$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft File: tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json) Hash identifier: dNDlPTuSoQab1b5J2X5ZZyQ6zbX0GBve8WdaQYKEfqM= Subject key identifier: 75:6F:7A:45:16:C2:EE:01:8A:FF:1C:65:70:D6:81:57:82:4E:62:B1 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0D22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft Manifest number: 0C67 Signing time: Sun 01 Mar 2026 23:54:59 +0000 Manifest this update: Sun 01 Mar 2026 23:54:57 +0000 Manifest next update: Sun 08 Mar 2026 23:54:57 +0000 Files and hashes: 1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: MKsW308dP/HQY1lUzaC+hMNO9xQ1B8CJNwzIaFe7Hzw=) 2: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: rldYerid782NHhYg5gZeKDeP8nw5hDBo5ce1otmijHk=) 3: 1D231FDEBDD511F0BAEEED5AC4F9AE02.roa (hash: ioDFZr1S0Gi+Il1WgI19wNxl6LHLAhLqU/gL5q0wRQ4=) 4: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: uPw0jGuZ1R9feVCLnmkywsIlFntIUjvKn4V9YADDSZw=) 5: 43DCAEE0BBE811F092C97714C4F9AE02.roa (hash: vSxZd8qgD7aRMhxYUIOaamwohGOx6bJE7cvVNCtvBU0=) 6: 5164F13EDBD811F0A0A88CE756641951.roa (hash: K8PdVrwgPP6SYE7hwXotb2w7ResYjU2AhKRg1rXlVvE=) 7: 52636904771911F083181320C4F9AE02.roa (hash: sC0uGPWE4eJrauWXkAGzwboMEBGjWClsDUlGENRCXY4=) 8: 622E19EEDA1811F0A393A6F584D3641D.roa (hash: SZBiVXScpVCoiCszMwAk6FHjLVABastJAekxE0xrAW4=) 9: E3903588DA3311F082FD85DA8AD3641D.roa (hash: 5plKYgEgiNkKitEbeizH1JGd/iHTXwBdDhzUqpmFzSs=) 10: E58488D0BB7A11F09DC5801DC4F9AE02.roa (hash: D+4KU/KViJAKhv6g9QlE9jFUTbMs6KQdSE9wmC6fLbQ=) 11: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: uqrGUcHrD56RxjKn4tloTslOGi2QqiqH+J6eDeAWJlk=) 12: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: ln76EemE+KVmwBMqhmjPor3eYO1TZU0iOPXChm5E5gM=) 13: F894F5B0E09411F0B3B2B389426F56BC.roa (hash: i1NQ3dvRnw0Bs6jS9vQXeiF+G8ng2+6kPCVgO9nJjSE=) 14: 8BEC7D66E54911F091014A6A756F56BC.roa (hash: 878wvvs2ffGw42AHHlt9+tDoLI76/5o2MpRxbhf7Lcw=) 15: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: 3UxHnA0X5lrZ5mQaAS9dVon56ZIRCi7/CXGXgzhsdQ8=) 16: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: 06uUB7ch3B7M6X4ZHERm9+4x95UGWOKymqQvKPv2aAE=) 17: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (hash: PzosthH04YM90FjfjFqBt8AtMFKjHV4WS0Al9YYIqiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3362 (0xd22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Mar 1 23:54:57 2026 GMT Not After : Mar 8 23:54:57 2026 GMT Subject: CN=69a4d1d2-fc5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:44:42:87:82:b4:6b:e5:37:81:47:cb:c3:a8: 23:c3:5a:19:6d:c4:dc:3e:a2:b9:bb:08:79:ba:f6: a0:bd:73:e7:2f:45:bc:8a:6b:46:69:62:2d:37:59: 59:61:41:04:f6:40:1e:45:65:f4:78:1b:2e:02:9a: 7a:75:79:12:97:8b:bc:bb:c5:f8:d5:93:6e:da:2e: 