$ rpki-client -vvf rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft File: tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft (raw, json) Hash identifier: lFBgwYl38WcpPTb0q11tAqF5mTHTNrF9SjKVNjd0YMg= Subject key identifier: 39:B8:FB:F8:57:EF:C2:80:52:76:06:BC:71:77:7C:E9:E7:3B:67:87 Authority key identifier: B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 Certificate issuer: /CN=A91599B5/serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft Manifest number: 7B Signing time: Mon 02 Mar 2026 12:28:07 +0000 Manifest this update: Mon 02 Mar 2026 12:28:06 +0000 Manifest next update: Mon 09 Mar 2026 12:28:06 +0000 Files and hashes: 1: tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl (hash: ea2sPTboR9Vs9Oe0RgQKQuGfSix1BhTjx7AeswWmmug=) 2: E13B045ACAD611F0AB7FEE55C4F9AE02.roa (hash: HUQd5AJYGdLE7NKYHx8Lq6oK6+YpU4Q/zvBoPbc+PIM=) 3: 1D5A2DB2CAD711F0A64CBB56C4F9AE02.roa (hash: UYmzmNOhHVux9yZEz47QdQpPwQPcVltUv0OFhaHMSfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 12:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91599B5, serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Validity Not Before: Mar 2 12:28:06 2026 GMT Not After : Mar 9 12:28:06 2026 GMT Subject: CN=69a58256-11d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:aa:96:ba:55:03:67:1f:1d:41:c0:d1:5f:d3: f0:66:5e:7a:2b:4d:07:e2:2e:d4:e1:be:53:88:69: 07:1d:0b:a3:84:80:8c:aa:ad:cb:51:f3:da:16:ba: 70:47:6b:15:db:eb:58:eb:35:32:bc:0c:fb:9a:38: 7f:3c:6e:6c:6b:70:1c:84:d0:d1:12:6b:ad:4b:db: d3:11:b6:37:63:a3:4f:93:1d:7a:e8:83:6d:fa:db: b5:9a:a7:6f:9d:9c:72:80:90:d1:11:25:ce:13:c6: 7f:f2:52:3c:ea:ee:85:5a:d8:83:7c:c5:24:66:6c: 11:6c:5a:6a:bd:2e:ad:39:c3:ab:50:2b:b0:3b:87: b6:fe:d0:d7:9d:f4:6a:aa:ed:0e:92:86:21:c7:4e: ac:38:c1:75:d0:61:27:a9:a8:d6:95:20:e6:e8:ba: a5:89:22:af:d8:11:5a:b0:52:d6:9c:af:a8:b9:6b: 0a:57:19:33:29:95:28:58:0b:56:45:91:6d:c9:1d: a3:b0:1b:b5:7b:25:de:8c:a3:09:58:3f:a0:91:d0: 10:89:81:57:95:96:c3:68:72:d1:5f:14:a5:6b:99: de:e9:bb:b4:72:0d:00:cd:4a:e2:54:54:18:4b:4e: 97:8b:04:d2:ad:71:70:d1:61:7f:06:60:5f:b5:d5: 72:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B8:FB:F8:57:EF:C2:80:52:76:06:BC:71:77:7C:E9:E7:3B:67:87 X509v3 Authority Key Identifier: keyid:B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:d0:96:27:ce:e5:68:c5:50:a3:a3:08:e9:37:7b:3a:26:f1: 31:68:05:5c:ed:83:3a:58:78:02:71:09:37:4c:4d:f8:ec:83: c2:5b:54:39:f4:32:f0:2b:d7:c7:d7:ab:9a:5e:42:9b:2c:b1: 17:83:c7:6f:91:cc:de:66:ab:3a:14:bc:23:1f:24:ac:1b:bd: 89:d1:8e:aa:bb:34:a5:b2:f5:cd:ea:19:01:16:1c:af:e8:8c: be:ab:fa:26:bf:2d:b5:f8:b0:92:12:27:39:35:4b:a7:14:e8: ab:f4:07:74:a2:29:75:39:c2:90:11:87:24:c3:5c:e8:64:79: 0c:7f:6a:41:92:b9:b8:ab:b6:04:9f:01:f5:3b:a7:64:45:b2: 6e:9f:27:75:6e:9a:5c:e9:75:bf:ac:cc:66:88:f8:cc:7a:02: 2e:c6:59:2f:ec:14:69:1d:76:f4:ab:b8:e9:76:0e:d1:b5:1f: c3:79:1d:47:0b:c4:7c:e2:ee:54:6d:f7:54:ba:b7:d5:fc:a7: bb:6e:4a:c4:40:01:d3:6a:27:c5:d1:e0:bc:17:e6:3e:c4:f0: 51:d3:82:66:71:32:05:f6:ec:b8:b0:4b:3e:8f:f6:b2:b3:c0: 7d:0c:51:b9:64:88:bf:89:22:ea:69:2c:de:53:60:2b:07:cd: 34:1c:cd:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk5QjUxMTAvBgNVBAUTKEI1MkFFMTgzNkM2MTE5M0RFQThCQTVCRTlENzFCOENC QjM0MzAzOTgwHhcNMjYwMzAyMTIyODA2WhcNMjYwMzA5MTIyODA2WjAYMRYwFAYD VQQDEw02OWE1ODI1Ni0xMWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6qWulUDZx8dQcDRX9PwZl56K00H4i7U4b5TiGkHHQujhICMqq3LUfPaFrpw R2sV2+tY6zUyvAz7mjh/PG5sa3AchNDREmutS9vTEbY3Y6NPkx166INt+tu1mqdv nZxygJDRESXOE8Z/8lI86u6FWtiDfMUkZmwRbFpqvS6tOcOrUCuwO4e2/tDXnfRq qu0OkoYhx06sOMF10GEnqajWlSDm6LqliSKv2BFasFLWnK+ouWsKVxkzKZUoWAtW RZFtyR2jsBu1eyXejKMJWD+gkdAQiYFXlZbDaHLRXxSla5ne6bu0cg0AzUriVFQY S06XiwTSrXFw0WF/BmBftdVybQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDm4+/hX 78KAUnYGvHF3fOnnO2eHMB8GA1UdIwQYMBaAFLUq4YNsYRk96oulvp1xuMuzQwOY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTlCNS9CMjI2NkZEMjZE RTQxMUYwQkUwMkY5NjFDNEY5QUUwMi90U3JoZzJ4aEdUM3FpNlctblhHNHk3TkRB NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RTcmhnMnhoR1QzcWk2Vy1uWEc0eTdOREE1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTlCNS9CMjI2NkZEMjZERTQxMUYwQkUwMkY5NjFDNEY5QUUwMi90U3JoZzJ4aEdU M3FpNlctblhHNHk3TkRBNWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFdCWJ87laMVQo6MI6Td7OibxMWgFXO2DOlh4AnEJN0xN+OyDwltUOfQy8CvX x9erml5CmyyxF4PHb5HM3marOhS8Ix8krBu9idGOqrs0pbL1zeoZARYcr+iMvqv6 Jr8ttfiwkhInOTVLpxToq/QHdKIpdTnCkBGHJMNc6GR5DH9qQZK5uKu2BJ8B9Tun ZEWybp8ndW6aXOl1v6zMZoj4zHoCLsZZL+wUaR129Ku46XYO0bUfw3kdRwvEfOLu VG33VLq31fynu25KxEAB02onxdHgvBfmPsTwUdOCZnEyBfbsuLBLPo/2srPAfQxR uWSIv4ki6mks3lNgKwfNNBzNmg== -----END CERTIFICATE-----Generated at Mon Mar 2 22:21:39 2026 by rpki-client