$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft File: vDqLsM3Qi243IbLB0hqBcUw7IUI.mft (raw, json) Hash identifier: FcmXggMZgJWdWl/ZR0VYrqoBtSzPtotwJMi8axSfWss= Subject key identifier: 65:60:FA:9A:DB:C5:BB:54:D7:5E:AE:D7:E7:E5:20:42:D8:79:4B:72 Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 Certificate issuer: /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Certificate serial: 0402 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft Manifest number: 03E7 Signing time: Sun 01 Mar 2026 01:25:56 +0000 Manifest this update: Sun 01 Mar 2026 01:25:55 +0000 Manifest next update: Sun 08 Mar 2026 01:25:55 +0000 Files and hashes: 1: vDqLsM3Qi243IbLB0hqBcUw7IUI.crl (hash: 4NK6QsJJETuUZ1sP2YmH8ahQHrjt4rN3idZUSUK5ObQ=) 2: 2998A0E0F99011EF89B2363DC4F9AE02.roa (hash: KstFse9DL+Lpk2UJhsRfTukB1/IV52HFgYreP0UKdGE=) 3: B7E47C68C02511EC93BB8865C4F9AE02.roa (hash: 8/pe/NkCfmi8GQHtZeDvbdeiM83VXVuijM5zx0eXnx8=) 4: 83CA50563C2311F0AEBA313AC4F9AE02.roa (hash: 8dEWz6BA19noWs2zWuUBCRCZchx4qTK4G3VWLV+hIMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1026 (0x402) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3731, serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Validity Not Before: Mar 1 01:25:55 2026 GMT Not After : Mar 8 01:25:55 2026 GMT Subject: CN=69a395a3-832d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1b:c7:ca:1f:99:18:d5:26:6d:13:34:39:c4: d7:ef:87:77:8d:e0:4f:4d:30:2b:d8:39:fb:91:9c: 68:9e:f8:4f:06:7a:c0:b1:a7:ef:36:af:cc:42:42: ab:5b:09:63:7e:d6:58:b0:be:90:de:02:5e:62:ed: 57:13:e8:1f:08:66:74:a7:52:d0:96:2b:f4:2f:fa: 3b:d4:94:84:c5:84:68:2d:8e:f7:9c:4c:45:2f:53: c4:75:6b:be:1b:7a:4e:c7:73:0e:81:83:97:ba:40: 27:69:46:9e:d3:ad:2e:00:b9:c9:b2:85:2b:6a:82: 5b:56:b3:a3:79:2e:2c:fb:2b:8c:30:f6:3e:91:26: 91:a8:8f:59:56:6c:8a:79:43:d9:f8:5a:98:4c:b4: ba:7c:8d:1a:02:77:bf:ff:bf:d0:f0:2c:c9:84:d9: 2a:af:4c:f0:b3:8f:e3:98:6c:5a:89:fb:a1:e6:7d: 44:1f:58:55:47:ce:ad:c0:a1:47:07:b4:07:69:c7: b6:10:bb:9b:10:d6:75:bb:1d:95:16:23:d8:b9:4d: 3a:48:6d:1b:da:7c:ff:f7:b9:df:a2:0b:d6:5b:db: 21:ba:5c:97:5f:d1:c8:04:28:70:7e:e8:24:62:f9: b2:f3:c3:5b:dd:30:98:64:99:e9:38:5d:4d:84:65: c3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:60:FA:9A:DB:C5:BB:54:D7:5E:AE:D7:E7:E5:20:42:D8:79:4B:72 X509v3 Authority Key Identifier: keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:21:2c:c6:e0:db:10:d2:c9:70:38:f2:0f:07:02:88:25:cb: fe:b8:b6:d3:2f:9d:1e:55:0a:07:85:81:3b:33:7b:e3:22:58: 80:ec:68:96:91:f7:52:9e:52:39:90:52:13:bd:33:17:e9:44: 18:e9:2e:72:f4:63:db:44:54:cf:32:d2:60:b4:b6:64:c0:a8: 5a:ec:e1:d0:6a:9c:e1:f2:97:0c:63:05:2f:46:34:92:e7:0e: 06:46:92:c0:39:4a:71:2f:4a:f8:16:78:8b:e9:2f:4b:5f:be: f9:77:21:54:b5:77:2f:2f:07:f7:40:8d:0e:14:34:cd:a1:93: 18:99:b2:cd:33:8a:fb:7c:8a:77:a6:8f:d2:e8:0d:8e:7c:2f: f9:82:34:20:de:cb:e2:ec:bf:51:54:6b:de:7a:e6:c6:41:53: 4a:c7:ff:2e:8b:26:0a:cf:a3:34:9c:66:89:01:f4:37:0a:a3: 56:ac:3a:83:7f:2d:ef:5f:7a:c9:34:95:9f:14:32:76:ad:51: 98:bc:e3:7d:ff:18:89:9b:ac:70:58:76:2a:a7:b5:e3:c3:65: 9d:5e:93:4c:5c:d5:3f:59:a9:d6:47:f2:52:d7:0b:76:69:a5: 38:80:f4:31:ae:e1:f3:c0:3d:ec:c2:30:a3:27:99:f4:86:0b: 19:06:75:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3MzExMTAvBgNVBAUTKEJDM0E4QkIwQ0REMDhCNkUzNzIxQjJDMUQyMUE4MTcx NEMzQjIxNDIwHhcNMjYwMzAxMDEyNTU1WhcNMjYwMzA4MDEyNTU1WjAYMRYwFAYD VQQDDA02OWEzOTVhMy04MzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8xvHyh+ZGNUmbRM0OcTX74d3jeBPTTAr2Dn7kZxonvhPBnrAsafvNq/MQkKr WwljftZYsL6Q3gJeYu1XE+gfCGZ0p1LQliv0L/o71JSExYRoLY73nExFL1PEdWu+ G3pOx3MOgYOXukAnaUae060uALnJsoUraoJbVrOjeS4s+yuMMPY+kSaRqI9ZVmyK eUPZ+FqYTLS6fI0aAne//7/Q8CzJhNkqr0zws4/jmGxaifuh5n1EH1hVR86twKFH B7QHace2ELubENZ1ux2VFiPYuU06SG0b2nz/97nfogvWW9shulyXX9HIBChwfugk Yvmy88Nb3TCYZJnpOF1NhGXDAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGVg+prb xbtU116u1+flIELYeUtyMB8GA1UdIwQYMBaAFLw6i7DN0ItuNyGywdIagXFMOyFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzczMS81NUIyMjNFQUMw MjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWkyNDNJYkxCMGhxQmNVdzdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZEcUxzTTNRaTI0M0liTEIwaHFCY1V3N0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzczMS81NUIyMjNFQUMwMjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWky NDNJYkxCMGhxQmNVdzdJVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApCEsxuDbENLJcDjyDwcCiCXL/ri20y+dHlUKB4WBOzN74yJYgOxolpH3Up5S OZBSE70zF+lEGOkucvRj20RUzzLSYLS2ZMCoWuzh0Gqc4fKXDGMFL0Y0kucOBkaS wDlKcS9K+BZ4i+kvS1+++XchVLV3Ly8H90CNDhQ0zaGTGJmyzTOK+3yKd6aP0ugN jnwv+YI0IN7L4uy/UVRr3nrmxkFTSsf/LosmCs+jNJxmiQH0NwqjVqw6g38t7196 yTSVnxQydq1RmLzjff8YiZuscFh2Kqe148NlnV6TTFzVP1mp1kfyUtcLdmmlOID0 Ma7h88A97MIwoyeZ9IYLGQZ1ZQ== -----END CERTIFICATE-----Generated at Sun Mar 1 20:27:38 2026 by rpki-client