$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft File: jM5ORhldFXBPtWKTLgq2Kg65iiY.mft (raw, json) Hash identifier: 5o04QMmu+D4/8A11pTe8QkjwE12byBK8IJs+Rf8ytew= Subject key identifier: 08:F9:D9:F2:EA:76:A4:EC:8D:C9:E0:52:41:0E:D8:49:7F:8C:D0:37 Authority key identifier: 8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26 Certificate issuer: /CN=A91F7334/serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26 Certificate serial: 04B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft Manifest number: 049F Signing time: Tue 24 Mar 2026 23:39:01 +0000 Manifest this update: Tue 24 Mar 2026 23:39:00 +0000 Manifest next update: Tue 31 Mar 2026 23:39:00 +0000 Files and hashes: 1: jM5ORhldFXBPtWKTLgq2Kg65iiY.crl (hash: dluYZwxD+4jJD5kPSHwRKZeoOhACePgX85s8I/ot67g=) 2: 8B8B954E6C9011ED9AAF427AC4F9AE02.roa (hash: jt8czHkqDAiIWpmhFez0BMJFRbxnxmNlnLH67Wuq05Y=) 3: 0B7C7B7C751311ECA43F7D3BC4F9AE02.roa (hash: BviysmdqRD5SHQtytVhZ+gVShXWPkwicoPT5mAKuO60=) 4: 96F24818744F11ECBFE4A57DC4F9AE02.roa (hash: niq2x+TSIaVr2M9Yq4uJinm2FfqqQeskl0ZKo8P7pbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1205 (0x4b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7334, serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26 Validity Not Before: Mar 24 23:39:00 2026 GMT Not After : Mar 31 23:39:00 2026 GMT Subject: CN=69c32095-0b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:36:19:97:78:94:c4:2b:75:41:47:d6:a7:71: 32:cf:1f:0f:c9:7d:d3:0d:bd:02:4d:38:cb:ce:2c: c3:b0:59:d2:dc:e3:fb:0f:0a:b2:96:04:4b:04:5a: 68:0e:0d:52:cb:90:bc:63:12:3c:9b:a6:98:6c:ae: 7b:b6:54:58:97:f5:7b:00:2d:3b:09:b4:f0:04:ab: d3:40:7f:d0:7a:21:22:fd:bd:b2:c2:0e:97:9d:e0: 35:d6:7e:47:f4:03:4a:14:c7:53:6b:6b:36:d0:5e: 8e:c8:ee:6d:9a:de:74:15:7c:dc:01:d4:f3:5a:9c: d3:7b:f3:77:99:0c:f5:53:c5:f9:4c:02:a2:36:b6: 6e:d5:2d:c1:67:2d:86:3a:51:05:aa:6a:8f:2e:44: c8:e0:87:c8:7f:be:07:89:87:6e:60:8c:ee:19:48: 77:66:fe:ca:73:4b:27:99:5d:1e:d1:5f:86:eb:25: ba:c7:16:10:9c:4e:6b:b7:65:77:fc:8a:84:9c:65: 7e:7e:5c:b9:4d:ce:d4:95:58:55:b0:f8:1c:05:36: c8:a3:38:1e:a1:cc:0b:94:4e:cb:8d:d1:fc:09:62: b0:82:20:45:e7:90:b9:7f:74:84:dc:31:60:20:8f: cd:f3:8c:f1:fd:9d:aa:26:c6:03:9f:24:5d:04:f9: d6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F9:D9:F2:EA:76:A4:EC:8D:C9:E0:52:41:0E:D8:49:7F:8C:D0:37 X509v3 Authority Key Identifier: