$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft File: 1383l1I1q95fSYn78_6TjVJ8GUg.mft (raw, json) Hash identifier: kFdEVyvoq2UKsZSOvZdQdW58KsM1Q8ilNhKnhQYzJx8= Subject key identifier: CC:D2:A3:2C:ED:3D:A4:31:0A:E2:27:08:B9:06:50:7B:78:73:AD:15 Authority key identifier: D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 Certificate issuer: /CN=A91F8336/serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Certificate serial: 1254 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft Manifest number: 1238 Signing time: Tue 24 Mar 2026 17:01:19 +0000 Manifest this update: Tue 24 Mar 2026 17:01:18 +0000 Manifest next update: Tue 31 Mar 2026 17:01:18 +0000 Files and hashes: 1: 1383l1I1q95fSYn78_6TjVJ8GUg.crl (hash: jV0iI8foNDk0VDR8x7u8roFO3l24NGssjZ3aDLv4zv4=) 2: 4AE6CFF8B25211EBA977EE09C4F9AE02.roa (hash: E3B7SIPhenuhPyKu2+7i6Xocl1nhH+IBRWSToKqn9cY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4692 (0x1254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8336, serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Validity Not Before: Mar 24 17:01:18 2026 GMT Not After : Mar 31 17:01:18 2026 GMT Subject: CN=69c2c35f-a683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:42:c4:70:88:c6:fe:1a:82:84:22:3a:3d:49: 5a:3e:be:b6:56:58:d3:75:98:85:5f:2b:d6:3e:02: dd:05:cd:39:3c:84:9d:90:c3:f0:5a:a9:c6:77:11: 9e:71:eb:5b:9e:a6:4b:c6:56:c8:6a:bd:9a:92:c7: 37:a7:0e:84:29:6f:cb:e5:bf:c1:68:c2:71:89:cc: 87:ec:5f:cf:cf:53:09:57:e6:e2:2c:d0:ec:40:e1: 8e:e6:0f:d5:68:e3:c7:c9:14:21:d0:22:36:22:3e: b8:0e:3f:e2:75:05:d9:85:08:9e:8e:61:9f:ec:c7: 98:7f:c0:c1:65:96:5f:7c:e5:fc:bc:45:c9:0b:fd: 19:5e:fb:21:c4:bf:2e:a8:83:29:f8:b1:e5:c6:48: 80:7f:13:70:b2:0a:cd:ab:2e:90:87:b1:f1:e8:4a: 40:58:36:c5:15:6a:b1:d6:8e:db:bc:b5:0d:96:17: e9:50:73:62:0d:1c:d7:a4:09:73:4a:2e:bf:63:5e: 81:84:ba:7d:64:29:20:56:b8:5b:ff:0f:84:01:32: 49:67:5d:12:0d:9a:4b:9b:9c:8d:74:97:01:a3:31: a0:2c:6e:2a:e9:8a:db:88:f0:8b:26:bb:ee:df:d1: 0d:9a:59:db:0c:15:89:70:3e:31:3c:5d:2e:12:40: 58:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D2:A3:2C:ED:3D:A4:31:0A:E2:27:08:B9:06:50:7B:78:73:AD:15 X509v3 Authority Key Identifier: keyid:D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:cd:b9:98:ac:21:58:db:64:11:ab:ae:4e:b0:72:76:41:a4: 46:35:f7:ac:83:ba:87:82:61:de:89:88:9d:b3:fb:86:1a:f5: c8:e9:41:c3:ee:18:64:9f:43:10:85:9b:d2:2e:69:e9:9f:6d: b3:3c:32:54:e4:d0:63:87:e7:70:ae:1c:df:f2:55:a0:97:39: cd:57:2b:d7:d1:3b:fd:b8:d7:40:91:ea:24:aa:08:76:94:03: 9e:3c:5b:03:dd:75:46:89:de:75:90:a2:99:d6:f7:73:0b:0b: e3:e4:f1:ca:5f:38:ea:0b:ca:2b:46:d1:38:0f:ad:40:08:e3: cc:32:06:dd:1f:0e:ec:c1:50:85:6a:64:1b:0c:68:c7:ef:a1: e9:14:27:ca:39:4b:04:ae:b0:65:c8:e7:4e:a8:2c:ae:d0:3d: b6:17:c3:5e:24:72:5c:2f:03:e9:b7:de:3a:6d:1c:2a:80:60: b0:02:fd:3b:67:f0:9b:c5:fd:58:f6:a4:01:fb:8e:05:f8:37: 43:a3:7f:08:91:a3:88:78:97:b7:bf:4a:e8:0e:0f:75:92:ba: ca:6c:b2:81:cd:76:35:3b:f6:10:7a:5b:6d:6e:34:4b:3b:ad: c7:dc:ed:b6:76:ec:2b:42:f6:5e:3b:6e:7e:35:64:12:4c:a9: 02:4c:39:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICElQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzMzYxMTAvBgNVBAUTKEQ3N0YzNzk3NTIzNUFCREU1RjQ5ODlGQkYzRkU5MzhE NTI3QzE5NDgwHhcNMjYwMzI0MTcwMTE4WhcNMjYwMzMxMTcwMTE4WjAYMRYwFAYD VQQDEw02OWMyYzM1Zi1hNjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApULEcIjG/hqChCI6PUlaPr62VljTdZiFXyvWPgLdBc05PISdkMPwWqnGdxGe cetbnqZLxlbIar2aksc3pw6EKW/L5b/BaMJxicyH7F/Pz1MJV+biLNDsQOGO5g/V aOPHyRQh0CI2Ij64Dj/idQXZhQiejmGf7MeYf8DBZZZffOX8vEXJC/0ZXvshxL8u qIMp+LHlxkiAfxNwsgrNqy6Qh7Hx6EpAWDbFFWqx1o7bvLUNlhfpUHNiDRzXpAlz Si6/Y16BhLp9ZCkgVrhb/w+EATJJZ10SDZpLm5yNdJcBozGgLG4q6YrbiPCLJrvu 39ENmlnbDBWJcD4xPF0uEkBY+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMzSoyzt PaQxCuInCLkGUHt4c60VMB8GA1UdIwQYMBaAFNd/N5dSNaveX0mJ+/P+k41SfBlI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODMzNi8zN0UxNjczRUZE MUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5NWZTWW43OF82VGpWSjhH VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzODNsMUkxcTk1ZlNZbjc4XzZUalZKOEdVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODMzNi8zN0UxNjczRUZEMUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5 NWZTWW43OF82VGpWSjhHVWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf825mKwhWNtkEauuTrBydkGkRjX3rIO6h4Jh3omInbP7hhr1yOlBw+4YZJ9D EIWb0i5p6Z9tszwyVOTQY4fncK4c3/JVoJc5zVcr19E7/bjXQJHqJKoIdpQDnjxb A911RonedZCimdb3cwsL4+Txyl846gvKK0bROA+tQAjjzDIG3R8O7MFQhWpkGwxo x++h6RQnyjlLBK6wZcjnTqgsrtA9thfDXiRyXC8D6bfeOm0cKoBgsAL9O2fwm8X9 WPakAfuOBfg3Q6N/CJGjiHiXt79K6A4PdZK6ymyygc12NTv2EHpbbW40Szutx9zt tnbsK0L2XjtufjVkEkypAkw5BQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:49:26 2026 by rpki-client