$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft File: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft (raw, json) Hash identifier: qAfPQH6fZwwJYEkSBBzlA+E7DOEwzfqbQaH6dJlDt+g= Subject key identifier: DE:84:F4:9B:16:89:A7:EF:14:7E:A6:1C:EF:74:E2:97:2F:A4:CB:3E Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Certificate serial: 031C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft Manifest number: 0313 Signing time: Sun 01 Mar 2026 02:00:17 +0000 Manifest this update: Sun 01 Mar 2026 02:00:16 +0000 Manifest next update: Sun 08 Mar 2026 02:00:16 +0000 Files and hashes: 1: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl (hash: Hj3XK8rUK2cOhS10sUO/jJ5V+034z7KcUh15/6YT0/M=) 2: 47C07DB84F9C11ED8B9E4333C4F9AE02.roa (hash: eeihbPUCNIm6wOFP5OHLweAd8KKgDQdtMhUILkD0GVg=) 3: CD9B103E08DD11ED830BEB5CC4F9AE02.roa (hash: Or6QdVGJ8KlEltpgE/vRaVt3d7tmMydHusIypsTqbXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 02:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 796 (0x31c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Validity Not Before: Mar 1 02:00:16 2026 GMT Not After : Mar 8 02:00:16 2026 GMT Subject: CN=69a39db1-d5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d4:8e:c4:19:d0:a2:dc:3b:bc:52:1c:78:65: 94:32:08:e9:ff:a7:76:9f:c1:76:cb:b9:6a:b2:30: 23:76:68:73:ac:0c:6c:ed:d0:1a:ad:4d:cc:cf:d0: da:63:15:9a:ba:20:8c:1c:77:d9:50:a4:22:30:e3: 14:72:cc:5c:51:bb:96:94:e0:a7:09:66:fe:29:5f: 61:ee:ed:8c:57:1d:87:40:b9:95:98:e9:54:17:f2: 68:8d:9e:89:37:b1:d2:7d:2e:0f:9d:67:d7:45:3b: ec:09:70:4e:4b:9e:6b:e0:32:e8:83:9a:91:86:e5: 14:80:99:3e:a4:63:a4:ac:c5:81:01:49:08:c5:b3: 49:2b:48:5e:52:8b:5c:e8:80:ff:8d:fa:8f:61:ea: 3e:54:54:7b:da:73:e9:8d:17:b0:87:61:a8:bc:e7: a4:67:b9:06:17:97:2f:21:a0:e1:19:73:16:94:c0: 9c:00:75:62:af:23:43:61:4c:75:c8:44:73:8f:ce: de:ae:1e:d9:8b:09:c3:3d:67:30:e7:cb:0b:e1:87: cf:6f:3e:60:8a:1c:54:fd:0d:87:5d:ba:a7:73:0b: 2a:54:05:4a:2b:e1:da:02:d6:5e:03:0e:7d:af:0e: d8:e7:33:db:f0:16:8b:d3:0d:3e:ea:12:85:03:f9: 7e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:84:F4:9B:16:89:A7:EF:14:7E:A6:1C:EF:74:E2:97:2F:A4:CB:3E X509v3 Authority Key Identifier: keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:7d:3d:57:49:ee:24:f2:d4:43:d2:eb:1c:3d:24:8a:4f:e1: b4:7b:1b:38:f0:4e:77:15:98:b8:40:2d:48:04:d4:d4:6e:b3: e7:42:89:e2:e6:41:62:a4:c7:31:5b:29:dc:b4:62:1f:85:43: b0:27:f3:ea:d5:11:50:cc:ad:d8:de:59:e6:cc:7f:ae:61:d7: ea:b0:80:1b:47:59:ec:b6:fb:6b:ec:10:ef:9c:18:16:62:c2: f9:ef:c0:f8:27:12:90:e1:04:b2:dd:d5:f1:45:8e:de:98:2c: 50:49:47:31:2d:64:69:6e:ce:d9:36:90:04:f7:75:8e:ed:89: 88:ac:65:74:e6:24:1f:70:37:f5:25:7d:0b:c8:29:af:70:fb: 9e:19:f9:0d:9f:b4:4d:7e:21:e2:6b:85:8d:25:46:83:5d:7e: e1:77:17:8f:8a:c0:e2:4d:36:cc:6c:4d:73:19:24:86:45:a2: 90:ed:d2:2f:4d:3c:08:35:65:c1:5b:12:0f:f6:72:99:25:b6: 84:0d:08:55:cf:3b:07:2b:8c:e9:dd:e7:42:e1:eb:15:11:10: 12:ba:60:fd:96:f9:cd:36:a0:08:09:e3:7e:16:84:ec:eb:d7: 08:9a:3a:9f:ae:e7:f7:6d:e6:78:7f:f2:bb:6a:07:5a:a1:66: 5f:5a:1c:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKDI1MjkzQjBBNzAzNkM4MTNBOUNEMDIwMDZERkMyOTBB QUYyNTMyNzQwHhcNMjYwMzAxMDIwMDE2WhcNMjYwMzA4MDIwMDE2WjAYMRYwFAYD VQQDDA02OWEzOWRiMS1kNWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiNSOxBnQotw7vFIceGWUMgjp/6d2n8F2y7lqsjAjdmhzrAxs7dAarU3Mz9Da YxWauiCMHHfZUKQiMOMUcsxcUbuWlOCnCWb+KV9h7u2MVx2HQLmVmOlUF/JojZ6J N7HSfS4PnWfXRTvsCXBOS55r4DLog5qRhuUUgJk+pGOkrMWBAUkIxbNJK0heUotc 6ID/jfqPYeo+VFR72nPpjRewh2GovOekZ7kGF5cvIaDhGXMWlMCcAHViryNDYUx1 yERzj87erh7ZiwnDPWcw58sL4YfPbz5gihxU/Q2HXbqncwsqVAVKK+HaAtZeAw59 rw7Y5zPb8BaL0w0+6hKFA/l+uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN6E9JsW iafvFH6mHO904pcvpMs+MB8GA1UdIwQYMBaAFCUpOwpwNsgTqc0CAG38KQqvJTJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9EM0FEMDdFMjA4 RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlCT3B6UUlBYmZ3cENxOGxN blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTazdDbkEyeUJPcHpRSUFiZndwQ3E4bE1uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9EM0FEMDdFMjA4RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlC T3B6UUlBYmZ3cENxOGxNblEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjH09V0nuJPLUQ9LrHD0kik/htHsbOPBOdxWYuEAtSATU1G6z50KJ4uZBYqTH MVsp3LRiH4VDsCfz6tURUMyt2N5Z5sx/rmHX6rCAG0dZ7Lb7a+wQ75wYFmLC+e/A +CcSkOEEst3V8UWO3pgsUElHMS1kaW7O2TaQBPd1ju2JiKxldOYkH3A39SV9C8gp r3D7nhn5DZ+0TX4h4muFjSVGg11+4XcXj4rA4k02zGxNcxkkhkWikO3SL008CDVl wVsSD/ZymSW2hA0IVc87ByuM6d3nQuHrFREQErpg/Zb5zTagCAnjfhaE7OvXCJo6 n67n923meH/yu2oHWqFmX1ocDQ== -----END CERTIFICATE-----Generated at Mon Mar 2 00:45:36 2026 by rpki-client