$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft File: gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft (raw, json) Hash identifier: cFa3wEQUSRQHfjeC4uh1CkGlyfKS4eLwITi00h1KRPo= Subject key identifier: 9C:03:4F:62:7E:47:40:60:05:D5:45:46:D6:06:BB:20:97:CB:98:3A Authority key identifier: 80:CA:BB:C5:DE:3F:7B:93:27:EA:C4:DB:A8:D9:36:53:A1:22:21:00 Certificate issuer: /CN=A91B3316/serialNumber=80CABBC5DE3F7B9327EAC4DBA8D93653A1222100 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft Manifest number: 23 Signing time: Sun 01 Mar 2026 10:26:16 +0000 Manifest this update: Sun 01 Mar 2026 10:26:16 +0000 Manifest next update: Sun 08 Mar 2026 10:26:16 +0000 Files and hashes: 1: gMq7xd4_e5Mn6sTbqNk2U6EiIQA.crl (hash: S82dQFJVsrUAX3j/vyfCulrxpSp5IQwIhOf2qV9yfMw=) 2: 5EA0F3A6125711F1AAED1DA22C3D8C67.roa (hash: bMnkqvRfU3rTM518ow86eR7Rro9Mk3schxMkhKV/l3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.crl rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3316, serialNumber=80CABBC5DE3F7B9327EAC4DBA8D93653A1222100 Validity Not Before: Mar 1 10:26:16 2026 GMT Not After : Mar 8 10:26:16 2026 GMT Subject: CN=69a41448-f9db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d2:b5:6b:8b:28:da:99:46:1b:4e:85:39:ac: 90:1b:fa:d6:82:17:61:34:4e:82:ea:37:fb:ac:5b: 3b:d1:29:e9:4a:53:23:45:2e:bb:ca:b9:fd:a4:78: d6:de:b6:ca:c7:f3:24:67:9a:51:48:60:5d:26:4f: e8:f5:d9:16:58:88:bb:16:1d:9b:9f:50:80:fd:00: d3:01:6c:3b:77:f4:92:91:8b:39:36:59:ef:39:4f: 39:73:c0:df:44:1b:a4:07:6a:fc:31:94:1d:22:dd: 6b:ee:b1:ce:4b:6e:0b:52:55:62:5e:8d:22:6e:e0: 94:ee:9a:2c:dd:8a:c3:75:f6:2b:05:68:2c:57:4d: a1:97:5e:0c:8a:71:34:f7:3f:0e:87:e0:b5:fe:60: 51:a2:aa:ed:b0:44:62:14:64:df:19:69:d1:6a:f3: 3b:b1:f4:8c:e4:4a:dc:c8:38:63:48:ba:f0:f0:a1: 6a:cc:63:15:ec:3f:ab:65:34:65:20:4f:e9:e9:70: 8f:c8:b6:59:aa:75:a9:b8:01:0f:86:75:cf:87:7b: cf:61:53:c0:0f:bf:28:27:26:58:40:93:ac:2c:62: c9:9e:41:a6:f2:68:a7:16:1f:15:97:31:59:be:31: 13:94:75:4d:11:60:cd:1e:49:5f:e5:6f:52:78:6b: bd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:03:4F:62:7E:47:40:60:05:D5:45:46:D6:06:BB:20:97:CB:98:3A X509v3 Authority Key Identifier: keyid:80:CA:BB:C5:DE:3F:7B:93:27:EA:C4:DB:A8:D9:36:53:A1:22:21:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:90:b0:22:03:8d:83:80:50:60:39:aa:cb:ff:dc:b6:5a:26: 