$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft File: g86FOnpm6rnh8jNGcR09yX1XWXg.mft (raw, json) Hash identifier: OQZUOKPF9bMlW1Hu6+AopqsdIJ3YbgF6GXiOPzVdgQA= Subject key identifier: 01:28:F8:22:3F:9A:08:5D:A3:20:25:6E:87:C8:FC:3E:C5:59:8E:2F Authority key identifier: 83:CE:85:3A:7A:66:EA:B9:E1:F2:33:46:71:1D:3D:C9:7D:57:59:78 Certificate issuer: /CN=A91E9BC4/serialNumber=83CE853A7A66EAB9E1F23346711D3DC97D575978 Certificate serial: 0ED2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft Manifest number: 0EC7 Signing time: Tue 24 Mar 2026 17:32:27 +0000 Manifest this update: Tue 24 Mar 2026 17:32:26 +0000 Manifest next update: Tue 31 Mar 2026 17:32:26 +0000 Files and hashes: 1: g86FOnpm6rnh8jNGcR09yX1XWXg.crl (hash: s8IC/DmYYDO+p6xB5Ca+G2m5pMhKERPEzuLVhtGfyEA=) 2: 3B495FFCA46211E9B730310FC4F9AE02.roa (hash: 4pVvE+I9wNinJDczPi8MpCDR2ep+npYGZpMqxp50Meo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.crl rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3794 (0xed2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9BC4, serialNumber=83CE853A7A66EAB9E1F23346711D3DC97D575978 Validity Not Before: Mar 24 17:32:26 2026 GMT Not After : Mar 31 17:32:26 2026 GMT Subject: CN=69c2caab-0fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d1:a6:6e:eb:e7:6e:12:fc:12:27:25:51:4a: 99:12:5b:df:64:69:86:e2:e1:81:ed:4c:e1:09:54: 0f:f6:63:28:64:88:16:76:d1:87:9a:a1:29:a8:17: a5:43:e3:0e:15:c2:68:cb:84:92:1a:3e:45:16:db: 2c:f6:68:34:e1:f8:c8:2e:70:a1:1f:60:e6:b8:88: f0:9a:d1:fd:0b:91:ba:d8:c9:3a:32:ec:0b:37:a5: 0e:5a:41:85:d3:b2:78:ce:d6:31:0c:ca:16:f5:fe: 08:86:e3:2e:d9:34:62:f8:96:e5:8c:30:3d:e7:53: bf:d5:df:7b:e2:c9:2e:0b:7b:51:f5:39:1f:4e:c2: 30:c1:83:4d:cc:f8:e8:a6:6a:c2:9f:1e:3c:98:3a: 61:63:b3:59:7c:3c:38:eb:cf:12:12:42:cf:ee:42: 3d:2c:32:2f:2a:f4:b6:76:5b:f8:f7:96:bd:2c:af: 06:21:fb:76:4c:56:22:11:93:ee:f9:da:dd:67:35: 92:89:7d:9b:ed:02:65:02:58:4d:f2:0c:e8:83:dc: de:19:ed:fc:d8:35:13:4a:53:a0:80:1c:00:27:3b: 90:47:d1:a5:6b:83:8b:09:ef:87:e6:60:50:69:de: 67:23:04:d4:30:06:0c:ff:d4:ee:b9:14:3b:61:17: c7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:28:F8:22:3F:9A:08:5D:A3:20:25:6E:87:C8:FC:3E:C5:59:8E:2F X509v3 Authority Key Identifier: keyid:83:CE:85:3A:7A:66:EA:B9:E1:F2:33:46:71:1D:3D:C9:7D:57:59:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:53:c4:9c:21:50:03:5e:1a:93:5a:61:a5:7e:7e:04:d0:1b: 