$ rpki-client -vvf rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft File: MJk4cOkSzRkdgKzvMDV6VP80-C4.mft (raw, json) Hash identifier: W+LOes9MkrS+OUL67RijpEs3tCHc7N4+8CTSHpH6FlE= Subject key identifier: 49:0A:80:F9:B3:54:91:B1:CF:99:48:BB:D5:36:AC:92:8A:5A:3C:63 Authority key identifier: 30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E Certificate issuer: /CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Certificate serial: 12B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft Manifest number: 12A7 Signing time: Thu 26 Mar 2026 17:01:50 +0000 Manifest this update: Thu 26 Mar 2026 17:01:49 +0000 Manifest next update: Thu 02 Apr 2026 17:01:49 +0000 Files and hashes: 1: MJk4cOkSzRkdgKzvMDV6VP80-C4.crl (hash: 7g91V4W78yW6Q6aG8eTfVwHY/CSqYh6oe0D26jFq8sE=) 2: DA7E3CA6E19811E8822B8E5CC4F9AE02.roa (hash: M8bvGDd0ZBYR9yE/jwui6k77lrbOCgZ6YWG7elpbG8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4785 (0x12b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E84A9, serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Validity Not Before: Mar 26 17:01:49 2026 GMT Not After : Apr 2 17:01:49 2026 GMT Subject: CN=69c5667d-423b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a8:ee:7d:fe:75:10:fa:56:91:62:c9:64:ec: 9a:86:40:c3:33:c3:ce:11:1b:63:de:41:a6:5b:d1: f6:8c:5b:1a:af:1d:e0:dc:f1:f3:6a:47:e6:c7:33: 1a:f4:98:59:1b:11:22:40:74:0a:ce:55:69:ff:e8: 38:88:29:b3:ec:ee:7a:0c:99:70:f6:83:17:de:cc: c2:79:ed:3c:16:36:05:cc:b1:06:b5:c7:ac:0e:9c: 4c:0e:5e:ca:00:d7:6a:a9:3d:77:c3:b8:f9:4d:a7: 07:c3:81:a7:da:2c:5a:df:88:82:3f:7b:12:a1:a2: 88:e4:c0:61:50:d7:86:ab:bd:5d:3f:49:97:28:20: 0e:1d:65:0e:76:d3:90:8e:ba:41:47:61:83:c9:32: fa:e2:38:18:96:fc:c7:1e:17:17:bb:93:df:b5:92: b8:15:db:75:16:26:ff:96:4d:2f:7c:cf:25:58:66: c3:a9:b3:77:1c:f4:47:bf:f4:75:7a:54:06:61:20: 99:59:9b:3d:2b:94:10:d7:09:ca:d3:54:e4:96:05: 1f:52:84:9b:d1:35:e6:47:80:5e:50:35:ce:8f:d5: 82:c6:85:f1:6b:9f:ef:04:26:79:a7:8a:b5:da:a9: c1:b4:02:66:61:37:99:7c:4a:19:1e:04:aa:69:00: ca:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0A:80:F9:B3:54:91:B1:CF:99:48:BB:D5:36:AC:92:8A:5A:3C:63 X509v3 Authority Key Identifier: keyid:30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:77:3f:b9:ac:1d:4c:3f:b1:28:2f:67:25:07:07:1f:cb:33: 6c:10:7e:6d:2c:47:2e:61:35:66:79:fd:1b:7d:66:51:42:f1: bb:23:c0:36:e8:91:81:e3:c6:8c:50:1c:8b:5f:35:fb:fb:8e: c8:f2:5d:dd:da:af:79:91:f5:7e:79:07:0b:54:20:d2:69:47: 88:48:26:49:1c:5b:07:dd:6e:7d:a5:9c:89:13:37:e2:ea:e5: cd:23:2b:9c:1e:4d:3f:57:b4:a3:ec:1f:ff:32:dd:23:46:44: fc:43:69:66:f2:87:88:97:8d:fe:83:84:24:e0:38:78:91:ec: 3e:ea:70:08:72:72:a0:5e:5b:91:75:1e:45:7f:3b:4f:ea:f8: 72:62:cb:32:55:9a:a6:c3:09:a9:5e:a6:a8:2a:b1:20:f8:a5: 20:38:1e:c2:eb:00:de:27:a0:4d:c6:00:98:65:35:06:c0:94: e0:f8:8b:8d:e7:7a:79:ae:2f:01:1a:fe:d4:fd:2f:da:2c:54: ad:d3:4b:d3:50:87:83:22:16:e6:bb:ba:9c:ed:69:f1:be:00: aa:64:58:4a:d4:6a:98:9c:f3:c7:cb:fe:63:eb:54:47:0d:d7: b2:f7:9c:ef:11:a4:47:9a:99:78:fd:79:98:d9:fe:c9:10:8b: 57:3c:fc:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICErEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg0QTkxMTAvBgNVBAUTKDMwOTkzODcwRTkxMkNEMTkxRDgwQUNFRjMwMzU3QTU0 RkYzNEY4MkUwHhcNMjYwMzI2MTcwMTQ5WhcNMjYwNDAyMTcwMTQ5WjAYMRYwFAYD VQQDEw02OWM1NjY3ZC00MjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKjuff51EPpWkWLJZOyahkDDM8POERtj3kGmW9H2jFsarx3g3PHzakfmxzMa 9JhZGxEiQHQKzlVp/+g4iCmz7O56DJlw9oMX3szCee08FjYFzLEGtcesDpxMDl7K ANdqqT13w7j5TacHw4Gn2ixa34iCP3sSoaKI5MBhUNeGq71dP0mXKCAOHWUOdtOQ jrpBR2GDyTL64jgYlvzHHhcXu5PftZK4Fdt1Fib/lk0vfM8lWGbDqbN3HPRHv/R1 elQGYSCZWZs9K5QQ1wnK01TklgUfUoSb0TXmR4BeUDXOj9WCxoXxa5/vBCZ5p4q1 2qnBtAJmYTeZfEoZHgSqaQDKEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEkKgPmz VJGxz5lIu9U2rJKKWjxjMB8GA1UdIwQYMBaAFDCZOHDpEs0ZHYCs7zA1elT/NPgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODRBOS82QTkwQTlDMEUx OTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pSa2RnS3p2TURWNlZQODAt QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KazRjT2tTelJrZGdLenZNRFY2VlA4MC1DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODRBOS82QTkwQTlDMEUxOTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pS a2RnS3p2TURWNlZQODAtQzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ3c/uawdTD+xKC9nJQcHH8szbBB+bSxHLmE1Znn9G31mUULxuyPANuiRgePG jFAci181+/uOyPJd3dqveZH1fnkHC1Qg0mlHiEgmSRxbB91ufaWciRM34urlzSMr nB5NP1e0o+wf/zLdI0ZE/ENpZvKHiJeN/oOEJOA4eJHsPupwCHJyoF5bkXUeRX87 T+r4cmLLMlWapsMJqV6mqCqxIPilIDgewusA3iegTcYAmGU1BsCU4PiLjed6ea4v ARr+1P0v2ixUrdNL01CHgyIW5ru6nO1p8b4AqmRYStRqmJzzx8v+Y+tURw3Xsvec 7xGkR5qZeP15mNn+yRCLVzz8aA== -----END CERTIFICATE-----Generated at Thu Mar 26 22:33:59 2026 by rpki-client