$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft File: 98T1xyjQwEdsUy6sGMKSfB1bgzs.mft (raw, json) Hash identifier: haNv+76xxD/lRvlwNgK9zLvQM6qUIRFGan39Odmd7wk= Subject key identifier: 31:30:34:52:40:67:39:FD:6C:CD:3C:F3:79:10:DC:B9:45:17:0B:5D Authority key identifier: F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B Certificate issuer: /CN=A9185D4E/serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft Manifest number: 010A Signing time: Sun 01 Mar 2026 07:03:06 +0000 Manifest this update: Sun 01 Mar 2026 07:03:05 +0000 Manifest next update: Sun 08 Mar 2026 07:03:05 +0000 Files and hashes: 1: 98T1xyjQwEdsUy6sGMKSfB1bgzs.crl (hash: nOa3fusuTMEWIwqAVRpOJLwBcnRev92k2dNTqRnwSII=) 2: 5495EE5C9B4311EF87E5073DC4F9AE02.roa (hash: mh3i+eoWpCQ7ATsRcfbcAmbVbj1O3ZcB7aHSJUdU7dU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D4E, serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Validity Not Before: Mar 1 07:03:05 2026 GMT Not After : Mar 8 07:03:05 2026 GMT Subject: CN=69a3e4aa-6dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1d:c3:64:5f:67:3c:df:3e:82:91:87:77:1c: f2:04:d5:c9:46:71:86:2b:1b:0a:f7:b9:95:10:4e: 42:e9:e3:fb:0d:69:db:b1:b6:86:82:f7:46:22:23: 5e:e3:83:f2:44:11:cb:73:16:19:03:4e:b7:b1:32: c2:4f:d8:3d:ec:23:8d:61:10:10:8a:80:14:f3:a1: 0d:1e:58:bd:9e:53:b8:aa:15:37:2d:40:4a:24:41: 0a:06:38:93:e6:a6:72:9a:c4:85:b0:c7:8d:3d:9b: 84:86:fa:7f:ec:49:6a:6a:a1:c7:ea:25:db:7f:f3: bc:c6:9e:91:62:73:1b:0b:d5:88:dc:4d:5a:13:48: 76:f6:ae:2e:d8:bb:45:04:5b:45:ab:e5:e1:b5:20: 83:b4:18:ff:3d:31:a2:33:52:7f:d4:9a:e1:89:0b: 79:af:b5:e8:f7:5b:67:92:33:3f:96:d7:9e:d2:b3: b7:c8:ae:bf:ca:cb:1c:ba:c0:fb:e5:8e:9d:ca:52: 69:fb:fb:5e:20:2f:bc:b4:9e:37:38:5a:75:aa:cd: 51:eb:bc:d5:4c:00:a3:e5:03:f0:a8:13:ea:a0:1c: 9d:7e:db:44:41:c0:95:a2:01:35:77:c6:3d:9b:14: 43:3d:9e:a7:f1:0b:67:1f:a1:b5:00:51:ea:7d:a7: c6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:30:34:52:40:67:39:FD:6C:CD:3C:F3:79:10:DC:B9:45:17:0B:5D X509v3 Authority Key Identifier: keyid:F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:00:06:a3:b6:3a:a9:7d:ed:db:f8:b9:67:78:51:ba:88:51: 34:c2:93:da:04:4e:b2:d9:cb:0c:5d:45:d7:f6:6d:fe:ad:e8: df:18:a5:87:28:d2:76:27:b7:f8:98:01:5f:d7:c2:a5:b9:40: 72:ef:33:46:5f:9e:58:b8:c0:56:91:91:1c:97:5b:0f:91:27: b3:73:cf:73:e8:eb:79:5b:24:75:d2:5a:d2:59:14:a7:37:10: 9a:c1:d0:f5:46:2b:9f:92:e0:fe:d0:44:69:0e:69:9a:20:0c: b1:30:a2:83:44:82:95:9a:82:8c:52:dc:f2:52:19:57:b4:e9: 95:ea:6f:c3:4f:b6:f9:c7:5d:f8:58:42:bc:75:5b:39:68:07: ca:8f:af:dd:5c:6f:98:d0:e0:d3:63:62:1b:8e:2f:f8:75:9b: 1a:7a:7e:7a:dc:07:d3:52:be:fa:f8:4d:d0:f6:cf:35:91:e9: c6:3f:0a:ab:86:9b:97:bc:88:82:f4:00:31:5e:c0:b5:88:ec: a3:15:21:b3:86:9c:87:5d:6f:60:ca:60:9d:ae:57:11:e9:50: 29:8a:b4:bc:5c:8a:35:c3:bf:e8:08:c3:2b:fb:04:22:1b:24: 2f:02:90:64:da:eb:73:d1:fe:3e:96:e7:6a:28:71:6c:ac:54: 19:95:5d:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENEUxMTAvBgNVBAUTKEY3QzRGNUM3MjhEMEMwNDc2QzUzMkVBQzE4QzI5MjdD MUQ1QjgzM0IwHhcNMjYwMzAxMDcwMzA1WhcNMjYwMzA4MDcwMzA1WjAYMRYwFAYD VQQDEw02OWEzZTRhYS02ZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0h3DZF9nPN8+gpGHdxzyBNXJRnGGKxsK97mVEE5C6eP7DWnbsbaGgvdGIiNe 44PyRBHLcxYZA063sTLCT9g97CONYRAQioAU86ENHli9nlO4qhU3LUBKJEEKBjiT 5qZymsSFsMeNPZuEhvp/7ElqaqHH6iXbf/O8xp6RYnMbC9WI3E1aE0h29q4u2LtF BFtFq+XhtSCDtBj/PTGiM1J/1JrhiQt5r7Xo91tnkjM/ltee0rO3yK6/ysscusD7 5Y6dylJp+/teIC+8tJ43OFp1qs1R67zVTACj5QPwqBPqoBydfttEQcCVogE1d8Y9 mxRDPZ6n8QtnH6G1AFHqfafGPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDEwNFJA Zzn9bM0883kQ3LlFFwtdMB8GA1UdIwQYMBaAFPfE9cco0MBHbFMurBjCknwdW4M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ0RS81Qjg0NDIwMjdG RjIxMUVGOTBFMTRGNjBDNEY5QUUwMi85OFQxeHlqUXdFZHNVeTZzR01LU2ZCMWJn enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzk4VDF4eWpRd0Vkc1V5NnNHTUtTZkIxYmd6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ0RS81Qjg0NDIwMjdGRjIxMUVGOTBFMTRGNjBDNEY5QUUwMi85OFQxeHlqUXdF ZHNVeTZzR01LU2ZCMWJnenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHQAGo7Y6qX3t2/i5Z3hRuohRNMKT2gROstnLDF1F1/Zt/q3o3xilhyjSdie3 +JgBX9fCpblAcu8zRl+eWLjAVpGRHJdbD5Ens3PPc+jreVskddJa0lkUpzcQmsHQ 9UYrn5Lg/tBEaQ5pmiAMsTCig0SClZqCjFLc8lIZV7Tplepvw0+2+cdd+FhCvHVb OWgHyo+v3VxvmNDg02NiG44v+HWbGnp+etwH01K++vhN0PbPNZHpxj8Kq4abl7yI gvQAMV7AtYjsoxUhs4ach11vYMpgna5XEelQKYq0vFyKNcO/6AjDK/sEIhskLwKQ ZNrrc9H+PpbnaihxbKxUGZVdqw== -----END CERTIFICATE-----Generated at Mon Mar 2 15:19:47 2026 by rpki-client