$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft File: cJdlx9TTMfTDasa-NH-mah8CNJA.mft (raw, json) Hash identifier: W4Sc+AcpI3QZlANTYqOKJXt4S9ma7VDw38BENiS1La0= Subject key identifier: 17:AF:75:1D:1F:63:E6:9C:B5:8D:4B:D0:43:95:F9:6C:E5:BB:BE:D2 Authority key identifier: 70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 Certificate issuer: /CN=A91AE85E/serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Certificate serial: 357D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft Manifest number: 3544 Signing time: Sun 01 Mar 2026 23:22:12 +0000 Manifest this update: Sun 01 Mar 2026 23:22:11 +0000 Manifest next update: Sun 08 Mar 2026 23:22:11 +0000 Files and hashes: 1: cJdlx9TTMfTDasa-NH-mah8CNJA.crl (hash: IMsPUDQ+IrVtinldzqo349SusL8HqJSktE5njPHW4Ro=) 2: 392987D254F611E79DF7E643C4F9AE02.roa (hash: 7X7MqnwCg9AKC2Vx1jhncIIk4NudI1eSpazmHMekhvg=) 3: 09E2DC32B12B11E59337F35AC4F9AE02.roa (hash: 9fz8ROlxgIz9BeZ3bDwbubljhDBRymKASujcQJN55ag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13693 (0x357d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E, serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Validity Not Before: Mar 1 23:22:11 2026 GMT Not After : Mar 8 23:22:11 2026 GMT Subject: CN=69a4ca24-3643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2e:28:56:37:9e:ef:2d:a9:2f:3b:b7:3d:69: 0d:23:a8:9c:1d:aa:43:61:62:bd:35:93:66:0f:c7: b0:b5:1b:ee:dc:6d:9b:8d:ee:54:05:b2:38:36:5d: a5:b6:d8:5c:dc:a7:6a:8b:56:34:d2:4e:e0:5d:79: 14:9a:62:08:19:e8:bc:f4:d7:9e:c1:d5:11:9f:13: 2a:c2:b0:1d:53:df:8d:85:64:45:92:e4:fd:1c:6a: 6d:89:0b:65:35:4e:ff:f0:a3:b8:b5:e4:3d:a8:36: 48:22:d8:81:63:e1:0a:06:df:4d:eb:c9:e3:cc:14: 65:6f:0a:8b:a0:f8:64:ed:34:34:f9:9e:80:a2:1a: df:f3:a0:a4:55:f9:98:e3:c3:10:6c:87:bb:63:e6: 24:f8:94:d4:44:07:0a:71:c1:28:4b:3a:60:60:4f: df:c6:97:12:4a:39:a9:96:15:bb:c1:e5:d0:88:e6: d8:38:7c:35:41:cb:52:ec:f3:eb:ae:c6:6b:60:5a: 85:47:46:56:f5:da:51:d4:c9:1a:9e:5b:0c:7d:f7: 6f:13:60:c1:45:12:21:b8:2b:41:1e:20:a1:5d:05: b1:2e:bb:3a:f6:c2:6f:f6:f3:a8:fb:26:00:78:20: 9e:ad:50:58:32:24:ea:3e:8d:74:82:81:70:f2:1c: dc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AF:75:1D:1F:63:E6:9C:B5:8D:4B:D0:43:95:F9:6C:E5:BB:BE:D2 X509v3 Authority Key Identifier: keyid:70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:b9:b8:ef:84:68:71:a6:6c:34:66:00:e5:1f:3a:b9:08:00: 20:ad:62:6a:b6:06:e7:97:5b:36:a4:73:88:24:b1:61:fa:7f: 56:f0:1d:da:b9:a0:a4:c2:81:b8:4d:1c:fd:07:1f:b4:39:3c: f5:5b:6f:38:9e:fa:9a:cc:09:9b:1b:94:9f:9a:5f:7a:7b:6c: ce:35:77:60:11:19:e5:82:b7:0a:b1:db:c3:18:15:e0:b3:5b: 85:7e:c2:c8:36:03:6e:bb:0e:83:48:7d:36:e1:fe:2c:09:b9: 2f:79:d8:7d:16:61:c8:b3:c6:af:06:85:58:10:91:2f:2a:8b: 4b:11:e7:b5:6f:6f:2b:de:d1:f4:dd:8b:5a:38:1d:50:fa:4a: 6c:95:1b:47:0f:09:e2:b3:88:a6:97:8e:1f:02:10:c1:ce:7a: 83:bd:9f:21:27:85:23:8b:ea:d7:45:bf:22:7f:02:cf:c1:91: aa:c7:b4:09:4d:00:43:3c:8e:cb:e7:5b:0d:b9:1d:de:5e:60: 86:f9:5a:fe:c9:3e:aa:42:fc:bb:b5:b9:b3:f7:f5:54:a4:be: fd:53:4c:81:e6:f0:96:36:d9:8d:ef:18:65:be:7f:79:91:c7: 40:07:63:e4:d8:82:91:b6:25:f2:fd:18:70:92:8d:3a:7e:40: fa:94:9f:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDcwOTc2NUM3RDREMzMxRjRDMzZBQzZCRTM0N0ZBNjZB MUYwMjM0OTAwHhcNMjYwMzAxMjMyMjExWhcNMjYwMzA4MjMyMjExWjAYMRYwFAYD VQQDEw02OWE0Y2EyNC0zNjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxS4oVjee7y2pLzu3PWkNI6icHapDYWK9NZNmD8ewtRvu3G2bje5UBbI4Nl2l tthc3Kdqi1Y00k7gXXkUmmIIGei89NeewdURnxMqwrAdU9+NhWRFkuT9HGptiQtl NU7/8KO4teQ9qDZIItiBY+EKBt9N68njzBRlbwqLoPhk7TQ0+Z6Aohrf86CkVfmY 48MQbIe7Y+Yk+JTURAcKccEoSzpgYE/fxpcSSjmplhW7weXQiObYOHw1QctS7PPr rsZrYFqFR0ZW9dpR1MkanlsMffdvE2DBRRIhuCtBHiChXQWxLrs69sJv9vOo+yYA eCCerVBYMiTqPo10goFw8hzc2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBevdR0f Y+actY1L0EOV+Wzlu77SMB8GA1UdIwQYMBaAFHCXZcfU0zH0w2rGvjR/pmofAjSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8wQkVEMzUyNjFE NkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1mVERhc2EtTkgtbWFoOENO SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKZGx4OVRUTWZURGFzYS1OSC1tYWg4Q05KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTg1RS8wQkVEMzUyNjFENkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1m VERhc2EtTkgtbWFoOENOSkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI7m474RocaZsNGYA5R86uQgAIK1iarYG55dbNqRziCSxYfp/VvAd2rmgpMKB uE0c/QcftDk89VtvOJ76mswJmxuUn5pfentszjV3YBEZ5YK3CrHbwxgV4LNbhX7C yDYDbrsOg0h9NuH+LAm5L3nYfRZhyLPGrwaFWBCRLyqLSxHntW9vK97R9N2LWjgd UPpKbJUbRw8J4rOIppeOHwIQwc56g72fISeFI4vq10W/In8Cz8GRqse0CU0AQzyO y+dbDbkd3l5ghvla/sk+qkL8u7W5s/f1VKS+/VNMgebwljbZje8YZb5/eZHHQAdj 5NiCkbYl8v0YcJKNOn5A+pSfhA== -----END CERTIFICATE-----Generated at Mon Mar 2 10:16:09 2026 by rpki-client