$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft File: cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json) Hash identifier: cGFaVmPS80Nh6WyIPoW9ND0NTfWTE5+DJjkG5Jl1q7E= Subject key identifier: BB:EC:60:FF:28:BF:A3:62:3D:F9:6E:CB:F8:65:A2:64:D6:FF:40:F5 Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft Manifest number: 01B8 Signing time: Sun 01 Mar 2026 04:40:33 +0000 Manifest this update: Sun 01 Mar 2026 04:40:33 +0000 Manifest next update: Sun 08 Mar 2026 04:40:33 +0000 Files and hashes: 1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: HGBauZ0muChaIpFC+CCV7PnC6hrEeodnHLsbWBca+kQ=) 2: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: OhVSINqRDbYDYzizYPjsSJVDGsqMNV1Hnr1ZKEP7+fs=) 3: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: ByB0pCDxwls4ymgVFOzdTJ6/67CPnhKw+rJNXjlR5HY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Validity Not Before: Mar 1 04:40:33 2026 GMT Not After : Mar 8 04:40:33 2026 GMT Subject: CN=69a3c341-394c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c0:0e:ed:71:0a:1a:06:85:a9:53:0e:28:c7: 1e:ba:40:84:99:c3:c8:7e:1b:74:a9:d2:2d:a9:7a: 2f:6a:15:e7:a0:1b:98:0d:2b:76:da:72:59:1d:11: f0:6a:e4:1f:61:b8:96:cb:d3:7b:d1:13:ae:c3:6e: a3:66:ae:71:04:7e:a8:22:3f:0f:f8:53:7a:5f:27: 99:8f:54:07:3b:75:0f:81:e9:04:ab:32:ed:79:da: bb:76:8d:92:5a:51:75:6f:f9:63:d4:56:71:bc:0e: 7b:33:10:46:9b:fa:d5:a7:24:67:35:4a:93:85:44: de:c9:97:22:6c:eb:65:ea:d1:a8:9f:65:3b:5a:04: 3d:fe:48:c6:1e:ea:87:eb:f7:f1:f5:47:a2:65:a3: 83:d1:c8:d2:0f:b1:1e:8c:76:a9:14:4f:a9:39:4a: 6d:dc:4d:4e:22:8e:86:96:a7:66:af:23:7f:91:c2: 37:b9:c0:c9:e4:bf:36:da:a0:a3:8e:f1:8b:35:3e: ee:8d:06:8a:bc:45:d3:ff:4d:a1:c2:90:4a:68:e9: b7:17:1d:0d:bd:a4:fd:ed:ea:1f:8e:c2:51:7f:5c: 84:66:f0:5d:64:d2:ca:83:06:f2:d4:c7:21:83:07: 44:6d:e8:b1:c5:6e:85:cf:7a:87:ad:db:13:b1:f5: bc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:EC:60:FF:28:BF:A3:62:3D:F9:6E:CB:F8:65:A2:64:D6:FF:40:F5 X509v3 Authority Key Identifier: keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:e4:05:1d:ca:ae:26:dd:01:88:32:9b:85:5a:c3:fc:2f:ef: 42:58:bb:32:39:85:2a:ec:6c:d5:4a:30:ba:d9:2d:23:b8:6b: d9:a4:93:f2:63:d3:dc:0e:22:7f:66:93:c5:b9:5d:63:47:d4: 5f:db:20:4f:d7:4b:03:84:46:56:a3:28:76:93:44:92:1d:64: 97:d1:d1:d0:db:25:47:77:16:f6:27:70:d3:56:97:e0:22:31: 35:4e:45:9b:e5:8c:71:e0:da:07:39:23:7e:65:12:de:0f:4d: 3f:64:8b:c7:54:db:1c:6b:92:ee:04:48:39:f3:81:d5:9b:4c: 0d:aa:02:b5:f7:e3:97:47:73:8a:5b:2d:80:dc:a0:99:17:8e: a9:d0:e3:77:06:c7:81:c4:3b:99:77:12:1f:78:3f:e9:4f:eb: 41:e4:a5:96:19:b1:d6:b0:88:b0:4e:6f:15:ee:8d:b5:51:b2: d6:f5:07:e8:12:ba:e2:45:7b:77:05:48:45:b7:9d:de:bb:76: 77:4d:65:f0:be:47:ca:ed:b1:44:f2:b9:f5:bb:53:22:64:6e: 2e:c4:05:ff:5b:28:a8:b4:70:73:ce:f3:bf:1b:38:49:89:37: f1:a0:6a:e0:63:d7:4d:bd:08:dc:03:71:b2:6d:a6:4c:32:b7: b8:ba:3d:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExQkYxMTAvBgNVBAUTKDcwRUEzN0MxOTMyQkQzNEZCM0I0ODU5QTM0ODMxQTEw RTYxMUQwRjYwHhcNMjYwMzAxMDQ0MDMzWhcNMjYwMzA4MDQ0MDMzWjAYMRYwFAYD VQQDDA02OWEzYzM0MS0zOTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocAO7XEKGgaFqVMOKMceukCEmcPIfht0qdItqXovahXnoBuYDSt22nJZHRHw auQfYbiWy9N70ROuw26jZq5xBH6oIj8P+FN6XyeZj1QHO3UPgekEqzLtedq7do2S WlF1b/lj1FZxvA57MxBGm/rVpyRnNUqThUTeyZcibOtl6tGon2U7WgQ9/kjGHuqH 6/fx9UeiZaOD0cjSD7EejHapFE+pOUpt3E1OIo6GlqdmryN/kcI3ucDJ5L822qCj jvGLNT7ujQaKvEXT/02hwpBKaOm3Fx0NvaT97eofjsJRf1yEZvBdZNLKgwby1Mch gwdEbeixxW6Fz3qHrdsTsfW8uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLvsYP8o v6NiPfluy/hlomTW/0D1MB8GA1UdIwQYMBaAFHDqN8GTK9NPs7SFmjSDGhDmEdD2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFCRi84NEUxMEE0Mjcy Q0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAwLXp0SVdhTklNYUVPWVIw UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NPbzN3Wk1yMDAtenRJV2FOSU1hRU9ZUjBQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTFCRi84NEUxMEE0MjcyQ0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAw LXp0SVdhTklNYUVPWVIwUFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuOQFHcquJt0BiDKbhVrD/C/vQli7MjmFKuxs1UowutktI7hr2aST8mPT3A4i f2aTxbldY0fUX9sgT9dLA4RGVqModpNEkh1kl9HR0NslR3cW9idw01aX4CIxNU5F m+WMceDaBzkjfmUS3g9NP2SLx1TbHGuS7gRIOfOB1ZtMDaoCtffjl0dzilstgNyg mReOqdDjdwbHgcQ7mXcSH3g/6U/rQeSllhmx1rCIsE5vFe6NtVGy1vUH6BK64kV7 dwVIRbed3rt2d01l8L5Hyu2xRPK59btTImRuLsQF/1soqLRwc87zvxs4SYk38aBq 4GPXTb0I3ANxsm2mTDK3uLo9bw== -----END CERTIFICATE-----Generated at Mon Mar 2 02:39:35 2026 by rpki-client