$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft File: Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft (raw, json) Hash identifier: oK56ipCs70YGSNgswebt9NFZA+H92pda8qeUeuqX3vI= Subject key identifier: 19:49:97:8C:72:B6:CE:5A:AC:A6:7F:47:28:42:93:4D:82:1D:CE:55 Authority key identifier: 42:6F:4A:D5:85:D7:A5:4D:D3:62:E3:F7:B3:C8:F3:AF:6A:A6:3C:2E Certificate issuer: /CN=A91F9BB3/serialNumber=426F4AD585D7A54DD362E3F7B3C8F3AF6AA63C2E Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft Manifest number: 34 Signing time: Wed 25 Mar 2026 07:50:36 +0000 Manifest this update: Wed 25 Mar 2026 07:50:36 +0000 Manifest next update: Wed 01 Apr 2026 07:50:36 +0000 Files and hashes: 1: Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl (hash: gFJMnoal3u+WNatBQRDgjtMEna+jgPy68nzq4LzbBDw=) 2: DB9D3A1AE24411F0BBC3E4F5716F56BC.roa (hash: FGeU1tZaj6B6d9kcXemk68XFxPuUp5ULKxFkHVuu17c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9BB3, serialNumber=426F4AD585D7A54DD362E3F7B3C8F3AF6AA63C2E Validity Not Before: Mar 25 07:50:36 2026 GMT Not After : Apr 1 07:50:36 2026 GMT Subject: CN=69c393cc-85e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3e:c1:69:02:ff:5f:64:a3:43:42:f9:ff:aa: 90:9d:15:8e:54:d9:8f:fb:3a:63:d4:bf:1d:0a:97: e3:07:a6:0b:4a:2b:0a:b3:11:33:e8:3e:58:d1:75: 8c:19:5b:f2:67:d9:81:07:48:51:7d:b3:55:dd:f2: 27:41:b5:ad:2e:3c:21:e7:f9:4d:9f:65:c2:e9:34: 96:93:ab:94:d3:ea:a1:0d:b7:64:b6:c3:33:79:bf: fa:37:91:a4:71:ad:e9:3a:7e:e1:f7:24:5e:d3:7c: 21:b6:58:1c:c7:7e:36:13:c2:54:ce:2d:ce:b4:52: 72:33:69:35:e9:67:70:1e:6f:2a:8d:ca:72:83:ec: da:16:1e:de:d3:dc:9d:68:90:cf:41:24:07:b0:42: 04:82:b0:9f:0c:32:e0:d5:2a:6e:f8:fe:c4:93:da: b5:55:7b:78:b2:97:3f:4a:e9:8c:8e:95:30:8f:a8: 88:16:e7:16:ce:07:03:1c:2f:06:5c:d2:91:bc:cc: a4:2c:c2:6e:d4:ca:fd:6d:6f:cb:24:72:78:2c:62: cc:e9:29:bd:66:51:11:c5:ad:bd:a7:01:30:82:a7: d0:f2:9f:6d:7a:0e:05:ab:c1:a1:32:98:24:88:d0: 60:de:63:64:6f:f0:44:d2:20:7e:eb:58:32:d9:39: 1c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:49:97:8C:72:B6:CE:5A:AC:A6:7F:47:28:42:93:4D:82:1D:CE:55 X509v3 Authority Key Identifier: keyid:42:6F:4A:D5:85:D7:A5:4D:D3:62:E3:F7:B3:C8:F3:AF:6A:A6:3C:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:05:a8:ab:44:75:41:54:f1:62:6d:ea:08:b9:c7:27:e1:cd: b7:d9:2b:a9:77:44:9b:2d:b1:b6:d4:40:ab:30:1e:23:a3:a2: 1e:73:79:9c:6c:a8:13:eb:62:76:94:49:ac:42:37:47:92:4f: 98:f3:32:9a:61:ee:a0:4a:64:de:f2:49:3d:24:c3:63:89:1a: c0:2a:d2:59:32:d2:8c:ad:05:ce:e4:a1:15:a6:ed:48:db:11: 04:21:40:4d:7c:be:91:4d:d3:e5:98:35:c8:7e:2c:37:38:05: 72:ad:d6:e3:77:34:b6:ef:1e:e9:52:2e:72:77:60:5c:42:a7: 26:d7:cf:47:5f:8d:74:13:c1:c0:22:99:db:6c:16:80:dc:f5: a5:23:ab:81:b5:a0:77:f3:f2:24:d0:ec:cc:60:c5:0e:f2:4f: 0c:69:2d:79:02:dd:a2:05:43:cc:f5:5c:0a:2f:68:db:f8:0a: da:ae:62:6b:a7:3f:53:72:5b:30:6c:26:7a:b8:3b:4d:13:e5: 73:eb:0e:9e:36:ac:90:a7:3a:66:32:72:0c:92:24:67:0b:b9: 95:7a:11:f7:fe:1d:6a:af:97:09:e5:13:6d:55:f1:1b:8c:72: 79:70:82:10:41:bf:eb:b1:21:b7:b5:e3:93:7a:2e:30:7c:f8: 67:64:58:04 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OUJCMzExMC8GA1UEBRMoNDI2RjRBRDU4NUQ3QTU0REQzNjJFM0Y3QjNDOEYzQUY2 QUE2M0MyRTAeFw0yNjAzMjUwNzUwMzZaFw0yNjA0MDEwNzUwMzZaMBgxFjAUBgNV BAMTDTY5YzM5M2NjLTg1ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6PsFpAv9fZKNDQvn/qpCdFY5U2Y/7OmPUvx0Kl+MHpgtKKwqzETPoPljRdYwZ W/Jn2YEHSFF9s1Xd8idBta0uPCHn+U2fZcLpNJaTq5TT6qENt2S2wzN5v/o3kaRx rek6fuH3JF7TfCG2WBzHfjYTwlTOLc60UnIzaTXpZ3AebyqNynKD7NoWHt7T3J1o kM9BJAewQgSCsJ8MMuDVKm74/sST2rVVe3iylz9K6YyOlTCPqIgW5xbOBwMcLwZc 0pG8zKQswm7Uyv1tb8skcngsYszpKb1mURHFrb2nATCCp9Dyn216DgWrwaEymCSI 0GDeY2Rv8ETSIH7rWDLZORxnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGUmXjHK2 zlqspn9HKEKTTYIdzlUwHwYDVR0jBBgwFoAUQm9K1YXXpU3TYuP3s8jzr2qmPC4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5QkIzLzgxOThFMDE0RTI0 NDExRjBCOTUzRDg5NjcxNkY1NkJDL1FtOUsxWVhYcFUzVFl1UDNzOGp6cjJxbVBD NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUW05SzFZWFhwVTNUWXVQM3M4anpyMnFtUEM0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 QkIzLzgxOThFMDE0RTI0NDExRjBCOTUzRDg5NjcxNkY1NkJDL1FtOUsxWVhYcFUz VFl1UDNzOGp6cjJxbVBDNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC0BairRHVBVPFibeoIuccn4c232Supd0SbLbG21ECrMB4jo6Iec3mcbKgT62J2 lEmsQjdHkk+Y8zKaYe6gSmTe8kk9JMNjiRrAKtJZMtKMrQXO5KEVpu1I2xEEIUBN fL6RTdPlmDXIfiw3OAVyrdbjdzS27x7pUi5yd2BcQqcm189HX410E8HAIpnbbBaA 3PWlI6uBtaB38/Ik0OzMYMUO8k8MaS15At2iBUPM9VwKL2jb+ArarmJrpz9Tclsw bCZ6uDtNE+Vz6w6eNqyQpzpmMnIMkiRnC7mVehH3/h1qr5cJ5RNtVfEbjHJ5cIIQ Qb/rsSG3teOTei4wfPhnZFgE -----END CERTIFICATE-----Generated at Fri Mar 27 04:10:08 2026 by rpki-client