$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft File: _KxvqDHo9aKEE0yVqNAg_LyOyfI.mft (raw, json) Hash identifier: hO6T4AkAKSa+IwAwE+eLcrLCUmn2U7wS7pqh3PvFsus= Subject key identifier: 2D:7A:D1:47:65:13:CF:AC:A1:80:61:83:36:7C:0D:97:EB:75:39:07 Authority key identifier: FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2 Certificate issuer: /CN=A91EB820/serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft Manifest number: 7F Signing time: Wed 25 Mar 2026 06:56:31 +0000 Manifest this update: Wed 25 Mar 2026 06:56:31 +0000 Manifest next update: Wed 01 Apr 2026 06:56:31 +0000 Files and hashes: 1: _KxvqDHo9aKEE0yVqNAg_LyOyfI.crl (hash: o8OXoRzbAwIXBAo6xkmnV1rZpZDONHbuxA0fFAr4ga4=) 2: D918B46C684211F0BE03503CC4F9AE02.roa (hash: aq1rkL3lbBFNGSwriSfEgnoepxf49LO+cuY4rWY4wMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:56:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB820, serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2 Validity Not Before: Mar 25 06:56:31 2026 GMT Not After : Apr 1 06:56:31 2026 GMT Subject: CN=69c3871f-0926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:84:36:fa:78:ca:80:2f:16:2f:9b:0e:4c:bd: e8:4b:a4:28:2f:39:9b:10:f9:8d:8c:bd:bf:f7:2e: bb:07:41:4f:65:d1:a4:d3:e4:e3:8b:61:5f:ee:bf: 5a:71:37:c2:22:53:14:6f:03:99:82:58:b9:f1:74: 91:0a:9d:5d:d7:49:45:53:a9:e9:36:30:6c:ed:b1: c9:b0:81:04:6d:51:69:ae:e9:9b:60:e5:4f:45:28: c9:0e:95:4c:ce:76:ea:c0:2b:da:8f:bb:c0:6f:88: 25:98:3f:e7:24:85:c9:4f:1c:0b:db:67:9c:45:5c: e6:0a:5b:81:5b:25:c6:72:ef:c3:78:a4:79:76:b8: e2:4c:50:57:db:be:df:9b:16:db:57:8d:af:70:ca: 59:d0:ba:b2:b0:2c:15:b9:c8:02:27:60:81:24:77: 19:ab:c0:f4:8e:ab:62:ac:e1:ee:29:08:f5:6d:da: 42:d7:cb:3e:73:40:3c:29:b4:4d:00:52:4d:a4:dd: 05:70:ff:80:ca:2d:4b:f3:c3:15:cc:02:5a:72:25: 7f:8c:29:0a:44:fa:98:09:2e:10:ad:08:ec:b3:63: 7d:8b:d7:09:6a:21:4a:72:1f:4c:33:51:8c:18:f5: f7:9c:f3:14:7d:8f:6f:23:c4:82:bd:c4:ea:67:b5: 76:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7A:D1:47:65:13:CF:AC:A1:80:61:83:36:7C:0D:97:EB:75:39:07 X509v3 Authority Key Identifier: keyid:FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:5d:cd:ae:3d:8c:03:52:95:d3:da:72:1a:b2:9e:11:9e:78: 12:fa:04:7c:e2:1e:c3:36:09:ae:03:06:c1:2c:37:b3:72:fa: 3f:6e:2f:72:cb:fe:77:1d:c7:6b:94:e1:30:31:f3:4e:53:eb: aa:d5:19:09:78:ed:6a:ed:50:b5:ff:35:a8:8d:6c:7f:37:58: f8:c6:cc:a0:b8:63:f8:ad:2c:5b:89:25:f2:a4:51:a8:59:b8: 7e:98:d5:72:d4:0a:21:b7:7d:27:81:49:16:8e:73:05:99:e9: bf:89:f0:2f:24:eb:d2:00:f7:3c:99:32:5c:46:2e:88:f2:be: b5:fb:6d:03:09:24:05:42:f9:68:25:e8:07:08:27:ed:ae:cd: ee:96:ce:fd:8d:fe:10:a3:28:82:33:e7:86:86:45:a7:e9:75: 10:53:a8:63:0e:21:57:02:1b:7f:93:2d:e8:77:be:05:8f:a1: b4:c1:4b:02:3c:10:50:d0:27:aa:29:15:db:8a:62:83:17:ab: bf:4c:97:3a:2f:d3:d1:84:3f:c5:45:08:2c:a3:7c:35:db:16: d6:21:fd:dc:c2:40:71:f6:0a:b3:66:3f:3c:f7:47:cc:78:45: fe:03:6c:08:cb:24:ae:6c:40:ed:f4:d1:3f:a0:72:52:8f:19: e0:f4:84:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI4MjAxMTAvBgNVBAUTKEZDQUM2RkE4MzFFOEY1QTI4NDEzNEM5NUE4RDAyMEZD QkM4RUM5RjIwHhcNMjYwMzI1MDY1NjMxWhcNMjYwNDAxMDY1NjMxWjAYMRYwFAYD VQQDEw02OWMzODcxZi0wOTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYQ2+njKgC8WL5sOTL3oS6QoLzmbEPmNjL2/9y67B0FPZdGk0+Tji2Ff7r9a cTfCIlMUbwOZgli58XSRCp1d10lFU6npNjBs7bHJsIEEbVFprumbYOVPRSjJDpVM znbqwCvaj7vAb4glmD/nJIXJTxwL22ecRVzmCluBWyXGcu/DeKR5drjiTFBX277f mxbbV42vcMpZ0LqysCwVucgCJ2CBJHcZq8D0jqtirOHuKQj1bdpC18s+c0A8KbRN AFJNpN0FcP+Ayi1L88MVzAJaciV/jCkKRPqYCS4QrQjss2N9i9cJaiFKch9MM1GM GPX3nPMUfY9vI8SCvcTqZ7V2VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC160Udl E8+soYBhgzZ8DZfrdTkHMB8GA1UdIwQYMBaAFPysb6gx6PWihBNMlajQIPy8jsny MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjgyMC85MEE4QjA4QTY4 NDAxMUYwQTk0MDQ3NkJDNEY5QUUwMi9fS3h2cURIbzlhS0VFMHlWcU5BZ19MeU95 ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19LeHZxREhvOWFLRUUweVZxTkFnX0x5T3lmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjgyMC85MEE4QjA4QTY4NDAxMUYwQTk0MDQ3NkJDNEY5QUUwMi9fS3h2cURIbzlh S0VFMHlWcU5BZ19MeU95ZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQF3Nrj2MA1KV09pyGrKeEZ54EvoEfOIewzYJrgMGwSw3s3L6P24vcsv+dx3H a5ThMDHzTlPrqtUZCXjtau1Qtf81qI1sfzdY+MbMoLhj+K0sW4kl8qRRqFm4fpjV ctQKIbd9J4FJFo5zBZnpv4nwLyTr0gD3PJkyXEYuiPK+tfttAwkkBUL5aCXoBwgn 7a7N7pbO/Y3+EKMogjPnhoZFp+l1EFOoYw4hVwIbf5Mt6He+BY+htMFLAjwQUNAn qikV24pigxerv0yXOi/T0YQ/xUUILKN8NdsW1iH93MJAcfYKs2Y/PPdHzHhF/gNs CMskrmxA7fTRP6ByUo8Z4PSE6w== -----END CERTIFICATE-----Generated at Thu Mar 26 12:57:44 2026 by rpki-client