$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft File: mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft (raw, json) Hash identifier: 2yAGR5J+r3oNYBjkmhCGyKkbjBVhEmnJdtNt0J/X65Q= Subject key identifier: 03:65:D9:55:5D:5A:72:A2:76:E3:CD:16:EB:18:3F:51:9B:51:51:28 Authority key identifier: 98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70 Certificate issuer: /CN=A91DA5F7/serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft Manifest number: 1D Signing time: Sun 01 Mar 2026 10:25:27 +0000 Manifest this update: Sun 01 Mar 2026 10:25:27 +0000 Manifest next update: Sun 08 Mar 2026 10:25:27 +0000 Files and hashes: 1: mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl (hash: 7UQELAElH/DM2CnV7HKokJshYLP8BaWi7HmqCmAelTk=) 2: 3150E4A4F1F211F0B442E9B1456F56BC.roa (hash: NONLn4Akv/l6YL+qj6DEc725hoLYdC323Fs/6ORru7c=) 3: 30D2517AF1F211F0B442E9B1456F56BC.roa (hash: UAtyjnkkGVt2+haohA8ppdzMqX4q+YbKNZp+6njQiaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:25:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA5F7, serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270 Validity Not Before: Mar 1 10:25:27 2026 GMT Not After : Mar 8 10:25:27 2026 GMT Subject: CN=69a41417-e275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ef:4d:c7:d8:2c:89:a1:91:6c:44:a1:2f:32: 4f:9c:b8:ae:b5:b4:05:5e:56:dc:f5:76:b3:27:61: 8d:2f:3a:4a:fa:b4:dd:88:b2:9a:88:46:50:0c:a8: b2:d3:63:c1:67:89:8a:22:aa:28:0e:99:3d:fa:8e: 42:16:12:3d:23:3d:81:3f:5e:08:80:4e:2b:4c:3f: f2:16:d9:4d:c5:e6:fc:a8:1a:13:76:ee:b9:9a:34: 7f:84:c2:64:0e:8a:81:e6:35:2b:47:f1:9b:2a:02: 43:fa:4c:46:72:d9:4d:01:6e:48:22:9f:97:10:ed: 28:fe:bc:5a:df:e0:3e:53:0b:9f:a0:ab:0b:b8:2b: e9:ba:42:64:64:d0:3d:d0:bb:eb:f5:ff:4b:dd:85: 79:5e:22:1e:87:07:09:68:9e:be:ec:3c:fe:93:99: 01:61:ec:28:b9:13:64:75:7d:fb:ac:7e:fe:81:90: d0:b2:46:a3:f1:30:93:79:b1:b1:cb:53:64:30:b4: 95:b5:2d:7b:e6:94:8e:75:65:8e:f7:d5:49:12:74: 0d:93:43:fd:cd:f3:57:f9:bd:07:20:57:33:e6:8c: 40:3f:36:c1:1a:47:0e:90:5e:25:23:ca:42:16:f9: 3c:2e:ac:84:17:8d:24:2f:d0:0f:43:0a:04:50:92: a5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:65:D9:55:5D:5A:72:A2:76:E3:CD:16:EB:18:3F:51:9B:51:51:28 X509v3 Authority Key Identifier: keyid:98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:e0:83:df:b9:05:61:4f:d2:46:12:82:b4:24:f6:0e:3a:8b: 99:41:b4:8e:e2:79:01:66:49:ea:22:ed:6f:6b:6f:a5:97:75: 96:3f:1e:46:75:bf:2f:85:0b:0b:b9:d9:17:61:90:5f:f5:cf: 98:f1:d6:13:5e:3b:d5:17:cb:91:59:73:41:4d:98:27:e3:2f: ab:ce:bc:80:95:f6:5e:37:79:56:0e:79:d8:e6:8a:ba:17:18: 74:ef:5f:0d:04:63:e5:32:44:8a:78:3b:bf:14:a0:c1:11:59: 86:b7:ba:c7:38:08:c9:1b:96:c9:4d:9a:4d:63:24:a0:b6:1f: e2:4b:79:8c:5f:9e:d6:0b:58:9e:71:a9:69:45:59:8d:54:d2: a9:48:45:81:28:c6:f7:64:56:e9:e6:61:70:e2:35:94:7d:bb: 6c:da:55:f0:69:31:4c:9f:76:3a:de:4f:3e:40:ea:77:b9:fe: 13:7a:bb:c5:8a:25:b9:a6:87:67:da:63:d8:10:23:81:fc:76: 58:b0:68:e3:e2:27:1b:a4:03:4f:06:c0:dc:d9:5d:36:d8:7e: 71:ea:82:5a:c4:62:82:9d:bd:19:2b:36:c0:62:84:16:68:74: fe:41:e6:63:c5:a3:d7:b8:95:53:c6:40:d7:46:93:f6:e1:fc: 55:c7:cc:69 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QTVGNzExMC8GA1UEBRMoOThFOTk1QkMzQTRGRjJDRDA4QzZFMzU1NEI2NjM3NEI2 Njk3OTI3MDAeFw0yNjAzMDExMDI1MjdaFw0yNjAzMDgxMDI1MjdaMBgxFjAUBgNV BAMTDTY5YTQxNDE3LWUyNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCa703H2CyJoZFsRKEvMk+cuK61tAVeVtz1drMnYY0vOkr6tN2IspqIRlAMqLLT Y8FniYoiqigOmT36jkIWEj0jPYE/XgiATitMP/IW2U3F5vyoGhN27rmaNH+EwmQO ioHmNStH8ZsqAkP6TEZy2U0Bbkgin5cQ7Sj+vFrf4D5TC5+gqwu4K+m6QmRk0D3Q u+v1/0vdhXleIh6HBwlonr7sPP6TmQFh7Ci5E2R1ffusfv6BkNCyRqPxMJN5sbHL U2QwtJW1LXvmlI51ZY731UkSdA2TQ/3N81f5vQcgVzPmjEA/NsEaRw6QXiUjykIW +TwurIQXjSQv0A9DCgRQkqVrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUA2XZVV1a cqJ2480W6xg/UZtRUSgwHwYDVR0jBBgwFoAUmOmVvDpP8s0IxuNVS2Y3S2aXknAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBNUY3L0YwRENDREQ0RjFG MTExRjBBQjIxRjkzQjQ1NkY1NkJDL21PbVZ2RHBQOHMwSXh1TlZTMlkzUzJhWGtu QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbU9tVnZEcFA4czBJeHVOVlMyWTNTMmFYa25BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB NUY3L0YwRENDREQ0RjFGMTExRjBBQjIxRjkzQjQ1NkY1NkJDL21PbVZ2RHBQOHMw SXh1TlZTMlkzUzJhWGtuQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB04IPfuQVhT9JGEoK0JPYOOouZQbSO4nkBZknqIu1va2+ll3WWPx5Gdb8vhQsL udkXYZBf9c+Y8dYTXjvVF8uRWXNBTZgn4y+rzryAlfZeN3lWDnnY5oq6Fxh0718N BGPlMkSKeDu/FKDBEVmGt7rHOAjJG5bJTZpNYySgth/iS3mMX57WC1iecalpRVmN VNKpSEWBKMb3ZFbp5mFw4jWUfbts2lXwaTFMn3Y63k8+QOp3uf4TervFiiW5podn 2mPYECOB/HZYsGjj4icbpANPBsDc2V022H5x6oJaxGKCnb0ZKzbAYoQWaHT+QeZj xaPXuJVTxkDXRpP24fxVx8xp -----END CERTIFICATE-----Generated at Mon Mar 2 16:34:56 2026 by rpki-client