$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft File: RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft (raw, json) Hash identifier: UIAGQ2Vr/j2LikQ8+J56u86fJjZhSk64TBl3sBCEPh0= Subject key identifier: CD:8E:4B:64:AB:BF:EE:5F:04:B0:9E:03:7E:A1:CD:20:10:5A:66:08 Authority key identifier: 45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1 Certificate issuer: /CN=A91C6833/serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1 Certificate serial: 1EE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft Manifest number: 1ECD Signing time: Mon 02 Mar 2026 00:37:59 +0000 Manifest this update: Mon 02 Mar 2026 00:37:59 +0000 Manifest next update: Mon 09 Mar 2026 00:37:59 +0000 Files and hashes: 1: RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl (hash: utzBZQ1jthD8NaUIRyFMBZU8UjIn2tt9p//5IoPcO9Y=) 2: 3F1BB7A09BC011EF995CBB11C4F9AE02.roa (hash: 1uL/iGleC4ndS65zjcBm2KBk7uIxinb++OXJi9TogpQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7909 (0x1ee5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6833, serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1 Validity Not Before: Mar 2 00:37:59 2026 GMT Not After : Mar 9 00:37:59 2026 GMT Subject: CN=69a4dbe7-13ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e6:cc:d7:6c:a5:ca:98:e5:55:6c:68:8b:90: 89:48:af:a4:e0:25:af:b9:f6:a7:03:28:3d:7a:d7: 5f:1b:71:d3:7d:ce:b8:a2:ba:91:39:14:7e:e3:94: e2:24:0d:dd:5a:86:f2:0a:93:65:f9:ab:3b:67:85: 04:af:98:ec:83:01:51:97:f5:08:72:7a:78:9d:43: 42:5b:e1:ea:5b:4b:41:c9:da:8a:34:4b:2c:40:e7: d5:b8:b7:35:02:fe:f4:c2:f6:11:d9:12:65:ef:fd: 0e:dc:49:b6:1a:26:05:32:2f:5f:89:e2:10:b5:4c: cd:aa:4e:80:37:f1:3d:aa:73:84:0b:f5:8c:a7:33: 5f:e5:6f:2e:b4:db:eb:9a:fe:43:28:f1:3f:5a:a1: 4e:b1:8b:6a:d4:e7:3e:41:98:5e:9a:73:88:03:18: af:4e:cd:b7:e5:af:7b:94:51:0d:88:7e:a0:d5:86: fa:5a:c2:d4:27:b0:21:00:92:31:05:8b:4b:e1:83: d0:e9:6b:68:38:27:64:8d:8a:04:3e:ef:1f:1b:02: e8:2f:fd:a8:4f:64:b1:e6:cd:ce:97:eb:70:dd:59: d9:4c:c8:3a:44:6f:7e:77:4e:95:49:f1:7d:74:42: 5a:be:6f:7a:7a:b4:f0:10:69:aa:81:41:b3:18:ba: 8a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8E:4B:64:AB:BF:EE:5F:04:B0:9E:03:7E:A1:CD:20:10:5A:66:08 X509v3 Authority Key Identifier: keyid:45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:97:10:68:21:31:e9:9b:5d:a3:45:d4:72:45:38:80:11:27: c0:9e:95:7c:71:9b:9b:ec:b2:9a:46:db:4c:44:ff:21:bf:00: 61:98:de:e5:57:86:57:b6:66:d7:8b:1e:6b:49:7f:98:69:42: 31:96:e2:54:04:45:91:ed:06:94:f5:9a:0a:dc:06:fe:d7:11: 8d:f8:c2:08:58:6a:ac:ef:3d:dd:06:9c:de:76:63:9a:2c:b5: 5c:41:6b:1f:88:40:1d:af:3e:38:5e:9b:3a:85:49:e8:95:8f: 9b:25:ae:d0:7b:53:77:d6:d5:db:b3:f0:f0:7b:a7:70:89:c0: b4:76:70:7a:37:e7:84:72:29:9b:d6:6f:b6:24:f5:a8:5d:c6: 55:01:19:47:3c:3b:57:0c:80:29:6b:9a:7c:85:77:04:93:c5: c4:de:69:10:4c:97:65:41:06:81:cb:4b:cf:b2:30:54:c3:2f: b5:6f:3b:02:28:b8:a8:19:cb:69:3d:b3:ee:15:54:37:06:d9: 37:d0:49:b1:0e:f0:34:35:ee:2b:b3:32:31:f6:03:ce:b1:b1: 07:1a:65:04:a6:45:3a:5b:47:93:8c:c1:c0:3e:41:92:95:56: 77:c8:85:53:41:8c:5d:5b:1a:49:9b:93:df:74:9f:33:45:ab: c8:b2:39:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4MzMxMTAvBgNVBAUTKDQ1QzgwOEE4QUNERTI0QUM5NjEzRTAxQTQ5NTk2MTAw RUQ1RThDRjEwHhcNMjYwMzAyMDAzNzU5WhcNMjYwMzA5MDAzNzU5WjAYMRYwFAYD VQQDEw02OWE0ZGJlNy0xM2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqubM12ylypjlVWxoi5CJSK+k4CWvufanAyg9etdfG3HTfc64orqRORR+45Ti JA3dWobyCpNl+as7Z4UEr5jsgwFRl/UIcnp4nUNCW+HqW0tBydqKNEssQOfVuLc1 Av70wvYR2RJl7/0O3Em2GiYFMi9fieIQtUzNqk6AN/E9qnOEC/WMpzNf5W8utNvr mv5DKPE/WqFOsYtq1Oc+QZhemnOIAxivTs235a97lFENiH6g1Yb6WsLUJ7AhAJIx BYtL4YPQ6WtoOCdkjYoEPu8fGwLoL/2oT2Sx5s3Ol+tw3VnZTMg6RG9+d06VSfF9 dEJavm96erTwEGmqgUGzGLqKTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM2OS2Sr v+5fBLCeA36hzSAQWmYIMB8GA1UdIwQYMBaAFEXICKis3iSslhPgGklZYQDtXozx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjgzMy9GM0Q0ODBFQzgz QjMxMUU2OUREODY3MzBDNEY5QUUwMi9SY2dJcUt6ZUpLeVdFLUFhU1ZsaEFPMWVq UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JjZ0lxS3plSkt5V0UtQWFTVmxoQU8xZWpQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjgzMy9GM0Q0ODBFQzgzQjMxMUU2OUREODY3MzBDNEY5QUUwMi9SY2dJcUt6ZUpL eVdFLUFhU1ZsaEFPMWVqUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKJcQaCEx6Ztdo0XUckU4gBEnwJ6VfHGbm+yymkbbTET/Ib8AYZje5VeGV7Zm 14sea0l/mGlCMZbiVARFke0GlPWaCtwG/tcRjfjCCFhqrO893Qac3nZjmiy1XEFr H4hAHa8+OF6bOoVJ6JWPmyWu0HtTd9bV27Pw8HuncInAtHZwejfnhHIpm9ZvtiT1 qF3GVQEZRzw7VwyAKWuafIV3BJPFxN5pEEyXZUEGgctLz7IwVMMvtW87Aii4qBnL aT2z7hVUNwbZN9BJsQ7wNDXuK7MyMfYDzrGxBxplBKZFOltHk4zBwD5BkpVWd8iF U0GMXVsaSZuT33SfM0WryLI5+w== -----END CERTIFICATE-----Generated at Mon Mar 2 13:20:05 2026 by rpki-client