$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft File: jM5ORhldFXBPtWKTLgq2Kg65iiY.mft (raw, json) Hash identifier: 1PCO3L3oJ5pZl/QUcUx+rud25uLyQkXEYLzV46k7uZ0= Subject key identifier: 44:1F:A5:40:9A:A1:1B:CB:46:1C:06:C8:D0:A6:BE:FE:E6:66:C4:DE Authority key identifier: 8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26 Certificate issuer: /CN=A91F7334/serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26 Certificate serial: 04B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft Manifest number: 049C Signing time: Wed 18 Mar 2026 23:33:16 +0000 Manifest this update: Wed 18 Mar 2026 23:33:16 +0000 Manifest next update: Wed 25 Mar 2026 23:33:16 +0000 Files and hashes: 1: jM5ORhldFXBPtWKTLgq2Kg65iiY.crl (hash: 3ZDhzrctn6M+uK/YnnDtdPVkZ0X5BlFEKNUCAN1Sapw=) 2: 96F24818744F11ECBFE4A57DC4F9AE02.roa (hash: niq2x+TSIaVr2M9Yq4uJinm2FfqqQeskl0ZKo8P7pbQ=) 3: 8B8B954E6C9011ED9AAF427AC4F9AE02.roa (hash: jt8czHkqDAiIWpmhFez0BMJFRbxnxmNlnLH67Wuq05Y=) 4: 0B7C7B7C751311ECA43F7D3BC4F9AE02.roa (hash: BviysmdqRD5SHQtytVhZ+gVShXWPkwicoPT5mAKuO60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 23:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1202 (0x4b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7334, serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26 Validity Not Before: Mar 18 23:33:16 2026 GMT Not After : Mar 25 23:33:16 2026 GMT Subject: CN=69bb363c-e702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:61:17:ae:ef:0c:8f:90:0f:44:66:f7:22:0d: 78:6a:18:f7:a0:6b:61:23:de:2a:8c:27:95:31:41: 6d:cd:3d:71:2b:0f:30:2f:ec:a0:18:f0:7a:de:59: 65:5e:86:09:80:ea:a6:4e:ca:6b:9f:64:e9:de:36: e1:b9:7e:57:81:26:9b:68:46:e4:ef:1f:53:b3:79: 64:15:b7:97:b9:64:e1:1b:49:7f:d1:c2:ad:24:a2: 04:94:a3:5b:e6:f3:9c:c9:fc:80:7e:3c:55:e7:df: a2:1a:f6:9f:b6:17:a5:ef:bc:54:0d:9a:e2:bc:a2: 67:79:d6:4d:f7:a8:7f:03:b7:6f:93:df:55:30:02: 39:bb:7a:a3:95:c6:e0:c4:56:6c:37:0d:14:35:5d: 81:16:78:ff:e3:44:eb:cd:66:9c:3c:09:9d:74:c3: 3a:b7:b9:4d:92:4d:0e:63:37:5e:97:11:ce:64:cb: b5:4f:24:aa:2a:e3:3d:25:d7:5d:7a:ce:80:ee:38: 0f:01:72:70:1b:c1:4e:49:bf:23:a7:0a:9f:73:23: f1:a3:d2:05:05:1b:b2:bd:36:84:f4:88:c9:8b:08: 5f:4d:65:4f:ef:68:15:2c:fc:96:52:ef:f2:5f:0a: 60:85:b8:6e:9e:d0:cc:bd:ab:46:17:18:2f:63:07: 12:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:1F:A5:40:9A:A1:1B:CB:46:1C:06:C8:D0:A6:BE:FE:E6:66:C4:DE X509v3 Authority Key Identifier: