$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft File: vXVo3ESTcv4iwuyet3K31ugtKoA.mft (raw, json) Hash identifier: vhxeMyJ+ci1QIDozxGibWNSfVMsT9pu8B2yT9d/9OSU= Subject key identifier: AD:7A:64:85:BD:9E:DD:4A:A1:2D:B1:41:7F:EB:92:12:B0:A4:5E:99 Authority key identifier: BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80 Certificate issuer: /CN=A91D6940/serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80 Certificate serial: 08B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft Manifest number: 08A9 Signing time: Mon 02 Mar 2026 02:43:47 +0000 Manifest this update: Mon 02 Mar 2026 02:43:46 +0000 Manifest next update: Mon 09 Mar 2026 02:43:46 +0000 Files and hashes: 1: vXVo3ESTcv4iwuyet3K31ugtKoA.crl (hash: uvSivWykHzfI7ztd4XoO4aDymLslXmG7wvPACSItfc8=) 2: 153BEF1EE34A11EFA6960F0CC4F9AE02.roa (hash: GcnmXQh570geNJINX8vCVPM77SUIFg/QUIUzszIzfEI=) 3: 160ADCACE34A11EFA6960F0CC4F9AE02.roa (hash: r6RObzZDmvTKdURDxwySrRDVkCeN5KJ86vtH4x9kO5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2229 (0x8b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6940, serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80 Validity Not Before: Mar 2 02:43:46 2026 GMT Not After : Mar 9 02:43:46 2026 GMT Subject: CN=69a4f963-ff41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:91:24:2e:5c:3b:4e:d8:c1:15:e8:05:51:d7: 74:ba:c7:f8:3f:46:f0:ee:64:ff:fd:65:27:d6:c0: 32:26:7a:cc:38:75:87:00:7a:29:f6:2a:9a:6c:28: be:5d:69:40:73:63:3d:8a:22:b0:a0:d5:ec:c7:38: 29:01:7d:79:72:f7:39:7a:b7:8b:37:41:3d:cf:80: 94:3b:d3:7f:be:50:02:be:91:84:36:20:6b:88:ae: c1:30:0c:9a:cd:22:89:f7:a6:c9:34:25:a0:79:4b: 0f:69:06:01:4c:b6:0c:ca:90:35:f4:21:ff:10:9e: 6e:50:f5:df:aa:1d:ff:a1:79:7c:1d:9c:64:b2:35: ad:ee:1d:74:6f:da:77:23:e4:7c:61:fd:fc:7c:a3: 84:3f:f3:2f:93:3c:8e:80:08:0e:03:7d:39:80:27: 2b:60:2b:9e:81:73:13:d4:15:39:c8:36:6d:62:43: 39:37:3a:b3:cc:9e:bb:c0:2c:65:03:4f:bd:67:34: d6:6d:61:c0:4a:65:c8:a9:15:96:17:91:e8:c9:72: ce:fd:38:66:26:82:ee:06:e7:bf:67:80:8f:8f:f2: 96:f6:a0:1e:72:da:26:cd:c1:c8:8b:ca:d2:ae:9e: 27:20:e5:d7:b6:85:88:e7:1f:c7:86:50:f9:4f:52: 69:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7A:64:85:BD:9E:DD:4A:A1:2D:B1:41:7F:EB:92:12:B0:A4:5E:99 X509v3 Authority Key Identifier: keyid:BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:87:a5:7c:64:cd:45:2b:f9:36:e4:00:04:4f:71:f7:76:d9: 