$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft File: 4JI7Cl99XGi66s5BQV9CpSDXSyo.mft (raw, json) Hash identifier: dHnFVvyzDZ8HgGfhLrkgyCHMusjdUHBMqU6FRPRhVWs= Subject key identifier: 87:D6:64:DB:80:FD:67:A4:1A:D8:E5:E0:7A:EC:C2:A5:75:AE:9A:A0 Authority key identifier: E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A Certificate issuer: /CN=A91D9E49/serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Certificate serial: 0BB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft Manifest number: 0BA8 Signing time: Tue 24 Mar 2026 18:50:10 +0000 Manifest this update: Tue 24 Mar 2026 18:50:09 +0000 Manifest next update: Tue 31 Mar 2026 18:50:09 +0000 Files and hashes: 1: 4JI7Cl99XGi66s5BQV9CpSDXSyo.crl (hash: zq1kx79MtvMUVFiVP0VKrjMhpIVGg+LwAIaxZqLiYqI=) 2: 4CC0341641A311EABAADCE0AC4F9AE02.roa (hash: K1S8Q65Z3w1SElyF5atmBbQ9pOqRtecrW95mrmJVLwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2994 (0xbb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9E49, serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Validity Not Before: Mar 24 18:50:09 2026 GMT Not After : Mar 31 18:50:09 2026 GMT Subject: CN=69c2dce1-1c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:39:30:6a:40:0a:ff:80:cb:b6:77:4e:52:bf: 13:5a:00:29:f9:18:d5:89:d7:f2:45:c3:ce:89:c5: d8:e5:0f:0c:1d:4f:b7:fc:95:6f:25:10:27:c5:71: c6:08:41:92:b6:ba:1f:de:71:46:01:f0:9c:49:19: 4c:bd:69:51:47:d2:ef:de:0a:3d:63:6b:cf:5a:77: 12:9f:84:87:0b:72:db:70:10:41:3e:fd:af:2d:c0: 5f:fb:2b:df:b8:93:27:af:d2:22:93:bd:a8:de:f4: 94:1d:0a:51:72:c4:9f:31:67:bc:2a:b8:d0:5a:4b: e9:a8:08:8d:a4:d5:e0:9f:9c:b0:68:9e:51:04:f9: 55:1f:cf:a1:d1:63:eb:03:e4:b5:e2:d9:3a:ed:7d: a9:26:73:7c:cb:a0:d0:cd:90:0d:8a:a4:a5:95:db: f1:22:d2:4a:ac:c1:3f:14:a3:ba:c2:df:ae:9c:24: 64:68:c5:83:77:f3:48:88:c5:1a:6a:81:bb:b5:a1: 0b:b0:ad:96:31:b5:fb:56:78:bf:ea:77:96:1f:03: 27:bb:45:72:64:38:9c:28:da:fa:76:51:23:51:8d: 4b:2c:59:5d:4d:e3:1b:d8:bb:c4:3c:24:15:46:18: 7a:f6:be:67:51:9c:20:15:14:e0:34:e4:20:b2:57: 5c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D6:64:DB:80:FD:67:A4:1A:D8:E5:E0:7A:EC:C2:A5:75:AE:9A:A0 X509v3 Authority Key Identifier: keyid:E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:3b:1e:c8:04:ed:20:5a:32:b3:ce:f6:88:22:70:e8:36:85: 7d:12:1d:1a:b4:84:e3:7a:92:32:61:ae:57:9a:92:ef:c0:c9: 5b:a8:63:cd:04:68:ce:63:d1:16:92:39:e7:b2:67:bd:e7:57: 77:65:80:83:20:69:38:8f:68:df:e6:aa:76:c8:2f:ef:79:9a: a6:70:c2:0e:a3:0f:cc:7b:a6:1d:21:c3:4f:39:3e:94:d7:72: 44:30:b3:58:70:d0:54:17:f5:14:fb:6a:2a:8f:9d:3b:5b:f6: af:61:80:71:75:56:f4:fb:57:52:c6:77:f7:8d:1e:04:af:d9: b6:48:a9:23:40:75:81:89:b6:5e:8f:bd:da:76:85:92:8c:9a: 44:30:f0:de:96:8e:04:f6:51:a3:b7:c6:61:7e:32:51:4c:25: 8e:cf:21:a6:7d:e5:6e:e1:20:36:e9:be:a1:d7:f0:b4:ef:56: ae:77:24:d1:47:d5:57:10:42:5a:a0:20:b6:57:66:8e:5c:2b: ed:77:b4:08:0d:2a:20:73:ee:95:ff:be:68:7f:a8:81:5a:4e: ab:22:0a:d2:de:8d:a1:d2:ac:1f:db:7d:9f:23:c6:1e:8e:ae: 75:4a:12:ba:70:b1:c0:a4:35:0a:33:22:1d:33:12:b3:54:9c: 58:da:09:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFNDkxMTAvBgNVBAUTKEUwOTIzQjBBNUY3RDVDNjhCQUVBQ0U0MTQxNUY0MkE1 MjBENzRCMkEwHhcNMjYwMzI0MTg1MDA5WhcNMjYwMzMxMTg1MDA5WjAYMRYwFAYD VQQDEw02OWMyZGNlMS0xYzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDkwakAK/4DLtndOUr8TWgAp+RjVidfyRcPOicXY5Q8MHU+3/JVvJRAnxXHG CEGStrof3nFGAfCcSRlMvWlRR9Lv3go9Y2vPWncSn4SHC3LbcBBBPv2vLcBf+yvf uJMnr9Iik72o3vSUHQpRcsSfMWe8KrjQWkvpqAiNpNXgn5ywaJ5RBPlVH8+h0WPr A+S14tk67X2pJnN8y6DQzZANiqSlldvxItJKrME/FKO6wt+unCRkaMWDd/NIiMUa aoG7taELsK2WMbX7Vni/6neWHwMnu0VyZDicKNr6dlEjUY1LLFldTeMb2LvEPCQV Rhh69r5nUZwgFRTgNOQgsldcRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIfWZNuA /WekGtjl4HrswqV1rpqgMB8GA1UdIwQYMBaAFOCSOwpffVxouurOQUFfQqUg10sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUU0OS8wNDA0OUQwODQx QTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhHaTY2czVCUVY5Q3BTRFhT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRKSTdDbDk5WEdpNjZzNUJRVjlDcFNEWFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUU0OS8wNDA0OUQwODQxQTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhH aTY2czVCUVY5Q3BTRFhTeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADDseyATtIFoys872iCJw6DaFfRIdGrSE43qSMmGuV5qS78DJW6hjzQRozmPR FpI557JnvedXd2WAgyBpOI9o3+aqdsgv73mapnDCDqMPzHumHSHDTzk+lNdyRDCz WHDQVBf1FPtqKo+dO1v2r2GAcXVW9PtXUsZ3940eBK/ZtkipI0B1gYm2Xo+92naF koyaRDDw3paOBPZRo7fGYX4yUUwljs8hpn3lbuEgNum+odfwtO9Wrnck0UfVVxBC WqAgtldmjlwr7Xe0CA0qIHPulf++aH+ogVpOqyIK0t6NodKsH9t9nyPGHo6udUoS unCxwKQ1CjMiHTMSs1ScWNoJGA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:54:08 2026 by rpki-client