keyid:8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:1e:4d:b2:fa:c0:f0:4b:4e:2f:22:7d:6d:09:00:42:de:48: b3:d2:e2:54:75:69:c9:41:89:e9:98:65:7c:d5:ff:28:9f:7c: 3a:bc:38:31:6d:86:9d:71:75:e2:3b:dc:6c:22:db:68:81:9c: 80:5a:6a:72:2c:64:c4:1e:78:d9:4d:cf:9e:d0:01:89:4c:9f: 32:b5:43:a6:9e:b2:5e:e6:f3:a2:c3:3c:2e:0b:2a:db:ea:f3: 22:02:ac:7b:53:76:76:64:8c:de:a9:7c:f9:fd:1c:fb:bb:60: 92:6f:c6:a2:cc:66:16:ec:88:ab:f4:d1:df:12:88:5e:90:28: 9b:09:01:eb:2e:73:70:5e:92:48:03:ff:18:80:13:bb:23:cf: 4d:71:7a:34:20:4e:c1:60:4e:03:5e:f9:6e:c4:0c:95:e4:31: a4:f2:33:4a:b8:f1:13:5c:ed:f9:6c:0f:80:44:cf:cb:ba:01: 21:f3:f7:de:df:6f:68:c2:ea:7d:2f:c5:49:bc:35:40:04:9b: d1:2c:3b:2c:4a:da:56:3c:cc:6a:b1:72:24:ae:47:a4:b5:b2: e4:17:e3:4e:36:7b:0e:07:88:89:70:1a:c1:ab:56:6a:01:2b: 75:4e:91:9d:1c:63:82:f4:53:5e:6a:0e:74:1c:ea:c6:c2:4c: 72:6e:19:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMzQxMTAvBgNVBAUTKDhDQ0U0RTQ2MTk1RDE1NzA0RkI1NjI5MzJFMEFCNjJB MEVCOThBMjYwHhcNMjYwMzE4MjMzMzE2WhcNMjYwMzI1MjMzMzE2WjAYMRYwFAYD VQQDEw02OWJiMzYzYy1lNzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2EXru8Mj5APRGb3Ig14ahj3oGthI94qjCeVMUFtzT1xKw8wL+ygGPB63lll XoYJgOqmTsprn2Tp3jbhuX5XgSabaEbk7x9Ts3lkFbeXuWThG0l/0cKtJKIElKNb 5vOcyfyAfjxV59+iGvafthel77xUDZrivKJnedZN96h/A7dvk99VMAI5u3qjlcbg xFZsNw0UNV2BFnj/40TrzWacPAmddMM6t7lNkk0OYzdelxHOZMu1TySqKuM9Jddd es6A7jgPAXJwG8FOSb8jpwqfcyPxo9IFBRuyvTaE9IjJiwhfTWVP72gVLPyWUu/y XwpghbhuntDMvatGFxgvYwcSUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEQfpUCa oRvLRhwGyNCmvv7mZsTeMB8GA1UdIwQYMBaAFIzOTkYZXRVwT7Viky4KtioOuYom MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMzNC83QTQwNDlEQTc0 NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZYQlB0V0tUTGdxMktnNjVp aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pNNU9SaGxkRlhCUHRXS1RMZ3EyS2c2NWlpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMzNC83QTQwNDlEQTc0NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZY QlB0V0tUTGdxMktnNjVpaVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEh5NsvrA8EtOLyJ9bQkAQt5Is9LiVHVpyUGJ6ZhlfNX/KJ98Orw4MW2GnXF1 4jvcbCLbaIGcgFpqcixkxB542U3PntABiUyfMrVDpp6yXubzosM8Lgsq2+rzIgKs e1N2dmSM3ql8+f0c+7tgkm/GosxmFuyIq/TR3xKIXpAomwkB6y5zcF6SSAP/GIAT uyPPTXF6NCBOwWBOA175bsQMleQxpPIzSrjxE1zt+WwPgETPy7oBIfP33t9vaMLq fS/FSbw1QASb0Sw7LEraVjzMarFyJK5HpLWy5BfjTjZ7DgeIiXAawatWagErdU6R nRxjgvRTXmoOdBzqxsJMcm4ZGw== -----END CERTIFICATE-----Generated at Thu Mar 19 17:41:39 2026 by rpki-client