$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft File: bG1HsRFPLVgaghKAXxLDdH80r4M.mft (raw, json) Hash identifier: /zBwtkc4jUhtkgdRVuZL2OlHvNq1DNl/PsD6jOEAeBw= Subject key identifier: D1:92:A5:03:18:E4:1E:A8:E1:89:B5:13:F1:CB:A4:C9:6B:0A:31:6C Authority key identifier: 6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83 Certificate issuer: /CN=A91C7672/serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft Manifest number: 1D22 Signing time: Sat 28 Feb 2026 16:13:55 +0000 Manifest this update: Sat 28 Feb 2026 16:13:55 +0000 Manifest next update: Sat 07 Mar 2026 16:13:55 +0000 Files and hashes: 1: bG1HsRFPLVgaghKAXxLDdH80r4M.crl (hash: 71P5JtxRjIwWenn/lu0rfj8GBm/cBBNmk1oiUevOvGY=) 2: 08F61730538311F0860B155FC4F9AE02.roa (hash: i8MlDeGNETWTyL3Z2tqb5YN6O0t+JGxbl/kraLcgRDI=) 3: 18BDABD2537F11F0A9531C09C4F9AE02.roa (hash: JyKnKAClCekGtVz3OhYaji0DJROsJUlxnd63uwVdmLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 16:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7672, serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83 Validity Not Before: Feb 28 16:13:55 2026 GMT Not After : Mar 7 16:13:55 2026 GMT Subject: CN=69a31443-d474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3e:a4:0c:de:39:36:47:c0:46:38:5c:63:f3: b5:e3:43:94:85:eb:f6:63:b6:45:5e:f3:67:cd:f1: ee:59:74:e0:a7:ac:82:00:63:b7:e4:39:79:d2:49: 48:82:2c:f7:cb:ce:1d:ba:9b:2c:37:54:f5:b4:e9: ea:72:ed:fc:ce:bd:f0:e1:1b:31:95:ac:5a:30:f0: fd:4d:4e:77:ae:8a:8a:e1:a8:f4:3f:fe:44:25:c6: e7:9a:63:fa:fe:45:4f:56:68:24:b5:9b:8b:37:a2: cd:af:92:c5:b9:bb:ac:15:ec:8e:3c:92:a6:e1:c1: ae:fd:ea:74:1e:26:49:87:52:de:ef:58:d9:9f:8c: 1d:a0:6c:b3:6b:94:48:73:1a:a9:15:d1:9d:e1:f7: 4b:3a:1f:af:31:17:e5:ee:79:a9:8b:5f:cb:73:c6: 80:c6:a0:ca:eb:ea:a1:71:fb:e7:e7:fd:09:8d:c0: 9d:1a:52:81:3b:66:42:3b:82:5e:66:2b:2d:10:66: 62:ad:f9:66:4d:3d:32:39:90:54:a6:0b:db:8a:84: ee:14:c9:48:19:c5:d2:54:c7:00:3c:39:44:20:cd: 98:85:98:4a:12:b8:17:c8:19:57:5b:f0:c8:ef:f1: e6:77:2a:fc:81:db:6a:2d:0b:64:e0:35:8e:f1:79: ee:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:92:A5:03:18:E4:1E:A8:E1:89:B5:13:F1:CB:A4:C9:6B:0A:31:6C X509v3 Authority Key Identifier: keyid:6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:cf:41:fe:9d:7f:b9:0b:2b:a2:ab:69:2a:fe:c6:6c:1b:ee: 