1f:6e:43:0d:83:71:0d:f2:92:8a:b9:19:2d:8c:b6:92:f5:c7: 20:cc:3c:fc:d5:d4:0a:29:55:3e:e8:df:9d:04:1d:7f:4b:5b: 20:7d:06:08:2f:c7:22:2e:bf:59:6e:1e:bc:0a:80:e9:9e:07: a9:91:62:54:3f:fa:a9:36:cd:35:14:22:6b:c2:60:5c:c2:20: 5f:12:4a:e9:1f:f3:0f:5e:c9:65:03:61:c6:0a:85:18:b4:d0: 54:2b:1e:2a:25:79:5c:25:b5:55:ed:65:2d:2d:90:02:ca:a3: 5d:d3:f9:b1:2a:d6:58:e6:1e:01:46:48:d1:8f:e1:9c:27:ff: c4:52:7d:18:e5:c4:d1:31:80:1d:ad:5e:6b:b3:30:25:50:4e: cd:63:45:05:8c:14:8e:27:02:b8:34:70:c7:ec:a6:96:71:41: 1f:0d:61:75:5b:0e:00:80:7a:6d:73:f1:3c:81:ae:2b:1d:e5: bc:6a:f3:83:ca:01:6a:4e:c2:9d:c6:2b:68:75:ff:11:19:a9: c9:de:04:11:15:59:86:e7:fd:8f:dc:a1:43:b0:74:97:2f:d0: 4f:05:16:03:b8:e6:a4:c5:db:bd:a4:ee:99:53:65:5e:05:0d: 04:ff:81:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlCQzQxMTAvBgNVBAUTKDgzQ0U4NTNBN0E2NkVBQjlFMUYyMzM0NjcxMUQzREM5 N0Q1NzU5NzgwHhcNMjYwMzI0MTczMjI2WhcNMjYwMzMxMTczMjI2WjAYMRYwFAYD VQQDEw02OWMyY2FhYi0wZmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj9GmbuvnbhL8EiclUUqZElvfZGmG4uGB7UzhCVQP9mMoZIgWdtGHmqEpqBel Q+MOFcJoy4SSGj5FFtss9mg04fjILnChH2DmuIjwmtH9C5G62Mk6MuwLN6UOWkGF 07J4ztYxDMoW9f4IhuMu2TRi+JbljDA951O/1d974skuC3tR9TkfTsIwwYNNzPjo pmrCnx48mDphY7NZfDw4688SEkLP7kI9LDIvKvS2dlv495a9LK8GIft2TFYiEZPu +drdZzWSiX2b7QJlAlhN8gzog9zeGe382DUTSlOggBwAJzuQR9Gla4OLCe+H5mBQ ad5nIwTUMAYM/9TuuRQ7YRfHNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAEo+CI/ mghdoyAlbofI/D7FWY4vMB8GA1UdIwQYMBaAFIPOhTp6Zuq54fIzRnEdPcl9V1l4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUJDNC85MkU4MjFGMEE0 NjAxMUU5ODEwQTVDMEJDNEY5QUUwMi9nODZGT25wbTZybmg4ak5HY1IwOXlYMVhX WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c4NkZPbnBtNnJuaDhqTkdjUjA5eVgxWFdYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUJDNC85MkU4MjFGMEE0NjAxMUU5ODEwQTVDMEJDNEY5QUUwMi9nODZGT25wbTZy bmg4ak5HY1IwOXlYMVhXWGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFlPEnCFQA14ak1phpX5+BNAbH25DDYNxDfKSirkZLYy2kvXHIMw8/NXUCilV PujfnQQdf0tbIH0GCC/HIi6/WW4evAqA6Z4HqZFiVD/6qTbNNRQia8JgXMIgXxJK 6R/zD17JZQNhxgqFGLTQVCseKiV5XCW1Ve1lLS2QAsqjXdP5sSrWWOYeAUZI0Y/h nCf/xFJ9GOXE0TGAHa1ea7MwJVBOzWNFBYwUjicCuDRwx+ymlnFBHw1hdVsOAIB6 bXPxPIGuKx3lvGrzg8oBak7CncYraHX/ERmpyd4EERVZhuf9j9yhQ7B0ly/QTwUW A7jmpMXbvaTumVNlXgUNBP+BcQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:35:50 2026 by rpki-client