$ rpki-client -vvf rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft File: Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft (raw, json) Hash identifier: gfrlOtJx4mUYxLFy1qeLxyrnLHloot3+cA8MYGWTaIA= Subject key identifier: C7:97:3B:0F:ED:4D:86:5A:7B:37:DC:CF:B2:DF:3D:DE:47:80:5E:C6 Authority key identifier: 31:C8:E4:D4:38:97:4E:DD:0E:87:A1:C7:EB:D9:09:CA:1C:1D:12:A5 Certificate issuer: /CN=A91E585B/serialNumber=31C8E4D438974EDD0E87A1C7EBD909CA1C1D12A5 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft Manifest number: 27 Signing time: Wed 25 Mar 2026 07:58:57 +0000 Manifest this update: Wed 25 Mar 2026 07:58:56 +0000 Manifest next update: Wed 01 Apr 2026 07:58:56 +0000 Files and hashes: 1: Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl (hash: 9zLAG61AdzAZYpw6qVAVNbeVhFW3bSYoboE9UJSELJw=) 2: F526FD64F20611F0B4D6054A4A6F56BC.roa (hash: Gbi/liXaTJ25LBNVoW8OXNj5S66g3SHNzd+jBQM9W+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E585B, serialNumber=31C8E4D438974EDD0E87A1C7EBD909CA1C1D12A5 Validity Not Before: Mar 25 07:58:56 2026 GMT Not After : Apr 1 07:58:56 2026 GMT Subject: CN=69c395c1-89ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:79:d9:7a:be:6e:45:a0:0c:84:d6:fd:e9:ea: a8:05:08:e0:31:e3:c4:3a:aa:5d:53:99:8d:5a:30: c4:ef:ae:2c:35:e7:16:15:89:98:35:16:a5:0f:b4: e9:99:cc:42:01:22:4a:ba:87:06:0e:c3:c2:57:94: 3d:4a:4c:3c:16:29:9d:34:3b:6b:e2:ee:cb:8f:d8: 41:46:f1:35:72:78:01:c2:a0:1d:2a:90:6b:e8:51: 14:eb:75:9a:37:6f:16:51:6e:4a:b4:72:f9:4c:c8: f0:68:38:00:f1:73:5b:01:0f:26:8c:92:5a:61:fd: cd:59:da:20:6b:81:02:c7:a6:31:ad:8a:c8:d3:ba: 03:44:7b:a8:23:21:58:8e:b3:be:9e:4a:f0:9c:07: 5a:d6:45:0f:2f:b1:61:93:9a:38:18:d3:ca:e1:09: 83:82:62:fc:63:e0:c3:5b:f0:1b:4d:ad:e9:14:91: e5:80:6f:eb:c7:97:a7:ba:b1:39:9a:25:cb:4a:0c: 83:55:6c:25:5d:99:4d:d1:31:68:88:87:8a:2b:e7: 9c:89:3b:ed:5a:ad:3a:e5:42:0f:0e:5c:ed:7c:f5: 11:2a:90:71:af:cc:12:d5:db:73:5a:30:ac:78:f7: dd:6d:34:fa:9e:e9:5a:d2:3a:cf:48:57:dd:fe:de: 07:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:97:3B:0F:ED:4D:86:5A:7B:37:DC:CF:B2:DF:3D:DE:47:80:5E:C6 X509v3 Authority Key Identifier: keyid:31:C8:E4:D4:38:97:4E:DD:0E:87:A1:C7:EB:D9:09:CA:1C:1D:12:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:83:97:69:1c:cb:4e:da:dc:5f:64:ef:83:ba:e1:5a:b0:9e: 