:2e:7b:76:f2:f4:10:f9:db: 56:14:17:20:e0:a1:b7:eb:c0:03:e5:b3:5e:f9:0c:30:87:c7: bf:50:b7:9e:f9:9a:de:8e:6f:68:d4:8b:4b:c4:f4:0c:49:b0: 48:93:e3:f4:74:0c:8c:55:f6:3c:8c:a9:00:aa:7a:b5:85:0f: 90:09:23:fb:e3:f1:51:bc:3a:40:af:0a:d3:90:e5:d7:b2:ea: 16:ad:cc:e1:1e:63:63:99:41:69:16:5e:fe:1c:b1:45:64:50: 28:05:fe:40:c8:54:a0:a9:fe:71:4d:05:66:d2:e3:2b:4a:80: 37:30:3a:0d:03:5b:47:50:a2:89:18:69:58:c6:d9:e4:74:45: d9:24:7e:89:c4:a4:53:7a:79:c7:57:ad:e2:7a:69:c0:59:d2: 8a:59:4c:a6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OTRDRDExMC8GA1UEBRMoOEQxQ0Q2NTlFNjFEQjY0OTVCMzZDRTY5QzQ5RjVBODMy RURCRDU5RDAeFw0yNjAzMjcwNzM3MDVaFw0yNjA0MDMwNzM3MDVaMBgxFjAUBgNV BAMTDTY5YzYzM2EyLWM2YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHzMnNtQEAvjEewPtbrQFPOKK3J2TxWrYhn5e0+vxDSzxYGeZZ/lgz18Hsalsz 9ZYlBV2KNZzZNG/RnBdQw0yznyIT0iAMS9xDiOqR8SulUHFQcCdHGUnMiZkmlTR7 FZHcxlijUtuNuf+XwX6TE9bxyKPi5EeozgPwVx20wYQMz9HqGaJGVwp1CAlHcDfJ UQrGm7XFiRuVoVUplK95nd9NDzp+BE3RBd82s03b//EgeMSFYldLYn6f6mfbjD7K AAOpoFc1BCQQHKPUIkZqtUY88oSfUQcBXYzkB4oCwWwpEUPOfrM+54x3Zwo2vqur fXM3AAUnRMX9SKGWNJdXv6pdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmWlOwzjb 5eGEDCY7jBZMButzWtMwHwYDVR0jBBgwFoAUjRzWWeYdtklbNs5pxJ9agy7b1Z0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5NENELzM2QUY5NDcyOUVD ODExRjA4Q0QyQUM3QkM0RjlBRTAyL2pSeldXZVlkdGtsYk5zNXB4SjlhZ3k3YjFa MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvalJ6V1dlWWR0a2xiTnM1cHhKOWFneTdiMVowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 NENELzM2QUY5NDcyOUVDODExRjA4Q0QyQUM3QkM0RjlBRTAyL2pSeldXZVlkdGts Yk5zNXB4SjlhZ3k3YjFaMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBzHu0PY54hjff3EAf5M1P5qPREbKQRNK+4uf7Z2TUIvp6HfF+bl6Vg7a7VaKbu cykpW5lKT2j2LPxwmju2HyS2mRJRBpu7zRS625+NZuxo3jZa4h5J9JBkqxfADxTY xQBZ8h0YLnt28vQQ+dtWFBcg4KG368AD5bNe+Qwwh8e/ULee+Zrejm9o1ItLxPQM SbBIk+P0dAyMVfY8jKkAqnq1hQ+QCSP74/FRvDpArwrTkOXXsuoWrczhHmNjmUFp Fl7+HLFFZFAoBf5AyFSgqf5xTQVm0uMrSoA3MDoNA1tHUKKJGGlYxtnkdEXZJH6J xKRTennHV63iemnAWdKKWUym -----END CERTIFICATE-----Generated at Sat Mar 28 10:22:33 2026 by rpki-client