$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft File: CiozEuCLqcQb5-D7WKpkLG0BuHU.mft (raw, json) Hash identifier: Jg7hAuhipwE2p3Tbnfy0YuDAEHcV7C3FQ8oG0Tj+I88= Subject key identifier: 12:B2:45:33:69:29:05:CF:7E:CE:FF:40:8D:87:E3:AA:6F:4D:6C:CA Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 Certificate issuer: /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft Manifest number: A1 Signing time: Sun 01 Mar 2026 23:40:09 +0000 Manifest this update: Sun 01 Mar 2026 23:40:08 +0000 Manifest next update: Sun 08 Mar 2026 23:40:08 +0000 Files and hashes: 1: CiozEuCLqcQb5-D7WKpkLG0BuHU.crl (hash: thBm5pRwCbnwxQsqAP0ncliSYCEbcsflKWKJ50KSRvE=) 2: 05F9354AB48011F088AD0013C4F9AE02.roa (hash: X7BI5odsB6N538z/96kUX+IcSGhjCzOymMiDq7Wpvv4=) 3: 07D143BC294811F0BE054340C4F9AE02.roa (hash: kzSsxZ682v8/ERGLhjD9XrRbqG/U1pi7dFHad+/CXo0=) 4: FA56A6A6294B11F09738296CC4F9AE02.roa (hash: O3pM7qvbKmvbVcKlOqt9J2PpCos6mHEcxUkjQ35Bo3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Validity Not Before: Mar 1 23:40:08 2026 GMT Not After : Mar 8 23:40:08 2026 GMT Subject: CN=69a4ce59-5779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b6:34:d7:e7:8d:8e:fb:a1:98:55:dc:d3:86: 4a:87:6d:ac:9a:1b:11:85:08:d2:b3:64:3a:ee:80: 2b:6f:3f:b0:f7:ca:8b:b4:43:1c:cf:e5:21:9f:18: 18:d9:5d:0d:07:0e:98:9f:30:ce:1a:75:32:37:da: ed:32:94:8a:98:3a:a3:a4:45:42:15:d3:cd:26:ce: 99:09:0b:8c:78:aa:57:95:9f:64:52:54:f4:3d:ea: 11:45:c7:f6:67:83:a5:73:1e:d3:a7:9d:14:bc:05: 28:d1:cf:cf:fa:12:b4:d3:6a:e0:11:92:b0:1d:4a: 84:e3:a8:e8:c5:21:e8:7d:5b:1d:83:73:3a:a7:fb: 2a:28:7b:29:2b:db:1c:e5:1a:c5:75:1e:2c:0c:96: 4c:e4:4c:24:65:1a:e5:3d:ed:55:ef:8c:32:f5:1c: 68:b6:54:1e:88:29:f4:52:82:61:f4:68:c6:69:29: 2a:a4:c8:08:fd:7c:be:e4:e3:90:80:b6:2c:0f:b1: 44:91:2d:79:59:0e:18:68:92:78:6e:7b:27:d7:df: 25:80:a0:fc:86:6e:23:7a:f0:8b:ac:fc:79:eb:f7: 8d:5c:4d:fe:64:80:43:a4:01:5f:13:c1:17:c9:17: 1c:7c:ad:6c:fe:c8:3b:cc:24:d0:53:3b:6b:df:3b: ac:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B2:45:33:69:29:05:CF:7E:CE:FF:40:8D:87:E3:AA:6F:4D:6C:CA X509v3 Authority Key Identifier: keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:2b:fb:ac:3f:71:a3:06:59:70:97:5a:c2:1b:e0:d2:ef:94: 47:e4:ff:4d:48:52:4b:fa:88:27:cd:65:2c:44:00:3b:22:25: