$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft File: kROhaGm30B54nuCf4m5q-jfPPkc.mft (raw, json) Hash identifier: wA46NJ+ucM9455HZsre9/Der6zWLBJT8OMooSDNrOSY= Subject key identifier: F0:3E:34:86:94:E0:5F:37:EC:88:A2:6E:9F:89:AD:7C:B2:3E:9F:36 Authority key identifier: 91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47 Certificate issuer: /CN=A91E3814/serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47 Certificate serial: 04DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft Manifest number: 04CF Signing time: Mon 02 Mar 2026 01:31:19 +0000 Manifest this update: Mon 02 Mar 2026 01:31:16 +0000 Manifest next update: Mon 09 Mar 2026 01:31:16 +0000 Files and hashes: 1: kROhaGm30B54nuCf4m5q-jfPPkc.crl (hash: j+hMU67QHYdq4Wv+TEajoJJTnxCIrLw5/W4rVrf50G4=) 2: 2F74D644ABC711EF9CD3CE81C4F9AE02.roa (hash: f4gCpRS0r2/y5eBNPTgqtyjnYPjR3lsXVlQbnXKGMC0=) 3: 8628E1BA210611F082BE7E10C4F9AE02.roa (hash: FDpH8dS0OREyIzTLTNCmJQk67Jnkzas8jUdB0DHyoY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:31:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1243 (0x4db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3814, serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47 Validity Not Before: Mar 2 01:31:16 2026 GMT Not After : Mar 9 01:31:16 2026 GMT Subject: CN=69a4e866-ba06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f2:da:48:f7:63:1f:97:ec:b6:c1:6d:03:30: 14:10:f6:2d:c8:43:e7:aa:7d:1b:a6:d5:02:19:89: ff:1c:fc:51:52:c7:d4:33:e5:fa:84:30:c3:b9:90: ed:ba:e7:58:22:40:7f:36:71:8c:61:a6:b5:fc:3a: 37:63:30:c6:68:8a:ba:73:e8:da:f7:3e:53:90:26: 8a:08:96:b1:48:af:3a:71:34:e7:22:3d:12:06:47: fd:62:2e:3e:57:93:4b:38:78:91:82:12:71:ad:a7: 17:1f:0b:b6:8e:31:ec:c0:ce:27:95:c6:92:ae:ad: 48:7a:72:57:4e:b8:68:16:bd:3c:1f:e6:3e:d1:60: d8:31:a8:5b:20:eb:30:1c:bd:ca:4f:6a:4f:89:94: bb:e6:e8:c4:1c:a2:d7:26:e2:95:f3:b0:b0:5d:78: 24:a1:0d:74:53:a9:ae:56:2e:fb:8b:37:8f:22:d5: 96:f0:7e:c1:22:d6:ed:e2:02:bb:31:65:e6:2d:e1: 4d:df:21:1f:70:2c:f9:d3:d7:94:b1:5a:3f:01:f6: 8d:1b:a8:66:00:8a:e6:d5:00:06:60:3b:4d:c6:95: e7:cd:14:8b:c5:f5:5a:cd:a0:0d:d0:3b:c1:a7:cf: 2e:d9:91:81:10:3d:f3:e8:c2:79:b9:ba:27:83:64: a9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3E:34:86:94:E0:5F:37:EC:88:A2:6E:9F:89:AD:7C:B2:3E:9F:36 X509v3 Authority Key Identifier: keyid:91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:12:31:7d:31:1a:f7:27:19:74:bf:e4:e5:b0:62:23:cd:fe: cf:f4:a4:ea:61:3b:2e:3d:42:c4:65:2a:e9:93:cf:e7:d1:5b: a7:7b:60:54:f2:f5:a8:d0:df:f2:42:aa:dc:04:c3:2c:35:85: 4c:da:13:34:ba:4d:f5:8a:4c:f9:f0:bd:8f:f5:63:60:78:1e: 74:e2:86:93:5d:f9:c5:15:da:c8:df:86:09:a9:6c:da:1e:54: cf:9c:d2:13:86:4a:12:b8:a7:c0:79:c1:8b:73:8a:6f:f2:46: be:aa:3e:6e:15:89:65:8f:54:f8:99:f5:b4:59:5a:b2:99:d7: 0a:aa:bb:5c:a0:74:1f:67:45:f5:aa:6c:68:0b:9b:37:0f:17: e5:77:31:36:11:b6:9d:88:15:7c:8e:c8:04:24:d3:b4:8f:b4: 7a:04:47:a8:fb:7e:70:5b:61:5e:fc:62:9c:ca:c4:0d:88:d1: fd:ac:52:88:64:79:b1:d5:a7:84:91:50:d8:2a:b9:d4:b0:eb: 62:2c:5e:59:ab:af:41:67:64:cd:f6:b8:9e:51:9a:1d:76:00: 1d:95:6f:88:d1:30:bd:f4:92:1d:77:4b:ec:e5:0a:4d:da:72: ec:a1:5e:1f:12:a0:ac:99:e8:64:46:9d:c0:fc:4f:26:68:0c: 87:18:34:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM4MTQxMTAvBgNVBAUTKDkxMTNBMTY4NjlCN0QwMUU3ODlFRTA5RkUyNkU2QUZB MzdDRjNFNDcwHhcNMjYwMzAyMDEzMTE2WhcNMjYwMzA5MDEzMTE2WjAYMRYwFAYD VQQDEw02OWE0ZTg2Ni1iYTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhfLaSPdjH5fstsFtAzAUEPYtyEPnqn0bptUCGYn/HPxRUsfUM+X6hDDDuZDt uudYIkB/NnGMYaa1/Do3YzDGaIq6c+ja9z5TkCaKCJaxSK86cTTnIj0SBkf9Yi4+ V5NLOHiRghJxracXHwu2jjHswM4nlcaSrq1IenJXTrhoFr08H+Y+0WDYMahbIOsw HL3KT2pPiZS75ujEHKLXJuKV87CwXXgkoQ10U6muVi77izePItWW8H7BItbt4gK7 MWXmLeFN3yEfcCz509eUsVo/AfaNG6hmAIrm1QAGYDtNxpXnzRSLxfVazaAN0DvB p88u2ZGBED3z6MJ5ubong2Sp+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPA+NIaU 4F837Iiibp+JrXyyPp82MB8GA1UdIwQYMBaAFJEToWhpt9AeeJ7gn+Juavo3zz5H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzgxNC8yNTQyQjQyMjVE NzExMUVDOTkwODkxNERDNEY5QUUwMi9rUk9oYUdtMzBCNTRudUNmNG01cS1qZlBQ a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tST2hhR20zMEI1NG51Q2Y0bTVxLWpmUFBrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzgxNC8yNTQyQjQyMjVENzExMUVDOTkwODkxNERDNEY5QUUwMi9rUk9oYUdtMzBC NTRudUNmNG01cS1qZlBQa2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqRIxfTEa9ycZdL/k5bBiI83+z/Sk6mE7Lj1CxGUq6ZPP59Fbp3tgVPL1qNDf 8kKq3ATDLDWFTNoTNLpN9YpM+fC9j/VjYHgedOKGk135xRXayN+GCals2h5Uz5zS E4ZKErinwHnBi3OKb/JGvqo+bhWJZY9U+Jn1tFlaspnXCqq7XKB0H2dF9apsaAub Nw8X5XcxNhG2nYgVfI7IBCTTtI+0egRHqPt+cFthXvxinMrEDYjR/axSiGR5sdWn hJFQ2Cq51LDrYixeWauvQWdkzfa4nlGaHXYAHZVviNEwvfSSHXdL7OUKTdpy7KFe HxKgrJnoZEadwPxPJmgMhxg0gQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:17:27 2026 by rpki-client