$ rpki-client -vvf rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft File: orn_7UcMW3HFLztks7btpBm-E7M.mft (raw, json) Hash identifier: rvvI3Oj8LiY+pNInz3QLsEixlGT2G6K7zLa6xhfLtzc= Subject key identifier: 1D:05:E0:29:DA:13:B7:7F:0F:88:7C:7C:71:4C:B8:86:62:FB:70:5A Authority key identifier: A2:B9:FF:ED:47:0C:5B:71:C5:2F:3B:64:B3:B6:ED:A4:19:BE:13:B3 Certificate issuer: /CN=A91187C1/serialNumber=A2B9FFED470C5B71C52F3B64B3B6EDA419BE13B3 Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/orn_7UcMW3HFLztks7btpBm-E7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft Manifest number: 80 Signing time: Sun 01 Mar 2026 09:00:59 +0000 Manifest this update: Sun 01 Mar 2026 09:00:59 +0000 Manifest next update: Sun 08 Mar 2026 09:00:59 +0000 Files and hashes: 1: orn_7UcMW3HFLztks7btpBm-E7M.crl (hash: lFs6tesgWzk+N1u2U0R+2sZVSAWcLEQCJdgGcMi+dho=) 2: C265A63A571211F092B99F2AC4F9AE02.roa (hash: vaeeD9A4QxOANnmAmiWS0iabhsevE39S0swYTABF/54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.crl rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/orn_7UcMW3HFLztks7btpBm-E7M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91187C1, serialNumber=A2B9FFED470C5B71C52F3B64B3B6EDA419BE13B3 Validity Not Before: Mar 1 09:00:59 2026 GMT Not After : Mar 8 09:00:59 2026 GMT Subject: CN=69a4004b-4aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:63:24:58:d1:50:f5:3c:e5:0d:da:bd:d6:e9: 06:56:fa:96:76:c6:93:b0:bf:c3:83:06:5b:c8:df: 70:3e:d4:09:d9:6f:3b:38:81:70:da:47:9a:b9:28: 2a:3c:50:9a:39:80:e6:82:a3:96:44:5d:23:79:70: 53:62:51:b3:c3:96:0f:86:35:1d:41:eb:f3:66:17: d3:20:7c:db:56:79:d4:e4:9c:24:3d:b2:00:70:dc: df:47:80:6a:1b:4b:16:8c:c5:1c:aa:59:e0:ac:0a: 3e:fd:25:73:37:8a:76:90:6c:7c:93:28:9a:a5:a8: 39:2e:5c:55:cb:98:90:04:f8:68:af:58:8e:3a:70: c8:0c:85:53:ec:f7:9d:2d:17:7f:51:e9:19:08:6d: fb:f3:7e:be:2d:70:97:43:d6:a3:4d:22:45:4d:b3: 30:d6:36:bd:25:71:e8:64:99:61:e2:0b:02:bd:f9: 59:98:4f:6f:c6:be:21:72:ce:03:2a:48:f0:4c:6c: cd:07:c3:4f:68:22:b9:59:c2:ad:17:10:b9:88:24: 6b:c7:33:13:a1:fb:af:c0:63:df:a7:ff:05:81:4f: 30:23:d1:95:be:ca:f0:92:12:77:18:3d:ee:5c:a4: 9c:e3:27:9a:24:99:9f:45:28:10:a1:76:bc:7a:33: f5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:05:E0:29:DA:13:B7:7F:0F:88:7C:7C:71:4C:B8:86:62:FB:70:5A X509v3 Authority Key Identifier: keyid:A2:B9:FF:ED:47:0C:5B:71:C5:2F:3B:64:B3:B6:ED:A4:19:BE:13:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/orn_7UcMW3HFLztks7btpBm-E7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:7f:62:93:dc:c5:71:09:0f:59:29:6d:dd:cf:dd:f0:95:9f: 