$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft File: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft (raw, json) Hash identifier: 7eF4DNkOho0hdRfzquQ5XLJZODVSZ+pYeLPoXGGklV4= Subject key identifier: 89:D8:6C:44:78:09:0D:1B:CB:C2:21:50:BF:0F:60:43:CC:27:E6:F7 Authority key identifier: 9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E Certificate issuer: /CN=A91B6D28/serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Certificate serial: 3539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft Manifest number: 3528 Signing time: Mon 02 Mar 2026 00:09:44 +0000 Manifest this update: Mon 02 Mar 2026 00:09:42 +0000 Manifest next update: Mon 09 Mar 2026 00:09:42 +0000 Files and hashes: 1: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl (hash: 41aDNMh0gJVEFTEx8zLkKTiT/0UbjAy3zNMegF8SO0k=) 2: AA6965E4CD8D11EF8DF2E66DC4F9AE02.roa (hash: 13OFQ4+DXlBY64hL4vDY3u0qJPTe15xHqCHPoGlCW1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13625 (0x3539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6D28, serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Validity Not Before: Mar 2 00:09:42 2026 GMT Not After : Mar 9 00:09:42 2026 GMT Subject: CN=69a4d548-4899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:af:bf:c3:54:30:16:70:52:5a:75:25:35:55: f6:cb:43:0a:b7:16:e5:3e:8a:f4:3d:cd:59:b1:65: 59:9a:5d:5c:98:ab:d7:e8:df:25:33:57:6e:c2:30: 7e:93:72:4c:2e:1e:2e:72:fb:56:44:33:d5:89:a1: 2d:d9:6c:f8:91:b7:c5:19:ac:aa:e2:7a:cc:49:9e: a2:86:ed:e0:55:da:3e:53:c8:dd:8d:69:67:36:5b: c0:ef:bf:da:57:98:62:1d:57:a4:24:78:82:aa:0a: c4:68:d0:a0:bf:b9:77:72:a1:7c:10:1e:9a:e4:93: 77:c5:54:25:71:ff:05:b3:39:14:ed:4a:ae:d9:81: ca:c9:75:9d:a1:4a:19:e0:1d:df:9e:79:6b:95:5b: 06:5d:3f:cd:85:dd:4e:19:a6:17:7c:76:fa:bc:e9: 3c:a5:24:7f:d8:81:a4:45:f6:f6:a5:3d:61:88:fc: 29:f2:a4:c6:2e:cd:5c:b8:06:3d:3b:a1:49:97:ee: 82:c6:d9:ce:43:78:9a:70:3d:77:f9:2c:0d:92:4d: 9c:86:b5:cc:e8:f0:9e:8b:dc:79:28:a0:78:85:29: 66:50:4d:7d:f6:9d:a5:3b:93:71:ee:c9:bf:99:95: 8c:96:3b:15:1b:ba:3b:82:59:c3:58:7b:80:43:ee: 97:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D8:6C:44:78:09:0D:1B:CB:C2:21:50:BF:0F:60:43:CC:27:E6:F7 X509v3 Authority Key Identifier: keyid:9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:87:b2:a7:16:45:fe:e3:60:71:33:d2:e4:ca:8e:c6:ba:22: 8b:a1:54:62:73:82:83:c9:b5:09:71:39:96:9e:a3:17:8a:ca: e2:75:16:29:04:31:d8:f8:33:8a:d6:84:b3:ab:70:f5:32:b7: e5:a4:ea:10:1b:cd:6f:50:80:7d:d0:af:93:8c:19:4b:bf:17: 9c:7b:1e:f1:50:c2:ac:ea:b5:05:3c:e9:d9:ed:e4:40:ae:2d: c9:12:42:48:9d:c2:72:e5:4d:1d:9c:c2:27:63:4b:ec:5f:68: 21:f0:54:25:bc:dc:5b:d6:d0:50:11:e7:9c:cf:ab:8f:b5:b5: c9:78:da:fb:2b:c2:86:55:eb:d8:7b:d6:32:ec:f0:47:f7:37: 64:3d:78:29:bd:00:88:31:f0:41:dc:e0:50:05:9f:d5:e2:9d: ea:3c:78:6f:42:3c:d8:0d:bb:eb:5d:b8:22:28:39:d6:2f:5f: 62:10:07:c5:17:da:3f:ef:5e:77:bb:21:1c:db:1e:32:db:9d: 1c:df:31:85:b0:3f:30:cb:3f:92:b8:85:81:53:ff:a6:d6:29: e3:33:25:2b:71:7f:67:36:6a:2e:4e:62:81:1b:d0:f4:bf:c8: 12:4d:c8:3d:28:ae:c4:d5:1b:37:26:39:e9:7d:42:eb:84:f3: cc:d1:6f:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZEMjgxMTAvBgNVBAUTKDlBNERBRjhGQ0E4NUUxOTNEMzRFQTQ5NTk3OTk2REVE MTdDQkRGMUUwHhcNMjYwMzAyMDAwOTQyWhcNMjYwMzA5MDAwOTQyWjAYMRYwFAYD VQQDEw02OWE0ZDU0OC00ODk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwK+/w1QwFnBSWnUlNVX2y0MKtxblPor0Pc1ZsWVZml1cmKvX6N8lM1duwjB+ k3JMLh4ucvtWRDPViaEt2Wz4kbfFGayq4nrMSZ6ihu3gVdo+U8jdjWlnNlvA77/a V5hiHVekJHiCqgrEaNCgv7l3cqF8EB6a5JN3xVQlcf8FszkU7Uqu2YHKyXWdoUoZ 4B3fnnlrlVsGXT/Nhd1OGaYXfHb6vOk8pSR/2IGkRfb2pT1hiPwp8qTGLs1cuAY9 O6FJl+6CxtnOQ3iacD13+SwNkk2chrXM6PCei9x5KKB4hSlmUE199p2lO5Nx7sm/ mZWMljsVG7o7glnDWHuAQ+6XPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFInYbER4 CQ0by8IhUL8PYEPMJ+b3MB8GA1UdIwQYMBaAFJpNr4/KheGT006klZeZbe0Xy98e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkQyOC82MUQ0NTMxMDFE OTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRaUFRUcVNWbDVsdDdSZkwz eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rMnZqOHFGNFpQVFRxU1ZsNWx0N1JmTDN4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkQyOC82MUQ0NTMxMDFEOTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRa UFRUcVNWbDVsdDdSZkwzeDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv4eypxZF/uNgcTPS5MqOxroii6FUYnOCg8m1CXE5lp6jF4rK4nUWKQQx2Pgz itaEs6tw9TK35aTqEBvNb1CAfdCvk4wZS78XnHse8VDCrOq1BTzp2e3kQK4tyRJC SJ3CcuVNHZzCJ2NL7F9oIfBUJbzcW9bQUBHnnM+rj7W1yXja+yvChlXr2HvWMuzw R/c3ZD14Kb0AiDHwQdzgUAWf1eKd6jx4b0I82A276124Iig51i9fYhAHxRfaP+9e d7shHNseMtudHN8xhbA/MMs/kriFgVP/ptYp4zMlK3F/ZzZqLk5igRvQ9L/IEk3I PSiuxNUbNyY56X1C64TzzNFvew== -----END CERTIFICATE-----Generated at Mon Mar 2 12:39:19 2026 by rpki-client