$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft File: cjdHbP3kFQq5UJerug_t7UKtuas.mft (raw, json) Hash identifier: QzQexSDv1g6Xp8zMNrTz/903UaxVDGB2A1Wx7rjToVk= Subject key identifier: E1:CE:E9:E6:D6:0A:0A:08:EA:8F:EF:14:81:BC:98:30:EE:C8:3B:72 Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB Certificate issuer: /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Certificate serial: 0A96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft Manifest number: 0A7C Signing time: Tue 24 Mar 2026 19:23:06 +0000 Manifest this update: Tue 24 Mar 2026 19:23:06 +0000 Manifest next update: Tue 31 Mar 2026 19:23:06 +0000 Files and hashes: 1: cjdHbP3kFQq5UJerug_t7UKtuas.crl (hash: c8bKNJuVTNW+PQmfb7jtpg/QxMXo0JzSKruS/jZJSIo=) 2: B42A4FEE9A0611F0A22A7A5EC4F9AE02.roa (hash: /2SJ2aiP+X6fJgagbjjpGARtX+HfT5QAQaxAWdIcMwg=) 3: A6C9DA80974111F08BFA4E71C4F9AE02.roa (hash: rbdpNPf6mALUrM9CZMd+wHJqII9aB4Fnkkaau21r1uU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2710 (0xa96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Validity Not Before: Mar 24 19:23:06 2026 GMT Not After : Mar 31 19:23:06 2026 GMT Subject: CN=69c2e49a-3a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:62:8d:bb:df:78:31:3f:7b:b4:d1:74:6a:d8: 40:6a:38:18:17:4a:f5:8a:43:4b:d2:cd:1f:c5:97: 90:28:3d:d0:fd:cd:d1:7f:8d:c5:19:67:1c:bf:5d: 00:cc:47:b6:61:84:cb:4c:4c:bd:11:fe:e0:c8:19: df:a7:75:d6:02:07:a4:94:6d:e4:98:20:76:0c:7a: 24:55:73:65:d8:19:7a:aa:4a:9d:dc:aa:8a:58:98: 70:54:b0:4a:05:56:c2:cf:6b:12:99:54:79:53:ec: fe:ff:31:c4:66:d4:00:1b:47:41:2b:1d:76:44:c0: a6:2d:b5:f8:b6:8c:db:ba:8b:51:90:3d:70:38:12: f8:81:2a:59:88:01:32:30:d0:64:64:b1:75:6f:62: c0:29:14:1f:65:6b:b7:b1:5e:c4:5e:7e:d9:fb:c6: 5e:1f:01:50:1c:98:6a:c2:40:a4:ac:c6:d5:89:50: 54:cc:56:9e:f3:49:71:0a:12:cb:52:77:f5:ca:ab: c2:aa:1a:22:18:1f:cc:b9:49:41:58:aa:0c:a4:2e: 04:e5:51:90:36:63:3f:e3:d9:9b:9e:e7:11:bb:5c: 8a:ab:41:e6:bf:4b:af:f5:b2:39:27:e0:05:1a:bc: af:4b:c6:d4:60:ce:ac:0c:22:29:9c:41:24:dc:48: b9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CE:E9:E6:D6:0A:0A:08:EA:8F:EF:14:81:BC:98:30:EE:C8:3B:72 X509v3 Authority Key Identifier: keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:4d:09:ad:08:1d:80:dd:1c:b2:b2:37:77:e4:61:1b:cc:bb: 58:bf:3a:62:74:72:cc:d8:2a:4a:c6:25:24:4d:ac:65:cf:a5: bd:c4:77:32:e5:71:3c:c8:19:59:f4:aa:08:81:98:ac:0c:99: bb:64:e1:a7:f5:fb:8f:56:08:3a:bf:fb:ba:3b:b1:c0:cd:88: 15:65:3f:a7:53:a8:b2:79:0b:7f:3e:4f:0a:20:79:a2:15:be: 17:0a:59:89:04:09:57:18:f9:d6:2f:7b:94:d2:b0:15:6d:08: 35:3b:ef:55:06:6e:80:6e:3c:20:8d:a2:93:46:97:2a:40:97: b8:1e:05:29:82:e0:38:4c:f7:71:3a:f7:3a:99:96:43:58:3c: 32:55:ea:95:60:44:13:97:c3:02:2b:8b:ae:bf:98:42:37:4b: cd:0d:40:a5:73:39:04:4e:07:60:23:25:56:97:a6:9d:b7:f5: 4e:a0:f5:1a:54:b0:8d:a3:64:06:c8:54:49:ba:23:4d:22:1d: f7:ff:f4:b4:48:ab:58:83:c5:2b:04:bf:01:23:55:ca:09:28: fd:55:5d:8e:3d:b0:96:14:cf:26:f7:72:8f:ec:50:7c:97:2d: 3f:14:9c:57:0b:e0:35:b7:04:d9:ff:8b:98:58:ca:58:fb:67: 45:0d:f8:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGRTYxMTAvBgNVBAUTKDcyMzc0NzZDRkRFNDE1MEFCOTUwOTdBQkJBMEZFREVE NDJBREI5QUIwHhcNMjYwMzI0MTkyMzA2WhcNMjYwMzMxMTkyMzA2WjAYMRYwFAYD VQQDEw02OWMyZTQ5YS0zYTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WKNu994MT97tNF0athAajgYF0r1ikNL0s0fxZeQKD3Q/c3Rf43FGWccv10A zEe2YYTLTEy9Ef7gyBnfp3XWAgeklG3kmCB2DHokVXNl2Bl6qkqd3KqKWJhwVLBK BVbCz2sSmVR5U+z+/zHEZtQAG0dBKx12RMCmLbX4tozbuotRkD1wOBL4gSpZiAEy MNBkZLF1b2LAKRQfZWu3sV7EXn7Z+8ZeHwFQHJhqwkCkrMbViVBUzFae80lxChLL Unf1yqvCqhoiGB/MuUlBWKoMpC4E5VGQNmM/49mbnucRu1yKq0Hmv0uv9bI5J+AF GryvS8bUYM6sDCIpnEEk3Ei5iQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOHO6ebW CgoI6o/vFIG8mDDuyDtyMB8GA1UdIwQYMBaAFHI3R2z95BUKuVCXq7oP7e1Crbmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZFNi9CQjA5NTgyQzdE RDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZRcTVVSmVydWdfdDdVS3R1 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NqZEhiUDNrRlFxNVVKZXJ1Z190N1VLdHVhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZFNi9CQjA5NTgyQzdERDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZR cTVVSmVydWdfdDdVS3R1YXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATU0JrQgdgN0csrI3d+RhG8y7WL86YnRyzNgqSsYlJE2sZc+lvcR3MuVxPMgZ WfSqCIGYrAyZu2Thp/X7j1YIOr/7ujuxwM2IFWU/p1OosnkLfz5PCiB5ohW+FwpZ iQQJVxj51i97lNKwFW0INTvvVQZugG48II2ik0aXKkCXuB4FKYLgOEz3cTr3OpmW Q1g8MlXqlWBEE5fDAiuLrr+YQjdLzQ1ApXM5BE4HYCMlVpemnbf1TqD1GlSwjaNk BshUSbojTSId9//0tEirWIPFKwS/ASNVygko/VVdjj2wlhTPJvdyj+xQfJctPxSc VwvgNbcE2f+LmFjKWPtnRQ34Hw== -----END CERTIFICATE-----Generated at Thu Mar 26 14:58:31 2026 by rpki-client