34:61:7c:4d:d7:4a:4b:b5:a4:0e:be:cb:f8:a6:1a:c6:58:7b: 9e:fa:d7:98:45:10:01:3b:d4:77:27:66:31:88:3d:e3:ce:f7: db:eb:59:d7:d5:df:10:82:4e:dc:ae:b3:90:a3:4b:d3:d9:73: e6:93:0a:0b:25:6a:ca:10:26:cd:9d:13:73:d1:4d:23:21:01: 4e:43:c7:f5:7a:ca:30:5e:05:cb:8c:cf:15:11:ce:cd:98:1b: 7e:5d:8c:ed:9a:9c:b4:22:59:30:4e:50:e8:15:9f:64:d0:4f: 0b:d3:a4:26:52:55:29:8f:c4:28:9f:5c:0c:23:7b:34:bb:f4: e3:6c:a5:43:a9:14:1d:12:2a:19:c2:14:e4:0a:76:34:b9:f6: 2f:90:a8:2e:1f:bf:b5:aa:cc:8e:86:5c:54:eb:b2:70:25:7e: 98:db:f1:73:b1:17:7b:f2:ce:f1:75:f9:dd:99:88:9d:da:9f: b5:53:cd:8b:37:96:a3:73:77:74:1c:36:39:dc:f1:88:40:6c: cf:e8:a5:ac:cc:14:07:8e:86:cf:90:83:54:67:b1:96:63:c1: a3:02:fe:ad:15:4a:f7:8f:df:99:f4:ab:9b:cd:76:d8:de:9f: 29:d4:7e:9d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzMxNjExMC8GA1UEBRMoODBDQUJCQzVERTNGN0I5MzI3RUFDNERCQThEOTM2NTNB MTIyMjEwMDAeFw0yNjAzMDExMDI2MTZaFw0yNjAzMDgxMDI2MTZaMBgxFjAUBgNV BAMTDTY5YTQxNDQ4LWY5ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCh0rVriyjamUYbToU5rJAb+taCF2E0ToLqN/usWzvRKelKUyNFLrvKuf2keNbe tsrH8yRnmlFIYF0mT+j12RZYiLsWHZufUID9ANMBbDt39JKRizk2We85TzlzwN9E G6QHavwxlB0i3Wvusc5LbgtSVWJejSJu4JTumizdisN19isFaCxXTaGXXgyKcTT3 Pw6H4LX+YFGiqu2wRGIUZN8ZadFq8zux9IzkStzIOGNIuvDwoWrMYxXsP6tlNGUg T+npcI/Itlmqdam4AQ+Gdc+He89hU8APvygnJlhAk6wsYsmeQabyaKcWHxWXMVm+ MROUdU0RYM0eSV/lb1J4a70VAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnANPYn5H QGAF1UVG1ga7IJfLmDowHwYDVR0jBBgwFoAUgMq7xd4/e5Mn6sTbqNk2U6EiIQAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzMzE2LzIwNjhDMDYyRjJD NDExRjA4Qjg0RTQ0NTM5NkY1NkJDL2dNcTd4ZDRfZTVNbjZzVGJxTmsyVTZFaUlR QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvZ01xN3hkNF9lNU1uNnNUYnFOazJVNkVpSVFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz MzE2LzIwNjhDMDYyRjJDNDExRjA4Qjg0RTQ0NTM5NkY1NkJDL2dNcTd4ZDRfZTVN bjZzVGJxTmsyVTZFaUlRQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQArkLAiA42DgFBgOarL/9y2WiY0YXxN10pLtaQOvsv4phrGWHue+teYRRABO9R3 J2YxiD3jzvfb61nX1d8Qgk7crrOQo0vT2XPmkwoLJWrKECbNnRNz0U0jIQFOQ8f1 esowXgXLjM8VEc7NmBt+XYztmpy0IlkwTlDoFZ9k0E8L06QmUlUpj8Qon1wMI3s0 u/TjbKVDqRQdEioZwhTkCnY0ufYvkKguH7+1qsyOhlxU67JwJX6Y2/FzsRd78s7x dfndmYid2p+1U82LN5ajc3d0HDY53PGIQGzP6KWszBQHjobPkINUZ7GWY8GjAv6t FUr3j9+Z9KubzXbY3p8p1H6d -----END CERTIFICATE-----Generated at Mon Mar 2 00:49:44 2026 by rpki-client