$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft File: M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft (raw, json) Hash identifier: 1J92t4sTerWayrXB5TN8mDCzwqHJPWkeir5K2YQh+2s= Subject key identifier: 5C:2F:BA:3B:E9:B0:C1:BD:F2:EA:AE:D7:F4:1E:25:89:88:3F:F9:C7 Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98 Certificate issuer: /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98 Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft Manifest number: 0170 Signing time: Thu 19 Mar 2026 03:52:26 +0000 Manifest this update: Thu 19 Mar 2026 03:52:25 +0000 Manifest next update: Thu 26 Mar 2026 03:52:25 +0000 Files and hashes: 1: M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl (hash: BBtCkYIrQvppsHmXPpOGGGepQOMua8Nb0rIfOzB16V8=) 2: 07258E36F3C611EE807A6F3EC4F9AE02.roa (hash: 9ddaJnb2vB/K5havaxcmrS9aclGiXpdtn6ykn2Lek+o=) 3: 069E7950F3C611EE807A6F3EC4F9AE02.roa (hash: 3lew0eWd1qOFTsxVuUp/2jEVgW6mEPimb05KX288f8k=) 4: 1698D0A4F3C511EEA51BD730C4F9AE02.roa (hash: eAadD5v+l/HQoMCel3Oba4UPEsg3F4rOQLerPh1yclk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 03:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98 Validity Not Before: Mar 19 03:52:25 2026 GMT Not After : Mar 26 03:52:25 2026 GMT Subject: CN=69bb72f9-8dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:be:0c:59:bb:53:42:7f:5c:75:40:bd:4f:91: f2:1f:1a:8e:e7:88:cc:63:e2:1b:bd:8e:5d:af:8b: 41:41:50:46:11:3f:be:53:fb:73:1a:7f:b8:d7:0b: a3:20:d2:d5:3b:80:72:aa:f4:24:96:06:a1:36:34: a0:8c:63:c4:c5:f7:ee:a6:e3:30:5f:00:77:8d:7a: 9f:f5:44:17:82:08:8c:ed:79:37:0f:f3:66:71:6f: 5c:89:4a:b6:ad:09:47:e5:70:bb:ba:bf:c8:19:db: 7f:a4:4f:68:b9:e0:3d:16:51:e8:11:e0:be:63:95: 9a:f9:df:05:91:41:7d:35:8b:64:6d:33:62:06:92: e0:90:84:8d:b9:e8:33:72:32:37:47:5c:2a:fd:3f: 96:01:9b:cc:34:61:c4:d5:df:4b:a0:5b:84:16:a8: b6:fe:e4:fe:ce:7c:b6:56:25:da:84:d6:dc:9b:be: 70:88:ff:13:d3:f8:71:79:03:3c:d1:c5:a2:8e:0a: 3b:70:21:56:13:db:ed:f3:1b:f0:e7:7a:84:3d:62: c1:2b:56:14:d2:14:8e:fa:5c:f3:a8:ed:f4:dd:90: a5:4c:5d:fa:1a:43:d3:79:b6:10:f2:79:73:ca:00: fd:66:2b:df:d4:6b:0f:27:b1:05:0a:2f:c6:ce:c3: 0a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:2F:BA:3B:E9:B0:C1:BD:F2:EA:AE:D7:F4:1E:25:89:88:3F:F9:C7 X509v3 Authority Key Identifier: keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:11:19:77:2c:d2:48:fa:6c:e1:29:af:82:2e:82:99:f9:8e: 54:99:7d:12:3f:72:c4:48:5a:37:c2:32:3f:5d:bf:41:37:a0: e8:73:00:d0:5a:5a:94:0b:95:ab:d2:ec:28:c4:20:27:42:4f: 76:07:8b:f0:9e:de:e6:45:a2:09:a7:49:30:3e:3c:a6:b0:84: 12:f0:07:eb:ca:97:c4:94:ca:bb:b9:28:14:8e:00:ff:43:6f: 1f:ca:ed:8d:6f:59:24:a5:4d:05:e0:f8:7a:8f:48:e5:92:cf: 36:ab:80:10:5d:72:14:05:63:02:6a:dd:57:89:d2:43:0e:58: 8d:47:c8:69:ba:5b:46:37:49:87:0c:c1:c3:1e:9b:6a:19:78: 1f:9b:5b:42:55:0c:13:d9:18:f5:28:1d:d7:90:80:fb:75:b9: 1f:12:2d:a2:f2:e5:4a:9e:73:3a:c0:5a:3d:e0:8b:49:cf:6c: 3a:49:65:f7:63:bd:77:05:13:a9:2a:be:e7:3e:cb:eb:e8:e1: 8b:ec:3a:d3:d6:5f:2b:eb:b6:ec:38:fd:19:01:94:41:66:48: 8f:18:aa:ac:ec:fb:8b:e3:83:ba:dc:90:5a:cb:90:e8:19:ff: 97:f9:13:76:a8:c4:c4:cb:5a:1d:bb:55:8a:b8:5e:8d:f4:5d: 08:61:bd:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVGNDExMTAvBgNVBAUTKDMzNkRERTdFQzMyODA0OTk5NjQzNzFDQUVFMjYyMEZC RkNBQ0RDOTgwHhcNMjYwMzE5MDM1MjI1WhcNMjYwMzI2MDM1MjI1WjAYMRYwFAYD VQQDEw02OWJiNzJmOS04ZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzL4MWbtTQn9cdUC9T5HyHxqO54jMY+IbvY5dr4tBQVBGET++U/tzGn+41wuj INLVO4ByqvQklgahNjSgjGPExffupuMwXwB3jXqf9UQXggiM7Xk3D/NmcW9ciUq2 rQlH5XC7ur/IGdt/pE9oueA9FlHoEeC+Y5Wa+d8FkUF9NYtkbTNiBpLgkISNuegz cjI3R1wq/T+WAZvMNGHE1d9LoFuEFqi2/uT+zny2ViXahNbcm75wiP8T0/hxeQM8 0cWijgo7cCFWE9vt8xvw53qEPWLBK1YU0hSO+lzzqO303ZClTF36GkPTebYQ8nlz ygD9Zivf1GsPJ7EFCi/GzsMKnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFwvujvp sMG98uqu1/QeJYmIP/nHMB8GA1UdIwQYMBaAFDNt3n7DKASZlkNxyu4mIPv8rNyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUY0MS9DNzVEQTEzMkYy RkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JKbVdRM0hLN2lZZy1feXMz SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yM2Vmc01vQkptV1EzSEs3aVlnLV95czNKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUY0MS9DNzVEQTEzMkYyRkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JK bVdRM0hLN2lZZy1feXMzSmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANREZdyzSSPps4Smvgi6CmfmOVJl9Ej9yxEhaN8IyP12/QTeg6HMA0FpalAuV q9LsKMQgJ0JPdgeL8J7e5kWiCadJMD48prCEEvAH68qXxJTKu7koFI4A/0NvH8rt jW9ZJKVNBeD4eo9I5ZLPNquAEF1yFAVjAmrdV4nSQw5YjUfIabpbRjdJhwzBwx6b ahl4H5tbQlUME9kY9Sgd15CA+3W5HxItovLlSp5zOsBaPeCLSc9sOkll92O9dwUT qSq+5z7L6+jhi+w609ZfK+u27Dj9GQGUQWZIjxiqrOz7i+ODutyQWsuQ6Bn/l/kT dqjExMtaHbtVirhejfRdCGG9pA== -----END CERTIFICATE-----Generated at Thu Mar 19 14:02:17 2026 by rpki-client