$ rpki-client -vvf rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft File: -L04pMnwxPpzvw2Q_wzKgC2_1tw.mft (raw, json) Hash identifier: L/jPMAP0kN/tb/oz1Chmi4sHKDCJsROq0s+ETfuPQ3k= Subject key identifier: 8B:8B:49:84:FB:F5:B8:37:6B:EC:E1:14:23:A1:E3:70:7E:3B:B2:EA Authority key identifier: F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC Certificate issuer: /CN=A91407B7/serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Certificate serial: 087D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft Manifest number: 0868 Signing time: Mon 02 Mar 2026 01:08:09 +0000 Manifest this update: Mon 02 Mar 2026 01:08:07 +0000 Manifest next update: Mon 09 Mar 2026 01:08:07 +0000 Files and hashes: 1: -L04pMnwxPpzvw2Q_wzKgC2_1tw.crl (hash: PZonAG7/klGgMgA+583tbB7FO5g+IfK4pr/UwXkxHvI=) 2: 26833348954511EFA5D9B90FC4F9AE02.roa (hash: h8w/oRabDFzHFUZZQz0f2z/FRWd7Jq2xtW0buGwOh1U=) 3: 4878EA2E954511EF87341210C4F9AE02.roa (hash: nPuGU4dIjV5NcDfw4+iA+iIUzRsqHity9f8+08+b7NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2173 (0x87d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91407B7, serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Validity Not Before: Mar 2 01:08:07 2026 GMT Not After : Mar 9 01:08:07 2026 GMT Subject: CN=69a4e2f9-3bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:96:72:ea:99:c2:16:be:09:e3:ce:67:b6:57: e1:70:63:a7:f9:b9:ba:b3:c8:10:d5:06:c2:e2:d9: ad:87:ab:ad:13:ab:1f:29:88:8b:fd:44:24:90:e5: 0a:92:c7:2c:52:42:5c:19:62:9a:7c:c1:ba:99:a2: 9e:53:8d:0e:72:ec:4f:f5:14:b4:37:c0:86:7b:60: 5c:a7:24:6d:27:c0:18:4e:13:3b:9c:4a:a9:b8:09: 78:c9:90:5d:2c:4a:e1:d6:8e:1c:75:4c:13:bc:83: 76:c9:5e:8d:b6:c6:ba:5d:e3:12:1b:35:ee:cc:1c: 6a:66:5d:2f:cc:51:a2:cb:b6:b5:77:03:d8:e8:de: 13:15:17:05:0a:87:93:66:47:c1:bf:50:a0:33:3c: 29:17:16:d4:96:66:b3:d3:05:9a:b6:66:b4:f7:d6: cb:04:89:6f:da:4b:8a:1d:8b:fe:dd:9a:48:d2:67: a2:d2:c7:12:ea:a4:f8:07:85:35:c1:1f:5f:d4:56: 82:65:cd:fb:8f:81:ee:63:a2:30:f9:b3:b2:b2:77: 04:69:41:a2:a4:f2:eb:a3:bd:4b:92:00:67:10:da: 6c:8f:42:45:c0:ef:05:37:99:cc:0b:09:da:89:06: a4:58:73:74:1a:44:b0:a4:d0:c9:f8:e4:97:e6:a1: 79:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8B:49:84:FB:F5:B8:37:6B:EC:E1:14:23:A1:E3:70:7E:3B:B2:EA X509v3 Authority Key Identifier: keyid:F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:1e:52:fb:7a:d7:ad:71:03:85:05:6a:c8:35:7c:6d:79:c2: 