7a:4b:1f:ca:a4:ff:f2:c1:7b:e9:e7:52:e6:2c:c5:63:90:c8: fb:4f:4f:83:39:57:5f:f8:1e:e2:5a:ca:3c:d7:38:16:e6:9a: 8b:cd:e1:02:11:56:c4:ff:5f:74:25:75:f0:6d:32:02:c0:91: ea:17:83:c5:9a:44:ea:ff:68:85:fd:7f:2b:63:c8:1b:86:d2: 5f:21:1f:5b:b4:b4:c2:fd:7b:d6:aa:72:9c:3e:15:1e:f9:bf: c4:f4:03:c0:c8:e6:e8:c0:b7:f7:5d:09:63:9d:8d:7e:5f:8a: d6:c3:1f:80:6b:e9:cb:38:e7:52:04:e0:aa:45:a7:6a:c5:ad: 72:99:66:29:0f:5e:1a:84:aa:d1:96:6f:ac:50:73:be:d1:0b: 2f:58:9e:77:f8:e2:63:c1:02:2a:83:46:65:94:d0:b1:22:02: 3c:a6:c0:bc:93:01:10:24:0a:d1:4c:a2:f3:cd:4c:8d:13:b2: b2:4a:f4:cf:44:f3:9f:57:a6:2f:8e:56:de:df:1c:e9:3a:15: 04:12:1c:a6:47:17:9e:c5:dd:72:0b:52:a2:93:6c:54:12:32: 8e:34:51:c8:f8:bd:f7:d8:d6:e1:6b:68:45:8b:d5:9c:66:65: ef:f0:af:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3QzExMTAvBgNVBAUTKEEyQjlGRkVENDcwQzVCNzFDNTJGM0I2NEIzQjZFREE0 MTlCRTEzQjMwHhcNMjYwMzAxMDkwMDU5WhcNMjYwMzA4MDkwMDU5WjAYMRYwFAYD VQQDEw02OWE0MDA0Yi00YWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2MkWNFQ9TzlDdq91ukGVvqWdsaTsL/DgwZbyN9wPtQJ2W87OIFw2keauSgq PFCaOYDmgqOWRF0jeXBTYlGzw5YPhjUdQevzZhfTIHzbVnnU5JwkPbIAcNzfR4Bq G0sWjMUcqlngrAo+/SVzN4p2kGx8kyiapag5LlxVy5iQBPhor1iOOnDIDIVT7Ped LRd/UekZCG37836+LXCXQ9ajTSJFTbMw1ja9JXHoZJlh4gsCvflZmE9vxr4hcs4D KkjwTGzNB8NPaCK5WcKtFxC5iCRrxzMTofuvwGPfp/8FgU8wI9GVvsrwkhJ3GD3u XKSc4yeaJJmfRSgQoXa8ejP1rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB0F4Cna E7d/D4h8fHFMuIZi+3BaMB8GA1UdIwQYMBaAFKK5/+1HDFtxxS87ZLO27aQZvhOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODdDMS8yNjMxQzhCNDU3 MEExMUYwQjUzOENGNjVDNEY5QUUwMi9vcm5fN1VjTVczSEZMenRrczdidHBCbS1F N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29ybl83VWNNVzNIRkx6dGtzN2J0cEJtLUU3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODdDMS8yNjMxQzhCNDU3MEExMUYwQjUzOENGNjVDNEY5QUUwMi9vcm5fN1VjTVcz SEZMenRrczdidHBCbS1FN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd39ik9zFcQkPWSlt3c/d8JWfeksfyqT/8sF76edS5izFY5DI+09PgzlXX/ge 4lrKPNc4Fuaai83hAhFWxP9fdCV18G0yAsCR6heDxZpE6v9ohf1/K2PIG4bSXyEf W7S0wv171qpynD4VHvm/xPQDwMjm6MC3910JY52Nfl+K1sMfgGvpyzjnUgTgqkWn asWtcplmKQ9eGoSq0ZZvrFBzvtELL1ied/jiY8ECKoNGZZTQsSICPKbAvJMBECQK 0Uyi881MjROyskr0z0Tzn1emL45W3t8c6ToVBBIcpkcXnsXdcgtSopNsVBIyjjRR yPi999jW4WtoRYvVnGZl7/CvSw== -----END CERTIFICATE-----Generated at Tue Mar 3 07:16:03 2026 by rpki-client