$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft File: xOTw2gEK9YY3zFlihHHpmLckPFI.mft (raw, json) Hash identifier: LM7cAP7A64EyckeQrXs0CgnfOi0JVmkttT4ZM9gGqm0= Subject key identifier: 4A:D3:56:4B:0F:09:9D:8A:1D:5A:50:56:6D:36:31:7B:9A:8D:EE:EF Authority key identifier: C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 Certificate issuer: /CN=A91D83D0/serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Certificate serial: 099F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft Manifest number: 097B Signing time: Sun 01 Mar 2026 23:40:29 +0000 Manifest this update: Sun 01 Mar 2026 23:40:28 +0000 Manifest next update: Sun 08 Mar 2026 23:40:28 +0000 Files and hashes: 1: xOTw2gEK9YY3zFlihHHpmLckPFI.crl (hash: CDlwrm+omvXKFcZnsaRv0ATgcvuTBFCFCVKaqkhHttY=) 2: 7B3252CC014911F1B56055C9516F56BC.roa (hash: tBzjsuG6Lc6RhWea8/zSFmhSrzHWoDXSIIHH2NKoQH4=) 3: 2BFE357EF06211F08763644E5C6F56BC.roa (hash: T7iFd2LrB33SLomhhE8G/jtsnMR7YugAZQJC0RPLigw=) 4: 03706138786411EC8624EB12C4F9AE02.roa (hash: EGqbfoF9jJWPU0BnzC3V2PXkWe0y4Oy0kA3ja8zkkX8=) 5: 6A6E4770A10F11EF840C2548C4F9AE02.roa (hash: GEy9cKvJuaUG1j4vauBHAkcMaCqiS2PQAr8JoqS4dPU=) 6: 5353EA28781F11EEBA05B17FC4F9AE02.roa (hash: fci/hvXmKLLIr57hsH2EVZbFVv2YsBSJcHMJtovzSlo=) 7: F4E74AA8B99911EF9A0C3B63C4F9AE02.roa (hash: 2zUoeUBbqlr+As+3U7czFZSu1yVrxfhYyz+KlUKcy1I=) 8: 863670328FD011EEB6FFC636C4F9AE02.roa (hash: WwltnaTPtmW0+YRs/lUQRQVdWPG/Y8JmtvUfshNHISo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2463 (0x99f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83D0, serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Validity Not Before: Mar 1 23:40:28 2026 GMT Not After : Mar 8 23:40:28 2026 GMT Subject: CN=69a4ce6d-04ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fb:47:22:d4:07:cc:97:5b:17:ff:b8:45:1b: ce:6a:25:3c:30:d6:3c:21:24:e9:fb:99:63:10:0c: e2:33:d6:84:47:b1:49:c1:d3:6a:f8:8f:50:29:41: ce:05:4d:42:15:bf:89:10:53:86:97:86:42:26:b9: 93:66:79:6c:35:d6:c1:5f:05:50:74:75:27:56:0c: 3f:6a:c5:fd:c8:79:74:11:70:0c:61:33:2a:22:f8: 0e:cc:a6:92:4c:31:76:88:0e:9c:d9:d1:31:1c:06: 29:6b:a0:f1:c5:41:ff:1c:02:6b:e8:71:a5:7e:4a: 4a:a9:ed:39:1b:f4:0b:8b:99:ee:5c:b9:92:61:78: 89:c9:7f:d7:8f:8a:59:ed:9e:1f:97:f8:19:d4:3c: 1d:07:3a:03:ae:38:31:05:38:be:61:66:c8:c8:f9: 29:63:d6:9f:ce:e9:3b:ed:af:1a:90:f2:52:d4:06: bc:88:9b:34:da:8b:17:a8:58:e8:43:09:15:e3:e0: 51:f9:4c:c7:f6:38:ea:7b:cc:c1:9d:5a:cb:61:11: 85:ac:97:c9:51:ac:91:bc:85:7a:20:2e:0c:f6:62: cd:d1:0c:66:5a:f8:04:d3:0a:2c:34:54:fa:32:85: 36:18:af:f9:8f:ce:21:99:fe:04:87:5b:48:28:ec: 65:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D3:56:4B:0F:09:9D:8A:1D:5A:50:56:6D:36:31:7B:9A:8D:EE:EF X509v3 Authority Key Identifier: keyid:C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:66:38:f3:d0:a9:57:0a:ec:fd:2f:f4:76:3b:52:ee:48:1b: 9c:cf:1c:da:d6:89:d4:22:48:8e:c1:70:0f:94:90:2a:c3:ab: 19:12:2c:c9:d8:75:89:64:de:13:ad:e4:f8:d8:3c:78:44:46: ce:32:64:41:ea:87:ce:a1:9b:16:1f:69:99:27:1b:f8:e5:e6: 42:85:91:25:d5:9e:a7:c7:9f:64:d3:ff:34:b9:cb:2f:2a:ee: 80:30:ab:dd:73:e0:46:f6:6c:9c:ba:11:25:5f:68:6e:2b:52: b4:52:96:72:58:a2:f9:3f:31:78:cc:4f:22:46:50:5a:f0:38: 9f:a2:83:63:57:39:30:93:cf:6f:09:ad:92:83:5d:39:33:0a: dd:fd:b5:bc:ea:f6:33:94:4b:ec:f2:f4:0f:70:2d:45:e4:e3: f7:49:e0:08:00:4b:03:66:55:d7:ea:7b:c7:0f:ae:dd:59:02: cd:e1:aa:13:6c:81:c2:fd:e4:d8:62:47:fa:63:65:45:d7:97: 9a:85:61:ba:d8:1f:ef:fc:02:04:22:3d:b9:f5:69:41:6c:67: 5c:e7:46:5c:1b:39:50:98:1f:2d:78:05:3f:e2:b2:91:3d:ce: 85:92:b6:25:7e:31:4a:a4:8b:89:7f:68:95:c6:01:ef:9c:d6: e2:39:c7:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzRDAxMTAvBgNVBAUTKEM0RTRGMERBMDEwQUY1ODYzN0NDNTk2Mjg0NzFFOTk4 QjcyNDNDNTIwHhcNMjYwMzAxMjM0MDI4WhcNMjYwMzA4MjM0MDI4WjAYMRYwFAYD VQQDEw02OWE0Y2U2ZC0wNGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ftHItQHzJdbF/+4RRvOaiU8MNY8ISTp+5ljEAziM9aER7FJwdNq+I9QKUHO BU1CFb+JEFOGl4ZCJrmTZnlsNdbBXwVQdHUnVgw/asX9yHl0EXAMYTMqIvgOzKaS TDF2iA6c2dExHAYpa6DxxUH/HAJr6HGlfkpKqe05G/QLi5nuXLmSYXiJyX/Xj4pZ 7Z4fl/gZ1DwdBzoDrjgxBTi+YWbIyPkpY9afzuk77a8akPJS1Aa8iJs02osXqFjo QwkV4+BR+UzH9jjqe8zBnVrLYRGFrJfJUayRvIV6IC4M9mLN0QxmWvgE0wosNFT6 MoU2GK/5j84hmf4Eh1tIKOxlZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFErTVksP CZ2KHVpQVm02MXuaje7vMB8GA1UdIwQYMBaAFMTk8NoBCvWGN8xZYoRx6Zi3JDxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNEMC8wQTE2MjA4QUFG QkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZWTN6RmxpaEhIcG1MY2tQ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hPVHcyZ0VLOVlZM3pGbGloSEhwbUxja1BGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNEMC8wQTE2MjA4QUFGQkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZ WTN6RmxpaEhIcG1MY2tQRkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPWY489CpVwrs/S/0djtS7kgbnM8c2taJ1CJIjsFwD5SQKsOrGRIsydh1iWTe E63k+Ng8eERGzjJkQeqHzqGbFh9pmScb+OXmQoWRJdWep8efZNP/NLnLLyrugDCr 3XPgRvZsnLoRJV9obitStFKWclii+T8xeMxPIkZQWvA4n6KDY1c5MJPPbwmtkoNd OTMK3f21vOr2M5RL7PL0D3AtReTj90ngCABLA2ZV1+p7xw+u3VkCzeGqE2yBwv3k 2GJH+mNlRdeXmoVhutgf7/wCBCI9ufVpQWxnXOdGXBs5UJgfLXgFP+KykT3OhZK2 JX4xSqSLiX9olcYB75zW4jnHRA== -----END CERTIFICATE-----Generated at Mon Mar 2 10:24:38 2026 by rpki-client