80:f6:59:7b:8d:70:1a:66:32:04:32:8e:99:f2:a4:60:df:18: 49:84:8f:b6:3c:a0:bf:5b:c0:5a:35:65:45:18:da:b9:f3:b2: f2:26:85:f8:9e:27:4c:20:05:37:64:3f:a3:fc:ac:06:17:6d: 90:4b:00:c7:d7:b5:6b:c4:02:86:9a:97:91:79:78:6d:11:4f: 1d:da:b3:03:9f:16:0b:18:79:fe:b1:cd:7d:cc:e9:bb:6f:64: e1:44:09:d6:59:f5:2e:ba:3f:d7:02:45:10:25:e0:b7:7c:b5: 5e:ec:4b:53:25:bc:70:f7:c2:62:83:7b:fc:97:61:a7:e3:08: ae:f6:24:18:23:87:54:4b:47:7e:22:02:b7:40:77:ea:3f:03: 51:a6:d5:e5:01:3f:4a:34:f2:32:15:66:c4:0e:43:2f:2c:4f: 6c:c6:e1:15:82:76:26:31:19:2a:7f:b9:1b:ff:18:cb:da:72: c6:da:28:0c:10:36:39:af:75:47:ab:c9:b6:9e:96:84:1b:58: 00:b0:f0:67:86:ee:84:34:b4:e8:83:7a:7a:f2:57:59:17:d1: 3e:25:35:e2:0a:52:e2:48:d3:71:2c:0c:20:e3:ee:ea:01:50: 0a:c6:99:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc2NzIxMTAvBgNVBAUTKDZDNkQ0N0IxMTE0RjJENTgxQTgyMTI4MDVGMTJDMzc0 N0YzNEFGODMwHhcNMjYwMjI4MTYxMzU1WhcNMjYwMzA3MTYxMzU1WjAYMRYwFAYD VQQDDA02OWEzMTQ0My1kNDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvD6kDN45NkfARjhcY/O140OUhev2Y7ZFXvNnzfHuWXTgp6yCAGO35Dl50klI giz3y84dupssN1T1tOnqcu38zr3w4RsxlaxaMPD9TU53roqK4aj0P/5EJcbnmmP6 /kVPVmgktZuLN6LNr5LFubusFeyOPJKm4cGu/ep0HiZJh1Le71jZn4wdoGyza5RI cxqpFdGd4fdLOh+vMRfl7nmpi1/Lc8aAxqDK6+qhcfvn5/0JjcCdGlKBO2ZCO4Je ZistEGZirflmTT0yOZBUpgvbioTuFMlIGcXSVMcAPDlEIM2YhZhKErgXyBlXW/DI 7/Hmdyr8gdtqLQtk4DWO8XnuEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNGSpQMY 5B6o4Ym1E/HLpMlrCjFsMB8GA1UdIwQYMBaAFGxtR7ERTy1YGoISgF8Sw3R/NK+D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzY3Mi80Mzc2NEJFQ0Y3 MjQxMUU2QUJGMDJCM0NDNEY5QUUwMi9iRzFIc1JGUExWZ2FnaEtBWHhMRGRIODBy NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JHMUhzUkZQTFZnYWdoS0FYeExEZEg4MHI0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzY3Mi80Mzc2NEJFQ0Y3MjQxMUU2QUJGMDJCM0NDNEY5QUUwMi9iRzFIc1JGUExW Z2FnaEtBWHhMRGRIODByNE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAM9B/p1/uQsroqtpKv7GbBvugPZZe41wGmYyBDKOmfKkYN8YSYSPtjygv1vA WjVlRRjaufOy8iaF+J4nTCAFN2Q/o/ysBhdtkEsAx9e1a8QChpqXkXl4bRFPHdqz A58WCxh5/rHNfczpu29k4UQJ1ln1Lro/1wJFECXgt3y1XuxLUyW8cPfCYoN7/Jdh p+MIrvYkGCOHVEtHfiICt0B36j8DUabV5QE/SjTyMhVmxA5DLyxPbMbhFYJ2JjEZ Kn+5G/8Yy9pyxtooDBA2Oa91R6vJtp6WhBtYALDwZ4buhDS06IN6evJXWRfRPiU1 4gpS4kjTcSwMIOPu6gFQCsaZbg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:17:00 2026 by rpki-client