3e:8c:4c:df:e6:07:36:f7:48:c8:7e:64:6c:f9:3e:1e:19:5a: 0f:c9:2c:1b:f3:8c:fd:0e:c6:b7:39:97:b4:35:0f:a8:5e:f2: e7:d3:23:ea:0e:19:ee:89:e1:0c:27:a4:2b:db:dc:a2:a0:8f: ed:8c:65:52:dd:9e:88:3a:e2:d0:9f:26:3c:4e:9f:bc:e8:2e: f0:d2:16:c2:b1:20:53:26:60:0b:30:98:77:32:16:38:70:f7: 37:c3:69:8d:9f:e1:ec:1c:e0:e6:a8:69:c2:ad:77:70:a6:bb: dc:15:16:fa:24:76:7e:9a:8d:c1:bd:e2:82:df:0d:7e:f4:0c: 63:d6:41:b6:3d:8a:a0:80:5f:31:c5:02:bf:db:72:87:27:f8: 59:a9:f8:07:f8:75:dd:4e:bd:cd:0e:3c:64:62:ed:37:42:1b: cc:8e:ec:24:76:e5:ca:f7:be:97:d2:3c:9e:8e:36:f3:f3:5e: 7c:b6:33:98:cc:eb:63:e1:d1:b5:67:30:a8:cd:7e:68:5c:46: d5:60:d1:ee:1f:04:63:fc:19:59:9e:be:3c:4e:3b:6e:a9:19: 46:be:4b:cb:d3:46:a8:27:b1:c9:d3:68:15:e7:5c:ec:6d:9d: 60:01:73:d0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTg1QjExMC8GA1UEBRMoMzFDOEU0RDQzODk3NEVERDBFODdBMUM3RUJEOTA5Q0Ex QzFEMTJBNTAeFw0yNjAzMjUwNzU4NTZaFw0yNjA0MDEwNzU4NTZaMBgxFjAUBgNV BAMTDTY5YzM5NWMxLTg5ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1edl6vm5FoAyE1v3p6qgFCOAx48Q6ql1TmY1aMMTvriw15xYViZg1FqUPtOmZ zEIBIkq6hwYOw8JXlD1KTDwWKZ00O2vi7suP2EFG8TVyeAHCoB0qkGvoURTrdZo3 bxZRbkq0cvlMyPBoOADxc1sBDyaMklph/c1Z2iBrgQLHpjGtisjTugNEe6gjIViO s76eSvCcB1rWRQ8vsWGTmjgY08rhCYOCYvxj4MNb8BtNrekUkeWAb+vHl6e6sTma JctKDINVbCVdmU3RMWiIh4or55yJO+1arTrlQg8OXO189REqkHGvzBLV23NaMKx4 991tNPqe6VrSOs9IV93+3geBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUx5c7D+1N hlp7N9zPst893keAXsYwHwYDVR0jBBgwFoAUMcjk1DiXTt0Oh6HH69kJyhwdEqUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1ODVCL0FGRDFCNTAyRjIw NTExRjA4MThCNzczMjRBNkY1NkJDL01jamsxRGlYVHQwT2g2SEg2OWtKeWh3ZEVx VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTWNqazFEaVhUdDBPaDZISDY5a0p5aHdkRXFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 ODVCL0FGRDFCNTAyRjIwNTExRjA4MThCNzczMjRBNkY1NkJDL01jamsxRGlYVHQw T2g2SEg2OWtKeWh3ZEVxVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAtg5dpHMtO2txfZO+DuuFasJ4+jEzf5gc290jIfmRs+T4eGVoPySwb84z9Dsa3 OZe0NQ+oXvLn0yPqDhnuieEMJ6Qr29yioI/tjGVS3Z6IOuLQnyY8Tp+86C7w0hbC sSBTJmALMJh3MhY4cPc3w2mNn+HsHODmqGnCrXdwprvcFRb6JHZ+mo3BveKC3w1+ 9Axj1kG2PYqggF8xxQK/23KHJ/hZqfgH+HXdTr3NDjxkYu03QhvMjuwkduXK976X 0jyejjbz8158tjOYzOtj4dG1ZzCozX5oXEbVYNHuHwRj/BlZnr48TjtuqRlGvkvL 00aoJ7HJ02gV51zsbZ1gAXPQ -----END CERTIFICATE-----Generated at Fri Mar 27 02:13:24 2026 by rpki-client