$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft File: x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft (raw, json) Hash identifier: 0/O9h130dF9bje6wGKMKibrSdTajhiVkbSAeQkKN6YY= Subject key identifier: 09:8B:85:DF:4F:B5:18:7A:73:AF:C1:43:CF:9F:64:B9:8B:80:D7:96 Authority key identifier: C7:F0:28:37:D2:45:CB:8F:AB:CD:47:41:CF:A2:B4:A5:A2:F7:3E:AD Certificate issuer: /CN=A91D8BB1/serialNumber=C7F02837D245CB8FABCD4741CFA2B4A5A2F73EAD Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft Manifest number: 90 Signing time: Sun 01 Mar 2026 08:50:20 +0000 Manifest this update: Sun 01 Mar 2026 08:50:19 +0000 Manifest next update: Sun 08 Mar 2026 08:50:19 +0000 Files and hashes: 1: x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl (hash: 0OjHcqyyfw/Eg78dlZTKkDteF5ZVOAEtfyffEP5UDWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8BB1, serialNumber=C7F02837D245CB8FABCD4741CFA2B4A5A2F73EAD Validity Not Before: Mar 1 08:50:19 2026 GMT Not After : Mar 8 08:50:19 2026 GMT Subject: CN=69a3fdcc-f5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:89:b8:c4:5e:2a:9c:4b:8f:9e:b9:8a:fb:0a: 1a:49:09:d1:d9:e9:b1:60:d6:4b:dc:78:85:8d:37: 2d:af:f7:f9:69:e0:d2:b7:a8:23:f2:d8:d1:8e:50: 11:61:e1:06:d4:ed:80:5d:e0:79:df:92:a3:c9:39: 52:e2:8a:fa:aa:4f:dd:ec:ba:1e:1b:3e:ef:76:71: 2e:ce:c9:a8:30:19:d8:51:97:39:ab:0c:b0:32:cd: 68:65:de:e9:27:83:b7:fa:de:0b:3b:9f:69:3e:40: 7f:03:8c:47:fd:a2:b1:a1:1a:cc:db:43:10:5a:a3: 9c:07:5c:f2:61:a2:ee:4f:69:08:c1:b7:55:f3:75: d5:ee:e4:35:31:de:11:50:b0:2e:30:01:17:01:30: dd:b3:50:76:c5:36:6b:14:aa:62:fd:63:38:83:e9: 8d:e8:b3:a3:9c:6d:a2:22:89:77:51:9f:94:43:11: af:16:58:f5:30:4a:fb:66:6e:44:e8:4b:5f:60:84: 32:67:2e:93:e6:72:5b:85:aa:e5:63:f0:73:90:3e: 5c:04:f7:0c:ed:34:da:33:84:55:7b:1d:66:08:41: fb:59:a5:75:c0:50:4c:f5:4a:05:8a:f5:48:d1:45: 8d:8d:a1:e9:b7:64:f7:de:3a:04:e6:f6:5d:04:3c: 32:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8B:85:DF:4F:B5:18:7A:73:AF:C1:43:CF:9F:64:B9:8B:80:D7:96 X509v3 Authority Key Identifier: keyid:C7:F0:28:37:D2:45:CB:8F:AB:CD:47:41:CF:A2:B4:A5:A2:F7:3E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:23:6a:23:ce:68:53:1f:a5:ed:35:a7:48:22:cd:33:ac:a5: 89:47:fb:47:92:ec:b4:a2:c0:ef:33:9d:e3:9d:0d:41:0f:17: be:33:ee:e1:1c:f8:83:fb:07:e3:87:54:cf:4a:e2:12:78:08: 56:84:5c:a8:54:17:87:26:6f:19:48:2d:cb:c8:df:de:ef:bf: 8d:f7:8f:c4:78:73:1b:0b:1e:86:32:4f:80:9b:a6:93:53:26: 13:ee:8f:fc:a4:c9:83:df:c9:15:2d:5d:cc:7f:02:c5:a0:bb: 02:34:c0:6b:ee:19:5a:bd:1f:bf:80:a9:89:fa:c5:e7:c6:e6: 09:40:01:fc:dc:4e:09:59:58:37:74:5a:1d:a2:a3:27:c9:01: 2f:b2:ee:c5:38:0d:78:82:07:db:f6:16:15:2b:75:f0:2e:89: 48:fd:25:58:c3:60:d4:fd:8b:d4:27:23:cb:8f:eb:e5:f4:6c: 12:2f:99:1d:4e:89:8d:9f:51:b5:ab:20:8b:76:ba:23:b3:65: 51:ab:73:a9:66:e5:eb:fc:4a:48:d5:7c:f6:73:b8:e3:4d:9b: 70:2b:4f:a4:ab:1f:ec:c0:ae:58:a6:27:bb:f8:ed:47:3d:e0: 96:d1:30:68:4f:48:3c:67:84:d9:cd:5a:04:09:0d:0e:1d:82: f3:33:d8:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCQjExMTAvBgNVBAUTKEM3RjAyODM3RDI0NUNCOEZBQkNENDc0MUNGQTJCNEE1 QTJGNzNFQUQwHhcNMjYwMzAxMDg1MDE5WhcNMjYwMzA4MDg1MDE5WjAYMRYwFAYD VQQDEw02OWEzZmRjYy1mNWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoom4xF4qnEuPnrmK+woaSQnR2emxYNZL3HiFjTctr/f5aeDSt6gj8tjRjlAR YeEG1O2AXeB535KjyTlS4or6qk/d7LoeGz7vdnEuzsmoMBnYUZc5qwywMs1oZd7p J4O3+t4LO59pPkB/A4xH/aKxoRrM20MQWqOcB1zyYaLuT2kIwbdV83XV7uQ1Md4R ULAuMAEXATDds1B2xTZrFKpi/WM4g+mN6LOjnG2iIol3UZ+UQxGvFlj1MEr7Zm5E 6EtfYIQyZy6T5nJbharlY/BzkD5cBPcM7TTaM4RVex1mCEH7WaV1wFBM9UoFivVI 0UWNjaHpt2T33joE5vZdBDwy3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAmLhd9P tRh6c6/BQ8+fZLmLgNeWMB8GA1UdIwQYMBaAFMfwKDfSRcuPq81HQc+itKWi9z6t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEJCMS81QUQ3NjlCMDNE MjUxMUYwODBDNDg5NTVDNEY5QUUwMi94X0FvTjlKRnk0LXJ6VWRCejZLMHBhTDNQ cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hfQW9OOUpGeTQtcnpVZEJ6NkswcGFMM1BxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEJCMS81QUQ3NjlCMDNEMjUxMUYwODBDNDg5NTVDNEY5QUUwMi94X0FvTjlKRnk0 LXJ6VWRCejZLMHBhTDNQcTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWiNqI85oUx+l7TWnSCLNM6yliUf7R5LstKLA7zOd450NQQ8XvjPu4Rz4g/sH 44dUz0riEngIVoRcqFQXhyZvGUgty8jf3u+/jfePxHhzGwsehjJPgJumk1MmE+6P /KTJg9/JFS1dzH8CxaC7AjTAa+4ZWr0fv4CpifrF58bmCUAB/NxOCVlYN3RaHaKj J8kBL7LuxTgNeIIH2/YWFSt18C6JSP0lWMNg1P2L1Ccjy4/r5fRsEi+ZHU6JjZ9R tasgi3a6I7NlUatzqWbl6/xKSNV89nO4402bcCtPpKsf7MCuWKYnu/jtRz3gltEw aE9IPGeE2c1aBAkNDh2C8zPYWQ== -----END CERTIFICATE-----Generated at Mon Mar 2 16:52:55 2026 by rpki-client