$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft File: J39oYmhAcrYqFW3fdd13JcOPUdA.mft (raw, json) Hash identifier: gZuuPj4DoTwVXe41FS1cUwO4qv+AJ6qQpT0WP4gO1lY= Subject key identifier: 7F:12:E0:60:F6:90:0B:7A:FB:5D:E3:B1:ED:5B:81:2A:87:24:E4:E1 Authority key identifier: 27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0 Certificate issuer: /CN=A91A0BEC/serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0 Certificate serial: 0B01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft Manifest number: 0AF0 Signing time: Mon 30 Mar 2026 19:22:15 +0000 Manifest this update: Mon 30 Mar 2026 19:22:14 +0000 Manifest next update: Mon 06 Apr 2026 19:22:14 +0000 Files and hashes: 1: J39oYmhAcrYqFW3fdd13JcOPUdA.crl (hash: mArML9W1jiKjiF44z13RqjidNqFTMCgOjO4R4noCgNs=) 2: F0EC7AEAE48C11EF8BA4602AC4F9AE02.roa (hash: CCWU/slr79ct4FNV5i0TIXfHecnrZ2GwArH1P9tumgo=) 3: 8AAEC8AEE48D11EF98A3562BC4F9AE02.roa (hash: Ela4JYI8D8rs4ZlHfvA7O7Ltq8JCZsgjs+g9KLkdTMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2817 (0xb01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0BEC, serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0 Validity Not Before: Mar 30 19:22:14 2026 GMT Not After : Apr 6 19:22:14 2026 GMT Subject: CN=69cacd66-0249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:20:54:42:a1:47:97:b7:dd:f6:80:09:8b:0a: 1a:fd:a6:58:ce:df:57:71:52:b3:06:fa:6e:fd:52: 21:66:79:ab:dc:a1:0b:76:c7:21:8d:44:5c:03:0f: de:5a:f0:f0:5a:4f:d4:57:8b:6c:09:5e:d0:24:9f: 4b:f5:16:e5:1b:20:f7:61:e9:66:c0:d3:85:2c:07: 40:9f:33:5b:59:5e:f4:34:c5:12:4f:e2:e1:04:4d: 49:d0:73:50:58:76:b5:d7:33:d6:ba:53:2f:24:b3: 5c:7f:15:f1:ba:aa:a5:e5:2b:36:8e:9b:6c:a8:eb: 3f:a9:4c:13:c4:86:f7:fd:85:da:29:0c:2d:95:51: 1f:97:70:90:a8:6a:98:c0:77:cd:69:83:62:31:33: 14:8c:6d:43:9a:48:d8:bd:82:43:7f:50:8a:b3:61: a8:4e:c0:f9:13:21:e8:c7:2a:49:0a:b4:df:4e:54: a3:20:30:5b:8a:ec:c4:86:ae:69:77:1d:f9:4d:3f: 72:ec:f3:61:56:1b:17:1f:fd:f6:4c:0e:23:4b:89: f3:fa:35:f0:17:2d:f9:a4:b6:52:b7:3f:86:ba:4d: b9:05:8b:a4:66:61:e6:69:73:6e:f7:9c:f3:d3:6c: 59:88:cf:66:6d:4b:71:a6:28:e8:7d:36:44:98:e7: 46:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:12:E0:60:F6:90:0B:7A:FB:5D:E3:B1:ED:5B:81:2A:87:24:E4:E1 X509v3 Authority Key Identifier: keyid:27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:33:df:4a:b9:be:31:58:76:63:45:15:ff:22:36:f5:1b:c0: 