$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft File: tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json) Hash identifier: 51BX39hvHjRqyeY/2vJFo2kgCqlLQCSQqpcA3lz69Ng= Subject key identifier: 8C:A3:C7:D6:2E:ED:47:B5:56:5B:2E:97:05:8E:94:21:C0:45:CA:34 Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Certificate serial: 03E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft Manifest number: 03CF Signing time: Sat 21 Mar 2026 00:05:58 +0000 Manifest this update: Sat 21 Mar 2026 00:05:57 +0000 Manifest next update: Sat 28 Mar 2026 00:05:57 +0000 Files and hashes: 1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: 0UUGMpPfwNtWA3IkGEXfeEKRLfgk6LkPD8W/MCeArAc=) 2: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: JsxVCM2jhz9Lx7VvZgXYGsgvn7pvcdkyEVtE+jYL+ow=) 3: 69B0C410EC2411EFBE58C381C4F9AE02.roa (hash: jSMX3ABEtZSpyQCFX5+dmu6REmnL6WokXfamqru1uKo=) 4: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (hash: GdMrJQOmwecU85NbmUFnrqBWRHWEAMkwnRXidf68flk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:05:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1000 (0x3e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Validity Not Before: Mar 21 00:05:57 2026 GMT Not After : Mar 28 00:05:57 2026 GMT Subject: CN=69bde0e6-0375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8e:a3:54:7c:b0:92:c8:8f:1b:b7:a9:e6:66: 3e:b1:d1:55:70:3c:0f:af:af:a9:ba:f6:62:32:67: 3b:42:55:13:c7:39:ae:b3:88:42:a0:8f:12:8e:64: 1f:c2:17:dd:4d:bf:62:af:d0:7f:44:02:e3:3d:05: 20:ff:74:ef:e3:b4:f7:f8:fa:5b:da:dc:19:bf:11: cd:12:38:33:5b:06:6a:c7:73:5e:56:02:6b:81:1b: 31:e8:2d:ed:8d:8f:71:18:83:ed:9a:7e:4c:ee:ae: b7:a9:df:cc:1e:df:dd:ec:59:75:9e:43:3a:17:2e: b8:3b:14:c1:8f:27:bd:dd:42:a3:31:93:19:72:8e: e4:68:98:84:05:ac:2a:0c:27:36:0d:9b:5f:6e:a7: 47:7d:ba:56:2e:7d:04:87:3a:2e:e4:30:bd:f3:ba: f6:55:8c:ee:86:25:df:35:4b:50:ce:f2:ab:2c:e1: 21:2c:94:87:d4:99:20:d9:00:b9:e0:e3:0d:e5:f1: 53:cb:f7:73:22:9b:6f:88:d3:e3:05:13:c6:1e:8f: 50:5e:cf:86:d0:09:37:67:7e:09:ee:f5:2c:d3:bd: 21:96:da:e3:7b:9e:35:6e:41:04:62:c6:9e:35:73: ff:01:3d:4f:98:4c:31:36:72:32:bb:87:98:6e:b6: 3f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A3:C7:D6:2E:ED:47:B5:56:5B:2E:97:05:8E:94:21:C0:45:CA:34 X509v3 Authority Key Identifier: keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:37:40:8f:7d:09:dc:90:e7:25:3a:2a:4b:3a:9f:a9:1b:02: 11:b7:38:79:b3:d9:e9:99:7e:bc:51:a3:e6:52:c2:45:0b:ad: 1c:2a:d6:b3:6f:17:67:e1:08:37:54:86:eb:be:16:81:79:5d: 54:76:ad:31:6f:53:f0:8c:27:f2:f5:12:54:61:b8:e9:41:65: 90:76:23:71:a7:74:ed:9f:26:ec:31:e1:7f:8c:e6:1e:62:c0: 6d:50:f8:d3:d0:81:75:36:cc:d3:ce:a8:ff:0e:d2:3d:4b:41: d8:2d:65:24:08:4a:f5:61:42:25:d9:49:cb:31:17:96:33:9c: c9:15:f1:83:71:5f:aa:fe:b7:b0:96:cc:0d:7e:38:3c:20:65: a0:8e:d2:d4:c4:d3:4f:67:25:07:f4:f5:a1:1d:5e:cd:fe:14: 2e:9f:65:31:cb:11:bf:a8:54:21:e8:e8:0a:0c:10:cd:16:04: 3f:69:e6:84:a9:55:e3:6a:fb:fc:5c:00:d8:e4:71:b0:90:9f: 69:c7:ad:c1:9c:bb:5a:74:ac:e2:84:ea:08:1e:b9:7b:5b:63: 3e:7b:29:62:c9:cd:05:3a:c4:c8:61:b1:e8:fd:bf:cf:ca:07: 51:5b:9a:6f:21:75:3a:b2:8c:f1:65:c0:50:3f:2b:d4:09:32: 7b:1b:b1:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw NzQ3MEEyNzYwHhcNMjYwMzIxMDAwNTU3WhcNMjYwMzI4MDAwNTU3WjAYMRYwFAYD VQQDEw02OWJkZTBlNi0wMzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuI6jVHywksiPG7ep5mY+sdFVcDwPr6+puvZiMmc7QlUTxzmus4hCoI8SjmQf whfdTb9ir9B/RALjPQUg/3Tv47T3+Ppb2twZvxHNEjgzWwZqx3NeVgJrgRsx6C3t jY9xGIPtmn5M7q63qd/MHt/d7Fl1nkM6Fy64OxTBjye93UKjMZMZco7kaJiEBawq DCc2DZtfbqdHfbpWLn0Ehzou5DC987r2VYzuhiXfNUtQzvKrLOEhLJSH1Jkg2QC5 4OMN5fFTy/dzIptviNPjBRPGHo9QXs+G0Ak3Z34J7vUs070hltrje541bkEEYsae NXP/AT1PmEwxNnIyu4eYbrY/JwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIyjx9Yu 7Ue1VlsulwWOlCHARco0MB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1 MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ0Ni8yQTFGRjU2RUM1MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbEND MHphMnNGdDVaZk1IUndvblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANDdAj30J3JDnJToqSzqfqRsCEbc4ebPZ6Zl+vFGj5lLCRQutHCrWs28XZ+EI N1SG674WgXldVHatMW9T8Iwn8vUSVGG46UFlkHYjcad07Z8m7DHhf4zmHmLAbVD4 09CBdTbM086o/w7SPUtB2C1lJAhK9WFCJdlJyzEXljOcyRXxg3Ffqv63sJbMDX44 PCBloI7S1MTTT2clB/T1oR1ezf4ULp9lMcsRv6hUIejoCgwQzRYEP2nmhKlV42r7 /FwA2ORxsJCfacetwZy7WnSs4oTqCB65e1tjPnspYsnNBTrEyGGx6P2/z8oHUVua byF1OrKM8WXAUD8r1AkyexuxXg== -----END CERTIFICATE-----Generated at Sat Mar 21 18:50:49 2026 by rpki-client