$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json) Hash identifier: QBtCU8LCPNU+8AIEssEC+r2I8upz9/JicPo3Ius09GI= Subject key identifier: 5E:F4:DE:FA:D1:C3:76:DF:CA:50:A4:E1:40:AF:6A:F0:38:88:38:C5 Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft Manifest number: 011A Signing time: Mon 02 Mar 2026 02:42:56 +0000 Manifest this update: Mon 02 Mar 2026 02:42:54 +0000 Manifest next update: Mon 09 Mar 2026 02:42:54 +0000 Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: i60TZanqL0YdfhVQyGPLTCEvLBhE5/lkEyDqxpWeVoE=) 2: C243BFC4FCE511F0AACA4132716F56BC.roa (hash: eKzsF8gwTHd0fONSYl3Z08RvmhJ05i8QkQx5Tz+KBCU=) 3: B8D1F4E8501411F09C0FE83FC4F9AE02.roa (hash: D4NRCko3MZFYJkLZPgAkzijOJifErlno5imf5X3ylHY=) 4: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: rnduJ2NpU+LIFZlZ+rkpxldWRpJwaPya7QDINOEsPrs=) 5: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: vEc2jHNpgXkle7usC6cdkDSSfCMVfaEYA5yavxzJttQ=) 6: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (hash: GzfRPUDBbDs4K4+434Sr5sRN49sS17wbw5wNG+NNvFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Mar 2 02:42:54 2026 GMT Not After : Mar 9 02:42:54 2026 GMT Subject: CN=69a4f92f-ba0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3b:ef:d7:4e:cd:8c:35:30:b0:88:f6:5d:fd: 73:25:a5:0c:ae:66:c7:c9:47:5a:ed:0d:de:42:4c: 4a:62:fb:ef:22:92:d7:c4:8a:62:c8:fa:c3:a8:cb: b5:6b:3e:5d:e4:4f:b7:c1:1c:61:57:6b:39:3b:04: c8:0c:30:49:39:cf:2c:43:6e:ae:e7:5c:bf:2b:9f: 70:47:7d:4a:df:73:6b:62:86:17:42:87:06:56:4f: 0e:08:20:c1:e7:e3:0e:10:eb:0c:c2:1e:06:ac:58: 77:f6:e6:6c:a9:76:25:39:9a:c1:5c:77:fd:c3:7b: 60:cc:b0:60:81:5d:81:78:e9:54:fc:f9:b0:aa:1c: 06:61:df:b3:fc:95:09:29:e1:a6:45:cc:22:0b:6e: 64:8e:e5:f4:05:0b:75:b6:88:1a:6d:66:37:23:17: b6:e0:d1:51:17:50:c2:71:a1:71:0e:42:f2:91:70: a9:6e:14:81:3e:0d:d2:1e:4e:0c:26:d8:bd:3f:b7: 0f:3f:fa:61:82:c7:df:e5:99:5f:6b:86:e0:41:10: 1e:13:d6:49:1b:bd:23:e3:41:65:1e:f7:38:73:d2: 44:b4:7f:d5:12:28:4d:89:db:1b:aa:e1:21:13:fb: 91:0a:00:c6:16:1b:15:96:2e:0c:ee:84:0c:90:64: 78:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F4:DE:FA:D1:C3:76:DF:CA:50:A4:E1:40:AF:6A:F0:38:88:38:C5 X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:e9:73:18:c1:25:7f:0b:bf:d4:fd:df:f9:45:7b:9c:19:c1: 9f:13:c5:d4:96:ec:65:bf:be:82:4e:6a:35:cb:cd:96:74:a1: 32:1d:ed:94:29:a7:45:9f:9c:11:03:f1:7b:ac:cd:a0:e6:22: e6:c6:4e:2a:b8:1c:4d:5d:9c:db:1d:ce:6c:9a:a5:46:10:b7: ec:82:3d:4b:29:2a:be:62:d1:e7:41:24:7d:40:62:06:e8:8f: 93:5e:b3:d8:d8:91:95:74:96:a1:ea:cc:64:d8:37:b7:c5:c4: db:71:a8:f5:0a:82:00:40:36:63:ed:91:b2:af:14:b5:95:97: 1c:71:6e:4a:20:86:ab:b9:c4:ec:01:48:9c:5e:b7:fa:ee:72: ce:b3:80:cb:2d:9d:7c:57:26:6a:de:83:ae:b5:76:ad:47:2f: a3:99:c1:13:79:ad:3c:bf:f6:c3:d2:72:9d:54:4d:29:6e:af: 58:7d:31:f5:ff:c3:d7:02:1e:57:44:f0:c1:60:94:03:1c:0e: b0:b2:c2:dc:ef:39:3b:ca:b5:c4:12:1f:a4:51:5a:14:6d:f6: 6e:23:7a:2b:d5:b3:27:da:57:8d:70:84:27:11:85:c2:36:d2: 40:96:13:21:82:76:27:28:36:22:08:06:78:37:87:2c:14:3a: 88:ce:8f:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjYwMzAyMDI0MjU0WhcNMjYwMzA5MDI0MjU0WjAYMRYwFAYD VQQDEw02OWE0ZjkyZi1iYTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTvv107NjDUwsIj2Xf1zJaUMrmbHyUda7Q3eQkxKYvvvIpLXxIpiyPrDqMu1 az5d5E+3wRxhV2s5OwTIDDBJOc8sQ26u51y/K59wR31K33NrYoYXQocGVk8OCCDB 5+MOEOsMwh4GrFh39uZsqXYlOZrBXHf9w3tgzLBggV2BeOlU/PmwqhwGYd+z/JUJ KeGmRcwiC25kjuX0BQt1togabWY3Ixe24NFRF1DCcaFxDkLykXCpbhSBPg3SHk4M Jti9P7cPP/phgsff5Zlfa4bgQRAeE9ZJG70j40FlHvc4c9JEtH/VEihNidsbquEh E/uRCgDGFhsVli4M7oQMkGR4TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF703vrR w3bfylCk4UCvavA4iDjFMB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0I0Qy9EQzlERTI4RThDNTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FR QjI1UFhfUW9hRjlqLXdqdDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt+lzGMElfwu/1P3f+UV7nBnBnxPF1JbsZb++gk5qNcvNlnShMh3tlCmnRZ+c EQPxe6zNoOYi5sZOKrgcTV2c2x3ObJqlRhC37II9SykqvmLR50EkfUBiBuiPk16z 2NiRlXSWoerMZNg3t8XE23Go9QqCAEA2Y+2Rsq8UtZWXHHFuSiCGq7nE7AFInF63 +u5yzrOAyy2dfFcmat6DrrV2rUcvo5nBE3mtPL/2w9JynVRNKW6vWH0x9f/D1wIe V0TwwWCUAxwOsLLC3O85O8q1xBIfpFFaFG32biN6K9WzJ9pXjXCEJxGFwjbSQJYT IYJ2Jyg2IggGeDeHLBQ6iM6PBw== -----END CERTIFICATE-----Generated at Mon Mar 2 15:58:10 2026 by rpki-client