$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft File: ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json) Hash identifier: T/l979+aGju2zSEHmyk2OvYoraEuyjqtOQX7jgMLULE= Subject key identifier: A6:ED:9E:1E:6D:26:F0:8F:AB:1B:CC:56:5B:38:0D:7E:AB:03:6B:D5 Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft Manifest number: 01E7 Signing time: Sun 01 Mar 2026 04:08:07 +0000 Manifest this update: Sun 01 Mar 2026 04:08:07 +0000 Manifest next update: Sun 08 Mar 2026 04:08:07 +0000 Files and hashes: 1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: JdEl2ankd8v53FISGm627SX4SqmbIEDkOGQcbVlyN7Y=) 2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: OGHGgQb+3PBwou4AsZu2wzKOHXe+QeebDoI1v2VznA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Validity Not Before: Mar 1 04:08:07 2026 GMT Not After : Mar 8 04:08:07 2026 GMT Subject: CN=69a3bba7-e7ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:dd:a4:b4:2c:9e:a1:10:16:d2:00:23:e0:92: 36:0f:45:29:d2:87:43:e8:62:27:f0:29:c2:02:6a: 88:c5:39:78:61:fc:2d:91:bd:ff:bf:19:ba:a6:43: 9c:c3:e7:6a:6a:15:36:b3:18:70:19:9b:24:53:42: e0:af:05:ea:0c:0c:69:11:9a:13:5f:3a:26:8b:08: d9:1a:45:3d:ce:42:6a:90:46:e0:2a:dd:b0:fd:dc: e5:b8:c8:78:5b:3d:22:63:a4:04:1e:c2:bb:ca:25: 1e:83:97:df:86:8b:ac:e4:c6:2f:d5:38:38:df:a9: 8e:b0:6b:7e:89:17:18:9c:65:e6:71:a2:5a:6f:be: 94:a8:6d:5f:86:df:86:17:e5:f3:ee:73:2d:64:85: 9b:ee:88:79:f1:9b:0e:dc:a7:b3:0f:04:ec:ad:35: 4a:ef:7d:f0:e7:b4:70:65:04:10:57:0a:35:49:a6: a5:bf:49:b6:51:98:c1:42:e9:97:db:f0:d9:c1:95: 86:86:3a:46:1d:c7:c4:6d:cd:1c:1a:c6:85:6d:61: ac:41:72:b4:fc:3e:81:5e:60:d6:a1:fa:b2:b3:37: 0d:20:10:be:d1:09:2d:d5:a3:1e:17:1b:f1:1e:aa: 1b:dd:fb:b3:6c:bf:18:55:4a:da:f9:94:52:80:48: 2c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:ED:9E:1E:6D:26:F0:8F:AB:1B:CC:56:5B:38:0D:7E:AB:03:6B:D5 X509v3 Authority Key Identifier: keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:77:32:dc:c0:2e:e5:98:02:3f:8e:c5:11:e5:ef:3a:5a:57: 19:80:0e:52:e2:b1:3a:86:5f:7b:52:ca:00:9c:72:f2:87:24: 28:f4:31:68:ba:3f:ac:0b:07:c5:5b:42:a8:b9:c1:91:68:32: 5b:b7:78:d0:9e:b5:47:c5:00:d0:c8:50:fb:bd:eb:5d:11:f0: ff:b0:60:7c:16:ba:71:ba:66:7d:6a:11:35:cf:c1:59:dd:ff: c3:54:58:35:db:14:7b:83:d8:00:a6:61:3a:ce:c6:10:53:ea: aa:07:92:2e:a4:c9:15:c6:03:5c:20:aa:e2:59:30:00:f7:69: 0b:ae:60:06:8d:d2:20:d4:83:7f:93:8a:b9:5b:95:ae:6e:4f: 04:dc:7d:10:5f:5d:d7:77:d0:35:f1:3b:8c:a0:a7:30:be:a1: bf:21:47:2a:66:24:98:d1:2c:f5:58:9b:62:f6:ff:0e:9d:f3: ec:c1:de:1b:5e:63:5b:3c:02:31:fc:2f:3e:f9:fd:b1:80:5f: 92:39:ca:39:c7:33:b6:cb:e8:a3:f7:06:96:c3:06:9d:54:74: c9:c3:0e:f2:24:af:e1:11:5d:ee:4f:ca:63:ee:6f:ed:f7:ac: d7:1c:c5:29:33:5d:fb:02:4e:35:37:04:bd:f4:2b:0e:80:86: 65:da:ef:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJENEYxMTAvBgNVBAUTKDc5Qzg3REM1OTVCMEMyN0QyMzMyOUJDOTkyODRBMjND OEJGREEwRTcwHhcNMjYwMzAxMDQwODA3WhcNMjYwMzA4MDQwODA3WjAYMRYwFAYD VQQDDA02OWEzYmJhNy1lN2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyt2ktCyeoRAW0gAj4JI2D0Up0odD6GIn8CnCAmqIxTl4Yfwtkb3/vxm6pkOc w+dqahU2sxhwGZskU0LgrwXqDAxpEZoTXzomiwjZGkU9zkJqkEbgKt2w/dzluMh4 Wz0iY6QEHsK7yiUeg5ffhous5MYv1Tg436mOsGt+iRcYnGXmcaJab76UqG1fht+G F+Xz7nMtZIWb7oh58ZsO3KezDwTsrTVK733w57RwZQQQVwo1Saalv0m2UZjBQumX 2/DZwZWGhjpGHcfEbc0cGsaFbWGsQXK0/D6BXmDWofqyszcNIBC+0Qkt1aMeFxvx Hqob3fuzbL8YVUra+ZRSgEgsuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKbtnh5t JvCPqxvMVls4DX6rA2vVMB8GA1UdIwQYMBaAFHnIfcWVsMJ9IzKbyZKEojyL/aDn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ0Ri9FRjg3NTUxODJG NjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3duMGpNcHZKa29TaVBJdjlv T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VjaDl4Wld3d24wak1wdkprb1NpUEl2OW9PYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQ0Ri9FRjg3NTUxODJGNjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3du MGpNcHZKa29TaVBJdjlvT2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZHcy3MAu5ZgCP47FEeXvOlpXGYAOUuKxOoZfe1LKAJxy8ockKPQxaLo/rAsH xVtCqLnBkWgyW7d40J61R8UA0MhQ+73rXRHw/7BgfBa6cbpmfWoRNc/BWd3/w1RY NdsUe4PYAKZhOs7GEFPqqgeSLqTJFcYDXCCq4lkwAPdpC65gBo3SINSDf5OKuVuV rm5PBNx9EF9d13fQNfE7jKCnML6hvyFHKmYkmNEs9VibYvb/Dp3z7MHeG15jWzwC MfwvPvn9sYBfkjnKOccztsvoo/cGlsMGnVR0ycMO8iSv4RFd7k/KY+5v7fes1xzF KTNd+wJONTcEvfQrDoCGZdrvkQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:28:36 2026 by rpki-client