$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft File: mnPxqRn79GyHLjiAWxZQtfiCdtM.mft (raw, json) Hash identifier: 69gqZF3UW0cpcKHhSwcRecGCvElxn7fliJIjalDo5g0= Subject key identifier: CF:50:85:B5:2B:81:2F:31:36:4A:AB:A3:5A:1B:6F:BD:7A:7D:B2:39 Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Certificate serial: 11FE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft Manifest number: 0D8E Signing time: Wed 25 Mar 2026 00:56:53 +0000 Manifest this update: Wed 25 Mar 2026 00:56:52 +0000 Manifest next update: Wed 01 Apr 2026 00:56:52 +0000 Files and hashes: 1: mnPxqRn79GyHLjiAWxZQtfiCdtM.crl (hash: zfHDRUzdlUL+lepKP57EkN6hp1ogS6OaVUYftwayycI=) 2: 5C2A5AE670FD11F08583BE3AC4F9AE02.roa (hash: 2AJYc+N2PADxY4y49OSZDcckeuGN7xHXkNXTwPuT8fs=) 3: F7E266FEDA5211F09C836FE292D3641D.roa (hash: cGDK0o7QZlPNPAFr4dfh+NVJSW7tkzbeeXcZE45hJYI=) 4: 8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa (hash: 9kr7YRweIjs9sYz5LEa5FyxtFuVknS+hpV3R4t44fNs=) 5: 6BE346006D1A11F0B1F1074DC4F9AE02.roa (hash: B6cIG1afbkG3vI1TqciNvobQif79q4lJ3Y9WuIuXm0U=) 6: 24B754BA9B7911EFBA9A2A42C4F9AE02.roa (hash: nYeFBOsuOa+AhwOe+QjEdtDHW5x1Jxsma/8+kniQAXk=) 7: A173B894112711F0845DF16FC4F9AE02.roa (hash: G6+GS22xNwr0Km9vx99x7wOcMdZwDFcolP4ZXOu6yf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4606 (0x11fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Validity Not Before: Mar 25 00:56:52 2026 GMT Not After : Apr 1 00:56:52 2026 GMT Subject: CN=69c332d5-6385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f1:48:b1:8b:99:dd:34:2c:f1:e7:b5:e7:0f: 75:80:2e:14:d2:ce:7b:e8:15:0b:ed:62:98:ac:c6: ba:cf:5d:9a:0a:57:96:32:6c:3e:95:ef:76:c7:8b: 8f:75:3f:56:7c:fc:b2:a0:21:e4:c3:3e:25:23:93: 96:4a:74:e6:01:89:11:a6:55:0d:78:d5:a7:0a:d4: af:cc:8d:88:0c:c2:89:6c:db:f1:8d:fa:6f:49:49: 1f:4b:37:95:7d:30:c4:55:b4:55:a4:d3:d6:9a:88: fa:a3:ee:2b:d5:b5:1f:d0:bf:05:72:cc:08:84:23: e5:53:8f:9d:4b:ad:2c:3e:9a:de:0c:c2:dc:67:41: 96:e2:38:fd:45:5c:ad:f9:6b:af:0a:d0:1b:6e:3b: 54:5b:f7:ec:ec:3d:63:3b:70:a6:eb:5c:e1:7d:5d: 1e:0c:80:6b:ca:98:c7:5c:c1:2d:da:0c:78:8f:4d: 95:15:4f:8f:fd:39:d5:c0:67:94:d7:8c:c1:30:61: 16:61:10:87:21:45:5c:4d:04:bb:8a:d9:e5:81:63: 36:aa:ef:76:65:80:d2:79:52:18:5e:3d:f8:30:44: 87:4d:37:5f:db:ae:8b:53:d1:44:48:25:a6:4f:1c: 