$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft File: -4BdU3nLB9UqQR7__QSRyjm3vyc.mft (raw, json) Hash identifier: KJX3xPttUP1DIW5hTGIF+0q75Faq5+8XmvTKoOc1ue4= Subject key identifier: 73:FD:73:BF:DD:18:2A:48:11:1F:4C:2C:88:50:79:B7:93:5E:B0:89 Authority key identifier: FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 Certificate issuer: /CN=A91D5ECA/serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Certificate serial: 0678 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft Manifest number: 066E Signing time: Mon 02 Mar 2026 02:42:28 +0000 Manifest this update: Mon 02 Mar 2026 02:42:27 +0000 Manifest next update: Mon 09 Mar 2026 02:42:27 +0000 Files and hashes: 1: -4BdU3nLB9UqQR7__QSRyjm3vyc.crl (hash: i0ak0Rjw5ixmp8kmo03m8NXrDEBWgUBdNAPm3tMzQm0=) 2: F4740B2CB92711EBA6B43A86C4F9AE02.roa (hash: yQsqpKMv8rgRbiaQKL3AGw4YslsRjw5DT4NwooJEjZ4=) 3: F78605D8778A11F08EDAFE28C4F9AE02.roa (hash: IyYyXX21JMsFvai4l/nAme3o48dFg96SndHkjGkApLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:42:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1656 (0x678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5ECA, serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Validity Not Before: Mar 2 02:42:27 2026 GMT Not After : Mar 9 02:42:27 2026 GMT Subject: CN=69a4f914-a43e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:51:9e:b3:b3:0b:9b:59:7b:73:85:c3:8c:da: dd:cc:50:43:99:5f:1c:85:8b:2c:a2:93:26:46:fb: 84:6c:e2:e6:72:82:a7:14:15:d3:4a:33:07:ed:b6: c2:b6:45:27:85:16:3e:ee:57:62:3f:47:56:92:82: 39:9f:19:05:50:2a:f1:05:d0:06:79:c1:03:e9:38: 0b:45:c5:a2:dc:5f:b2:f7:3e:b4:4e:b1:0b:f2:10: 47:a5:c9:2a:bd:9a:ba:f8:91:76:8d:01:cf:e1:41: da:b7:e4:c8:7e:55:90:ec:54:75:d4:2e:a2:f1:17: 96:3f:5f:e6:72:df:f7:a3:fd:5e:f7:2c:80:89:26: 1f:17:f2:23:96:0a:8c:b0:8d:b2:75:9a:8b:0b:15: be:db:0f:2a:00:fe:da:80:a9:d9:7a:c8:14:8a:f5: ac:b3:c7:0c:ca:90:4a:64:d6:dc:4e:65:0b:12:7c: 9d:bd:da:6e:0d:ea:4e:14:49:29:d6:00:c8:c0:7b: a6:c1:2f:e3:0b:7a:ab:9a:af:ee:69:33:30:71:98: 20:a3:46:f9:48:e5:e0:90:bc:29:a7:33:e2:d3:ed: c6:eb:18:b0:42:e1:e0:7b:e8:4a:43:0b:ca:9c:fd: 29:52:6e:cf:a5:79:7c:f8:71:9c:95:42:16:28:14: 34:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FD:73:BF:DD:18:2A:48:11:1F:4C:2C:88:50:79:B7:93:5E:B0:89 X509v3 Authority Key Identifier: keyid:FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:c5:c2:c4:60:81:3f:9b:db:4b:e9:9d:4a:f7:08:e7:90:7e: e1:11:9f:64:45:f5:1a:9e:ac:28:00:e1:bb:a7:9a:1c:bd:71: f8:93:5d:7d:e8:9f:5a:63:da:d6:c3:98:34:78:ad:95:5d:bb: 9b:46:17:fa:5a:fa:f9:4b:c8:ca:f8:a2:5d:2c:e7:7f:56:e6: 9d:7c:40:f2:fc:ed:33:f4:25:03:cf:c6:f9:4b:25:f2:62:a8: 19:20:50:1e:d8:3f:5f:82:7c:8b:45:f2:00:c8:9b:fa:9f:60: 2e:62:cf:c2:e2:1a:9f:e2:64:51:ed:55:9f:10:6d:e9:11:db: 17:6a:fc:f2:4c:31:29:ef:54:46:d7:9b:7a:b6:73:c8:80:de: da:4e:2a:5e:c9:0b:89:8c:49:e8:33:fb:4d:57:e2:e5:3d:63: e1:ce:9c:6d:66:18:c7:77:2f:9c:66:be:fc:de:2b:c8:a9:f3: 7c:86:c2:a0:7a:8d:5f:a1:af:01:95:57:3f:13:20:e9:74:a9: f0:8f:dc:32:06:ff:82:50:85:aa:53:58:1f:c2:82:2f:50:c6: ce:d1:b2:47:95:55:f7:bb:f0:97:e8:59:1d:31:3f:7c:3f:8f: 23:41:40:d9:31:7d:2b:d4:d0:b5:bc:7a:9a:99:78:d2:50:74: a8:0b:17:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVFQ0ExMTAvBgNVBAUTKEZCODA1RDUzNzlDQjA3RDUyQTQxMUVGRkZEMDQ5MUNB MzlCN0JGMjcwHhcNMjYwMzAyMDI0MjI3WhcNMjYwMzA5MDI0MjI3WjAYMRYwFAYD VQQDEw02OWE0ZjkxNC1hNDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVGes7MLm1l7c4XDjNrdzFBDmV8chYssopMmRvuEbOLmcoKnFBXTSjMH7bbC tkUnhRY+7ldiP0dWkoI5nxkFUCrxBdAGecED6TgLRcWi3F+y9z60TrEL8hBHpckq vZq6+JF2jQHP4UHat+TIflWQ7FR11C6i8ReWP1/mct/3o/1e9yyAiSYfF/IjlgqM sI2ydZqLCxW+2w8qAP7agKnZesgUivWss8cMypBKZNbcTmULEnydvdpuDepOFEkp 1gDIwHumwS/jC3qrmq/uaTMwcZggo0b5SOXgkLwppzPi0+3G6xiwQuHge+hKQwvK nP0pUm7PpXl8+HGclUIWKBQ0dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHP9c7/d GCpIER9MLIhQebeTXrCJMB8GA1UdIwQYMBaAFPuAXVN5ywfVKkEe//0Ekco5t78n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUVDQS9CRkQyMzIwNkI5 MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5VXFRUjdfX1FTUnlqbTN2 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy00QmRVM25MQjlVcVFSN19fUVNSeWptM3Z5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUVDQS9CRkQyMzIwNkI5MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5 VXFRUjdfX1FTUnlqbTN2eWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmcXCxGCBP5vbS+mdSvcI55B+4RGfZEX1Gp6sKADhu6eaHL1x+JNdfeifWmPa 1sOYNHitlV27m0YX+lr6+UvIyviiXSznf1bmnXxA8vztM/QlA8/G+Usl8mKoGSBQ Htg/X4J8i0XyAMib+p9gLmLPwuIan+JkUe1VnxBt6RHbF2r88kwxKe9URteberZz yIDe2k4qXskLiYxJ6DP7TVfi5T1j4c6cbWYYx3cvnGa+/N4ryKnzfIbCoHqNX6Gv AZVXPxMg6XSp8I/cMgb/glCFqlNYH8KCL1DGztGyR5VV97vwl+hZHTE/fD+PI0FA 2TF9K9TQtbx6mpl40lB0qAsXIg== -----END CERTIFICATE-----Generated at Mon Mar 2 10:14:20 2026 by rpki-client