$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft File: JTgA7RbtD_M39wQNDj3xFBwWFhw.mft (raw, json) Hash identifier: Cvb5nPOxTicMCw2W9M/NyeHj0NO6Wnb5jwoMqE+GXEo= Subject key identifier: 09:C6:FF:0F:41:FF:7F:1A:41:98:42:3D:82:1F:2A:70:81:5E:84:EB Authority key identifier: 25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C Certificate issuer: /CN=A91FB8C9/serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C Certificate serial: 02A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft Manifest number: 028D Signing time: Wed 25 Mar 2026 01:17:26 +0000 Manifest this update: Wed 25 Mar 2026 01:17:25 +0000 Manifest next update: Wed 01 Apr 2026 01:17:25 +0000 Files and hashes: 1: JTgA7RbtD_M39wQNDj3xFBwWFhw.crl (hash: /RdgQmXIN8lqGsWz35GlxkGSQxfLyhgoWSFg5k9ZTPY=) 2: 7C562342FB6111F0999DAF114B6F56BC.roa (hash: 4I/aBZekpVxiHK08zsqmF9hWHqatnQF4vOf7EgjVuzw=) 3: ED685B8CDFA511EF8CC2890BC4F9AE02.roa (hash: mKIcN9YFRQiDKnYwlenKjFkKtn7bW7/hgN2WOBRtlaY=) 4: 2D215B32584111EDBE50107CC4F9AE02.roa (hash: Pa8/tXZDBBcugTIYS0qc4xZU9zj2bowpPp2mEtUG0X8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB8C9, serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C Validity Not Before: Mar 25 01:17:25 2026 GMT Not After : Apr 1 01:17:25 2026 GMT Subject: CN=69c337a6-7889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b0:ae:b2:6a:37:4d:84:44:94:84:2c:02:54: 68:e5:aa:0e:84:23:24:aa:d0:8f:94:e2:d2:62:cf: 01:6d:01:39:e1:d7:43:92:c5:6e:f6:22:55:81:4a: 6b:a8:37:cb:3d:ef:ff:59:31:aa:3a:9f:b0:b1:fc: 12:eb:10:66:26:c2:ba:56:c2:4d:18:94:f7:53:34: a7:fe:c1:9a:0e:1d:51:5d:1f:e2:c5:b4:37:8b:46: e2:c9:81:5f:d4:86:9d:01:98:b6:2e:ea:5f:6f:e4: d1:43:2b:8f:dc:b6:65:50:f7:e1:61:a4:d0:e2:f7: bc:2b:88:36:13:3b:ff:ac:05:f1:dd:b4:68:f9:f4: b4:1a:3b:e6:5c:7b:ef:e3:2a:16:6b:ec:34:d3:3d: 5a:ac:f7:a4:79:33:0c:18:5a:3f:23:e3:4e:a8:6f: 70:6b:6a:e2:11:48:fe:7a:01:19:2c:4c:86:80:01: 7b:37:8e:e8:58:9a:e9:63:9f:e3:ef:d3:5e:83:a1: 83:ce:bd:25:c9:c0:ef:4d:f1:3f:f8:af:92:fd:fc: c0:40:74:b8:4b:f9:cf:78:f8:4f:2e:e9:df:10:6b: 69:65:c5:01:34:69:86:94:d8:b5:08:e5:0a:a9:bc: 59:a4:a5:c1:3a:74:0a:dd:ec:89:14:05:30:ce:ec: 95:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C6:FF:0F:41:FF:7F:1A:41:98:42:3D:82:1F:2A:70:81:5E:84:EB X509v3 Authority Key Identifier: keyid:25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:12:75:b2:33:2a:37:76:f0:4f:48:b2:9b:43:b2:c0:76:be: e6:1d:ed:ca:a9:79:99:3e:9e:a6:50:4d:b1:dc:31:05:94:29: 8d:1a:c6:90:9b:ec:e2:2b:75:6a:11:f9:07:a8:3b:87:41:64: 8d:67:d3:28:d8:b0:0d:22:f1:31:38:0e:0c:29:f2:38:07:cf: 51:54:4d:38:14:c3:03:38:39:ec:4f:01:73:ed:a9:fd:6a:8b: 7d:4a:23:7f:e0:10:62:0c:02:8e:d8:8a:86:3d:ae:06:94:3b: 45:7b:b1:ff:ce:61:c1:d2:60:30:57:71:b9:0e:cd:8a:ca:e0: 5b:9c:e3:b2:80:0d:23:cb:0b:35:aa:44:76:d4:f5:20:c1:bb: e8:72:ae:5f:77:0b:cc:1f:bd:58:ac:70:5b:e2:44:18:f4:ca: a2:b0:2f:df:d3:77:ba:cd:2c:1d:a9:3a:45:6b:42:4f:4d:e9: 60:bb:0e:2a:13:d4:f5:ef:89:b7:dc:aa:b8:7b:62:15:50:e0: cc:42:b5:87:3a:ee:81:ac:b6:61:b5:e1:6f:a3:5f:00:a6:43: b0:32:ce:c0:7e:cf:4f:20:3d:d2:b1:c0:6c:de:ae:2e:75:53: da:31:24:60:cc:0e:26:58:2d:85:7a:0f:c3:90:56:e7:6e:82: cb:55:f9:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4QzkxMTAvBgNVBAUTKDI1MzgwMEVEMTZFRDBGRjMzN0Y3MDQwRDBFM0RGMTE0 MUMxNjE2MUMwHhcNMjYwMzI1MDExNzI1WhcNMjYwNDAxMDExNzI1WjAYMRYwFAYD VQQDEw02OWMzMzdhNi03ODg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAobCusmo3TYRElIQsAlRo5aoOhCMkqtCPlOLSYs8BbQE54ddDksVu9iJVgUpr qDfLPe//WTGqOp+wsfwS6xBmJsK6VsJNGJT3UzSn/sGaDh1RXR/ixbQ3i0biyYFf 1IadAZi2Lupfb+TRQyuP3LZlUPfhYaTQ4ve8K4g2Ezv/rAXx3bRo+fS0GjvmXHvv 4yoWa+w00z1arPekeTMMGFo/I+NOqG9wa2riEUj+egEZLEyGgAF7N47oWJrpY5/j 79Neg6GDzr0lycDvTfE/+K+S/fzAQHS4S/nPePhPLunfEGtpZcUBNGmGlNi1COUK qbxZpKXBOnQK3eyJFAUwzuyVdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAnG/w9B /38aQZhCPYIfKnCBXoTrMB8GA1UdIwQYMBaAFCU4AO0W7Q/zN/cEDQ498RQcFhYc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjhDOS8yMTk3QjA5MjU4 M0YxMUVEODE4MUU1N0JDNEY5QUUwMi9KVGdBN1JidERfTTM5d1FORGozeEZCd1dG aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pUZ0E3UmJ0RF9NMzl3UU5EajN4RkJ3V0Zody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjhDOS8yMTk3QjA5MjU4M0YxMUVEODE4MUU1N0JDNEY5QUUwMi9KVGdBN1JidERf TTM5d1FORGozeEZCd1dGaHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhRJ1sjMqN3bwT0iym0OywHa+5h3tyql5mT6eplBNsdwxBZQpjRrGkJvs4it1 ahH5B6g7h0FkjWfTKNiwDSLxMTgODCnyOAfPUVRNOBTDAzg57E8Bc+2p/WqLfUoj f+AQYgwCjtiKhj2uBpQ7RXux/85hwdJgMFdxuQ7NisrgW5zjsoANI8sLNapEdtT1 IMG76HKuX3cLzB+9WKxwW+JEGPTKorAv39N3us0sHak6RWtCT03pYLsOKhPU9e+J t9yquHtiFVDgzEK1hzrugay2YbXhb6NfAKZDsDLOwH7PTyA90rHAbN6uLnVT2jEk YMwOJlgthXoPw5BW526Cy1X5WA== -----END CERTIFICATE-----Generated at Thu Mar 26 16:09:40 2026 by rpki-client