8c:b9:01:d3:db:1c:06:bc:df:0a:23:97:d9:38:0d:7d:c3:4c: 4d:aa:88:f2:ba:7e:e7:06:53:52:0d:a0:6d:e7:5d:29:5e:39: 40:ae:eb:56:11:89:d5:8c:a3:80:35:26:d3:0c:fb:9e:87:61: bb:99:f0:03:2b:b9:33:2e:e6:1c:fc:08:18:bc:32:f1:6a:58: b3:16:87:ea:ef:1e:bf:d6:7d:29:43:9a:05:66:c2:ed:bd:53: fe:a3:04:72:16:e2:f7:64:aa:fa:a4:ac:5a:cc:9e:ef:7d:7d: 1d:c3:07:2e:99:a5:80:9e:e2:96:10:09:39:57:d6:e6:09:f1: 3b:b9:bf:7c:2d:5d:69:5b:a1:02:cb:ab:2d:ae:9a:24:e0:9c: 2a:e2:4d:44:01:e5:84:22:91:2f:f4:d2:9c:60:b3:7e:06:8f: c8:0f:b2:b3:83:02:93:36:c4:f2:88:c7:f6:27:c5:a6:91:1c: 82:62:14:7b:6b:fe:2a:a7:5d:d8:2b:46:26:3f:29:0f:7b:08: f5:8a:c0:c8:46:0e:25:0e:83:91:52:53:15:97:36:e5:76:e1: 10:5a:f5:a7:80:04:f4:94:85:5a:31:be:7a:5b:ec:df:d2:f9: 0d:4a:63:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY5NDAxMTAvBgNVBAUTKEJENzU2OERDNDQ5MzcyRkUyMkMyRUM5RUI3NzJCN0Q2 RTgyRDJBODAwHhcNMjYwMzAyMDI0MzQ2WhcNMjYwMzA5MDI0MzQ2WjAYMRYwFAYD VQQDEw02OWE0Zjk2My1mZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5EkLlw7TtjBFegFUdd0usf4P0bw7mT//WUn1sAyJnrMOHWHAHop9iqabCi+ XWlAc2M9iiKwoNXsxzgpAX15cvc5ereLN0E9z4CUO9N/vlACvpGENiBriK7BMAya zSKJ96bJNCWgeUsPaQYBTLYMypA19CH/EJ5uUPXfqh3/oXl8HZxksjWt7h10b9p3 I+R8Yf38fKOEP/MvkzyOgAgOA305gCcrYCuegXMT1BU5yDZtYkM5NzqzzJ67wCxl A0+9ZzTWbWHASmXIqRWWF5HoyXLO/ThmJoLuBue/Z4CPj/KW9qAectomzcHIi8rS rp4nIOXXtoWI5x/HhlD5T1JpVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK16ZIW9 nt1KoS2xQX/rkhKwpF6ZMB8GA1UdIwQYMBaAFL11aNxEk3L+IsLsnrdyt9boLSqA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjk0MC9FMEQwNkI4MkQ3 N0UxMUVBOEVFNjFCMzJDNEY5QUUwMi92WFZvM0VTVGN2NGl3dXlldDNLMzF1Z3RL b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZYVm8zRVNUY3Y0aXd1eWV0M0szMXVndEtvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njk0MC9FMEQwNkI4MkQ3N0UxMUVBOEVFNjFCMzJDNEY5QUUwMi92WFZvM0VTVGN2 NGl3dXlldDNLMzF1Z3RLb0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG4elfGTNRSv5NuQABE9x93bZjLkB09scBrzfCiOX2TgNfcNMTaqI8rp+5wZT Ug2gbeddKV45QK7rVhGJ1YyjgDUm0wz7nodhu5nwAyu5My7mHPwIGLwy8WpYsxaH 6u8ev9Z9KUOaBWbC7b1T/qMEchbi92Sq+qSsWsye7319HcMHLpmlgJ7ilhAJOVfW 5gnxO7m/fC1daVuhAsurLa6aJOCcKuJNRAHlhCKRL/TSnGCzfgaPyA+ys4MCkzbE 8ojH9ifFppEcgmIUe2v+Kqdd2CtGJj8pD3sI9YrAyEYOJQ6DkVJTFZc25XbhEFr1 p4AE9JSFWjG+elvs39L5DUpj5w== -----END CERTIFICATE-----Generated at Mon Mar 2 09:23:13 2026 by rpki-client