2c:a6:49:e3:9c:dd:24:90:26:f6:5b:ed:42:1b:09: 2f:fc:bd:2c:b7:b7:97:a7:ac:c4:f8:e6:55:01:5f: 62:d9:33:be:f7:87:94:17:38:63:f4:3a:84:db:8d: 8a:1e:bf:ed:be:5d:57:18:b0:3d:98:b2:ae:4d:c6: f0:39:f2:26:dc:4d:60:b3:f4:d7:c1:73:10:a9:d5: 13:69:2d:2f:f7:12:57:ae:d7:9f:8f:79:45:78:98: 71:bd:2e:db:a8:4b:de:5b:9f:8c:0f:34:75:f2:96: 5d:3a:e1:e9:9c:79:d9:ce:cb:4c:02:10:f1:17:2a: 3f:5a:25:95:0f:ab:0b:8f:83:b6:b8:20:e4:a7:4e: 3b:71:d6:bc:09:e2:e6:a0:99:1f:d9:ba:66:44:fc: 0a:6c:58:e9:4f:9b:e8:cb:47:1c:6a:84:1a:c2:ea: a3:67:0e:2d:26:c0:b1:c2:e2:9a:96:c6:c5:ac:a5: dc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6F:7A:45:16:C2:EE:01:8A:FF:1C:65:70:D6:81:57:82:4E:62:B1 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:22:e5:a6:1f:bf:16:f0:e1:0c:40:e1:0f:bf:f9:ce:0a:13: 27:93:a1:73:80:a4:56:01:50:f4:8b:fa:6e:49:00:5c:2e:f1: 60:14:e1:12:19:6d:df:c9:c2:a1:e5:8a:f7:5f:e8:9e:28:5e: 22:84:02:b4:97:8e:d0:bd:bc:f1:3b:1d:17:74:16:60:18:db: ee:18:3b:5d:b5:f6:b7:f3:7a:b4:d8:79:94:b9:b7:a1:04:dd: 60:8e:f8:b7:71:b2:33:66:7f:d7:fc:40:6a:d6:55:a8:f8:38: 1f:bf:5e:fb:4a:0c:47:09:ca:47:93:f7:e6:7d:59:be:dc:43: 23:29:43:d0:c5:a4:e5:35:0a:83:ec:19:fb:11:e2:41:9e:ac: 1b:79:f2:65:96:13:97:7a:7a:60:27:39:5f:6c:c6:aa:fa:1c: ca:fa:19:1c:76:7e:52:ad:10:36:fd:f1:0c:60:45:29:05:13: fe:bd:72:9d:51:b6:84:56:f4:35:0c:54:54:b4:25:59:99:77: eb:71:71:92:bb:0d:2c:ef:44:5d:b3:bb:95:79:8e:84:9b:43: 95:a0:83:75:04:2e:aa:eb:85:d5:2c:31:b1:62:8b:9b:ff:4f: f9:96:c2:28:22:aa:e1:23:4a:46:3f:55:98:dc:f4:5c:d6:b7: e1:6a:44:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjYwMzAxMjM1NDU3WhcNMjYwMzA4MjM1NDU3WjAYMRYwFAYD VQQDEw02OWE0ZDFkMi1mYzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kRCh4K0a+U3gUfLw6gjw1oZbcTcPqK5uwh5uvagvXPnL0W8imtGaWItN1lZ YUEE9kAeRWX0eBsuApp6dXkSl4u8u8X41ZNu2i4spknjnN0kkCb2W+1CGwkv/L0s t7eXp6zE+OZVAV9i2TO+94eUFzhj9DqE242KHr/tvl1XGLA9mLKuTcbwOfIm3E1g s/TXwXMQqdUTaS0v9xJXrtefj3lFeJhxvS7bqEveW5+MDzR18pZdOuHpnHnZzstM AhDxFyo/WiWVD6sLj4O2uCDkp047cda8CeLmoJkf2bpmRPwKbFjpT5voy0ccaoQa wuqjZw4tJsCxwuKalsbFrKXcOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHVvekUW wu4Biv8cZXDWgVeCTmKxMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQwMi9GREJGRDAyMDNEOTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtm M1BjV0p1ZS1vUl8ybkxxRVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeSLlph+/FvDhDEDhD7/5zgoTJ5Ohc4CkVgFQ9Iv6bkkAXC7xYBThEhlt38nC oeWK91/oniheIoQCtJeO0L288TsdF3QWYBjb7hg7XbX2t/N6tNh5lLm3oQTdYI74 t3GyM2Z/1/xAatZVqPg4H79e+0oMRwnKR5P35n1ZvtxDIylD0MWk5TUKg+wZ+xHi QZ6sG3nyZZYTl3p6YCc5X2zGqvocyvoZHHZ+Uq0QNv3xDGBFKQUT/r1ynVG2hFb0 NQxUVLQlWZl363FxkrsNLO9EXbO7lXmOhJtDlaCDdQQuquuF1SwxsWKLm/9P+ZbC KCKq4SNKRj9VmNz0XNa34WpEFw== -----END CERTIFICATE-----Generated at Mon Mar 2 09:07:27 2026 by rpki-client