$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft File: -J0aOgEq7dJ69ICrnjbpKOaPiUI.mft (raw, json) Hash identifier: MsH4KS3fiWhyxsDjS5hZUBAET+rDg0ZpARpMQI5Dy0M= Subject key identifier: F1:65:8B:73:B5:F8:1B:85:75:44:9A:C7:11:BD:2E:08:AC:D6:64:5F Authority key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 Certificate issuer: /CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Certificate serial: 1FAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft Manifest number: 1FA4 Signing time: Mon 02 Mar 2026 02:39:38 +0000 Manifest this update: Mon 02 Mar 2026 02:39:37 +0000 Manifest next update: Mon 09 Mar 2026 02:39:37 +0000 Files and hashes: 1: -J0aOgEq7dJ69ICrnjbpKOaPiUI.crl (hash: DBdIPS4nWCxpQJnfnXZhzsh91bzKUY2L1aNDpBvVYXU=) 2: 91AC7FEAAF8311F0AA3DB580C4F9AE02.roa (hash: GjOMUfWbv01wGvJ1FvR6+5UWkPxfCYmtbqRruiSURbE=) 3: A423811CAF8511F081CFDB4FC4F9AE02.roa (hash: t9f19zC5S/IYriertqckeC3YEvgJ+JaLXV3b4hj/fXo=) 4: 911C2670AF8311F0AA3DB580C4F9AE02.roa (hash: RZhjBvcmyXIMzlb/8UlxgzJQXUre9xl2GZfQAX/t0EM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8108 (0x1fac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBC93, serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Validity Not Before: Mar 2 02:39:37 2026 GMT Not After : Mar 9 02:39:37 2026 GMT Subject: CN=69a4f86a-f54e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ed:52:21:bf:0d:d3:07:d8:b2:01:35:85:43: 18:0c:41:90:ed:9c:ec:db:39:87:74:b1:1b:b7:58: 4c:92:a4:90:91:ce:a4:01:16:b9:cb:5b:3e:67:e4: c6:38:74:29:b2:44:64:16:cb:65:13:fc:1a:ea:8c: 9a:f8:c0:39:e9:b8:40:25:e6:a9:18:c4:b8:c1:21: 62:3d:0b:21:4e:7f:4d:8c:2b:5d:fa:b8:24:64:64: 0d:c7:e6:81:29:68:b5:bc:5d:8a:c9:84:54:18:f9: 08:f9:95:6b:74:70:0b:9b:51:2a:0b:a2:9d:62:18: 71:88:67:62:4c:3f:67:bf:9a:ab:63:06:d1:41:5b: 17:83:18:ad:d0:f1:2b:00:86:f0:3a:9e:b0:66:16: 26:6a:02:78:69:d2:86:bd:50:3c:25:f5:1d:23:91: cf:40:d5:e3:58:3e:ec:2d:88:65:4c:38:d3:ee:38: 44:cf:2b:ad:77:da:f5:29:62:d5:b8:15:30:79:b1: 4d:50:3a:e9:cc:9b:40:50:85:15:ac:d1:25:83:b2: bb:10:ea:64:97:f5:df:e2:bf:3c:3f:b2:f3:53:da: b6:73:76:2d:2c:f9:93:35:7a:c5:aa:15:f1:2a:7d: 93:0d:cb:d7:4f:ff:ae:0c:c3:fc:84:ee:26:3b:1a: 6e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:65:8B:73:B5:F8:1B:85:75:44:9A:C7:11:BD:2E:08:AC:D6:64:5F X509v3 Authority Key Identifier: keyid:F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:fd:b1:fa:fc:46:88:28:32:3e:f3:44:ac:6f:67:49:cf:ee: 