$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft File: iHgvgx82npb5eaJYXPJzyRbHtP0.mft (raw, json) Hash identifier: 6khgK5r8PWhozH6Q5t5JUBGOvyPFoykouvmGqZBWyGk= Subject key identifier: E5:D2:EC:98:FD:8C:C1:C3:2B:44:53:57:7C:A0:CD:26:13:D6:79:A3 Authority key identifier: 88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD Certificate issuer: /CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD Certificate serial: 0724 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft Manifest number: 0710 Signing time: Sat 28 Feb 2026 22:24:48 +0000 Manifest this update: Sat 28 Feb 2026 22:24:47 +0000 Manifest next update: Sat 07 Mar 2026 22:24:47 +0000 Files and hashes: 1: iHgvgx82npb5eaJYXPJzyRbHtP0.crl (hash: kg8CfcCFl3dQl+bTFW+l6qgzkFNdq4gJ0vYJY3p0EtM=) 2: 2BC67A2A346711EF9EEB0F52C4F9AE02.roa (hash: wKKFIbG6rZYzWOquPQsQVLcMaVWXvSfOn3rpMeiquU4=) 3: 0F425E96346711EFA663CD51C4F9AE02.roa (hash: 0UszszQSlIl4E2WZV6BiPk26HX6TF60w5QFwSAW1SPk=) 4: A0A96F80AD8511F08B0A1857C4F9AE02.roa (hash: IAiqZ7+h+k8237T4xv3w1ZM4/F+z2G79r7OGY4bCxVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 22:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1828 (0x724) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B65E6, serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD Validity Not Before: Feb 28 22:24:47 2026 GMT Not After : Mar 7 22:24:47 2026 GMT Subject: CN=69a36b2f-e2da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b6:21:80:fb:9c:04:36:c1:71:9d:cf:a6:2b: 19:e1:bb:99:e9:95:df:fb:cd:94:f7:55:e2:12:d9: e6:e7:4d:3a:26:a2:96:c8:b5:1a:ae:3e:b2:f3:5b: c2:5b:24:2b:40:e5:4e:76:f7:ce:eb:45:ce:1e:09: 13:0f:79:72:4c:6a:83:82:bc:ec:1e:a9:b4:2b:c2: fa:cd:76:2f:37:ae:82:f8:87:4a:61:e7:b0:cd:44: 34:c1:56:10:06:1d:b9:0d:81:3e:cd:81:ff:3f:3f: 2f:7e:3e:5e:3a:d7:fe:5b:c7:30:ba:07:3e:e3:38: 15:31:86:2f:8f:83:a2:02:36:b6:64:a7:68:99:95: 94:8d:f9:cd:d5:1d:88:fb:99:e5:6e:13:96:7f:29: 06:e7:3d:8e:ca:fd:55:86:64:e8:df:96:fa:13:30: 1b:af:a5:62:4f:fb:28:69:57:7d:9d:4f:d7:c1:b7: 0c:a2:dc:d8:3f:ee:1e:b9:ff:0d:db:a1:d6:a9:a4: 90:3d:1b:42:65:9f:f0:41:76:6b:18:a0:18:7e:f4: 04:57:4d:79:5d:64:73:56:8f:21:9e:f6:fd:c5:a3: d5:01:03:da:3f:24:41:d3:2e:94:ca:3d:a3:c1:6b: bd:f9:06:28:7b:b7:2a:ab:23:0b:13:90:df:a3:85: d2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D2:EC:98:FD:8C:C1:C3:2B:44:53:57:7C:A0:CD:26:13:D6:79:A3 X509v3 Authority Key Identifier: