$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft File: a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft (raw, json) Hash identifier: YwUa8ExRHOXVED/72ahgE4r6++UBnTP/t4CHsEGFpSM= Subject key identifier: 72:64:C0:E1:F9:3A:89:77:7E:70:AB:0B:5B:0F:F3:D5:5B:52:87:28 Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 Certificate issuer: /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft Manifest number: D7 Signing time: Sun 01 Mar 2026 08:02:53 +0000 Manifest this update: Sun 01 Mar 2026 08:02:53 +0000 Manifest next update: Sun 08 Mar 2026 08:02:53 +0000 Files and hashes: 1: a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl (hash: 1MNqixRRweOZFzwPh8K46CPp6Qqih4ZZLa3zrZ1wbZk=) 2: 04241E3222F011F0B021396DC4F9AE02.roa (hash: 9kO0kni7kPsnzaPtvxx9OF7DZQab6VvydwUdZC1SpXA=) 3: C4A33CA4275711F0BA7C7752C4F9AE02.roa (hash: UodVJEZpG8jo//8K6ghcq6/5J2v+GWRbykcw2y9KJwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Validity Not Before: Mar 1 08:02:53 2026 GMT Not After : Mar 8 08:02:53 2026 GMT Subject: CN=69a3f2ad-626c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d3:45:8c:11:a6:46:a6:fd:49:9b:1d:b7:27: 3f:90:b8:d3:ca:dd:07:d0:d2:eb:c7:d1:9e:88:e8: 2d:ea:e5:5e:b4:54:69:27:8c:26:4a:ec:eb:72:af: f0:6b:fb:93:30:b6:c5:d1:3e:b4:32:50:cc:4e:33: 44:b6:92:21:e4:38:e6:3d:e8:89:bc:e6:d6:39:45: ca:e6:ba:8b:2e:11:f3:8e:e9:56:27:63:e8:5e:ea: c8:08:67:ea:97:12:87:c7:07:1a:3b:f5:36:d9:64: 82:8a:81:7d:16:c3:65:0d:7f:45:f7:65:3c:66:3b: 1e:f0:e5:47:a7:f6:a6:d6:5e:ce:8c:70:12:5a:69: 59:57:79:e3:5f:0c:bc:0f:f1:7b:ab:0b:46:14:7c: 78:68:5e:96:2a:36:11:6d:8e:06:c5:a8:e1:12:f8: 84:d9:a5:dc:dc:7e:6d:69:31:28:9d:20:85:a6:fc: 52:17:c3:fa:64:f8:af:4d:a6:00:40:4e:78:1b:30: 99:41:f0:ce:98:f3:28:da:6b:1f:8e:2a:9a:d5:0b: 2d:19:bd:ff:19:04:ec:b2:20:51:a4:3e:09:01:19: d2:55:7b:d3:11:66:7d:94:4d:3f:0b:31:a0:28:dc: 30:f0:21:56:92:ed:15:04:1b:b4:b8:6b:32:3f:c9: 85:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:64:C0:E1:F9:3A:89:77:7E:70:AB:0B:5B:0F:F3:D5:5B:52:87:28 X509v3 Authority Key Identifier: keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:07:00:11:70:47:bd:11:1a:8c:66:26:eb:23:8f:7a:93:0d: f5:09:0d:63:7c:57:bf:a9:dd:bc:0e:00:b4:37:79:5d:cc:07: eb:a5:3f:11:36:5d:47:f9:b4:7d:82:ec:b2:0d:3f:48:2f:3c: 17:2d:5a:e1:a0:2f:7a:38:27:2f:5f:4d:eb:b2:c3:c9:9f:f0: d1:e5:a1:fc:9b:b4:90:4f:29:69:38:d4:e6:be:b2:e1:c9:cb: db:89:2b:c4:72:f2:cf:14:b9:28:fc:a2:db:86:76:2f:26:dc: 34:e8:e4:03:bc:08:29:04:02:6c:4c:26:4e:bc:cf:e0:b8:07: 3a:b3:a2:0d:98:d1:3b:1e:c2:01:c5:8f:ad:0a:1a:c2:e0:e1: 57:34:d3:bf:d3:49:35:31:ac:0d:74:f8:11:e5:22:4a:27:44: d4:d1:96:30:85:06:11:c1:6b:11:5f:12:82:1b:8e:23:43:a6: 76:31:90:86:d8:3a:6a:2b:16:3e:16:55:02:e9:e1:bb:f3:2b: 29:6b:05:96:ae:04:38:0f:50:e8:13:7a:8e:dc:c4:53:f9:75: 5c:ba:a7:df:c0:d7:16:15:74:48:cf:4e:49:d1:37:74:0f:de: 7c:2b:43:b4:bf:c5:b7:e7:66:f8:64:33:e2:0d:0e:41:79:c7: 28:4d:7d:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRFRUIxMTAvBgNVBAUTKDZCNjNBNjBFN0Q3RjUxRDAzODcyOEM2NDI1OTA2MDQ3 MDE2Qzk5MDQwHhcNMjYwMzAxMDgwMjUzWhcNMjYwMzA4MDgwMjUzWjAYMRYwFAYD VQQDEw02OWEzZjJhZC02MjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5tNFjBGmRqb9SZsdtyc/kLjTyt0H0NLrx9GeiOgt6uVetFRpJ4wmSuzrcq/w a/uTMLbF0T60MlDMTjNEtpIh5DjmPeiJvObWOUXK5rqLLhHzjulWJ2PoXurICGfq lxKHxwcaO/U22WSCioF9FsNlDX9F92U8Zjse8OVHp/am1l7OjHASWmlZV3njXwy8 D/F7qwtGFHx4aF6WKjYRbY4GxajhEviE2aXc3H5taTEonSCFpvxSF8P6ZPivTaYA QE54GzCZQfDOmPMo2msfjiqa1QstGb3/GQTssiBRpD4JARnSVXvTEWZ9lE0/CzGg KNww8CFWku0VBBu0uGsyP8mFZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJkwOH5 Ool3fnCrC1sP89VbUocoMB8GA1UdIwQYMBaAFGtjpg59f1HQOHKMZCWQYEcBbJkE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREVFQi8xRUU3RkE2MEU1 RjQxMUVGQUJEMzlEN0VDNEY5QUUwMi9hMk9tRG4xX1VkQTRjb3hrSlpCZ1J3RnNt UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EyT21EbjFfVWRBNGNveGtKWkJnUndGc21RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REVFQi8xRUU3RkE2MEU1RjQxMUVGQUJEMzlEN0VDNEY5QUUwMi9hMk9tRG4xX1Vk QTRjb3hrSlpCZ1J3RnNtUVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJQcAEXBHvREajGYm6yOPepMN9QkNY3xXv6ndvA4AtDd5XcwH66U/ETZdR/m0 fYLssg0/SC88Fy1a4aAvejgnL19N67LDyZ/w0eWh/Ju0kE8paTjU5r6y4cnL24kr xHLyzxS5KPyi24Z2LybcNOjkA7wIKQQCbEwmTrzP4LgHOrOiDZjROx7CAcWPrQoa wuDhVzTTv9NJNTGsDXT4EeUiSidE1NGWMIUGEcFrEV8SghuOI0OmdjGQhtg6aisW PhZVAunhu/MrKWsFlq4EOA9Q6BN6jtzEU/l1XLqn38DXFhV0SM9OSdE3dA/efCtD tL/Ft+dm+GQz4g0OQXnHKE19Aw== -----END CERTIFICATE-----Generated at Mon Mar 2 00:16:20 2026 by rpki-client