$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft File: cM9awmFE6NdDsVID4mwiBG-iQHo.mft (raw, json) Hash identifier: untA/DLx9V8T9zw/PmAJaL+wQ5R5LR1hx2stTQcu/mc= Subject key identifier: 42:CE:02:A3:E0:1E:66:2E:D5:A1:20:CF:42:46:0D:77:01:9D:74:23 Authority key identifier: 70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A Certificate issuer: /CN=A91DB128/serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A Certificate serial: 0222 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft Manifest number: 021C Signing time: Sun 01 Mar 2026 03:37:05 +0000 Manifest this update: Sun 01 Mar 2026 03:37:04 +0000 Manifest next update: Sun 08 Mar 2026 03:37:04 +0000 Files and hashes: 1: cM9awmFE6NdDsVID4mwiBG-iQHo.crl (hash: lkKXl84FXiZn8dWAW0O9SRnPQo+689SUXy4l0ULf6ws=) 2: ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa (hash: ViKM5e5iyaoZ2fwSNhoyHsddKA5yuwX0C7qKIyKJX7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB128, serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A Validity Not Before: Mar 1 03:37:04 2026 GMT Not After : Mar 8 03:37:04 2026 GMT Subject: CN=69a3b461-e04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8b:bc:37:92:c8:70:f8:a7:2f:27:61:eb:07: ae:a9:5d:b7:79:fc:c4:32:2e:45:87:ef:81:5d:51: 22:88:46:c0:2c:8c:42:bd:7a:f8:76:04:cb:55:60: 39:cc:25:15:f4:1e:c6:b9:18:1b:06:30:2d:20:2f: 18:20:95:11:cb:87:3c:02:ee:15:40:67:60:e9:fa: d4:62:45:1a:fe:c1:e3:03:11:ff:1d:00:05:5d:5b: 19:55:56:80:c3:13:f8:a9:d5:0e:61:8b:da:56:73: 01:7b:98:10:07:2e:6e:83:f8:05:41:b1:24:86:5b: 8a:d8:3e:88:bf:43:b9:f2:fd:45:ac:ba:26:88:97: c4:ee:28:55:d1:6e:29:54:ae:95:b5:15:c0:76:d2: 89:5b:7d:90:d3:ed:d5:0c:56:47:95:d1:9d:96:91: 64:24:da:a7:db:6d:19:4d:a8:fb:7b:b7:76:a7:da: 33:46:29:34:15:04:7c:44:fa:00:86:da:8e:93:ca: c4:a8:b6:22:71:85:bb:90:8c:fe:ef:fa:94:1e:65: 6a:12:28:ff:14:08:1c:4e:00:2d:3f:be:b2:2b:ee: c9:c5:65:54:ea:00:6f:ee:f2:1c:9d:75:a0:2a:1a: 76:7a:8b:14:6c:71:31:56:3f:52:3a:05:1b:24:a8: 57:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CE:02:A3:E0:1E:66:2E:D5:A1:20:CF:42:46:0D:77:01:9D:74:23 X509v3 Authority Key Identifier: keyid:70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:ee:7c:c6:bb:d8:50:2f:72:56:3b:df:5b:c2:2a:5d:e8:b4: ca:90:33:94:81:18:c8:da:75:37:7a:75:b5:f4:05:a0:a9:82: b6:46:e8:2a:5e:33:e5:e8:21:91:e5:38:c9:d8:70:90:e0:79: ac:1d:5f:82:bc:76:89:d6:aa:87:91:5c:3a:3e:73:9e:2d:5f: d1:1c:b4:99:48:94:a7:ae:1b:39:d5:a0:b8:2c:42:d2:78:7e: 99:3f:cd:e4:22:d4:c6:50:91:0f:f1:eb:3a:56:0c:78:5c:41: dd:01:ad:ed:63:62:4e:47:89:d9:13:7d:4c:4d:67:a3:f6:e0: 52:9b:69:b8:83:58:9e:11:26:a8:a5:60:ef:2b:12:20:98:25: 83:31:07:83:90:cd:72:20:67:a6:5e:ac:38:91:fd:f6:09:17: c2:6c:95:ad:58:25:b5:09:4e:bd:d2:a2:6b:4e:c7:bd:38:93: d7:c3:30:1d:5a:35:58:6c:f6:a1:1a:ce:51:c0:73:94:cf:f5: 7d:3d:4d:a7:e0:1f:aa:f8:58:bc:bc:6a:30:41:37:cd:b2:70: 7a:12:e6:8e:60:c8:9a:5d:ea:b6:59:de:56:c4:c6:ee:f7:b6: b8:08:b1:72:4e:3d:a8:13:34:d5:05:4d:7b:8e:d4:7f:f6:48: 1e:9a:31:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIxMjgxMTAvBgNVBAUTKDcwQ0Y1QUMyNjE0NEU4RDc0M0IxNTIwM0UyNkMyMjA0 NkZBMjQwN0EwHhcNMjYwMzAxMDMzNzA0WhcNMjYwMzA4MDMzNzA0WjAYMRYwFAYD VQQDDA02OWEzYjQ2MS1lMDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4u8N5LIcPinLydh6weuqV23efzEMi5Fh++BXVEiiEbALIxCvXr4dgTLVWA5 zCUV9B7GuRgbBjAtIC8YIJURy4c8Au4VQGdg6frUYkUa/sHjAxH/HQAFXVsZVVaA wxP4qdUOYYvaVnMBe5gQBy5ug/gFQbEkhluK2D6Iv0O58v1FrLomiJfE7ihV0W4p VK6VtRXAdtKJW32Q0+3VDFZHldGdlpFkJNqn220ZTaj7e7d2p9ozRik0FQR8RPoA htqOk8rEqLYicYW7kIz+7/qUHmVqEij/FAgcTgAtP76yK+7JxWVU6gBv7vIcnXWg Khp2eosUbHExVj9SOgUbJKhXpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFELOAqPg HmYu1aEgz0JGDXcBnXQjMB8GA1UdIwQYMBaAFHDPWsJhROjXQ7FSA+JsIgRvokB6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjEyOC83QkYyM0FDNERE RTgxMUVEQkY4Qzk3M0FDNEY5QUUwMi9jTTlhd21GRTZOZERzVklENG13aUJHLWlR SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNOWF3bUZFNk5kRHNWSUQ0bXdpQkctaVFIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjEyOC83QkYyM0FDNERERTgxMUVEQkY4Qzk3M0FDNEY5QUUwMi9jTTlhd21GRTZO ZERzVklENG13aUJHLWlRSG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk+58xrvYUC9yVjvfW8IqXei0ypAzlIEYyNp1N3p1tfQFoKmCtkboKl4z5egh keU4ydhwkOB5rB1fgrx2idaqh5FcOj5zni1f0Ry0mUiUp64bOdWguCxC0nh+mT/N 5CLUxlCRD/HrOlYMeFxB3QGt7WNiTkeJ2RN9TE1no/bgUptpuINYnhEmqKVg7ysS IJglgzEHg5DNciBnpl6sOJH99gkXwmyVrVgltQlOvdKia07HvTiT18MwHVo1WGz2 oRrOUcBzlM/1fT1Np+AfqvhYvLxqMEE3zbJwehLmjmDIml3qtlneVsTG7ve2uAix ck49qBM01QVNe47Uf/ZIHpoxAg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:39:34 2026 by rpki-client