$ rpki-client -vvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft File: -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json) Hash identifier: /EE//OilfWFXtBf9H+uqDd599nabqAQg8ofVCJt2c9U= Subject key identifier: 86:1D:D5:60:D5:2F:33:7D:8B:DE:D5:9B:D4:45:FC:0D:B0:6B:B4:0A Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B Certificate issuer: /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Certificate serial: 0FF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft Manifest number: 0FE2 Signing time: Mon 02 Mar 2026 03:08:23 +0000 Manifest this update: Mon 02 Mar 2026 03:08:22 +0000 Manifest next update: Mon 09 Mar 2026 03:08:22 +0000 Files and hashes: 1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: +GL0lXERNYR9TK5ksIj5c5Cp87riF8vAm+kYabFLsSg=) 2: 6AE44D5C3E4511F090A5C643C4F9AE02.roa (hash: GpIlPzjXhUM0zJ+cM7pnn7EyYVYFkBP5Hh3rm33qqKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4085 (0xff5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91657DD, serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Validity Not Before: Mar 2 03:08:22 2026 GMT Not After : Mar 9 03:08:22 2026 GMT Subject: CN=69a4ff27-5ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4f:53:c5:65:40:96:6d:27:af:df:ce:00:50: 4f:50:6f:03:e2:f5:06:ad:9d:e4:0a:ac:26:fb:ef: f1:af:d2:1d:6e:d5:e9:c0:e0:65:e4:bb:93:ee:8b: 4e:08:83:a3:6b:2c:05:8f:9d:e2:33:7b:32:6a:14: 49:4e:98:13:7f:28:18:ba:75:a4:2e:5b:fa:ba:20: af:15:c1:7b:f7:a6:bb:1b:a6:52:fa:dd:9b:ee:28: 80:cd:12:23:36:9d:72:e4:ff:8e:70:87:18:80:06: c0:db:93:a2:e9:43:db:74:4f:32:54:1e:d1:37:a7: b5:18:bf:6d:83:03:40:aa:d9:38:ef:04:da:c9:b9: 1e:29:a0:d9:1b:4b:c6:00:03:79:10:1b:8a:b4:14: 2a:0b:92:22:9d:fb:8f:e9:9f:2b:41:58:e5:d2:b0: 15:bc:15:b6:b8:a4:0a:22:04:80:f1:39:29:20:88: 74:cf:da:ea:5f:15:c5:67:9c:0b:10:55:8c:3e:c8: cb:ad:1e:63:4e:b1:be:ef:20:2b:a4:55:0d:1b:43: a4:c4:39:34:7a:93:23:e4:91:e3:cb:72:42:65:20: b0:5a:8c:9e:ed:ff:12:20:79:bb:0c:2a:c7:e4:c7: ed:b6:ba:6c:f4:12:f8:7c:d0:06:c8:60:bc:2b:f4: c3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1D:D5:60:D5:2F:33:7D:8B:DE:D5:9B:D4:45:FC:0D:B0:6B:B4:0A X509v3 Authority Key Identifier: keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c3:1a:95:3e:f0:ba:21:d4:01:ba:b6:68:94:dc:02:a6:6f: 5d:96:0b:7f:54:c8:ed:03:00:47:f6:bf:4e:61:b6:e2:b5:70: 92:58:49:39:71:cc:80:95:e5:e8:c0:44:7f:86:cd:0b:55:6f: 51:2a:5a:3f:1b:7e:ae:17:88:95:c1:cd:af:9f:73:e0:ec:be: fd:bc:e9:8b:6d:4b:b1:87:70:04:80:69:8b:94:48:c6:61:78: 29:c6:68:15:d4:46:f3:0d:3e:e2:ac:88:ff:15:d2:bf:30:ea: 9b:1e:cc:87:ce:ff:00:52:08:58:0c:f9:54:94:ed:38:ce:31: 3c:eb:c3:cd:39:5e:fd:1e:4f:55:f3:4e:f3:4b:b0:6a:0b:a4: 42:ce:57:0e:7e:09:50:d4:66:56:e3:2d:a4:7c:17:24:7a:f1: 12:1c:b5:87:62:c4:ec:48:a7:db:6c:48:6b:2a:77:fb:c6:e8: e9:c6:0c:f2:7b:1a:39:9f:26:f1:0e:a4:f9:2d:58:92:9a:0b: 6d:fb:e4:76:9e:00:10:7d:d3:b0:4a:8d:44:67:9f:d8:19:0e: 1c:79:db:af:87:69:58:09:24:c9:1c:9c:c7:bd:89:e7:d5:80: b0:9e:68:2f:f4:c5:a9:43:6a:07:55:1d:86:c0:48:19:c2:7a: cc:b5:f6:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3REQxMTAvBgNVBAUTKEZCQkFDMTY1NkEwQzYzNzA4QkNDRDYwREM4MjVFNkMz MTkxQTcxOUIwHhcNMjYwMzAyMDMwODIyWhcNMjYwMzA5MDMwODIyWjAYMRYwFAYD VQQDEw02OWE0ZmYyNy01ZWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtk9TxWVAlm0nr9/OAFBPUG8D4vUGrZ3kCqwm++/xr9IdbtXpwOBl5LuT7otO CIOjaywFj53iM3syahRJTpgTfygYunWkLlv6uiCvFcF796a7G6ZS+t2b7iiAzRIj Np1y5P+OcIcYgAbA25Oi6UPbdE8yVB7RN6e1GL9tgwNAqtk47wTaybkeKaDZG0vG AAN5EBuKtBQqC5IinfuP6Z8rQVjl0rAVvBW2uKQKIgSA8TkpIIh0z9rqXxXFZ5wL EFWMPsjLrR5jTrG+7yArpFUNG0OkxDk0epMj5JHjy3JCZSCwWoye7f8SIHm7DCrH 5Mfttrps9BL4fNAGyGC8K/TDkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIYd1WDV LzN9i97Vm9RF/A2wa7QKMB8GA1UdIwQYMBaAFPu6wWVqDGNwi8zWDcgl5sMZGnGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTdERC9BRDYxNUY2RTZF NTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkzQ0x6TllOeUNYbXd4a2Fj WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03ckJaV29NWTNDTHpOWU55Q1htd3hrYWNacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTdERC9BRDYxNUY2RTZFNTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkz Q0x6TllOeUNYbXd4a2FjWnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPsMalT7wuiHUAbq2aJTcAqZvXZYLf1TI7QMAR/a/TmG24rVwklhJOXHMgJXl 6MBEf4bNC1VvUSpaPxt+rheIlcHNr59z4Oy+/bzpi21LsYdwBIBpi5RIxmF4KcZo FdRG8w0+4qyI/xXSvzDqmx7Mh87/AFIIWAz5VJTtOM4xPOvDzTle/R5PVfNO80uw agukQs5XDn4JUNRmVuMtpHwXJHrxEhy1h2LE7Ein22xIayp3+8bo6cYM8nsaOZ8m 8Q6k+S1YkpoLbfvkdp4AEH3TsEqNRGef2BkOHHnbr4dpWAkkyRycx72J59WAsJ5o L/TFqUNqB1UdhsBIGcJ6zLX2rw== -----END CERTIFICATE-----Generated at Mon Mar 2 16:52:39 2026 by rpki-client