$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft File: G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft (raw, json) Hash identifier: snAlMSET0B+M0VqMp3eZZUQO6JWHkAtO//NPYc5vHLI= Subject key identifier: 01:0A:AD:F6:60:3E:7C:DF:B1:F3:2B:EA:E7:19:67:43:E5:AE:81:8E Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 Certificate issuer: /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Certificate serial: 1203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft Manifest number: 11D3 Signing time: Tue 24 Mar 2026 17:03:53 +0000 Manifest this update: Tue 24 Mar 2026 17:03:52 +0000 Manifest next update: Tue 31 Mar 2026 17:03:52 +0000 Files and hashes: 1: G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl (hash: O+0d+/BOndDh3G4i4Reolshul+Rh8iVzZEKt2n3e8VI=) 2: FB675E140F0311E997412A4EC4F9AE02.roa (hash: WZDgNlhW0pwPMejNqxRBtwXZLqcsEeCsrEz1azRWYbQ=) 3: 294F19380E5111E988F3C34BC4F9AE02.roa (hash: 2Hp6M6BntVmhWo1ReGblit19qNRWTDvqJP9qHcur32s=) 4: FAC7FE320F0311E997412A4EC4F9AE02.roa (hash: ltuiI8TZuMv/G/t/Ztpq7bP81fIn8XtBMrkmf8/fbBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4611 (0x1203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Validity Not Before: Mar 24 17:03:52 2026 GMT Not After : Mar 31 17:03:52 2026 GMT Subject: CN=69c2c3f9-9ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:46:85:13:e6:67:df:c2:6a:96:cf:3a:4f:24: 02:4c:94:1c:26:71:74:80:94:8b:dd:5f:ea:c3:ed: b2:0d:1d:05:76:c8:ca:be:69:78:56:b3:6a:d2:09: a8:dd:7d:e1:9b:b1:69:59:17:a0:d6:77:b1:15:0a: 22:4f:cf:86:c0:af:fb:ac:d3:04:0f:a6:be:e6:37: 08:1b:91:9d:8d:5c:43:63:be:f9:b6:3d:dc:29:1c: 2a:17:ea:e4:59:f1:f2:3c:87:cc:1d:94:3b:2b:54: 62:66:1a:8e:65:e5:29:6d:32:53:a5:af:56:dd:fa: e9:10:d3:3e:b7:91:e0:3a:bd:ef:2c:0f:b8:c8:97: 8c:12:bf:1f:64:82:30:4c:f7:1b:e2:a5:e3:d1:74: 18:80:a5:3c:58:31:62:65:4b:3c:00:ff:34:ee:e9: 1a:44:f2:53:da:79:ed:66:71:26:d0:cf:8c:48:13: d3:a6:a6:7a:cc:33:ba:12:b1:32:5f:87:c9:18:d8: 5d:58:06:d9:0d:a9:a5:87:74:2f:d1:e7:66:28:ab: 9a:b6:a7:2b:af:ff:ce:7b:ce:57:5a:89:a2:5d:2e: 60:80:99:79:e3:bf:5c:0e:cc:ae:b4:4a:62:45:02: 28:a6:20:08:55:df:44:92:ce:20:81:8f:40:86:da: 59:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0A:AD:F6:60:3E:7C:DF:B1:F3:2B:EA:E7:19:67:43:E5:AE:81:8E X509v3 Authority Key Identifier: keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:62:bb:20:ab:59:ff:7b:50:95:3c:81:c2:68:11:b8:46:56: 96:10:f4:08:cb:6d:7c:25:0d:c1:65:d5:92:d0:28:3c:3c:a3: 63:79:d8:91:10:1a:31:d2:5c:d4:13:08:f9:e8:60:c3:51:61: 6a:3e:2d:20:54:30:91:48:03:a1:21:c3:8c:1b:e1:e0:78:ee: 4b:ac:0d:3e:17:06:b3:5b:0b:0b:34:03:45:34:9c:ae:8e:a0: 69:8a:d0:b2:3e:87:6d:b9:46:a7:b1:60:32:03:a8:49:30:49: 6f:5a:59:58:9c:0d:dc:f2:86:8d:fe:4b:d3:25:5f:23:ed:ca: 58:e7:90:33:0f:cd:3f:19:e8:5a:2f:9b:eb:bb:c5:39:7c:29: 62:08:55:16:7b:27:81:67:37:ce:17:11:0c:26:96:3d:73:3b: c8:32:df:51:31:ae:b6:7b:43:cc:4e:52:63:fe:cc:fb:5f:b2: 14:35:d0:94:81:c3:64:9b:ed:a4:64:cc:10:f4:e2:ef:c0:0d: a1:20:14:b5:a0:cb:d2:6e:d3:a4:45:bb:d7:2d:fc:28:cd:45: 6e:2b:72:06:32:ad:8d:38:c8:38:54:fe:74:da:53:4c:6b:a8: 33:0d:74:f4:6b:97:47:3b:b1:17:1c:9e:45:65:e3:57:10:43: c5:8e:95:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKDFCRjVBOEQ5NENFMDZDRTMwMUZDMzVEODY5RjcwRDc0 MEQ3MDk3NTIwHhcNMjYwMzI0MTcwMzUyWhcNMjYwMzMxMTcwMzUyWjAYMRYwFAYD VQQDEw02OWMyYzNmOS05Y2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EaFE+Zn38Jqls86TyQCTJQcJnF0gJSL3V/qw+2yDR0FdsjKvml4VrNq0gmo 3X3hm7FpWReg1nexFQoiT8+GwK/7rNMED6a+5jcIG5GdjVxDY775tj3cKRwqF+rk WfHyPIfMHZQ7K1RiZhqOZeUpbTJTpa9W3frpENM+t5HgOr3vLA+4yJeMEr8fZIIw TPcb4qXj0XQYgKU8WDFiZUs8AP807ukaRPJT2nntZnEm0M+MSBPTpqZ6zDO6ErEy X4fJGNhdWAbZDamlh3Qv0edmKKuatqcrr//Oe85XWomiXS5ggJl5479cDsyutEpi RQIopiAIVd9Eks4ggY9AhtpZ1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAEKrfZg PnzfsfMr6ucZZ0PlroGOMB8GA1UdIwQYMBaAFBv1qNlM4GzjAfw12Gn3DXQNcJdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9DOURCODlFRTBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JPTUJfRFhZYWZjTmRBMXds MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dfV28yVXpnYk9NQl9EWFlhZmNOZEExd2wxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9DOURCODlFRTBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JP TUJfRFhZYWZjTmRBMXdsMUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmWK7IKtZ/3tQlTyBwmgRuEZWlhD0CMttfCUNwWXVktAoPDyjY3nYkRAaMdJc 1BMI+ehgw1Fhaj4tIFQwkUgDoSHDjBvh4HjuS6wNPhcGs1sLCzQDRTScro6gaYrQ sj6HbblGp7FgMgOoSTBJb1pZWJwN3PKGjf5L0yVfI+3KWOeQMw/NPxnoWi+b67vF OXwpYghVFnsngWc3zhcRDCaWPXM7yDLfUTGutntDzE5SY/7M+1+yFDXQlIHDZJvt pGTMEPTi78ANoSAUtaDL0m7TpEW71y38KM1FbityBjKtjTjIOFT+dNpTTGuoMw10 9GuXRzuxFxyeRWXjVxBDxY6Vag== -----END CERTIFICATE-----Generated at Thu Mar 26 02:38:14 2026 by rpki-client