01:b3:3f:94:d4:62:02:29:e5:82:67:ed:fd:d8:e7: 43:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:50:85:B5:2B:81:2F:31:36:4A:AB:A3:5A:1B:6F:BD:7A:7D:B2:39 X509v3 Authority Key Identifier: keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:4d:30:2c:20:21:32:4d:f3:e9:69:56:4f:5e:5e:97:c6:e2: a6:b1:2c:53:d1:77:9e:73:14:29:8c:60:6e:80:77:4d:62:43: 00:8b:2e:e5:b4:3b:4c:11:34:2c:ed:0a:c9:37:6d:eb:7a:a2: 13:08:6f:37:3c:95:73:38:6e:c2:31:53:9b:64:74:56:80:60: 36:cb:84:6c:42:cd:e8:bb:2d:24:cc:86:40:87:ae:0e:4e:ac: 09:21:64:0c:e3:b8:28:b4:29:ad:5a:94:8e:4c:cc:be:ce:cb: e7:9b:7a:2b:a3:20:5b:ce:18:69:b0:ac:fe:90:d3:92:22:a1: f0:36:61:de:d4:b1:9d:ac:fa:97:09:1b:2c:66:c3:01:af:cc: 1e:97:78:bb:f3:df:04:6f:d0:17:78:7d:e1:57:99:74:b3:62: b0:f9:74:e4:ee:b5:cb:be:3a:76:f5:c2:a6:04:5a:88:03:be: 5e:66:d7:93:1a:d1:c0:ef:a9:eb:b3:cf:e8:be:c7:1d:d9:1b: f7:76:b9:08:b9:e2:10:c9:d3:83:9f:63:5a:19:59:e0:ed:cc: 24:ba:73:3f:29:35:4a:80:07:4f:11:0d:2b:15:f9:14:79:e6: 0a:99:de:43:4f:f6:7b:03:26:f0:23:40:93:ee:d7:07:22:38: d3:4a:14:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1 Rjg4Mjc2RDMwHhcNMjYwMzI1MDA1NjUyWhcNMjYwNDAxMDA1NjUyWjAYMRYwFAYD VQQDEw02OWMzMzJkNS02Mzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfFIsYuZ3TQs8ee15w91gC4U0s576BUL7WKYrMa6z12aCleWMmw+le92x4uP dT9WfPyyoCHkwz4lI5OWSnTmAYkRplUNeNWnCtSvzI2IDMKJbNvxjfpvSUkfSzeV fTDEVbRVpNPWmoj6o+4r1bUf0L8FcswIhCPlU4+dS60sPpreDMLcZ0GW4jj9RVyt +WuvCtAbbjtUW/fs7D1jO3Cm61zhfV0eDIBrypjHXMEt2gx4j02VFU+P/TnVwGeU 14zBMGEWYRCHIUVcTQS7itnlgWM2qu92ZYDSeVIYXj34MESHTTdf266LU9FESCWm TxwBsz+U1GICKeWCZ+392OdDqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM9QhbUr gS8xNkqro1obb716fbI5MB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjEzNC81N0IzRTBCQ0MyQTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlH eUhMamlBV3haUXRmaUNkdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWU0wLCAhMk3z6WlWT15el8biprEsU9F3nnMUKYxgboB3TWJDAIsu5bQ7TBE0 LO0KyTdt63qiEwhvNzyVczhuwjFTm2R0VoBgNsuEbELN6LstJMyGQIeuDk6sCSFk DOO4KLQprVqUjkzMvs7L55t6K6MgW84YabCs/pDTkiKh8DZh3tSxnaz6lwkbLGbD Aa/MHpd4u/PfBG/QF3h94VeZdLNisPl05O61y746dvXCpgRaiAO+XmbXkxrRwO+p 67PP6L7HHdkb93a5CLniEMnTg59jWhlZ4O3MJLpzPyk1SoAHTxENKxX5FHnmCpne Q0/2ewMm8CNAk+7XByI400oUQQ== -----END CERTIFICATE-----Generated at Thu Mar 26 15:47:24 2026 by rpki-client