$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft File: MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json) Hash identifier: qw6IrDdYP1BlknTmybQ31KzXRxBW38WSwZ69bEJvy/0= Subject key identifier: E3:8E:62:0F:44:65:C3:71:E0:5A:B7:BC:E7:BF:FC:CA:8D:04:D1:F4 Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Certificate serial: 021C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft Manifest number: 01EE Signing time: Mon 02 Mar 2026 02:12:09 +0000 Manifest this update: Mon 02 Mar 2026 02:12:07 +0000 Manifest next update: Mon 09 Mar 2026 02:12:07 +0000 Files and hashes: 1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: vBZ2rQxj4MSecGtRFniSX3PqSaYHu6wYeadKHY6S1wE=) 2: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: Oxk9ItIFF7Cmn++8Qhf8B9/Jba23NXxEuE7o6lYsVNY=) 3: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: bcg53TLs5nFR2EV4CBcEFe8zIM0whJbmabWS8ZS93/Q=) 4: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: XLyiIx6bH4MWL4cXY1N6tcvmekDJmpJls17+hd3FRlA=) 5: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: WlT7lqcgc4c8+rWeXt+Y5JcXRKuZvK0wiGPxDwUbSb0=) 6: E9874B2A16D011EF90793868C4F9AE02.roa (hash: RDszepU6uUEnaTneHbLYTo9ekedmlaHSehV5QBWdDbs=) 7: 9D6E545AA84B11F0B4DF3885C4F9AE02.roa (hash: f4OVUhW0bi1lo1n9ZSiR+RCv7DhSrpC0lFB7A/Kd8HU=) 8: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: jqwk3bmRPDf7C3aKoz+TsrX90WbUHOfRvQL1M86whDk=) 9: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: 7QH1OiU8+y0kM0Xbew8STqzznYlr3akTS6fkDWFomuY=) 10: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: L4NVil8pbyS/cOY/ej3K8v/jrMsLv9IfqmTy0v9YRG8=) 11: 511564A2ED2B11F08C401BDD456F56BC.roa (hash: /UOXs33KnAIdS9eZMavjXXvZDkm7O2iN3QjaCdMcSZo=) 12: 7031BFB6ED2B11F083BC5EDE456F56BC.roa (hash: YUDn/ImHnu8Aga92avplp7MOrOxQVfmR+LNkM6xYKp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Validity Not Before: Mar 2 02:12:07 2026 GMT Not After : Mar 9 02:12:07 2026 GMT Subject: CN=69a4f1f8-0d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:77:1c:e9:e1:86:00:f8:d0:5b:4a:82:b7:c6: f5:37:c7:3b:52:c9:08:31:99:3a:ed:34:8e:4c:99: 91:29:64:89:eb:31:0c:8f:0b:e3:58:b9:73:4d:2c: 7a:a2:3e:c8:d2:93:f2:22:bf:56:fd:14:e7:bf:dc: 2f:5f:a5:c3:80:cb:99:c0:ed:16:85:96:13:2e:95: b3:87:1c:24:37:82:8a:e9:a4:cc:8b:43:60:75:11: 68:10:ea:65:8a:75:7c:58:61:fb:43:02:aa:78:89: b5:5f:2b:5f:aa:5a:46:f1:46:98:50:74:74:ed:a6: 0f:4e:0c:72:a9:b0:37:98:5b:67:41:74:be:07:e5: 9b:00:97:c5:da:2d:a3:c4:81:50:49:93:c3:24:22: d9:06:ab:8e:65:c2:ef:07:db:92:cf:d4:be:8b:7c: 73:d7:b7:12:63:0f:8c:b2:db:da:ea:d3:33:45:38: fb:1b:e2:60:e3:64:bf:a4:d7:10:ac:ce:88:a4:a4: 81:2e:83:63:35:e2:71:9a:a7:0f:69:67:75:77:ea: c1:c4:38:29:85:81:04:6d:fd:7e:d6:c6:72:1d:8a: 