$ rpki-client -vvf rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft File: oL8weU5q5J7AaNUDjPmv9UNdHdI.mft (raw, json) Hash identifier: YIa/NPVoWdLknqYbuEF5vHq39HYu6n8wyAlHlD578TY= Subject key identifier: CD:7A:84:FB:81:C4:46:32:25:96:A2:F4:34:DD:ED:4F:B1:6F:2D:63 Authority key identifier: A0:BF:30:79:4E:6A:E4:9E:C0:68:D5:03:8C:F9:AF:F5:43:5D:1D:D2 Certificate issuer: /CN=A91597A7/serialNumber=A0BF30794E6AE49EC068D5038CF9AFF5435D1DD2 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft Manifest number: 41 Signing time: Sun 01 Mar 2026 09:52:00 +0000 Manifest this update: Sun 01 Mar 2026 09:52:00 +0000 Manifest next update: Sun 08 Mar 2026 09:52:00 +0000 Files and hashes: 1: oL8weU5q5J7AaNUDjPmv9UNdHdI.crl (hash: D4KzyZjTdWILh3O8u0ZkxGQUY7Pi0aiq5F2uvJlvjhE=) 2: 6DD11538BA6711F0A5E1473EC4F9AE02.roa (hash: aZcuk92cPHBLPT7kL0kkLxHikI+2JffenZZL+WJEXRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.crl rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91597A7, serialNumber=A0BF30794E6AE49EC068D5038CF9AFF5435D1DD2 Validity Not Before: Mar 1 09:52:00 2026 GMT Not After : Mar 8 09:52:00 2026 GMT Subject: CN=69a40c40-7468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8b:06:cc:98:69:6d:44:fa:40:74:17:2b:3f: b2:31:17:15:9a:b0:67:51:06:e8:8a:a4:1f:26:36: 47:4b:61:e7:63:89:ff:0b:80:55:53:83:c3:e8:63: 97:18:1b:09:09:99:e2:5d:5f:5b:09:9b:05:5f:5f: 43:fa:8e:40:86:8c:44:81:7c:8e:29:3b:9d:89:58: 61:04:6c:c3:c0:af:41:b6:3f:d2:bf:2e:2e:08:55: a0:41:72:33:e2:b5:3b:92:a5:8a:5b:08:a4:69:c8: 26:67:22:d0:60:90:30:70:d3:5f:86:76:42:de:ab: ef:f0:ae:f2:3c:81:41:60:49:b6:81:98:93:33:36: ab:b4:b4:4e:fc:d9:23:54:4b:aa:32:24:c5:52:64: 29:c9:a4:67:1c:36:10:41:1c:28:47:28:40:39:86: 1e:7e:26:f8:76:9a:2e:8e:4f:f7:b6:33:ac:60:ec: 47:76:13:58:a2:1b:54:58:09:ae:ac:2f:3d:66:38: c8:c9:36:41:0d:49:72:7c:5a:6e:96:6b:d8:77:40: 49:83:58:48:4d:93:c6:cc:69:42:54:51:47:91:ba: 24:a2:5b:ca:b0:54:20:a7:76:2a:4e:94:47:5b:cb: 10:ad:d0:c0:8c:66:dc:01:5a:84:d7:68:b5:79:b9: dd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:7A:84:FB:81:C4:46:32:25:96:A2:F4:34:DD:ED:4F:B1:6F:2D:63 X509v3 Authority Key Identifier: keyid:A0:BF:30:79:4E:6A:E4:9E:C0:68:D5:03:8C:F9:AF:F5:43:5D:1D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:7f:c9:7c:e9:40:10:90:e4:d8:b5:67:d0:75:d3:94:a9:15: ae:c6:e1:f0:67:79:72:94:0a:57:97:d5:96:be:ba:64:6b:ec: 4e:0c:ab:0f:84:35:6d:36:c7:1a:e0:c0:c1:ac:7e:ad:1c:eb: 3a:bc:4d:a8:ad:35:09:3c:0d:63:bb:21:84:68:dc:0f:ad:95: 3f:f9:28:53:33:fc:9e:cc:bf:dc:2f:ed:32:b2:ff:a3:06:d2: 5e:a0:49:46:32:d3:a2:a5:52:fb:73:6b:65:7a:ea:1b:b7:44: b4:1f:dd:a8:3b:df:47:43:ff:d9:2b:e7:e6:5b:36:60:36:88: 27:c0:e8:aa:c8:01:f9:d4:9d:94:c7:20:db:84:b5:db:fa:1d: 68:ee:e6:de:ea:f4:0c:8b:f5:4d:f9:6c:13:1c:a4:05:ad:ba: e1:91:d2:6c:e4:c8:9c:6c:f7:37:b0:49:88:44:52:ce:aa:e9: 50:62:11:c2:c0:87:52:4c:2f:41:b0:c7:ab:5d:8d:64:78:4f: dc:f8:bb:54:f9:9b:ef:c0:b1:44:3b:a3:cd:c5:de:db:16:f6: e9:d4:02:80:ae:67:29:58:27:8b:5e:41:a4:b0:e5:88:a3:00: a4:a0:95:96:02:fe:14:72:70:bf:3e:52:c7:1c:17:9c:99:2e: 3d:18:5f:14 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTdBNzExMC8GA1UEBRMoQTBCRjMwNzk0RTZBRTQ5RUMwNjhENTAzOENGOUFGRjU0 MzVEMUREMjAeFw0yNjAzMDEwOTUyMDBaFw0yNjAzMDgwOTUyMDBaMBgxFjAUBgNV BAMTDTY5YTQwYzQwLTc0NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFiwbMmGltRPpAdBcrP7IxFxWasGdRBuiKpB8mNkdLYedjif8LgFVTg8PoY5cY GwkJmeJdX1sJmwVfX0P6jkCGjESBfI4pO52JWGEEbMPAr0G2P9K/Li4IVaBBcjPi tTuSpYpbCKRpyCZnItBgkDBw01+GdkLeq+/wrvI8gUFgSbaBmJMzNqu0tE782SNU S6oyJMVSZCnJpGccNhBBHChHKEA5hh5+Jvh2mi6OT/e2M6xg7Ed2E1iiG1RYCa6s Lz1mOMjJNkENSXJ8Wm6Wa9h3QEmDWEhNk8bMaUJUUUeRuiSiW8qwVCCndipOlEdb yxCt0MCMZtwBWoTXaLV5ud3VAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzXqE+4HE RjIllqL0NN3tT7FvLWMwHwYDVR0jBBgwFoAUoL8weU5q5J7AaNUDjPmv9UNdHdIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5N0E3LzAxMDIyNzgyQkEz ODExRjA5MzQwOEY2QkM0RjlBRTAyL29MOHdlVTVxNUo3QWFOVURqUG12OVVOZEhk SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb0w4d2VVNXE1SjdBYU5VRGpQbXY5VU5kSGRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 N0E3LzAxMDIyNzgyQkEzODExRjA5MzQwOEY2QkM0RjlBRTAyL29MOHdlVTVxNUo3 QWFOVURqUG12OVVOZEhkSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB2f8l86UAQkOTYtWfQddOUqRWuxuHwZ3lylApXl9WWvrpka+xODKsPhDVtNsca 4MDBrH6tHOs6vE2orTUJPA1juyGEaNwPrZU/+ShTM/yezL/cL+0ysv+jBtJeoElG MtOipVL7c2tleuobt0S0H92oO99HQ//ZK+fmWzZgNognwOiqyAH51J2UxyDbhLXb +h1o7ube6vQMi/VN+WwTHKQFrbrhkdJs5MicbPc3sEmIRFLOqulQYhHCwIdSTC9B sMerXY1keE/c+LtU+ZvvwLFEO6PNxd7bFvbp1AKArmcpWCeLXkGksOWIowCkoJWW Av4UcnC/PlLHHBecmS49GF8U -----END CERTIFICATE-----Generated at Mon Mar 2 09:19:45 2026 by rpki-client