keyid:88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d5:a2:2a:cf:dd:d1:64:f7:a7:fd:57:52:e2:07:d8:b0:fb: 86:4d:e7:5e:e3:5e:a1:f6:cc:fe:21:a4:f7:25:21:10:2e:78: 8c:d6:13:63:16:0b:b8:49:bf:c9:e8:04:9c:b7:97:fd:7b:54: 47:75:57:64:08:f4:67:ae:4a:bb:74:4b:b0:62:74:2d:7e:c4: 80:2b:8f:07:01:68:ea:5e:4b:66:8f:92:62:ed:d5:42:16:2c: e9:c2:da:67:b9:a2:1e:cd:98:51:84:b2:46:98:56:65:2f:d1: 30:69:d1:00:5b:94:3a:60:1f:9f:2a:78:25:06:66:21:d2:da: b7:70:97:44:5b:d0:d3:0b:3b:d5:e5:34:f1:a2:b7:f5:b6:b5: 01:f8:84:f0:97:cd:5f:98:0b:2c:60:5f:af:03:d5:16:d0:ee: ba:60:51:e5:68:53:e8:6a:04:19:63:78:75:aa:a8:46:af:50: 5c:2b:d6:71:e8:fd:9e:4d:38:31:60:11:3a:82:24:4e:8b:de: 51:4b:83:d8:64:b1:12:b2:2e:e4:45:aa:ba:12:ab:b4:ed:39: 1f:e7:c6:09:b1:8d:57:cf:b9:5c:c1:61:f2:35:5e:4f:17:bd: 6c:e3:ca:4e:be:c5:13:7e:0e:e9:d2:5e:a4:6c:4a:ea:2b:41: b9:bc:6f:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICByQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1RTYxMTAvBgNVBAUTKDg4NzgyRjgzMUYzNjlFOTZGOTc5QTI1ODVDRjI3M0M5 MTZDN0I0RkQwHhcNMjYwMjI4MjIyNDQ3WhcNMjYwMzA3MjIyNDQ3WjAYMRYwFAYD VQQDDA02OWEzNmIyZi1lMmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLYhgPucBDbBcZ3PpisZ4buZ6ZXf+82U91XiEtnm5006JqKWyLUarj6y81vC WyQrQOVOdvfO60XOHgkTD3lyTGqDgrzsHqm0K8L6zXYvN66C+IdKYeewzUQ0wVYQ Bh25DYE+zYH/Pz8vfj5eOtf+W8cwugc+4zgVMYYvj4OiAja2ZKdomZWUjfnN1R2I +5nlbhOWfykG5z2Oyv1VhmTo35b6EzAbr6ViT/soaVd9nU/XwbcMotzYP+4euf8N 26HWqaSQPRtCZZ/wQXZrGKAYfvQEV015XWRzVo8hnvb9xaPVAQPaPyRB0y6Uyj2j wWu9+QYoe7cqqyMLE5Dfo4XS3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOXS7Jj9 jMHDK0RTV3ygzSYT1nmjMB8GA1UdIwQYMBaAFIh4L4MfNp6W+XmiWFzyc8kWx7T9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjVFNi84N0QxRUQwNjdB ODcxMUVCOTA4RUJENjNDNEY5QUUwMi9pSGd2Z3g4Mm5wYjVlYUpZWFBKenlSYkh0 UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lIZ3ZneDgybnBiNWVhSllYUEp6eVJiSHRQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjVFNi84N0QxRUQwNjdBODcxMUVCOTA4RUJENjNDNEY5QUUwMi9pSGd2Z3g4Mm5w YjVlYUpZWFBKenlSYkh0UDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPNWiKs/d0WT3p/1XUuIH2LD7hk3nXuNeofbM/iGk9yUhEC54jNYTYxYLuEm/ yegEnLeX/XtUR3VXZAj0Z65Ku3RLsGJ0LX7EgCuPBwFo6l5LZo+SYu3VQhYs6cLa Z7miHs2YUYSyRphWZS/RMGnRAFuUOmAfnyp4JQZmIdLat3CXRFvQ0ws71eU08aK3 9ba1AfiE8JfNX5gLLGBfrwPVFtDuumBR5WhT6GoEGWN4daqoRq9QXCvWcej9nk04 MWAROoIkToveUUuD2GSxErIu5EWquhKrtO05H+fGCbGNV8+5XMFh8jVeTxe9bOPK Tr7FE34O6dJepGxK6itBubxvhw== -----END CERTIFICATE-----Generated at Sun Mar 1 23:10:51 2026 by rpki-client