84:87:25:f2:4b:51:77:54:ef:24:a8:b4:91:e9:4e:d0:8d:29: 3b:88:6f:41:a5:88:5f:47:20:0d:81:6d:3c:ea:33:4d:15:28: 87:9c:cf:7b:3e:e5:41:79:40:04:1a:b4:57:91:6b:ef:1e:58: 35:20:56:fe:6b:4a:0e:2b:15:af:24:7d:8e:84:98:db:2a:fe: 68:2f:bc:2b:ab:79:a3:93:84:89:28:07:35:1c:34:8c:df:03: 9f:28:fc:c1:68:c3:23:59:06:f3:c1:10:e4:85:cb:bf:38:d5: 80:f5:88:4d:76:cc:50:ee:03:ad:40:eb:37:ec:57:21:24:73: 7b:f6:c0:42:ca:07:60:cb:3b:0e:91:d9:1c:a4:04:70:9f:de: 0b:10:3e:ec:d6:bc:45:6b:bf:ae:ec:69:f5:2d:d9:95:66:cf: b3:c8:e5:9e:54:de:10:4e:65:c5:54:b5:13:e4:ca:72:1a:9b: 56:d9:f9:67:df:30:e0:7d:8b:62:24:6f:bc:0c:76:65:79:0a: b5:88:26:16:39:aa:d1:36:67:21:11:1c:13:e6:f9:fc:3a:67: ac:1b:9e:2b:dc:9f:4a:d8:16:de:0b:b5:fb:6f:80:44:fa:53: b9:20:73:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJDOTMxMTAvBgNVBAUTKEY4OUQxQTNBMDEyQUVERDI3QUY0ODBBQjlFMzZFOTI4 RTY4Rjg5NDIwHhcNMjYwMzAyMDIzOTM3WhcNMjYwMzA5MDIzOTM3WjAYMRYwFAYD VQQDEw02OWE0Zjg2YS1mNTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+1SIb8N0wfYsgE1hUMYDEGQ7Zzs2zmHdLEbt1hMkqSQkc6kARa5y1s+Z+TG OHQpskRkFstlE/wa6oya+MA56bhAJeapGMS4wSFiPQshTn9NjCtd+rgkZGQNx+aB KWi1vF2KyYRUGPkI+ZVrdHALm1EqC6KdYhhxiGdiTD9nv5qrYwbRQVsXgxit0PEr AIbwOp6wZhYmagJ4adKGvVA8JfUdI5HPQNXjWD7sLYhlTDjT7jhEzyutd9r1KWLV uBUwebFNUDrpzJtAUIUVrNElg7K7EOpkl/Xf4r88P7LzU9q2c3YtLPmTNXrFqhXx Kn2TDcvXT/+uDMP8hO4mOxpujwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPFli3O1 +BuFdUSaxxG9Lgis1mRfMB8GA1UdIwQYMBaAFPidGjoBKu3SevSAq5426Sjmj4lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkM5My84RkI0OEJCNjUz NzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdkSjY5SUNybmpicEtPYVBp VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KMGFPZ0VxN2RKNjlJQ3JuamJwS09hUGlVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkM5My84RkI0OEJCNjUzNzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdk SjY5SUNybmpicEtPYVBpVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU/2x+vxGiCgyPvNErG9nSc/uhIcl8ktRd1TvJKi0kelO0I0pO4hvQaWIX0cg DYFtPOozTRUoh5zPez7lQXlABBq0V5Fr7x5YNSBW/mtKDisVryR9joSY2yr+aC+8 K6t5o5OEiSgHNRw0jN8Dnyj8wWjDI1kG88EQ5IXLvzjVgPWITXbMUO4DrUDrN+xX ISRze/bAQsoHYMs7DpHZHKQEcJ/eCxA+7Na8RWu/ruxp9S3ZlWbPs8jlnlTeEE5l xVS1E+TKchqbVtn5Z98w4H2LYiRvvAx2ZXkKtYgmFjmq0TZnIREcE+b5/DpnrBue K9yfStgW3gu1+2+ARPpTuSBzGg== -----END CERTIFICATE-----Generated at Mon Mar 2 12:37:44 2026 by rpki-client