9a:30:d5:4f:0b:e8:10:63:b9:8d:21:5f:fc:8f:8d: 6d:5d:b6:07:e6:a9:83:7e:c2:b0:d3:c4:7f:e3:31: ca:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8E:62:0F:44:65:C3:71:E0:5A:B7:BC:E7:BF:FC:CA:8D:04:D1:F4 X509v3 Authority Key Identifier: keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:ff:f8:ee:3e:a9:67:59:50:72:32:91:15:46:e6:b7:f0:b9: 0e:ec:e0:de:8f:1e:e4:73:22:5f:b4:66:5d:96:2e:bc:23:89: 8e:ba:7e:a4:da:f7:ed:95:9c:d5:d7:bf:cd:dc:e0:67:83:52: de:89:82:cf:e1:22:bf:0b:62:18:28:c9:cd:bb:ce:c5:42:6d: 55:37:9b:85:82:3f:eb:46:2e:e2:f2:c3:75:ed:62:b7:21:73: 41:91:96:08:a7:cd:9c:ce:24:69:3a:16:18:8c:76:b4:24:a4: 05:76:9e:79:73:93:05:48:ba:75:dc:35:8c:0c:3e:6c:23:db: c0:f4:2b:ab:7f:0f:8b:c3:84:ec:f3:bc:ed:3d:c0:c5:2e:24: a4:d5:3a:10:de:29:c1:ea:6d:2f:59:ff:7d:b8:fe:be:76:17: 2e:8f:a6:bc:32:97:5b:b9:92:a0:8a:30:e5:8d:40:5c:27:9e: 09:6c:19:32:ee:8c:45:ce:1a:62:01:bc:16:35:9e:38:c4:ec: af:55:18:f7:09:2a:ea:1d:19:c9:ba:1e:c6:3f:96:a3:18:d1: 1d:6e:35:5d:6c:69:3f:eb:fe:4d:8d:b9:22:2d:92:d8:c7:bd: 24:56:56:81:da:d2:52:92:92:16:62:46:7c:a1:9d:47:2c:38: 39:a1:2d:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdCOTQxMTAvBgNVBAUTKDMxMjZGNEVGMDVFM0FFNzVBMDkxNDRCNjY3RDM5MzQ3 RDREQUE4OTAwHhcNMjYwMzAyMDIxMjA3WhcNMjYwMzA5MDIxMjA3WjAYMRYwFAYD VQQDEw02OWE0ZjFmOC0wZDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Hcc6eGGAPjQW0qCt8b1N8c7UskIMZk67TSOTJmRKWSJ6zEMjwvjWLlzTSx6 oj7I0pPyIr9W/RTnv9wvX6XDgMuZwO0WhZYTLpWzhxwkN4KK6aTMi0NgdRFoEOpl inV8WGH7QwKqeIm1XytfqlpG8UaYUHR07aYPTgxyqbA3mFtnQXS+B+WbAJfF2i2j xIFQSZPDJCLZBquOZcLvB9uSz9S+i3xz17cSYw+Mstva6tMzRTj7G+Jg42S/pNcQ rM6IpKSBLoNjNeJxmqcPaWd1d+rBxDgphYEEbf1+1sZyHYqaMNVPC+gQY7mNIV/8 j41tXbYH5qmDfsKw08R/4zHK4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOOOYg9E ZcNx4Fq3vOe//MqNBNH0MB8GA1UdIwQYMBaAFDEm9O8F4651oJFEtmfTk0fU2qiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0I5NC9DQzc0MUJCNjM3 NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJuV2drVVMyWjlPVFI5VGFx SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01TYjA3d1hqcm5XZ2tVUzJaOU9UUjlUYXFKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0I5NC9DQzc0MUJCNjM3NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJu V2drVVMyWjlPVFI5VGFxSkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAof/47j6pZ1lQcjKRFUbmt/C5Duzg3o8e5HMiX7RmXZYuvCOJjrp+pNr37ZWc 1de/zdzgZ4NS3omCz+EivwtiGCjJzbvOxUJtVTebhYI/60Yu4vLDde1ityFzQZGW CKfNnM4kaToWGIx2tCSkBXaeeXOTBUi6ddw1jAw+bCPbwPQrq38Pi8OE7PO87T3A xS4kpNU6EN4pweptL1n/fbj+vnYXLo+mvDKXW7mSoIow5Y1AXCeeCWwZMu6MRc4a YgG8FjWeOMTsr1UY9wkq6h0Zyboexj+WoxjRHW41XWxpP+v+TY25Ii2S2Me9JFZW gdrSUpKSFmJGfKGdRyw4OaEtwQ== -----END CERTIFICATE-----Generated at Mon Mar 2 08:33:55 2026 by rpki-client