$ rpki-client -vvf rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft File: j1nI_VoLWpmrBABkQjq_TbC04IY.mft (raw, json) Hash identifier: RLxe7yHur7B5Sk0fb9kSmWfYjstfUTd9AH3d+ZoIrKk= Subject key identifier: F5:27:D7:57:21:C8:18:10:7A:A3:9E:A9:76:4C:D2:77:69:2E:A8:C2 Authority key identifier: 8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 Certificate issuer: /CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Certificate serial: 3559 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft Manifest number: 3539 Signing time: Tue 24 Mar 2026 15:12:50 +0000 Manifest this update: Tue 24 Mar 2026 15:12:49 +0000 Manifest next update: Tue 31 Mar 2026 15:12:49 +0000 Files and hashes: 1: j1nI_VoLWpmrBABkQjq_TbC04IY.crl (hash: cs0rlNWd69V2fMvfdGpL15NNyuTgOzrLtGiXR+/Vb3Q=) 2: F3DC25C41E4511EFBB4DF80DC4F9AE02.roa (hash: UymEhDbFwl3qCyCqScVFcdAOyk6J7jfC5aOKZBd8Zmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13657 (0x3559) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E647A, serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Validity Not Before: Mar 24 15:12:49 2026 GMT Not After : Mar 31 15:12:49 2026 GMT Subject: CN=69c2a9f2-cc84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f8:ce:6d:f3:62:fa:27:80:e9:6f:e0:d6:82: c9:d3:25:4a:8c:f4:a5:5d:1c:ee:eb:d0:b0:5f:39: e9:81:c7:43:a7:88:6b:9f:94:30:bd:ab:12:d9:23: 70:a9:af:f7:ab:26:dd:9d:13:ad:71:61:b4:e0:d8: d6:3d:9a:9b:13:ee:fc:84:05:f2:d2:1e:f9:ec:4a: 7e:5a:09:11:cb:0f:6d:90:de:c9:7e:b6:b7:ba:d8: 7b:7e:49:86:ba:f6:35:c0:6e:77:37:95:c0:58:0d: 71:e4:3f:f6:56:22:11:02:de:ca:c6:89:b8:2e:7e: 64:cc:40:fb:6b:e9:2a:70:86:a4:2f:65:79:58:12: 24:e8:1c:94:c3:18:ba:06:eb:43:c0:98:1c:a7:0b: 47:ed:f7:88:f2:a8:4d:5a:34:4f:c8:c5:4e:c8:5f: 0b:e5:22:a2:42:a4:bb:6b:90:f8:1f:a1:39:f4:f0: 12:4e:3e:cf:b2:59:17:48:4c:c6:bf:90:67:d1:50: 2e:bf:bc:46:c1:21:bf:d6:3d:e9:03:45:47:a9:d0: dc:41:0d:c4:13:0b:37:f8:95:88:13:db:c5:9f:78: 32:bd:7c:ad:8f:3d:59:d4:93:01:f8:52:b7:08:a3: 80:f1:d6:62:f6:30:f4:c9:87:35:ac:d7:55:a3:3d: ff:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:27:D7:57:21:C8:18:10:7A:A3:9E:A9:76:4C:D2:77:69:2E:A8:C2 X509v3 Authority Key Identifier: keyid:8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:3b:e9:fd:57:60:b7:63:a2:27:d8:14:8a:0d:f5:18:ec:1b: da:77:0f:b4:b9:5f:d3:49:28:0c:34:f7:d0:36:0f:4a:5d:35: 38:0e:3b:c9:e3:a0:0d:71:af:42:c6:38:09:a5:3f:23:a1:61: 9d:1a:ae:93:70:89:a4:23:6e:83:2e:7c:8b:c5:2a:5f:b4:5d: a7:9a:fa:9d:ed:f2:a6:7e:ad:9a:1e:e2:c8:58:1c:52:94:d6: b1:82:c0:41:01:c9:3e:62:b0:db:2d:02:73:49:f9:b8:6a:f5: 38:e0:37:eb:5f:17:7b:a3:cd:91:16:13:8b:4f:af:dc:20:d8: b1:0d:21:24:71:11:98:9c:29:e0:5c:5e:63:f5:27:62:53:10: 1f:70:79:8b:a9:3b:7a:cd:78:28:7b:3b:35:40:f8:82:a1:76: 67:f8:e5:3d:49:39:bb:8f:c6:41:c4:5d:bd:cb:a9:34:a4:87: f9:fb:a2:2b:2a:0c:52:5b:ac:0e:30:4c:8e:77:7f:6b:3e:f4: 41:e8:71:21:9a:ed:9b:3f:be:3d:a1:c3:fc:65:a7:50:5b:1d: 4a:f7:38:74:c5:80:91:c7:90:17:bf:73:1e:6a:dc:59:fb:95: d2:6c:10:b6:ad:5e:30:26:90:be:87:85:0b:11:3d:23:7e:43: a4:ae:66:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0N0ExMTAvBgNVBAUTKDhGNTlDOEZENUEwQjVBOTlBQjA0MDA2NDQyM0FCRjRE QjBCNEUwODYwHhcNMjYwMzI0MTUxMjQ5WhcNMjYwMzMxMTUxMjQ5WjAYMRYwFAYD VQQDEw02OWMyYTlmMi1jYzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvjObfNi+ieA6W/g1oLJ0yVKjPSlXRzu69CwXznpgcdDp4hrn5QwvasS2SNw qa/3qybdnROtcWG04NjWPZqbE+78hAXy0h757Ep+WgkRyw9tkN7Jfra3uth7fkmG uvY1wG53N5XAWA1x5D/2ViIRAt7Kxom4Ln5kzED7a+kqcIakL2V5WBIk6ByUwxi6 ButDwJgcpwtH7feI8qhNWjRPyMVOyF8L5SKiQqS7a5D4H6E59PASTj7PslkXSEzG v5Bn0VAuv7xGwSG/1j3pA0VHqdDcQQ3EEws3+JWIE9vFn3gyvXytjz1Z1JMB+FK3 CKOA8dZi9jD0yYc1rNdVoz3/8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPUn11ch yBgQeqOeqXZM0ndpLqjCMB8GA1UdIwQYMBaAFI9ZyP1aC1qZqwQAZEI6v02wtOCG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQ3QS83OTQ4RUExQzFE QTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdwbXJCQUJrUWpxX1RiQzA0 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxbklfVm9MV3BtckJBQmtRanFfVGJDMDRJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQ3QS83OTQ4RUExQzFEQTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdw bXJCQUJrUWpxX1RiQzA0SVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXDvp/Vdgt2OiJ9gUig31GOwb2ncPtLlf00koDDT30DYPSl01OA47yeOgDXGv QsY4CaU/I6FhnRquk3CJpCNugy58i8UqX7Rdp5r6ne3ypn6tmh7iyFgcUpTWsYLA QQHJPmKw2y0Cc0n5uGr1OOA3618Xe6PNkRYTi0+v3CDYsQ0hJHERmJwp4FxeY/Un YlMQH3B5i6k7es14KHs7NUD4gqF2Z/jlPUk5u4/GQcRdvcupNKSH+fuiKyoMUlus DjBMjnd/az70QehxIZrtmz++PaHD/GWnUFsdSvc4dMWAkceQF79zHmrcWfuV0mwQ tq1eMCaQvoeFCxE9I35DpK5mvA== -----END CERTIFICATE-----Generated at Thu Mar 26 07:31:01 2026 by rpki-client