2e:b2:45:b1:59:ec:ee:30:e0:54:0b:7b:f5:50:e2:30:64:98: be:57:81:dd:83:22:d0:9a:1a:eb:1e:60:a2:ce:26:0c:a5:76: 96:13:ea:15:40:2f:fc:9a:33:73:ec:f3:a1:18:9c:ed:80:0c: 96:4e:78:4d:84:67:3a:a0:b9:28:8c:27:b6:3d:1e:8e:93:f2: 74:25:ff:1a:30:7e:75:2d:c1:f0:5b:90:08:fc:eb:2a:fd:71: 0d:4c:a9:a9:db:68:66:2d:b6:a4:9a:cb:03:61:44:fa:e9:ac: 1f:80:73:ef:3b:12:7e:b3:48:97:bc:a5:ea:af:ce:9f:bf:75: 74:66:3b:2d:dd:ef:ea:6d:03:de:e9:ef:be:9a:aa:83:ab:67: 9b:22:d6:d5:5a:39:81:94:b4:7b:54:08:83:59:05:c5:9f:a5: c8:c7:30:8d:4a:df:87:13:5c:9c:cc:8e:06:31:b8:fe:04:dd: 03:68:b2:38:ef:23:5b:6d:ef:35:72:c9:4f:9a:51:ff:a8:b3: 0d:48:02:2d:23:63:09:4c:47:f8:c3:e8:f2:67:f8:4c:b7:81: 24:1d:49:3e:80:28:06:d2:5d:45:d6:28:2f:06:04:d1:96:31: 0a:50:84:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA3QjcxMTAvBgNVBAUTKEY4QkQzOEE0QzlGMEM0RkE3M0JGMEQ5MEZGMENDQTgw MkRCRkQ2REMwHhcNMjYwMzAyMDEwODA3WhcNMjYwMzA5MDEwODA3WjAYMRYwFAYD VQQDEw02OWE0ZTJmOS0zYmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ZZy6pnCFr4J485ntlfhcGOn+bm6s8gQ1QbC4tmth6utE6sfKYiL/UQkkOUK kscsUkJcGWKafMG6maKeU40OcuxP9RS0N8CGe2BcpyRtJ8AYThM7nEqpuAl4yZBd LErh1o4cdUwTvIN2yV6Ntsa6XeMSGzXuzBxqZl0vzFGiy7a1dwPY6N4TFRcFCoeT ZkfBv1CgMzwpFxbUlmaz0wWatma099bLBIlv2kuKHYv+3ZpI0mei0scS6qT4B4U1 wR9f1FaCZc37j4HuY6Iw+bOysncEaUGipPLro71LkgBnENpsj0JFwO8FN5nMCwna iQakWHN0GkSwpNDJ+OSX5qF5kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIuLSYT7 9bg3a+zhFCOh43B+O7LqMB8GA1UdIwQYMBaAFPi9OKTJ8MT6c78NkP8MyoAtv9bc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDdCNy9CRDZGRTg1MEYx NzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQcHp2dzJRX3d6S2dDMl8x dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1MMDRwTW53eFBwenZ3MlFfd3pLZ0MyXzF0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDdCNy9CRDZGRTg1MEYxNzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQ cHp2dzJRX3d6S2dDMl8xdHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASB5S+3rXrXEDhQVqyDV8bXnCLrJFsVns7jDgVAt79VDiMGSYvleB3YMi0Joa 6x5gos4mDKV2lhPqFUAv/Jozc+zzoRic7YAMlk54TYRnOqC5KIwntj0ejpPydCX/ GjB+dS3B8FuQCPzrKv1xDUypqdtoZi22pJrLA2FE+umsH4Bz7zsSfrNIl7yl6q/O n791dGY7Ld3v6m0D3unvvpqqg6tnmyLW1Vo5gZS0e1QIg1kFxZ+lyMcwjUrfhxNc nMyOBjG4/gTdA2iyOO8jW23vNXLJT5pR/6izDUgCLSNjCUxH+MPo8mf4TLeBJB1J PoAoBtJdRdYoLwYE0ZYxClCEug== -----END CERTIFICATE-----Generated at Mon Mar 2 17:32:19 2026 by rpki-client