$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft File: -J0aOgEq7dJ69ICrnjbpKOaPiUI.mft (raw, json) Hash identifier: 6gEqYwjirKdp/BhjQYc0ohF9YjuoYh1dQ2QssQCW2Co= Subject key identifier: 43:21:69:A2:57:1E:C5:47:C9:C2:94:05:1C:D1:61:26:95:F5:4E:5D Authority key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 Certificate issuer: /CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Certificate serial: 1FB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft Manifest number: 1FB0 Signing time: Tue 24 Mar 2026 15:54:41 +0000 Manifest this update: Tue 24 Mar 2026 15:54:41 +0000 Manifest next update: Tue 31 Mar 2026 15:54:41 +0000 Files and hashes: 1: -J0aOgEq7dJ69ICrnjbpKOaPiUI.crl (hash: MmXPl7FPkW15JuJ611Ueg3jLv9n3jic2ESCoVba8E70=) 2: 911C2670AF8311F0AA3DB580C4F9AE02.roa (hash: RZhjBvcmyXIMzlb/8UlxgzJQXUre9xl2GZfQAX/t0EM=) 3: 91AC7FEAAF8311F0AA3DB580C4F9AE02.roa (hash: GjOMUfWbv01wGvJ1FvR6+5UWkPxfCYmtbqRruiSURbE=) 4: A423811CAF8511F081CFDB4FC4F9AE02.roa (hash: t9f19zC5S/IYriertqckeC3YEvgJ+JaLXV3b4hj/fXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:54:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8120 (0x1fb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBC93, serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Validity Not Before: Mar 24 15:54:41 2026 GMT Not After : Mar 31 15:54:41 2026 GMT Subject: CN=69c2b3c1-cacc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:01:fd:46:55:a8:af:fb:18:78:dd:4b:82:9e: 69:24:ed:60:20:cd:1b:59:fb:bb:33:36:26:9d:e1: d2:6f:24:56:ec:ed:03:8f:c2:d3:ea:14:d6:a1:b7: df:ad:32:44:af:aa:c0:63:f2:8b:8f:f3:43:17:f8: e6:db:bf:27:9d:74:55:52:94:f6:d7:0d:4e:18:3a: 59:69:ef:c6:23:c8:84:80:b7:ad:08:ee:bb:53:e4: 01:37:a4:be:70:f9:7f:15:3f:99:77:16:ef:ae:69: 31:fe:31:7b:a3:2f:59:01:0c:2d:c4:80:e5:98:4e: d4:df:4d:af:ed:3c:35:c4:a5:84:53:97:76:fe:d1: a2:7e:02:05:e9:9a:71:38:03:e0:b9:37:20:42:ca: 41:48:3b:b2:0e:10:96:5b:20:cb:79:7e:7c:32:de: ae:c4:e7:06:90:1d:75:0d:a9:d6:f1:4e:60:37:a1: 17:c8:9a:14:27:8e:21:0b:90:57:c9:ac:8d:ad:2e: c5:58:a0:e4:df:68:cf:8d:c2:46:85:3f:4f:de:be: 45:43:fd:86:54:da:a9:87:04:76:9f:fb:d2:d6:3b: 33:0d:2d:58:67:d8:8c:39:69:2f:03:cf:2a:9b:79: f0:7f:a2:b8:77:0e:01:a3:37:e0:f1:1c:d5:79:35: a4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:21:69:A2:57:1E:C5:47:C9:C2:94:05:1C:D1:61:26:95:F5:4E:5D X509v3 Authority Key Identifier: keyid:F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:23:76:be:fe:c0:08:d4:f8:31:d4:f5:59:79:73:6d:2a:23: f0:e9:54:2b:f6:7f:f5:c6:3d:6b:6d:5d:19:b4:29:41:7f:8f: 1b:fc:ea:f5:c3:4d:f0:6f:3b:a4:22:de:7f:be:e2:4e:f4:c2: e7:fb:85:2c:47:85:fd:65:71:c9:52:c7:e8:ac:bb:91:a9:b8: 18:68:4a:c6:d2:08:34:d1:0e:db:e7:c4:1a:3a:bd:76:98:76: 89:83:67:12:f8:69:8c:a3:f6:68:01:b9:2b:0b:a9:b8:db:b3: dd:d0:33:b5:59:47:b7:14:bf:98:0d:62:30:b0:65:f7:53:e9: 0c:30:12:4e:ab:92:79:c9:04:94:55:36:f6:b3:0d:d9:88:50: f0:24:87:db:b1:63:18:1f:e7:5a:2d:e0:79:b5:c7:41:c6:c7: 89:2e:c6:7c:7a:87:6e:38:b6:74:bc:06:30:f4:0c:28:b5:f4: 3f:56:bd:5b:02:62:b2:92:f5:d2:c7:44:62:02:87:14:4a:4b: 12:e9:19:76:8f:39:4d:0b:6d:9a:39:25:6c:c5:f6:41:46:d7: a1:89:e8:41:61:db:46:50:af:b1:e3:0a:c5:5a:e9:ba:dc:69: 59:ad:78:53:f0:60:ef:27:0b:3e:0d:a7:51:7c:e0:a6:ca:aa: 8d:55:80:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJDOTMxMTAvBgNVBAUTKEY4OUQxQTNBMDEyQUVERDI3QUY0ODBBQjlFMzZFOTI4 RTY4Rjg5NDIwHhcNMjYwMzI0MTU1NDQxWhcNMjYwMzMxMTU1NDQxWjAYMRYwFAYD VQQDEw02OWMyYjNjMS1jYWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwH9RlWor/sYeN1Lgp5pJO1gIM0bWfu7MzYmneHSbyRW7O0Dj8LT6hTWobff rTJEr6rAY/KLj/NDF/jm278nnXRVUpT21w1OGDpZae/GI8iEgLetCO67U+QBN6S+ cPl/FT+Zdxbvrmkx/jF7oy9ZAQwtxIDlmE7U302v7Tw1xKWEU5d2/tGifgIF6Zpx OAPguTcgQspBSDuyDhCWWyDLeX58Mt6uxOcGkB11DanW8U5gN6EXyJoUJ44hC5BX yayNrS7FWKDk32jPjcJGhT9P3r5FQ/2GVNqphwR2n/vS1jszDS1YZ9iMOWkvA88q m3nwf6K4dw4Bozfg8RzVeTWkAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEMhaaJX HsVHycKUBRzRYSaV9U5dMB8GA1UdIwQYMBaAFPidGjoBKu3SevSAq5426Sjmj4lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkM5My84RkI0OEJCNjUz NzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdkSjY5SUNybmpicEtPYVBp VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KMGFPZ0VxN2RKNjlJQ3JuamJwS09hUGlVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkM5My84RkI0OEJCNjUzNzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdk SjY5SUNybmpicEtPYVBpVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjCN2vv7ACNT4MdT1WXlzbSoj8OlUK/Z/9cY9a21dGbQpQX+PG/zq9cNN8G87 pCLef77iTvTC5/uFLEeF/WVxyVLH6Ky7kam4GGhKxtIINNEO2+fEGjq9dph2iYNn EvhpjKP2aAG5KwupuNuz3dAztVlHtxS/mA1iMLBl91PpDDASTquSeckElFU29rMN 2YhQ8CSH27FjGB/nWi3gebXHQcbHiS7GfHqHbji2dLwGMPQMKLX0P1a9WwJispL1 0sdEYgKHFEpLEukZdo85TQttmjklbMX2QUbXoYnoQWHbRlCvseMKxVrputxpWa14 U/Bg7ycLPg2nUXzgpsqqjVWAYQ== -----END CERTIFICATE-----Generated at Thu Mar 26 13:29:11 2026 by rpki-client