$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft File: jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft (raw, json) Hash identifier: N2fWJ/nu5RRNCsJuTSRgnIfX6xPePerD3xZwAmpHKRY= Subject key identifier: D3:DE:E6:9A:50:10:77:12:3D:41:DF:B5:3C:AA:4F:05:34:E2:A1:08 Authority key identifier: 8C:D3:E1:BC:FC:77:88:88:73:F6:F5:86:F6:4A:64:31:A3:B5:6C:FF Certificate issuer: /CN=A91CEE6D/serialNumber=8CD3E1BCFC77888873F6F586F64A6431A3B56CFF Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNPhvPx3iIhz9vWG9kpkMaO1bP8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft Manifest number: 53 Signing time: Sun 01 Mar 2026 09:35:14 +0000 Manifest this update: Sun 01 Mar 2026 09:35:14 +0000 Manifest next update: Sun 08 Mar 2026 09:35:14 +0000 Files and hashes: 1: jNPhvPx3iIhz9vWG9kpkMaO1bP8.crl (hash: 8ayPKFqKsR1k6OC8kJb89eQyU99eWqk/V0B3Ekx7vJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.crl rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNPhvPx3iIhz9vWG9kpkMaO1bP8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE6D, serialNumber=8CD3E1BCFC77888873F6F586F64A6431A3B56CFF Validity Not Before: Mar 1 09:35:14 2026 GMT Not After : Mar 8 09:35:14 2026 GMT Subject: CN=69a40852-34d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:75:d2:d9:f3:9b:6d:7c:3d:62:da:b9:9c:4c: 9e:22:d2:d8:2d:14:ab:30:b3:c1:55:4b:d4:39:45: 90:2a:de:4c:86:49:18:c2:46:6b:c6:30:b5:1b:c6: ad:be:5c:99:bb:7a:e5:97:4c:88:1b:84:89:47:f0: 92:22:bf:af:7c:e3:13:e5:8a:41:5b:8d:39:35:b7: ff:d2:42:e3:33:c4:23:a5:2f:8b:72:3e:19:89:ef: 69:44:eb:78:0c:83:70:af:d6:24:92:33:15:d0:9c: 44:b0:cf:6f:eb:d1:c2:91:4c:c1:40:4d:80:9f:69: f7:8e:38:b9:ee:6d:f7:32:6a:d4:2b:11:57:89:c1: 1b:f7:d3:36:7f:03:7a:b9:6f:f2:90:a0:1b:f6:98: 62:93:c9:3e:b8:ca:30:b2:2f:b9:28:08:24:bb:56: 75:05:25:8a:17:1f:24:8f:fa:17:98:c3:f2:3a:54: 66:0e:e2:f0:65:eb:45:9c:53:0c:09:bc:be:4d:2d: 1e:21:cb:9a:54:9e:9b:51:ad:93:36:4e:75:80:4e: 15:ac:19:86:0c:d9:c8:cb:de:bc:11:0e:11:38:c1: 66:b6:fb:94:31:57:0d:b8:e4:c5:4c:76:d5:e2:55: 38:37:d1:d3:8e:aa:6b:53:d9:6b:85:0d:a7:8d:b8: 28:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DE:E6:9A:50:10:77:12:3D:41:DF:B5:3C:AA:4F:05:34:E2:A1:08 X509v3 Authority Key Identifier: keyid:8C:D3:E1:BC:FC:77:88:88:73:F6:F5:86:F6:4A:64:31:A3:B5:6C:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNPhvPx3iIhz9vWG9kpkMaO1bP8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:8e:e9:56:fd:09:bd:dc:11:9c:86:44:11:57:c2:2b:05:f7: a2:06:09:68:43:f0:d1:d5:5f:5b:74:1a:7f:e9:61:fb:7a:60: c7:b0:e3:c6:b8:78:4c:3f:71:c0:9d:d7:9b:42:5e:a8:04:4e: 12:ce:6e:be:ef:ea:8b:64:dc:bb:8c:c5:0d:1f:fc:00:4c:a2: ae:36:bc:03:05:99:09:63:4c:8a:87:3a:75:31:46:a0:e4:40: a8:cd:55:9e:aa:d2:a3:d6:c5:75:5e:76:39:08:97:b1:50:9f: fc:9b:5e:74:87:10:0f:11:05:fd:2c:fa:be:b4:bf:14:c9:c0: f3:73:d5:25:20:ed:5e:04:7d:3d:3a:f4:d8:95:5a:37:cf:ce: 90:e5:7e:2e:60:a7:26:fc:dd:5b:80:c8:d8:a2:28:58:33:13: d1:ee:7d:af:97:6d:4b:3d:3f:1f:1b:6e:fd:47:6b:34:12:93: e2:e8:bc:f5:df:af:87:82:24:63:3b:03:1b:fa:94:98:56:bf: d7:ed:d1:10:a7:9e:66:94:1b:3d:f8:6e:c6:7a:93:2f:e6:0c: 8c:62:0e:a2:7c:b0:71:d8:fc:94:be:a6:73:fc:a5:f4:be:5c: 68:37:71:ff:91:87:78:38:ed:27:53:b7:59:51:b3:fc:b0:64: eb:5e:5c:82 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RUU2RDExMC8GA1UEBRMoOENEM0UxQkNGQzc3ODg4ODczRjZGNTg2RjY0QTY0MzFB M0I1NkNGRjAeFw0yNjAzMDEwOTM1MTRaFw0yNjAzMDgwOTM1MTRaMBgxFjAUBgNV BAMTDTY5YTQwODUyLTM0ZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoddLZ85ttfD1i2rmcTJ4i0tgtFKsws8FVS9Q5RZAq3kyGSRjCRmvGMLUbxq2+ XJm7euWXTIgbhIlH8JIiv6984xPlikFbjTk1t//SQuMzxCOlL4tyPhmJ72lE63gM g3Cv1iSSMxXQnESwz2/r0cKRTMFATYCfafeOOLnubfcyatQrEVeJwRv30zZ/A3q5 b/KQoBv2mGKTyT64yjCyL7koCCS7VnUFJYoXHySP+heYw/I6VGYO4vBl60WcUwwJ vL5NLR4hy5pUnptRrZM2TnWAThWsGYYM2cjL3rwRDhE4wWa2+5QxVw245MVMdtXi VTg30dOOqmtT2WuFDaeNuCh7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU097mmlAQ dxI9Qd+1PKpPBTTioQgwHwYDVR0jBBgwFoAUjNPhvPx3iIhz9vWG9kpkMaO1bP8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFRTZELzVBMjlBQjFFOTc2 NTExRjA5MjNBNjcwQ0M0RjlBRTAyL2pOUGh2UHgzaUloejl2V0c5a3BrTWFPMWJQ OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvak5QaHZQeDNpSWh6OXZXRzlrcGtNYU8xYlA4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF RTZELzVBMjlBQjFFOTc2NTExRjA5MjNBNjcwQ0M0RjlBRTAyL2pOUGh2UHgzaUlo ejl2V0c5a3BrTWFPMWJQOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCAjulW/Qm93BGchkQRV8IrBfeiBgloQ/DR1V9bdBp/6WH7emDHsOPGuHhMP3HA ndebQl6oBE4Szm6+7+qLZNy7jMUNH/wATKKuNrwDBZkJY0yKhzp1MUag5ECozVWe qtKj1sV1XnY5CJexUJ/8m150hxAPEQX9LPq+tL8UycDzc9UlIO1eBH09OvTYlVo3 z86Q5X4uYKcm/N1bgMjYoihYMxPR7n2vl21LPT8fG279R2s0EpPi6Lz136+HgiRj OwMb+pSYVr/X7dEQp55mlBs9+G7GepMv5gyMYg6ifLBx2PyUvqZz/KX0vlxoN3H/ kYd4OO0nU7dZUbP8sGTrXlyC -----END CERTIFICATE-----Generated at Mon Mar 2 16:44:36 2026 by rpki-client