$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft File: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft (raw, json) Hash identifier: SoglL/+p6Q9lMf7cWG6wYD7W3LCzwV0Jvz2KZb1+YeA= Subject key identifier: DF:43:68:A7:3B:B9:9B:79:EB:24:98:C5:AC:B0:7C:F2:4A:AD:35:84 Authority key identifier: 27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD Certificate issuer: /CN=A91E5FCD/serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD Certificate serial: 0636 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft Manifest number: 2008 Signing time: Thu 26 Mar 2026 16:20:34 +0000 Manifest this update: Thu 26 Mar 2026 16:20:33 +0000 Manifest next update: Thu 02 Apr 2026 16:20:33 +0000 Files and hashes: 1: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl (hash: plsVLSXR8ElkDs/l+k9gguzb2ioLBW9xjk22XBYVZ2c=) 2: 08CD5AD2DA2B11EBA1C6AA3CC4F9AE02.roa (hash: ng5bgbFugCpJCI2PYFWeSfminEhUjB176PVU+n+Eszk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1590 (0x636) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5FCD, serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD Validity Not Before: Mar 26 16:20:33 2026 GMT Not After : Apr 2 16:20:33 2026 GMT Subject: CN=69c55cd2-b227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:59:9e:39:27:e9:f6:72:89:76:dc:3f:b3:d3: 64:4f:17:69:14:7f:31:44:61:f1:4d:5b:aa:cb:03: f4:39:fd:45:9e:3c:32:6b:a0:aa:c9:ad:0e:1f:b1: b9:f2:ed:df:49:d8:42:64:11:ce:41:a0:07:42:11: 44:e7:f3:bd:61:e3:86:1c:55:b6:b0:e6:25:af:87: 74:1a:b0:71:89:43:00:4e:e5:27:f5:b5:af:a5:89: da:bf:c3:d3:cd:be:04:6d:06:1b:43:e5:c1:b0:60: 8b:51:d0:5a:37:3e:50:b2:ac:7c:33:25:2f:48:d5: 1f:96:d9:76:80:ef:f1:20:a7:16:8b:7b:ac:be:77: 44:bc:91:50:dd:ee:37:00:e9:64:88:75:f2:e3:08: 95:df:92:64:7c:6a:76:ca:3e:d9:ca:39:f4:3a:da: 9e:de:2b:7b:d9:87:f6:09:1d:5c:58:ac:8a:fa:c8: d1:64:1c:97:16:03:bd:e5:93:19:cf:50:77:89:e5: 78:6b:c9:e7:10:5b:60:f6:69:63:eb:0b:0b:42:24: ec:16:55:81:14:c3:00:e4:2d:00:72:37:0a:62:4a: 0d:69:b9:35:d1:9c:30:f2:03:e0:45:19:e1:e1:ab: 1f:1e:6c:75:6b:37:a4:92:a8:4c:72:45:cc:94:0a: fd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:43:68:A7:3B:B9:9B:79:EB:24:98:C5:AC:B0:7C:F2:4A:AD:35:84 X509v3 Authority Key Identifier: keyid:27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:3f:c5:c9:29:99:c3:01:72:e0:99:1b:c4:6b:b2:f8:99:e5: 36:ce:2b:a7:08:49:cf:22:bc:d2:21:c1:b3:d8:90:cd:f8:2f: e0:8f:68:5c:7c:cc:e5:dc:95:53:11:67:c3:7a:9d:18:0d:a2: e8:4a:be:e4:6a:02:a1:5a:32:58:c3:26:da:d8:15:04:16:30: ad:d7:14:b9:01:56:97:9a:48:46:f1:72:2d:64:62:12:61:dd: 28:f7:92:1b:3c:99:75:4d:74:c1:01:04:98:23:40:1c:11:70: 2a:a5:f9:6c:04:0a:09:9d:e9:70:e9:27:f4:e9:4a:c8:b4:a8: 1b:83:c2:ca:06:3d:91:f8:10:65:ba:d9:d0:e8:4b:04:17:6a: 86:79:fb:9d:e8:2f:62:88:5d:45:23:3c:85:af:07:f4:cc:1a: b2:e7:b1:24:08:e7:49:52:1b:9c:ac:cd:ed:70:16:2a:26:68: 37:40:f0:e0:44:10:5b:6e:03:9d:ac:e3:9d:df:db:ea:97:d7: 40:58:24:c4:84:0e:d9:89:29:0e:c4:a6:0a:26:9b:bd:26:08: ed:44:21:d7:31:f9:52:55:60:f3:22:b5:c1:da:04:64:93:65: ea:8c:81:22:1a:c6:a0:80:97:12:27:e7:ef:64:59:51:47:b0: c4:d3:4d:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVGQ0QxMTAvBgNVBAUTKDI3M0FBQUUyRTNCRTk5NEZDMjgzM0Y4NTcxMjkyM0NE NDE3QjdGQUQwHhcNMjYwMzI2MTYyMDMzWhcNMjYwNDAyMTYyMDMzWjAYMRYwFAYD VQQDEw02OWM1NWNkMi1iMjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlmeOSfp9nKJdtw/s9NkTxdpFH8xRGHxTVuqywP0Of1Fnjwya6Cqya0OH7G5 8u3fSdhCZBHOQaAHQhFE5/O9YeOGHFW2sOYlr4d0GrBxiUMATuUn9bWvpYnav8PT zb4EbQYbQ+XBsGCLUdBaNz5Qsqx8MyUvSNUfltl2gO/xIKcWi3usvndEvJFQ3e43 AOlkiHXy4wiV35JkfGp2yj7Zyjn0Otqe3it72Yf2CR1cWKyK+sjRZByXFgO95ZMZ z1B3ieV4a8nnEFtg9mlj6wsLQiTsFlWBFMMA5C0AcjcKYkoNabk10Zww8gPgRRnh 4asfHmx1azekkqhMckXMlAr95QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN9DaKc7 uZt56ySYxaywfPJKrTWEMB8GA1UdIwQYMBaAFCc6quLjvplPwoM/hXEpI81Be3+t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUZDRC8wQkUwRkZFMDc4 MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9KenFxNHVPLW1VX0Nnei1GY1NranpVRjdm NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p6cXE0dU8tbVVfQ2d6LUZjU2tqelVGN2Y2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUZDRC8wQkUwRkZFMDc4MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9KenFxNHVPLW1V X0Nnei1GY1NranpVRjdmNjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApz/FySmZwwFy4JkbxGuy+JnlNs4rpwhJzyK80iHBs9iQzfgv4I9oXHzM5dyV UxFnw3qdGA2i6Eq+5GoCoVoyWMMm2tgVBBYwrdcUuQFWl5pIRvFyLWRiEmHdKPeS GzyZdU10wQEEmCNAHBFwKqX5bAQKCZ3pcOkn9OlKyLSoG4PCygY9kfgQZbrZ0OhL BBdqhnn7negvYohdRSM8ha8H9MwasuexJAjnSVIbnKzN7XAWKiZoN0Dw4EQQW24D nazjnd/b6pfXQFgkxIQO2YkpDsSmCiabvSYI7UQh1zH5UlVg8yK1wdoEZJNl6oyB IhrGoICXEifn72RZUUewxNNNnw== -----END CERTIFICATE-----Generated at Thu Mar 26 21:58:42 2026 by rpki-client