$ rpki-client -vvf rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft File: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft (raw, json) Hash identifier: 3V9SfksAH7BiyqyfzfNLC5TtXlII9mLiPylkGAki/jM= Subject key identifier: F0:D5:32:33:A3:8E:FC:BE:7C:01:54:44:D8:72:0F:EE:1A:67:42:70 Authority key identifier: 32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8 Certificate issuer: /CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8 Certificate serial: 0BD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft Manifest number: 0BB9 Signing time: Mon 02 Mar 2026 01:23:26 +0000 Manifest this update: Mon 02 Mar 2026 01:23:23 +0000 Manifest next update: Mon 09 Mar 2026 01:23:23 +0000 Files and hashes: 1: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl (hash: 9Ci5APNprd2Xvm/zO/ANG0Ray2YVBxVQfmxW1Wabg6M=) 2: E1EFDAA8F40611EAA5B2244FC4F9AE02.roa (hash: 4Z5iYLEtKBfjWooahsTM+JCERTIB6b3TIat4TqCaYIk=) 3: E324E2F6F40611EAA5B2244FC4F9AE02.roa (hash: avhdzluktcTaPNlKm0CJ2cLBjs4VkOW1cKeJBnenY/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3028 (0xbd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C88D, serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8 Validity Not Before: Mar 2 01:23:23 2026 GMT Not After : Mar 9 01:23:23 2026 GMT Subject: CN=69a4e68d-1938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4e:12:07:a9:6e:52:27:29:c9:22:9d:c4:ba: a4:39:7b:fb:3a:cd:19:a5:43:03:51:16:16:ba:83: 51:b1:67:77:2c:3b:0d:79:b8:8a:c2:34:79:f1:03: 77:de:4b:7c:44:a2:55:be:bf:1d:47:8c:36:5f:e6: 0d:00:1f:cd:bc:b7:0f:43:2e:7b:21:ea:b2:cf:06: 5b:8a:c8:34:ff:f5:13:a6:e6:26:c5:62:67:9a:18: ac:54:fc:14:0a:62:40:e1:b7:a0:f1:b3:be:c1:6f: 54:e3:62:9c:05:39:83:40:9e:d0:04:52:50:d6:4c: 25:e8:e7:80:30:8a:2e:c9:d7:e8:9f:54:5d:d5:8b: d3:a8:2a:31:31:a3:48:da:19:fb:4a:f4:04:be:c4: 30:30:9b:1d:b3:df:1f:b3:03:d5:87:9f:d9:fa:f8: aa:74:1e:83:0e:35:eb:74:bd:f3:5e:b8:e2:ed:53: 32:62:50:3a:7d:1e:21:73:ca:1f:43:68:1a:7f:70: 5f:81:72:5f:da:e7:14:1e:32:19:95:ea:17:b7:57: 18:c4:5d:4f:49:87:f3:33:fa:41:a8:04:82:f8:9f: c0:48:d2:e6:2d:5a:ef:a6:6c:43:00:e4:d9:78:2d: b4:eb:15:2a:cd:79:e1:30:2c:4e:f4:24:3d:97:70: 3a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D5:32:33:A3:8E:FC:BE:7C:01:54:44:D8:72:0F:EE:1A:67:42:70 X509v3 Authority Key Identifier: keyid:32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:b7:14:71:8f:55:d5:90:1f:da:df:95:80:ee:14:fa:35:bb: 17:06:0e:8d:2f:81:31:e5:6c:56:10:1e:c3:06:06:12:c6:4d: 72:a9:eb:a7:71:eb:1b:00:5f:dd:55:a8:91:5e:fa:57:71:7a: 59:52:43:b4:86:52:e2:60:7e:1e:8a:17:72:44:e0:da:72:61: 4c:1c:50:fe:05:a7:70:1d:3c:e3:06:27:85:a7:4f:b4:09:7f: e6:12:be:fe:f9:f4:d8:51:b9:ee:e2:12:07:45:15:81:57:64: b9:2c:eb:d2:87:f3:0d:f1:5c:6f:c4:82:a1:63:b3:4a:3f:de: ac:4b:04:ec:36:ef:15:7f:d7:c7:09:c4:e4:bf:a9:ba:8c:b0: 3d:c3:4a:3c:1f:de:a9:90:f8:70:c0:40:44:98:f3:82:e6:aa: 44:4b:42:66:fb:6c:83:0b:64:fd:e1:e5:46:92:41:ac:e9:fc: ec:f3:a2:01:7e:46:4c:d5:09:a5:a7:df:a5:52:26:9f:0c:87: 2a:f9:3a:91:a5:2f:3b:40:5c:ef:00:84:26:50:69:84:e3:64: dd:66:36:ec:bf:da:35:d3:d9:95:3c:e5:e5:2c:ea:3a:a0:fc: 2d:0c:c5:9d:ab:63:90:dc:dd:32:80:f5:9e:91:f0:3c:ff:0b: 4b:e3:fc:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM4OEQxMTAvBgNVBAUTKDMyNjQ0MzY0NzlBNTBFRDQwQ0NGRDJCNzA0RTYwMjQ5 NjA4RTQzQTgwHhcNMjYwMzAyMDEyMzIzWhcNMjYwMzA5MDEyMzIzWjAYMRYwFAYD VQQDEw02OWE0ZTY4ZC0xOTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArE4SB6luUicpySKdxLqkOXv7Os0ZpUMDURYWuoNRsWd3LDsNebiKwjR58QN3 3kt8RKJVvr8dR4w2X+YNAB/NvLcPQy57IeqyzwZbisg0//UTpuYmxWJnmhisVPwU CmJA4beg8bO+wW9U42KcBTmDQJ7QBFJQ1kwl6OeAMIouydfon1Rd1YvTqCoxMaNI 2hn7SvQEvsQwMJsds98fswPVh5/Z+viqdB6DDjXrdL3zXrji7VMyYlA6fR4hc8of Q2gaf3BfgXJf2ucUHjIZleoXt1cYxF1PSYfzM/pBqASC+J/ASNLmLVrvpmxDAOTZ eC206xUqzXnhMCxO9CQ9l3A6swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPDVMjOj jvy+fAFURNhyD+4aZ0JwMB8GA1UdIwQYMBaAFDJkQ2R5pQ7UDM/StwTmAklgjkOo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qzg4RC8zOEFCNTkxRTNE QzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0UU16OUszQk9ZQ1NXQ09R NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tUkRaSG1sRHRRTXo5SzNCT1lDU1dDT1E2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Qzg4RC8zOEFCNTkxRTNEQzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0 UU16OUszQk9ZQ1NXQ09RNmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmLcUcY9V1ZAf2t+VgO4U+jW7FwYOjS+BMeVsVhAewwYGEsZNcqnrp3HrGwBf 3VWokV76V3F6WVJDtIZS4mB+HooXckTg2nJhTBxQ/gWncB084wYnhadPtAl/5hK+ /vn02FG57uISB0UVgVdkuSzr0ofzDfFcb8SCoWOzSj/erEsE7DbvFX/XxwnE5L+p uoywPcNKPB/eqZD4cMBARJjzguaqREtCZvtsgwtk/eHlRpJBrOn87POiAX5GTNUJ paffpVImnwyHKvk6kaUvO0Bc7wCEJlBphONk3WY27L/aNdPZlTzl5SzqOqD8LQzF natjkNzdMoD1npHwPP8LS+P8IA== -----END CERTIFICATE-----Generated at Mon Mar 2 04:19:39 2026 by rpki-client