$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft File: poNjJUbxoQeEvBpP9voLvmzsLU4.mft (raw, json) Hash identifier: CyMeDhr1/+2ihRx6HQpspGV8O3HIeBvpuBr5qtRkMw8= Subject key identifier: D4:0F:DC:0E:45:5F:A5:14:85:32:F7:E6:5B:25:42:6D:11:AF:E2:11 Authority key identifier: A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E Certificate issuer: /CN=A91EF547/serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E Certificate serial: 044E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft Manifest number: 0440 Signing time: Tue 24 Mar 2026 23:55:25 +0000 Manifest this update: Tue 24 Mar 2026 23:55:24 +0000 Manifest next update: Tue 31 Mar 2026 23:55:24 +0000 Files and hashes: 1: poNjJUbxoQeEvBpP9voLvmzsLU4.crl (hash: sjd95twDEMjAWYlEznmDTv6Qd7Dz+XmMfTs44S3dzsk=) 2: 6246B1F2609A11EDAAF70C26C4F9AE02.roa (hash: BOEExBy+QaPnsKDJ+gbhFQuFa7d7NxoUneMKG9j7QtI=) 3: 636B090C609A11EDAAF70C26C4F9AE02.roa (hash: G+lt/1Mwh8N7G8KWZS1xUI3dDM2zaitfuprZkeWdjHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:55:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1102 (0x44e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF547, serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E Validity Not Before: Mar 24 23:55:24 2026 GMT Not After : Mar 31 23:55:24 2026 GMT Subject: CN=69c3246d-7c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4a:e7:dc:73:cc:ae:41:0d:4d:80:b1:16:58: 1c:98:eb:75:a9:a8:fe:da:6a:ca:cf:7c:18:8e:5c: ee:4f:54:7a:a3:ad:f2:c6:bd:f1:58:d5:34:93:77: bb:a9:59:12:a9:c8:cf:44:d1:9b:4f:44:e4:3f:75: a8:80:e3:83:b7:9b:e3:ae:1c:93:06:1b:5e:7d:0d: 32:bc:29:96:67:cd:2c:52:af:ab:0e:22:03:ac:f2: 39:50:19:dd:a8:10:a0:e0:9e:de:62:79:12:e3:67: e8:a8:d2:8e:5d:db:53:a7:46:aa:e5:84:fa:22:f3: fb:63:08:ec:4f:16:4f:5b:f2:f2:c4:d9:5d:3a:c0: fa:eb:d2:f7:38:19:44:36:a5:52:89:d7:4c:f8:56: 02:89:12:c9:33:6b:c2:9f:c7:5f:c9:1c:ae:0a:0b: 1e:5a:eb:e2:76:5c:c9:31:27:b9:ec:f0:80:35:ae: 44:b5:00:d3:a1:4e:95:a4:df:92:d1:49:f9:a9:ed: a9:d9:c7:25:f9:61:a1:cd:7c:83:79:1f:60:44:54: fa:67:d7:8c:f2:0f:a1:bf:48:41:29:9a:88:00:4e: 6c:d0:33:ba:a7:9d:0f:47:84:27:00:d8:1f:e1:f2: 03:03:01:33:90:3b:78:57:c3:9c:65:94:a1:31:f0: 22:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0F:DC:0E:45:5F:A5:14:85:32:F7:E6:5B:25:42:6D:11:AF:E2:11 X509v3 Authority Key Identifier: keyid:A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:41:ad:e8:93:07:f5:0d:c8:02:66:22:da:90:52:84:3a:10: fb:be:df:ac:8f:d3:2c:33:f7:67:26:e1:e1:91:5f:93:ba:f5: f2:c6:9d:ff:05:6e:e0:df:23:95:5c:40:0d:5a:10:e0:e8:7d: 83:99:26:46:bd:b3:69:9f:e4:aa:0d:fa:df:ed:e0:00:02:2a: 49:55:d6:6b:ae:3a:ac:53:da:96:d4:3b:74:b7:ae:38:06:1c: 03:e5:d6:a9:51:b9:21:9d:24:86:76:15:65:fd:9d:45:7a:95: 70:c8:44:91:17:67:38:1b:2e:37:10:98:a7:78:70:51:e3:9e: 99:84:71:a8:d8:6a:0c:ef:dc:6e:a6:57:c9:65:32:42:9f:86: 08:d2:2a:b7:fb:3b:33:5a:25:f5:db:e5:32:fa:82:08:f2:59: af:ae:6f:e1:45:e9:b1:18:8d:2b:e1:d9:20:86:84:53:48:fe: 55:ff:15:1c:f3:a3:2b:ad:1c:2d:38:03:09:3f:fd:2b:ab:b0: b8:cd:46:62:45:50:bf:2c:b1:41:4f:0e:95:32:55:06:ef:b9: d8:f6:c3:03:82:12:8b:b4:e3:fb:80:c3:44:9f:c2:d1:e1:81: 74:4c:c3:fd:02:88:76:a3:54:9d:65:2a:26:5c:b5:5c:be:97: fb:50:a3:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NDcxMTAvBgNVBAUTKEE2ODM2MzI1NDZGMUExMDc4NEJDMUE0RkY2RkEwQkJF NkNFQzJENEUwHhcNMjYwMzI0MjM1NTI0WhcNMjYwMzMxMjM1NTI0WjAYMRYwFAYD VQQDEw02OWMzMjQ2ZC03YzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2krn3HPMrkENTYCxFlgcmOt1qaj+2mrKz3wYjlzuT1R6o63yxr3xWNU0k3e7 qVkSqcjPRNGbT0TkP3WogOODt5vjrhyTBhtefQ0yvCmWZ80sUq+rDiIDrPI5UBnd qBCg4J7eYnkS42foqNKOXdtTp0aq5YT6IvP7YwjsTxZPW/LyxNldOsD669L3OBlE NqVSiddM+FYCiRLJM2vCn8dfyRyuCgseWuvidlzJMSe57PCANa5EtQDToU6VpN+S 0Un5qe2p2ccl+WGhzXyDeR9gRFT6Z9eM8g+hv0hBKZqIAE5s0DO6p50PR4QnANgf 4fIDAwEzkDt4V8OcZZShMfAiWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNQP3A5F X6UUhTL35lslQm0Rr+IRMB8GA1UdIwQYMBaAFKaDYyVG8aEHhLwaT/b6C75s7C1O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU0Ny82MjZFMTA5NDk4 QzcxMUVDODZBMDA5NDlDNEY5QUUwMi9wb05qSlVieG9RZUV2QnBQOXZvTHZtenNM VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvTmpKVWJ4b1FlRXZCcFA5dm9Mdm16c0xVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU0Ny82MjZFMTA5NDk4QzcxMUVDODZBMDA5NDlDNEY5QUUwMi9wb05qSlVieG9R ZUV2QnBQOXZvTHZtenNMVTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYEGt6JMH9Q3IAmYi2pBShDoQ+77frI/TLDP3Zybh4ZFfk7r18sad/wVu4N8j lVxADVoQ4Oh9g5kmRr2zaZ/kqg363+3gAAIqSVXWa646rFPaltQ7dLeuOAYcA+XW qVG5IZ0khnYVZf2dRXqVcMhEkRdnOBsuNxCYp3hwUeOemYRxqNhqDO/cbqZXyWUy Qp+GCNIqt/s7M1ol9dvlMvqCCPJZr65v4UXpsRiNK+HZIIaEU0j+Vf8VHPOjK60c LTgDCT/9K6uwuM1GYkVQvyyxQU8OlTJVBu+52PbDA4ISi7Tj+4DDRJ/C0eGBdEzD /QKIdqNUnWUqJly1XL6X+1CjnQ== -----END CERTIFICATE-----Generated at Thu Mar 26 07:50:32 2026 by rpki-client