keyid:8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:57:05:26:52:c2:ab:3f:00:66:b0:39:7e:53:27:76:62:6f: 6a:47:51:87:d5:bf:f9:50:43:cb:5a:07:98:a5:61:43:46:75: 55:59:2b:47:5f:45:63:d2:ac:cf:2b:fc:44:08:e6:8a:99:ec: 82:c4:1c:89:e2:52:54:6e:a3:67:c6:1e:c1:22:cb:82:50:aa: ad:f1:1d:a5:07:5f:5b:1a:7d:2d:62:59:e1:42:0d:7d:d0:cf: 51:13:73:65:63:03:4b:94:f1:ce:9a:a9:37:66:bb:53:8e:ba: 35:60:51:48:3f:3d:c9:e6:a3:8b:21:d6:7a:2e:eb:d7:d3:88: 9f:4a:cc:06:78:46:7a:cb:2f:a1:4b:1d:3b:fb:a9:4e:ce:bb: 2d:6e:23:b7:35:ed:f7:1e:4a:8f:6d:89:fa:4a:de:75:29:34: b2:5e:b6:ac:33:c6:fb:fd:eb:21:0a:54:e4:1b:30:db:29:04: 43:65:ff:a9:87:72:aa:15:d2:cd:7d:87:77:0f:9c:20:72:86: 50:5b:d3:da:1f:5e:ee:43:b8:e8:2e:55:2f:e6:b7:60:7a:ee: 05:c0:36:d4:0d:86:2c:6d:1f:69:22:49:7d:65:8a:a5:7b:49: 3c:4a:ef:1e:9f:25:d2:de:8e:87:9f:8d:af:80:44:a9:0c:db: d6:8e:78:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMzQxMTAvBgNVBAUTKDhDQ0U0RTQ2MTk1RDE1NzA0RkI1NjI5MzJFMEFCNjJB MEVCOThBMjYwHhcNMjYwMzI0MjMzOTAwWhcNMjYwMzMxMjMzOTAwWjAYMRYwFAYD VQQDEw02OWMzMjA5NS0wYjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjYZl3iUxCt1QUfWp3Eyzx8PyX3TDb0CTTjLzizDsFnS3OP7DwqylgRLBFpo Dg1Sy5C8YxI8m6aYbK57tlRYl/V7AC07CbTwBKvTQH/QeiEi/b2ywg6XneA11n5H 9ANKFMdTa2s20F6OyO5tmt50FXzcAdTzWpzTe/N3mQz1U8X5TAKiNrZu1S3BZy2G OlEFqmqPLkTI4IfIf74HiYduYIzuGUh3Zv7Kc0snmV0e0V+G6yW6xxYQnE5rt2V3 /IqEnGV+fly5Tc7UlVhVsPgcBTbIozgeocwLlE7LjdH8CWKwgiBF55C5f3SE3DFg II/N84zx/Z2qJsYDnyRdBPnWlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAj52fLq dqTsjcngUkEO2El/jNA3MB8GA1UdIwQYMBaAFIzOTkYZXRVwT7Viky4KtioOuYom MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMzNC83QTQwNDlEQTc0 NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZYQlB0V0tUTGdxMktnNjVp aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pNNU9SaGxkRlhCUHRXS1RMZ3EyS2c2NWlpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMzNC83QTQwNDlEQTc0NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZY QlB0V0tUTGdxMktnNjVpaVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApFcFJlLCqz8AZrA5flMndmJvakdRh9W/+VBDy1oHmKVhQ0Z1VVkrR19FY9Ks zyv8RAjmipnsgsQcieJSVG6jZ8YewSLLglCqrfEdpQdfWxp9LWJZ4UINfdDPURNz ZWMDS5TxzpqpN2a7U466NWBRSD89yeajiyHWei7r19OIn0rMBnhGessvoUsdO/up Ts67LW4jtzXt9x5Kj22J+kredSk0sl62rDPG+/3rIQpU5Bsw2ykEQ2X/qYdyqhXS zX2Hdw+cIHKGUFvT2h9e7kO46C5VL+a3YHruBcA21A2GLG0faSJJfWWKpXtJPErv Hp8l0t6Oh5+Nr4BEqQzb1o54BQ== -----END CERTIFICATE-----Generated at Thu Mar 26 14:27:07 2026 by rpki-client