$ rpki-client -vvf rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft File: DfoUcOPJ6yHxewN7BM9O1UJO88k.mft (raw, json) Hash identifier: T9mH+Qv3kdoo1DH3j2zeg4nHUmF67amz9CDSWp7fuG8= Subject key identifier: 32:86:0A:0F:C2:59:64:2A:ED:85:6D:05:5B:1A:07:49:C2:FD:14:E6 Authority key identifier: 0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9 Certificate issuer: /CN=A91B588F/serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9 Certificate serial: 1DBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft Manifest number: 1DAB Signing time: Sat 28 Feb 2026 16:08:26 +0000 Manifest this update: Sat 28 Feb 2026 16:08:25 +0000 Manifest next update: Sat 07 Mar 2026 16:08:25 +0000 Files and hashes: 1: DfoUcOPJ6yHxewN7BM9O1UJO88k.crl (hash: OJ98ukYujSm5h6eYL5Lec4iC/azUj8U8c0UJ+Kb3SVs=) 2: 09DBF798B76311E6AF11523EC4F9AE02.roa (hash: KJtFM/La7mL3fu5dlcMqDcraRcAtERap2FuVwdqAgkc=) 3: 234A77E28D2111ECB33BB01AC4F9AE02.roa (hash: k8TIUAQe/uhiGTZr6cgQAthXD90vdh6WA7DCNugyFL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 16:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7610 (0x1dba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B588F, serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9 Validity Not Before: Feb 28 16:08:25 2026 GMT Not After : Mar 7 16:08:25 2026 GMT Subject: CN=69a312fa-9b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f6:7b:44:49:49:ba:10:f8:99:ac:bf:62:e0: cf:f6:db:d7:67:95:1a:fc:95:6a:f5:8e:e9:87:e8: c6:fa:c3:e6:31:e9:21:83:92:9b:e9:63:c4:97:eb: 54:e5:c7:61:82:00:1a:53:82:8c:92:37:49:f5:4e: cc:ea:fa:cb:18:20:4c:3a:9d:89:1e:bb:d3:05:eb: 68:f8:94:16:93:2f:c2:cb:61:7b:c4:cc:71:89:8d: 0e:c5:ca:45:1d:46:2c:96:1b:a2:02:fd:b9:d3:3d: 4a:bf:28:9d:9a:f8:8a:65:2d:e8:26:ec:73:e2:b8: e3:0d:f9:64:16:6c:f6:a4:c7:a7:07:36:10:cd:14: 86:bd:73:80:bc:54:74:92:9b:1b:72:7d:70:6a:6e: 81:fc:c1:0b:58:a8:a4:d3:f2:86:be:3b:24:9f:58: 4d:02:54:a2:d9:34:12:da:6c:73:fe:b2:d0:52:3f: 82:07:57:21:d6:55:ef:69:69:04:33:b2:99:95:82: 20:9b:77:b9:91:b5:e9:91:22:b1:56:38:e0:40:aa: 95:d3:26:4b:e2:d5:4b:76:a7:37:91:f0:13:94:e8: 33:10:a9:f2:16:5a:24:ff:5b:5a:6d:8c:13:5c:ba: db:b7:d7:ce:8c:b9:e7:34:b7:33:a6:da:03:66:8b: 18:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:86:0A:0F:C2:59:64:2A:ED:85:6D:05:5B:1A:07:49:C2:FD:14:E6 X509v3 Authority Key Identifier: keyid:0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:e8:ce:70:67:50:a4:22:48:d5:55:ad:93:b9:78:98:38:ef: 24:42:f0:54:32:eb:9a:2f:f4:66:1f:30:50:24:79:75:b6:ed: 57:d0:c8:3c:00:3b:83:25:09:73:c5:7a:f7:9e:b7:fe:13:7d: 0c:d4:57:78:53:39:aa:0c:24:0e:ad:e3:65:e2:52:a7:88:c4: 92:19:0b:3e:ce:64:45:1d:5e:31:c1:87:8b:96:d8:86:50:c6: f8:78:ae:f7:74:ca:b0:99:05:4b:09:dc:54:58:9c:cc:8a:35: b8:ac:8d:62:8e:79:5f:a1:9d:3f:4a:b8:86:e4:69:79:52:65: 88:54:e4:11:da:eb:3a:6e:cd:87:19:ad:a4:3b:2a:52:99:7b: cf:b8:0a:36:84:25:45:9a:81:66:f2:81:01:88:98:d0:8f:09: 30:a2:84:b1:b9:ea:5b:5c:69:e4:69:62:ee:42:45:2f:4a:53: 52:11:6c:b5:ba:b0:6f:c3:74:cc:f2:93:e6:15:0a:50:07:19: 29:f1:33:dd:a5:bd:0a:6b:ab:dc:bf:03:33:61:6a:a2:8f:6f: 3e:c4:20:07:c3:6b:62:2c:25:4d:44:f3:0f:df:e2:23:ba:30: b4:f4:b6:c2:a2:6f:24:76:10:50:34:5b:30:fe:ab:bf:01:43: 62:36:f8:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU4OEYxMTAvBgNVBAUTKDBERkExNDcwRTNDOUVCMjFGMTdCMDM3QjA0Q0Y0RUQ1 NDI0RUYzQzkwHhcNMjYwMjI4MTYwODI1WhcNMjYwMzA3MTYwODI1WjAYMRYwFAYD VQQDDA02OWEzMTJmYS05YjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj/Z7RElJuhD4may/YuDP9tvXZ5Ua/JVq9Y7ph+jG+sPmMekhg5Kb6WPEl+tU 5cdhggAaU4KMkjdJ9U7M6vrLGCBMOp2JHrvTBeto+JQWky/Cy2F7xMxxiY0OxcpF HUYslhuiAv250z1KvyidmviKZS3oJuxz4rjjDflkFmz2pMenBzYQzRSGvXOAvFR0 kpsbcn1wam6B/MELWKik0/KGvjskn1hNAlSi2TQS2mxz/rLQUj+CB1ch1lXvaWkE M7KZlYIgm3e5kbXpkSKxVjjgQKqV0yZL4tVLdqc3kfATlOgzEKnyFlok/1tabYwT XLrbt9fOjLnnNLczptoDZosYhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDKGCg/C WWQq7YVtBVsaB0nC/RTmMB8GA1UdIwQYMBaAFA36FHDjyesh8XsDewTPTtVCTvPJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTg4Ri83ODREOTRCOEI3 NjExMUU2QjExNzVBM0NDNEY5QUUwMi9EZm9VY09QSjZ5SHhld043Qk05TzFVSk84 OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Rmb1VjT1BKNnlIeGV3TjdCTTlPMVVKTzg4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTg4Ri83ODREOTRCOEI3NjExMUU2QjExNzVBM0NDNEY5QUUwMi9EZm9VY09QSjZ5 SHhld043Qk05TzFVSk84OGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARejOcGdQpCJI1VWtk7l4mDjvJELwVDLrmi/0Zh8wUCR5dbbtV9DIPAA7gyUJ c8V69563/hN9DNRXeFM5qgwkDq3jZeJSp4jEkhkLPs5kRR1eMcGHi5bYhlDG+Hiu 93TKsJkFSwncVFiczIo1uKyNYo55X6GdP0q4huRpeVJliFTkEdrrOm7NhxmtpDsq Upl7z7gKNoQlRZqBZvKBAYiY0I8JMKKEsbnqW1xp5Gli7kJFL0pTUhFstbqwb8N0 zPKT5hUKUAcZKfEz3aW9Cmur3L8DM2Fqoo9vPsQgB8NrYiwlTUTzD9/iI7owtPS2 wqJvJHYQUDRbMP6rvwFDYjb4dw== -----END CERTIFICATE-----Generated at Sun Mar 1 21:06:35 2026 by rpki-client