e6:4d:7f:5c:d0:45:a7:a5:94:f0:94:45:1c:1a:37:6a:4c:e8: e2:22:ce:76:78:c1:2b:dd:cc:4e:b6:95:4c:a8:1d:ed:89:a2: 72:fd:b0:85:99:8a:e9:fb:7b:82:20:9f:34:a1:a0:b7:a7:f4: ab:48:14:18:24:94:05:f1:d5:0b:b3:ba:f9:d9:03:47:8c:fc: a6:83:9a:2e:c7:84:64:68:ff:4c:d4:88:12:3a:45:9d:9d:29: f6:0a:88:06:d6:75:8f:77:57:27:a2:e0:e8:cc:5f:25:6b:02: 98:6f:b6:af:34:69:53:77:a6:b6:4c:16:64:c7:95:4a:88:c7: 9a:3a:9b:20:03:5e:5a:d4:72:d0:4d:52:3c:c2:92:e2:0a:96: 16:08:50:b7:48:10:26:6d:bf:c3:97:02:56:32:1b:b6:cf:d1: ee:e0:db:77:96:5a:33:c5:75:85:46:a1:d2:c7:5f:3d:e5:48: d2:5c:fc:f7:6c:44:ea:9c:1a:f1:94:b3:6b:e0:c9:e2:2a:f4: e7:4d:f6:73:b1:a9:ac:ba:70:37:83:46:86:43:31:00:28:1e: 5f:e5:98:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdEQ0IxMTAvBgNVBAUTKDBBMkEzMzEyRTA4QkE5QzQxQkU3RTBGQjU4QUE2NDJD NkQwMUI4NzUwHhcNMjYwMzAxMjM0MDA4WhcNMjYwMzA4MjM0MDA4WjAYMRYwFAYD VQQDEw02OWE0Y2U1OS01Nzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlrY01+eNjvuhmFXc04ZKh22smhsRhQjSs2Q67oArbz+w98qLtEMcz+UhnxgY 2V0NBw6YnzDOGnUyN9rtMpSKmDqjpEVCFdPNJs6ZCQuMeKpXlZ9kUlT0PeoRRcf2 Z4Olcx7Tp50UvAUo0c/P+hK002rgEZKwHUqE46joxSHofVsdg3M6p/sqKHspK9sc 5RrFdR4sDJZM5EwkZRrlPe1V74wy9RxotlQeiCn0UoJh9GjGaSkqpMgI/Xy+5OOQ gLYsD7FEkS15WQ4YaJJ4bnsn198lgKD8hm4jevCLrPx56/eNXE3+ZIBDpAFfE8EX yRccfK1s/sg7zCTQUztr3zusLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBKyRTNp KQXPfs7/QI2H46pvTWzKMB8GA1UdIwQYMBaAFAoqMxLgi6nEG+fg+1iqZCxtAbh1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0RDQi8wMTUwNUEzMDI5 NDUxMUYwQUUxQUJDNzRDNEY5QUUwMi9DaW96RXVDTHFjUWI1LUQ3V0twa0xHMEJ1 SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Npb3pFdUNMcWNRYjUtRDdXS3BrTEcwQnVIVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0RDQi8wMTUwNUEzMDI5NDUxMUYwQUUxQUJDNzRDNEY5QUUwMi9DaW96RXVDTHFj UWI1LUQ3V0twa0xHMEJ1SFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYSv7rD9xowZZcJdawhvg0u+UR+T/TUhSS/qIJ81lLEQAOyIl5k1/XNBFp6WU 8JRFHBo3akzo4iLOdnjBK93MTraVTKgd7Ymicv2whZmK6ft7giCfNKGgt6f0q0gU GCSUBfHVC7O6+dkDR4z8poOaLseEZGj/TNSIEjpFnZ0p9gqIBtZ1j3dXJ6Lg6Mxf JWsCmG+2rzRpU3emtkwWZMeVSojHmjqbIANeWtRy0E1SPMKS4gqWFghQt0gQJm2/ w5cCVjIbts/R7uDbd5ZaM8V1hUah0sdfPeVI0lz892xE6pwa8ZSza+DJ4ir05032 c7GprLpwN4NGhkMxACgeX+WYgg== -----END CERTIFICATE-----Generated at Mon Mar 2 07:47:31 2026 by rpki-client