$ rpki-client -vvf rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft File: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft (raw, json) Hash identifier: ZS7pCMcbN06Nz1hnnf5hHp/0g37CAGEHW4hW74Ggl80= Subject key identifier: B1:69:D0:9F:1E:D8:FA:1C:2B:CC:C5:E7:16:CC:23:E9:4B:4A:2F:D5 Authority key identifier: D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 Certificate issuer: /CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft Manifest number: 0143 Signing time: Fri 27 Mar 2026 04:47:59 +0000 Manifest this update: Fri 27 Mar 2026 04:47:59 +0000 Manifest next update: Fri 03 Apr 2026 04:47:59 +0000 Files and hashes: 1: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl (hash: js7rruzwPx5wsMdb1lBbKYyW5lJNpV2b7L99GVRvGNs=) 2: 08FDDCFC407111EFB0944C40C4F9AE02.roa (hash: Q2XsaXqT+eyCPXvxi8zIHiMKLLmA95KKZabuPQOI/bQ=) 3: 084D41C6407111EFB0944C40C4F9AE02.roa (hash: NxzkE3G6k7uKaBQgTyXi96jp5VcOIi/OIHejJcnWXxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 04:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F495C, serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Validity Not Before: Mar 27 04:47:59 2026 GMT Not After : Apr 3 04:47:59 2026 GMT Subject: CN=69c60bff-0dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f2:3e:8d:d6:3d:f0:a2:77:9f:6b:70:06:be: cd:8c:d6:98:fc:14:ed:bc:e1:71:95:90:48:cf:c5: d5:e6:da:59:c6:77:03:b7:d7:0e:11:5e:91:78:77: 8a:bf:a4:d9:08:4e:70:d0:94:f3:31:64:5e:ff:a3: fb:f4:81:13:88:98:7c:c6:3a:d4:ea:05:10:b1:59: 24:50:94:b9:02:cc:a0:2a:70:5a:07:08:02:18:50: 57:c9:e3:f1:b1:f1:f4:b1:4f:2a:3f:24:17:4b:55: ee:88:5f:b4:f5:1b:e2:8f:d5:48:fc:d1:88:71:f5: 08:f7:43:f6:db:66:73:03:72:28:15:b5:be:b3:2f: 00:fb:5c:f3:0b:54:83:2a:31:d4:0e:01:35:40:53: 45:0c:5d:d5:57:83:29:af:65:49:c5:74:d0:a7:0a: 4d:49:08:06:b9:b5:9f:1e:e3:be:df:55:06:3f:96: c0:71:87:28:60:45:97:10:ff:b9:07:93:34:9a:11: cf:cb:22:a0:a4:8c:d5:a9:c2:5b:04:d7:5d:07:b7: 9e:00:8d:ab:c8:ab:cd:67:ec:37:6b:4a:7e:46:a4: 82:c2:eb:ab:16:b4:55:f6:57:44:70:25:3a:bc:18: 49:4e:e8:fd:90:64:92:ea:70:01:af:6e:61:4b:ae: 10:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:69:D0:9F:1E:D8:FA:1C:2B:CC:C5:E7:16:CC:23:E9:4B:4A:2F:D5 X509v3 Authority Key Identifier: keyid:D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:7f:8d:c6:3c:e6:21:aa:b8:4e:20:7f:70:ca:b8:64:df:a3: 9c:5f:37:16:dc:b2:54:0f:ec:06:68:16:f4:8f:8e:6b:4a:3a: 7d:c8:45:3e:41:33:b7:1b:5c:db:21:ef:7e:45:be:2f:25:39: f2:24:a0:30:6c:6b:98:95:90:3a:a5:aa:8b:8d:e7:1e:df:87: 84:03:b6:a7:a6:8e:19:ae:be:dd:3c:cb:52:14:6f:cf:1d:d0: b6:ce:d1:80:41:3d:b7:b4:10:71:3d:66:f1:6d:ac:ce:4b:76: 79:97:04:a0:05:6b:a3:dc:ec:80:31:63:1a:55:97:3a:3a:8a: 22:de:8d:fb:51:2e:52:bd:b3:12:6a:a4:e4:a3:fc:fa:b3:1d: 3c:dd:43:3d:38:de:c3:25:4c:ea:6a:b3:98:04:07:27:b2:43: 7a:bf:25:54:b2:95:73:84:ea:5e:e6:7c:8a:f6:eb:eb:c0:e5: 87:00:ed:4a:1f:41:51:46:83:d0:fe:11:71:53:6e:81:16:93: b6:d7:9a:b9:0e:a6:52:43:dc:65:ff:bd:30:8b:a7:9a:ae:30: f4:d4:42:6c:85:5c:fe:f7:36:18:5e:18:30:04:74:bb:32:db: fa:a5:bb:70:07:23:bd:51:4e:c4:06:64:3b:6f:db:44:50:c5: 55:d9:fe:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NUMxMTAvBgNVBAUTKEQ2QzgwQzVEMzhBQTNGMTBEMUVCMEUxMzlCOUU0OTRF QkY2QzY0MjEwHhcNMjYwMzI3MDQ0NzU5WhcNMjYwNDAzMDQ0NzU5WjAYMRYwFAYD VQQDEw02OWM2MGJmZi0wZGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvI+jdY98KJ3n2twBr7NjNaY/BTtvOFxlZBIz8XV5tpZxncDt9cOEV6ReHeK v6TZCE5w0JTzMWRe/6P79IETiJh8xjrU6gUQsVkkUJS5AsygKnBaBwgCGFBXyePx sfH0sU8qPyQXS1XuiF+09Rvij9VI/NGIcfUI90P222ZzA3IoFbW+sy8A+1zzC1SD KjHUDgE1QFNFDF3VV4Mpr2VJxXTQpwpNSQgGubWfHuO+31UGP5bAcYcoYEWXEP+5 B5M0mhHPyyKgpIzVqcJbBNddB7eeAI2ryKvNZ+w3a0p+RqSCwuurFrRV9ldEcCU6 vBhJTuj9kGSS6nABr25hS64QGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLFp0J8e 2PocK8zF5xbMI+lLSi/VMB8GA1UdIwQYMBaAFNbIDF04qj8Q0esOE5ueSU6/bGQh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Qy81QkM2M0VGNDQw NjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4RFI2dzRUbTU1SlRyOXNa Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFzZ01YVGlxUHhEUjZ3NFRtNTVKVHI5c1pDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Qy81QkM2M0VGNDQwNjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4 RFI2dzRUbTU1SlRyOXNaQ0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv3+NxjzmIaq4TiB/cMq4ZN+jnF83FtyyVA/sBmgW9I+Oa0o6fchFPkEztxtc 2yHvfkW+LyU58iSgMGxrmJWQOqWqi43nHt+HhAO2p6aOGa6+3TzLUhRvzx3Qts7R gEE9t7QQcT1m8W2szkt2eZcEoAVro9zsgDFjGlWXOjqKIt6N+1EuUr2zEmqk5KP8 +rMdPN1DPTjewyVM6mqzmAQHJ7JDer8lVLKVc4TqXuZ8ivbr68DlhwDtSh9BUUaD 0P4RcVNugRaTtteauQ6mUkPcZf+9MIunmq4w9NRCbIVc/vc2GF4YMAR0uzLb+qW7 cAcjvVFOxAZkO2/bRFDFVdn+VA== -----END CERTIFICATE-----Generated at Fri Mar 27 08:31:19 2026 by rpki-client