$ rpki-client -vvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft File: eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft (raw, json) Hash identifier: 7GF+ifnNvKh2F1kXlb9/hjOjMz+LNAHpM/bV3AZfMRE= Subject key identifier: B0:A8:21:9B:CC:93:1B:E2:02:FE:8C:C6:6D:EF:C7:4D:8A:5F:94:27 Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 Certificate issuer: /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Certificate serial: 0DE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft Manifest number: 0DB4 Signing time: Mon 02 Mar 2026 02:46:42 +0000 Manifest this update: Mon 02 Mar 2026 02:46:40 +0000 Manifest next update: Mon 09 Mar 2026 02:46:40 +0000 Files and hashes: 1: eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl (hash: AIQpEOg5nuqMHiSqHtJ2VB0VB5PVv56eRTWK6My4VkQ=) 2: 9F12E3A025A511EE87132E45C4F9AE02.roa (hash: TxDaiYQZFS4Ik//q76OvD/sE28hWkwuGs5dmTlG3+ls=) 3: 055A1A7A05FC11EFB61A7767C4F9AE02.roa (hash: Y6kv/Ft3RM4G7ZQs6aq29HExaJIwl9QZ9sCKC5oOLGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3554 (0xde2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A495C, serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Validity Not Before: Mar 2 02:46:40 2026 GMT Not After : Mar 9 02:46:40 2026 GMT Subject: CN=69a4fa11-65cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:22:83:b2:b1:0a:cf:28:f5:40:3a:8d:ea:fc: 15:5d:ed:68:57:e6:b0:50:7c:90:17:46:50:95:ff: de:d4:fb:48:15:6f:06:6d:31:24:2c:64:04:e8:3e: ef:db:b4:b0:4b:e9:58:d1:c8:7d:3f:c3:70:1b:f1: 4c:2a:02:2e:bc:d3:2c:9c:99:8c:3c:d1:69:21:0a: 99:b5:16:35:12:a5:c2:5a:28:b9:19:bd:72:42:0d: db:96:49:f3:88:6c:f3:3a:7a:19:be:18:9d:7c:58: 99:ce:35:cd:ee:66:6f:10:df:a5:b9:81:7a:e9:29: b8:8e:43:36:07:9c:b8:8d:5c:78:b8:1f:e3:07:11: ed:8d:74:02:2d:d8:1c:09:80:31:c1:d6:0c:07:dc: ef:7e:1a:08:ff:a4:cd:4b:34:88:a2:95:6d:33:6a: 1f:95:3a:bb:f8:46:b0:43:40:dd:82:e5:f5:32:45: 40:42:ac:55:6a:1e:a4:87:54:ac:0e:cf:0f:38:da: 07:ab:61:cb:c4:35:e4:8b:51:cf:f3:3d:cb:2c:b9: 0c:2e:49:15:ea:ab:ae:48:3a:a4:4d:64:34:9f:0b: c5:a8:f7:79:76:83:d0:52:8d:be:44:8e:52:1a:a3: ae:8e:d0:11:b0:d0:7e:25:0f:7f:dd:71:f7:37:77: 96:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A8:21:9B:CC:93:1B:E2:02:FE:8C:C6:6D:EF:C7:4D:8A:5F:94:27 X509v3 Authority Key Identifier: keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:bc:da:92:e3:d3:e7:ac:75:bf:0b:c8:a4:67:79:45:a1:97: 63:31:66:9a:8c:0d:65:b3:07:a5:51:cc:5a:24:14:68:eb:e0: 07:a1:d6:e9:c9:4b:24:40:15:c1:db:ea:ee:7f:fe:30:7c:97: d6:e5:42:8a:a8:3d:48:a5:eb:76:53:9a:6a:5d:1f:2c:00:22: 4a:8e:b6:c2:e5:78:3c:5e:2a:5b:9a:45:7a:80:2a:c9:07:90: 62:e9:52:26:28:5f:49:16:9f:8f:44:e3:9c:0d:71:8d:1b:ab: 8f:e2:f9:98:78:92:5a:bd:b2:1b:12:b1:db:d7:39:2e:4e:1b: 6d:7f:64:b4:0c:8e:8b:40:31:df:05:e1:5f:63:22:43:95:f1: 0a:19:a3:dc:80:41:8b:a4:c5:d0:54:24:24:c3:ce:f2:4a:45: ce:82:74:95:a5:69:8e:46:b7:a2:03:a7:0e:b0:93:bf:c0:0c: a4:02:f1:98:39:bf:ad:87:71:a4:49:ca:18:01:50:37:a9:1f: 72:03:4b:88:22:90:38:84:dc:a6:d6:fb:81:6b:ea:39:e3:4f: a8:35:b4:d7:ff:fe:7e:80:cf:2c:17:d7:c8:33:c8:34:c2:55: e2:ab:65:b4:94:0f:2f:98:57:a6:3e:d5:ab:f0:ad:3b:f4:4f: a9:f8:ef:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ5NUMxMTAvBgNVBAUTKDc4QkVEQkVEQzA0NTlCOTAwQzI4Mjg5MkYxM0IxNzgy QTk1NjA0MjkwHhcNMjYwMzAyMDI0NjQwWhcNMjYwMzA5MDI0NjQwWjAYMRYwFAYD VQQDEw02OWE0ZmExMS02NWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3iKDsrEKzyj1QDqN6vwVXe1oV+awUHyQF0ZQlf/e1PtIFW8GbTEkLGQE6D7v 27SwS+lY0ch9P8NwG/FMKgIuvNMsnJmMPNFpIQqZtRY1EqXCWii5Gb1yQg3blknz iGzzOnoZvhidfFiZzjXN7mZvEN+luYF66Sm4jkM2B5y4jVx4uB/jBxHtjXQCLdgc CYAxwdYMB9zvfhoI/6TNSzSIopVtM2oflTq7+EawQ0DdguX1MkVAQqxVah6kh1Ss Ds8PONoHq2HLxDXki1HP8z3LLLkMLkkV6quuSDqkTWQ0nwvFqPd5doPQUo2+RI5S GqOujtARsNB+JQ9/3XH3N3eWywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLCoIZvM kxviAv6Mxm3vx02KX5QnMB8GA1UdIwQYMBaAFHi+2+3ARZuQDCgokvE7F4KpVgQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDk1Qy81NTkxODAwNEUy QUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01QU1LQ2lTOFRzWGdxbFdC Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VMN2I3Y0JGbTVBTUtDaVM4VHNYZ3FsV0JDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDk1Qy81NTkxODAwNEUyQUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01 QU1LQ2lTOFRzWGdxbFdCQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbrzakuPT56x1vwvIpGd5RaGXYzFmmowNZbMHpVHMWiQUaOvgB6HW6clLJEAV wdvq7n/+MHyX1uVCiqg9SKXrdlOaal0fLAAiSo62wuV4PF4qW5pFeoAqyQeQYulS JihfSRafj0TjnA1xjRurj+L5mHiSWr2yGxKx29c5Lk4bbX9ktAyOi0Ax3wXhX2Mi Q5XxChmj3IBBi6TF0FQkJMPO8kpFzoJ0laVpjka3ogOnDrCTv8AMpALxmDm/rYdx pEnKGAFQN6kfcgNLiCKQOITcptb7gWvqOeNPqDW01//+foDPLBfXyDPINMJV4qtl tJQPL5hXpj7Vq/CtO/RPqfjvQg== -----END CERTIFICATE-----Generated at Mon Mar 2 05:45:09 2026 by rpki-client