$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json) Hash identifier: rf+umfdpQzyuIIELMYXvvCgMlOdsM2CXJlUnC8J/0RA= Subject key identifier: 49:D8:FF:0A:58:76:A2:8E:A2:03:77:95:62:06:70:52:51:9E:56:DE Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Certificate serial: 05C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft Manifest number: 05AE Signing time: Sat 28 Feb 2026 23:47:12 +0000 Manifest this update: Sat 28 Feb 2026 23:47:12 +0000 Manifest next update: Sat 07 Mar 2026 23:47:12 +0000 Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: tKUBiJPijbIEHrPndjrOfwXvCr/AowOS+Cjd45l+FZA=) 2: F307B7F4912A11F0B418B448C4F9AE02.roa (hash: yjx/NrxzZgDiEgxVTNY6l8PB/PX5P1BrG3zGpxB5GDo=) 3: 27023558912A11F09F7D4044C4F9AE02.roa (hash: +v5rysmnVhOkTUg6d0tgPtn6VplDudh8Q8DnVgzZQm0=) 4: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: QC4EhNSXvJgfmvNa3iGuDkLhBq1A6Ut/uA6vL0hAWZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 23:47:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1474 (0x5c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Validity Not Before: Feb 28 23:47:12 2026 GMT Not After : Mar 7 23:47:12 2026 GMT Subject: CN=69a37e80-cd84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:30:c8:cb:06:a4:78:71:a2:fa:60:58:ed:d4: c2:97:bb:b9:48:e9:3b:a5:4d:e5:3f:1a:77:9b:b3: af:47:0b:db:51:03:ae:be:bb:01:0f:60:ed:ad:e2: ae:45:57:8c:9d:f3:86:58:3d:87:68:66:79:ef:78: 31:5e:91:a3:dc:ea:a4:d4:35:ca:d3:a3:fe:d3:9b: d2:f7:08:e3:25:ed:88:ef:31:ac:99:7b:a4:11:13: 3e:41:ec:42:e6:ce:72:f5:63:56:29:19:56:ea:0a: 33:b7:2d:11:07:5b:84:af:4b:1e:71:9e:27:52:ce: e3:df:c3:ab:f4:22:c9:97:0d:30:bc:d8:23:4f:9b: 66:7a:81:9b:d2:a8:49:6a:25:d8:f2:90:0e:56:bb: bc:8e:a0:f1:c3:5f:8b:eb:b4:2b:68:c1:b7:3c:33: f1:7c:79:1a:39:d8:52:48:a1:c4:c8:2b:c3:ec:0c: a2:99:e2:0a:7e:78:a2:c3:af:ec:a1:f6:73:7d:5e: a3:c2:8c:cd:fc:51:0f:99:99:69:8d:5e:11:3a:34: c7:b9:cd:46:2b:71:a5:80:2f:7c:53:b6:dd:fc:ba: f1:d4:cf:19:f9:f4:b4:11:3d:17:34:44:22:6d:c2: 05:3c:09:fa:9d:56:09:31:61:4e:68:1a:4b:a2:7b: 34:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D8:FF:0A:58:76:A2:8E:A2:03:77:95:62:06:70:52:51:9E:56:DE X509v3 Authority Key Identifier: keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:bd:7b:50:f8:01:a4:31:ae:6c:df:ba:29:f5:ae:c0:53:23: d9:ee:ef:20:e0:84:31:54:d1:b1:70:ab:49:bf:6b:b5:e2:08: bb:86:1e:c5:a5:59:07:f1:75:8f:8e:ce:f9:90:8d:0f:14:ff: ad:d6:88:9f:e7:60:a7:ac:e7:25:9e:42:bc:85:f6:c6:1d:63: 57:c2:49:96:e9:cc:6b:6e:30:00:d2:b6:69:3b:71:cd:8a:d3: 02:bf:8b:66:fb:55:d5:23:fd:c5:6c:0e:d2:cc:af:18:e2:5d: 80:89:7b:7c:c3:e4:a4:14:3e:19:a1:50:a0:15:5f:e5:f2:af: 5c:e3:39:ce:84:ea:0e:01:76:73:59:9e:0e:9c:60:9a:11:49: 69:3a:65:ae:db:3c:72:33:52:6a:a5:50:2f:b9:b8:0b:2b:a5: 71:1d:21:fe:67:bd:6e:4b:86:39:5b:d9:27:91:e9:9b:39:e6: 6e:02:bf:82:b6:b6:40:1e:01:0e:8c:99:94:51:36:5f:0b:31: c2:d2:95:7c:bb:30:1b:7f:b0:ad:5d:42:f8:ae:5a:ae:f1:6e: d4:e7:5f:53:45:dd:da:df:61:06:67:f4:3b:93:c2:db:f1:fd: 18:4c:9b:00:46:79:11:d4:7d:f4:9a:6a:4c:ac:8a:81:38:59: 39:89:1f:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCMkYxMTAvBgNVBAUTKEY5QzM2MzgwNTlGODY0RTg0QUUzQkY1MERBQUMwNzlD Njg0NjNFQTcwHhcNMjYwMjI4MjM0NzEyWhcNMjYwMzA3MjM0NzEyWjAYMRYwFAYD VQQDDA02OWEzN2U4MC1jZDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDDIywakeHGi+mBY7dTCl7u5SOk7pU3lPxp3m7OvRwvbUQOuvrsBD2DtreKu RVeMnfOGWD2HaGZ573gxXpGj3Oqk1DXK06P+05vS9wjjJe2I7zGsmXukERM+QexC 5s5y9WNWKRlW6gozty0RB1uEr0secZ4nUs7j38Or9CLJlw0wvNgjT5tmeoGb0qhJ aiXY8pAOVru8jqDxw1+L67QraMG3PDPxfHkaOdhSSKHEyCvD7AyimeIKfniiw6/s ofZzfV6jwozN/FEPmZlpjV4ROjTHuc1GK3GlgC98U7bd/Lrx1M8Z+fS0ET0XNEQi bcIFPAn6nVYJMWFOaBpLons0ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEnY/wpY dqKOogN3lWIGcFJRnlbeMB8GA1UdIwQYMBaAFPnDY4BZ+GToSuO/UNqsB5xoRj6n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REIyRi9FRjU5Q0VDNDBB REExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpPaEs0NzlRMnF3SG5HaEdQ cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jTmpnRm40Wk9oSzQ3OVEycXdIbkdoR1BxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REIyRi9FRjU5Q0VDNDBBREExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpP aEs0NzlRMnF3SG5HaEdQcWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtb17UPgBpDGubN+6KfWuwFMj2e7vIOCEMVTRsXCrSb9rteIIu4YexaVZB/F1 j47O+ZCNDxT/rdaIn+dgp6znJZ5CvIX2xh1jV8JJlunMa24wANK2aTtxzYrTAr+L ZvtV1SP9xWwO0syvGOJdgIl7fMPkpBQ+GaFQoBVf5fKvXOM5zoTqDgF2c1meDpxg mhFJaTplrts8cjNSaqVQL7m4CyulcR0h/me9bkuGOVvZJ5HpmznmbgK/gra2QB4B DoyZlFE2XwsxwtKVfLswG3+wrV1C+K5arvFu1OdfU0Xd2t9hBmf0O5PC2/H9GEyb AEZ5EdR99JpqTKyKgThZOYkflQ== -----END CERTIFICATE-----Generated at Sun Mar 1 20:37:45 2026 by rpki-client