29:91:44:10:e4:95:ee:a8:15:e6:22:c2:73:79:c2:f1:5a:bd: 60:5d:59:24:bf:de:4e:91:4b:0f:2d:9d:e8:4b:ed:65:d4:68: 45:3a:71:ca:e1:71:6d:09:26:8c:aa:07:62:b3:d0:66:9d:e3: a0:6c:58:5b:95:f1:e3:13:f5:4c:a1:87:1c:19:16:d7:dd:ac: 27:9e:c9:9b:35:05:79:82:af:de:be:bc:f5:14:60:c7:30:e4: 88:45:c0:68:eb:26:ba:41:82:62:5a:dc:73:38:b6:a6:eb:1d: 3c:85:ef:85:ac:22:08:77:30:51:5a:cb:fc:74:3c:f0:ae:69: 83:16:73:09:4d:3c:0f:93:4e:66:61:48:38:e0:f7:ef:a0:9f: 27:03:2b:f5:19:c2:d6:e8:7e:8e:16:7a:0e:b4:a6:34:22:a5: 18:16:66:ac:31:e6:91:ee:60:47:ba:a1:59:74:f5:d2:a2:ca: 22:b6:d5:56:8d:3a:00:2d:50:49:94:b1:a3:05:67:fb:c7:11: 19:52:3c:33:8c:f0:c2:8f:0d:aa:40:9f:0b:36:07:1b:02:b8: 52:dc:6f:1b:a6:44:b1:71:49:03:ac:25:2a:ce:f6:cf:d8:1c: 7a:09:49:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBCRUMxMTAvBgNVBAUTKDI3N0Y2ODYyNjg0MDcyQjYyQTE1NkRERjc1REQ3NzI1 QzM4RjUxRDAwHhcNMjYwMzMwMTkyMjE0WhcNMjYwNDA2MTkyMjE0WjAYMRYwFAYD VQQDEw02OWNhY2Q2Ni0wMjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSBUQqFHl7fd9oAJiwoa/aZYzt9XcVKzBvpu/VIhZnmr3KELdschjURcAw/e WvDwWk/UV4tsCV7QJJ9L9RblGyD3YelmwNOFLAdAnzNbWV70NMUST+LhBE1J0HNQ WHa11zPWulMvJLNcfxXxuqql5Ss2jptsqOs/qUwTxIb3/YXaKQwtlVEfl3CQqGqY wHfNaYNiMTMUjG1DmkjYvYJDf1CKs2GoTsD5EyHoxypJCrTfTlSjIDBbiuzEhq5p dx35TT9y7PNhVhsXH/32TA4jS4nz+jXwFy35pLZStz+Guk25BYukZmHmaXNu95zz 02xZiM9mbUtxpijofTZEmOdG6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH8S4GD2 kAt6+13jse1bgSqHJOThMB8GA1UdIwQYMBaAFCd/aGJoQHK2KhVt33XddyXDj1HQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEJFQy83QjdGMjhFMjY3 N0UxMUVBOEJEODI2MkRDNEY5QUUwMi9KMzlvWW1oQWNyWXFGVzNmZGQxM0pjT1BV ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozOW9ZbWhBY3JZcUZXM2ZkZDEzSmNPUFVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEJFQy83QjdGMjhFMjY3N0UxMUVBOEJEODI2MkRDNEY5QUUwMi9KMzlvWW1oQWNy WXFGVzNmZGQxM0pjT1BVZEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEjPfSrm+MVh2Y0UV/yI29RvAKZFEEOSV7qgV5iLCc3nC8Vq9YF1ZJL/eTpFL Dy2d6EvtZdRoRTpxyuFxbQkmjKoHYrPQZp3joGxYW5Xx4xP1TKGHHBkW192sJ57J mzUFeYKv3r689RRgxzDkiEXAaOsmukGCYlrcczi2pusdPIXvhawiCHcwUVrL/HQ8 8K5pgxZzCU08D5NOZmFIOOD376CfJwMr9RnC1uh+jhZ6DrSmNCKlGBZmrDHmke5g R7qhWXT10qLKIrbVVo06AC1QSZSxowVn+8cRGVI8M4zwwo8NqkCfCzYHGwK4Utxv G6ZEsXFJA6wlKs72z9gceglJSA== -----END CERTIFICATE-----Generated at Mon Mar 30 22:53:49 2026 by rpki-client