$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: iyjcC6BgbxuN1wKL8eMEy6dOVIFH9c4PIe3Zf6KXCm8= Subject key identifier: A1:B1:EE:43:C3:65:35:CE:80:E4:7D:31:40:78:EF:0D:ED:AA:74:0B Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 0479 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 043F Signing time: Sun 01 Mar 2026 01:16:12 +0000 Manifest this update: Sun 01 Mar 2026 01:16:11 +0000 Manifest next update: Sun 08 Mar 2026 01:16:11 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: WBuly46mdy0EZSxfqyr4wYbNBD6W5aV5ic6K61Kjprw=) 2: 9ED423000B1211F08F4E1E7EC4F9AE02.roa (hash: 3NAVJz0Igy7uXB0vNJLe+B3+peDllbfVzAqxJB4rTPY=) 3: 0735D9BEEC5611F09B1B681B4A6F56BC.roa (hash: F+zbsaeqSNKR3R4phxdSEksOeJTEmYc/IGzbhxYMyUA=) 4: 977BACDA818811F0AE59F81AC4F9AE02.roa (hash: uKH93ZRreEKwtoUhXqaPKV81tL9TswdJHpgjfNg1v4Y=) 5: 97F41C10818811F0AE59F81AC4F9AE02.roa (hash: 2zsEA3yDI1cCdtbUgMxFXhTvbjlM5hAGTHb5uzRp4IY=) 6: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: fj+edjI2ywGwwcvvr9BPZUhUZb21shpN5m0uYErV5r8=) 7: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: BRWciTjjQt32cnZj7/+sUh4AwLIx4UTsIsBMzlf1y2U=) 8: 366FD216EC5611F0B67F861C4A6F56BC.roa (hash: HmUOxsr+DXTp7/0WPq6upTZpD6L3HkM+fxihxuJeSWQ=) 9: 5C153EA0EC5811F0941546AF4A6F56BC.roa (hash: xD009+EKXuUCYTRbhZCA0670hZYrCHS2OfXRZns0vvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:16:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1145 (0x479) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: Mar 1 01:16:11 2026 GMT Not After : Mar 8 01:16:11 2026 GMT Subject: CN=69a3935c-81a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9a:e0:43:8e:e4:bc:e5:98:b9:ee:d6:42:99: 0a:a5:1e:a4:97:dc:67:a7:3a:6c:61:c0:c9:e8:2a: 75:cd:46:1d:02:62:28:3a:35:56:55:bf:19:ca:b5: 9e:5d:87:a0:28:8d:27:a6:85:44:61:93:2f:0e:48: 5a:4f:90:8d:0a:b4:5d:48:ec:32:08:53:93:05:48: 49:4e:ab:e1:b3:b0:d8:8e:af:5e:91:9e:8e:75:3e: 19:f2:5e:d4:cd:7c:1a:60:ba:e9:cc:d9:d1:52:dc: 07:dc:d4:cf:08:b9:46:5c:17:e7:a0:14:c0:67:e2: 69:01:b3:86:6e:dc:be:28:39:8d:4f:3c:f8:1e:b6: 89:a0:38:91:1b:3a:d8:f0:7d:ef:e7:e1:47:cc:f1: 8c:13:ed:0f:81:f6:34:4b:94:f1:38:46:08:89:bb: e6:14:07:ca:cc:b4:53:33:5a:a5:ad:e3:36:12:46: b6:42:79:eb:94:82:9b:48:44:5a:d4:16:6a:c1:5f: 50:24:b3:c2:01:6d:6d:2c:51:17:65:45:c4:1e:bc: 7d:dd:70:18:6f:fb:12:d2:c7:e3:83:c2:a2:4d:2b: ae:43:db:32:21:80:da:e2:74:71:2c:dc:b6:50:2d: 41:e0:9f:c2:11:e0:c4:f1:23:d1:d9:e2:04:c3:88: 79:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B1:EE:43:C3:65:35:CE:80:E4:7D:31:40:78:EF:0D:ED:AA:74:0B X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:7b:db:27:04:e9:a3:e5:47:61:be:b8:c9:62:e1:a0:c8:c4: 8d:e1:2c:81:3d:d6:ec:43:08:96:48:82:8a:41:b8:fb:47:0c: 28:c5:c4:77:66:ff:0e:1b:a8:66:f0:51:30:10:d2:d7:67:84: 49:aa:eb:0e:32:6a:bf:0a:57:5d:6d:f5:83:76:68:5c:13:12: 4c:c5:14:e8:2a:15:9c:cf:21:96:dc:12:6c:8b:7b:55:5b:4b: b2:41:aa:2a:da:73:41:05:ab:35:d2:ed:fb:24:b2:08:6c:e2: 41:76:36:46:e5:ca:75:de:51:56:e3:5d:9c:e3:c0:79:bd:a7: 86:40:24:06:29:b7:da:8b:9a:c6:ef:f1:bf:d5:6a:a0:46:ec: a4:9d:eb:89:86:2f:27:05:9e:6e:dc:6f:fc:62:ff:de:52:76: b9:08:bb:a8:1c:4e:1f:f5:02:39:2f:d3:a2:81:3e:17:e5:50: 30:d8:e1:69:3c:98:9c:7c:ae:18:83:69:5c:b2:a0:68:c3:61: 13:67:e0:fd:f0:c2:3f:ad:2b:4e:cd:3d:eb:37:39:c3:82:61: f8:02:60:d6:dd:2c:d5:63:a3:94:55:41:44:d6:43:f0:11:1f: 1d:6f:47:bd:77:25:6d:23:4f:bc:4c:1d:1e:87:32:1b:3e:5a: 0b:f3:66:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjYwMzAxMDExNjExWhcNMjYwMzA4MDExNjExWjAYMRYwFAYD VQQDDA02OWEzOTM1Yy04MWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyprgQ47kvOWYue7WQpkKpR6kl9xnpzpsYcDJ6Cp1zUYdAmIoOjVWVb8ZyrWe XYegKI0npoVEYZMvDkhaT5CNCrRdSOwyCFOTBUhJTqvhs7DYjq9ekZ6OdT4Z8l7U zXwaYLrpzNnRUtwH3NTPCLlGXBfnoBTAZ+JpAbOGbty+KDmNTzz4HraJoDiRGzrY 8H3v5+FHzPGME+0PgfY0S5TxOEYIibvmFAfKzLRTM1qlreM2Eka2QnnrlIKbSERa 1BZqwV9QJLPCAW1tLFEXZUXEHrx93XAYb/sS0sfjg8KiTSuuQ9syIYDa4nRxLNy2 UC1B4J/CEeDE8SPR2eIEw4h5SwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKGx7kPD ZTXOgOR9MUB47w3tqnQLMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfHvbJwTpo+VHYb64yWLhoMjEjeEsgT3W7EMIlkiCikG4+0cMKMXEd2b/Dhuo ZvBRMBDS12eESarrDjJqvwpXXW31g3ZoXBMSTMUU6CoVnM8hltwSbIt7VVtLskGq KtpzQQWrNdLt+ySyCGziQXY2RuXKdd5RVuNdnOPAeb2nhkAkBim32ouaxu/xv9Vq oEbspJ3riYYvJwWebtxv/GL/3lJ2uQi7qBxOH/UCOS/TooE+F+VQMNjhaTyYnHyu GINpXLKgaMNhE2fg/fDCP60rTs096zc5w4Jh+AJg1t0s1WOjlFVBRNZD8BEfHW9H vXclbSNPvEwdHocyGz5aC/Nmvw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:25:24 2026 by rpki-client