$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft File: ejg10bvhsbJcMWkZLSvc1xk6i8I.mft (raw, json) Hash identifier: 2duUwrCGoxCotgQ+TRCD6YD4mAYpy9i3uuCQBTS0Vg4= Subject key identifier: F9:1A:2C:D9:CA:59:8A:A6:89:0C:8B:BA:09:E5:0D:13:49:72:0B:2F Authority key identifier: 7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2 Certificate issuer: /CN=A91D03EE/serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2 Certificate serial: 0B8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft Manifest number: 0B7A Signing time: Mon 02 Mar 2026 02:19:43 +0000 Manifest this update: Mon 02 Mar 2026 02:19:42 +0000 Manifest next update: Mon 09 Mar 2026 02:19:42 +0000 Files and hashes: 1: ejg10bvhsbJcMWkZLSvc1xk6i8I.crl (hash: jMiFKVKvZhJ8FqxHQIl/sQg8R8dguPo86kfy+b0U7kM=) 2: 186A84C83A1811EBAF24B12EC4F9AE02.roa (hash: OGoUhqxGb/v1NECssGQWXzp0QMgYwxdeF00KucDqSNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2956 (0xb8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D03EE, serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2 Validity Not Before: Mar 2 02:19:42 2026 GMT Not After : Mar 9 02:19:42 2026 GMT Subject: CN=69a4f3bf-58a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f6:30:d0:62:4d:bc:0e:68:df:83:6d:fb:69: b3:52:5d:ba:a2:da:24:a8:10:e7:05:6a:1d:ec:d3: 87:70:76:39:11:53:a9:5a:30:2f:76:5c:c0:be:01: 80:be:35:ea:47:a8:1f:43:8f:05:e2:82:cd:82:85: dc:fa:1a:d5:ae:43:75:79:a7:ea:9b:de:bc:34:13: 8e:0d:76:7e:cf:86:68:a9:8d:7c:7c:6e:7c:07:c4: 8b:af:40:42:42:62:39:c3:91:27:5b:d1:7d:2f:cb: d9:cf:dd:77:99:ee:6e:0b:bd:73:d7:5b:6f:74:a0: 6b:60:3b:9e:8f:d8:b5:7a:90:dd:20:c2:eb:18:a3: 67:ba:b5:49:a8:6d:44:e2:44:3a:b5:34:d1:61:a2: c3:72:18:fb:45:0a:71:d5:7f:38:8c:6c:a6:2c:82: 8a:dc:ac:0a:f0:86:3a:01:ed:16:d7:f1:c2:15:2d: 00:2a:a4:c8:b3:a3:f9:b9:ca:74:c2:16:8e:27:bc: 40:a5:57:8b:d1:c8:aa:77:c6:ab:40:8c:7e:c1:37: 43:bf:ea:fb:c5:bb:f6:39:22:52:10:de:50:1d:15: d1:ae:21:cc:ac:a7:21:77:01:9a:b9:f3:4e:ff:21: 13:b5:12:bc:a4:1d:9c:cf:32:28:da:f9:60:97:d0: 63:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1A:2C:D9:CA:59:8A:A6:89:0C:8B:BA:09:E5:0D:13:49:72:0B:2F X509v3 Authority Key Identifier: keyid:7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:16:36:cf:4f:e3:a8:6e:c9:ed:f9:b7:43:de:fe:8c:6e:f8: 36:76:b7:22:42:9d:59:47:b6:f8:ba:df:48:cd:bd:bd:b6:72: 77:e3:c8:37:4e:53:b0:ab:42:81:b9:56:07:14:a9:34:52:ce: 81:b1:dc:3c:5c:cb:10:68:ff:3b:8c:6e:40:c5:40:f7:c4:33: 40:d5:59:28:b9:6d:d6:37:59:b2:05:a5:64:9d:88:0e:65:5c: 17:a7:c3:8f:56:74:53:55:3f:52:f3:06:ab:d0:b6:db:08:69: e1:5b:4e:57:50:f3:ec:4b:e6:ae:d3:13:7b:3a:27:bf:5d:9e: e7:2f:d4:e1:d7:74:0d:06:c5:0b:b2:69:b2:31:fa:3e:b6:c5: 51:1b:a0:dc:51:04:1f:ba:2a:2b:06:c7:51:bf:5c:8f:f8:d8: ab:d6:95:9f:76:2a:a2:57:4d:37:0f:2d:d3:a6:02:bf:7b:57: 56:42:e7:f3:68:ad:6d:31:2b:b6:b8:b7:91:3f:76:aa:2d:f9: 7d:38:74:36:27:9b:79:cc:d0:77:11:19:cc:9e:70:4e:66:a7: c7:82:7c:88:79:70:8f:11:b2:cf:ad:cd:be:97:a0:d6:31:0b: de:a1:52:f9:cc:59:24:c5:f0:b1:ae:8a:f8:96:7b:21:a2:89: dd:80:7d:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAzRUUxMTAvBgNVBAUTKDdBMzgzNUQxQkJFMUIxQjI1QzMxNjkxOTJEMkJEQ0Q3 MTkzQThCQzIwHhcNMjYwMzAyMDIxOTQyWhcNMjYwMzA5MDIxOTQyWjAYMRYwFAYD VQQDEw02OWE0ZjNiZi01OGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPYw0GJNvA5o34Nt+2mzUl26otokqBDnBWod7NOHcHY5EVOpWjAvdlzAvgGA vjXqR6gfQ48F4oLNgoXc+hrVrkN1eafqm968NBOODXZ+z4ZoqY18fG58B8SLr0BC QmI5w5EnW9F9L8vZz913me5uC71z11tvdKBrYDuej9i1epDdIMLrGKNnurVJqG1E 4kQ6tTTRYaLDchj7RQpx1X84jGymLIKK3KwK8IY6Ae0W1/HCFS0AKqTIs6P5ucp0 whaOJ7xApVeL0ciqd8arQIx+wTdDv+r7xbv2OSJSEN5QHRXRriHMrKchdwGaufNO /yETtRK8pB2czzIo2vlgl9BjewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPkaLNnK WYqmiQyLugnlDRNJcgsvMB8GA1UdIwQYMBaAFHo4NdG74bGyXDFpGS0r3NcZOovC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDNFRS82NzI4MUNGNDQ5 N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNiSmNNV2taTFN2YzF4azZp OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqZzEwYnZoc2JKY01Xa1pMU3ZjMXhrNmk4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDNFRS82NzI4MUNGNDQ5N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNi SmNNV2taTFN2YzF4azZpOEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABBY2z0/jqG7J7fm3Q97+jG74Nna3IkKdWUe2+LrfSM29vbZyd+PIN05TsKtC gblWBxSpNFLOgbHcPFzLEGj/O4xuQMVA98QzQNVZKLlt1jdZsgWlZJ2IDmVcF6fD j1Z0U1U/UvMGq9C22whp4VtOV1Dz7EvmrtMTezonv12e5y/U4dd0DQbFC7JpsjH6 PrbFURug3FEEH7oqKwbHUb9cj/jYq9aVn3YqoldNNw8t06YCv3tXVkLn82itbTEr tri3kT92qi35fTh0NiebeczQdxEZzJ5wTmanx4J8iHlwjxGyz63Nvpeg1jEL3qFS +cxZJMXwsa6K+JZ7IaKJ3YB9yQ== -----END CERTIFICATE-----Generated at Mon Mar 2 07:40:46 2026 by rpki-client