$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json) Hash identifier: APGoGMj6+L9Vk+wRquhCIcL7JQP7JWR5eUzIjBSK2+U= Subject key identifier: BD:8F:86:6F:4A:CE:2C:12:A5:81:8B:9F:16:D6:EA:C7:95:63:BC:57 Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Certificate serial: 045E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft Manifest number: 0454 Signing time: Sun 01 Mar 2026 00:58:19 +0000 Manifest this update: Sun 01 Mar 2026 00:58:18 +0000 Manifest next update: Sun 08 Mar 2026 00:58:18 +0000 Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: +Bbz+onrKy4lSj9kJdtMS+YCaIuRvKag3BpiQOBjVto=) 2: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: Z4fqnxjrt+8kJSu29AMh1UDQr3qHPbWK33oNrMRZk/c=) 3: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: 8KO+Q9P6KHzj4wwuvlI7pw98DEKqP2cBSu5Rme0si3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 00:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1118 (0x45e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Validity Not Before: Mar 1 00:58:18 2026 GMT Not After : Mar 8 00:58:18 2026 GMT Subject: CN=69a38f2b-68da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:47:0a:38:eb:16:54:c5:8e:9e:1c:1a:d0:09: a7:94:43:8f:51:91:f2:a9:7b:ea:ff:25:f9:d1:3e: 5c:95:7a:18:d0:23:f2:05:06:17:d0:0d:d2:71:09: b6:fc:45:6e:b9:cc:fa:d7:70:7b:77:2a:b1:e6:36: 5d:24:64:fb:ac:cc:74:9c:a8:50:e1:f6:5d:60:a2: 6a:04:ed:4e:04:6f:36:f6:0e:88:4b:59:5b:87:0b: f7:4d:0a:8c:37:eb:f7:eb:29:28:b2:62:36:a7:e7: f7:b4:af:52:94:cc:81:8c:04:88:28:77:bf:59:56: 8d:d1:2d:c0:75:8d:80:23:10:7e:3d:3d:fa:6b:13: 8e:d4:03:bf:4f:0d:8d:e6:82:73:7f:74:29:6f:bb: db:ed:66:cd:c4:70:8d:8b:5d:a7:df:5c:ca:fd:63: 41:f2:b0:d9:af:2e:b7:6e:7a:26:9d:dd:18:72:ab: f3:a8:61:2c:f8:d0:e5:af:04:3a:9b:c6:05:a4:b8: 05:aa:53:30:51:e3:8a:c6:07:68:f8:b5:d3:8f:14: c0:ac:05:b5:fa:21:6f:eb:db:19:5e:e4:cb:e4:3b: 3e:49:5e:8d:16:24:37:f8:a3:99:55:f7:64:b3:3b: 70:81:87:f7:36:7b:67:19:e8:25:44:e1:bc:db:b7: 7c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8F:86:6F:4A:CE:2C:12:A5:81:8B:9F:16:D6:EA:C7:95:63:BC:57 X509v3 Authority Key Identifier: keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:e3:e1:5f:5d:37:f4:3a:46:89:79:9b:34:d1:c0:4c:4e:ea: 2b:b0:d5:4f:a2:58:ac:b3:f8:7d:ac:e5:c7:83:e9:5a:9b:87: 3a:09:ea:a9:fd:12:a0:41:07:70:66:59:38:33:df:11:d1:ef: f0:59:b5:41:38:0f:ae:5e:ea:de:9e:48:00:fb:41:b3:0a:0b: 0f:58:69:78:01:f6:d0:b7:7b:a1:64:c6:01:2e:76:2f:97:49: 19:9c:ae:78:b7:20:a4:6d:02:97:09:25:05:f3:bd:4c:56:d2: 81:62:67:37:1b:9d:c0:63:93:36:29:33:2b:cb:83:49:9e:a4: 28:ac:81:c1:b0:6a:65:91:3f:26:05:66:e9:e6:5f:f7:63:5f: f0:d3:08:6a:bc:67:53:e2:cb:5b:b4:25:ec:af:d1:3f:f2:4c: dd:a6:62:c6:51:5e:f3:04:a8:63:09:5b:68:ed:3d:bf:15:47: c7:fe:ef:bc:39:ab:aa:20:00:57:29:7f:8f:dd:a2:af:94:2a: 49:54:ca:f6:b5:9c:6e:47:c6:36:5e:48:19:49:d1:e8:ea:c7: 20:3d:01:9d:f1:9c:5a:5b:e0:d7:08:27:1e:e5:72:b6:94:59: 4a:b6:06:0c:92:05:e5:b2:2b:dc:fa:04:bc:68:76:c8:6b:67: b5:37:ce:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQTQxMTAvBgNVBAUTKEVDMzQyQjk1MURFQzdBNUYwRTNFNzdGOTJDQ0IxRkZC MjFFMTlBNTgwHhcNMjYwMzAxMDA1ODE4WhcNMjYwMzA4MDA1ODE4WjAYMRYwFAYD VQQDDA02OWEzOGYyYi02OGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0cKOOsWVMWOnhwa0AmnlEOPUZHyqXvq/yX50T5clXoY0CPyBQYX0A3ScQm2 /EVuucz613B7dyqx5jZdJGT7rMx0nKhQ4fZdYKJqBO1OBG829g6IS1lbhwv3TQqM N+v36ykosmI2p+f3tK9SlMyBjASIKHe/WVaN0S3AdY2AIxB+PT36axOO1AO/Tw2N 5oJzf3Qpb7vb7WbNxHCNi12n31zK/WNB8rDZry63bnomnd0YcqvzqGEs+NDlrwQ6 m8YFpLgFqlMwUeOKxgdo+LXTjxTArAW1+iFv69sZXuTL5Ds+SV6NFiQ3+KOZVfdk sztwgYf3NntnGeglROG827d8+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL2Phm9K ziwSpYGLnxbW6seVY7xXMB8GA1UdIwQYMBaAFOw0K5Ud7HpfDj53+SzLH/sh4ZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBBNC8yOUY0QkFGQzhB N0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2VsOE9QbmY1TE1zZi15SGht bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEUXJsUjNzZWw4T1BuZjVMTXNmLXlIaG1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBBNC8yOUY0QkFGQzhBN0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2Vs OE9QbmY1TE1zZi15SGhtbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhOPhX1039DpGiXmbNNHATE7qK7DVT6JYrLP4fazlx4PpWpuHOgnqqf0SoEEH cGZZODPfEdHv8Fm1QTgPrl7q3p5IAPtBswoLD1hpeAH20Ld7oWTGAS52L5dJGZyu eLcgpG0ClwklBfO9TFbSgWJnNxudwGOTNikzK8uDSZ6kKKyBwbBqZZE/JgVm6eZf 92Nf8NMIarxnU+LLW7Ql7K/RP/JM3aZixlFe8wSoYwlbaO09vxVHx/7vvDmrqiAA Vyl/j92ir5QqSVTK9rWcbkfGNl5IGUnR6OrHID0BnfGcWlvg1wgnHuVytpRZSrYG DJIF5bIr3PoEvGh2yGtntTfOgQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:15:36 2026 by rpki-client