$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft File: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft (raw, json) Hash identifier: nS9CG8mV7nBebbwMIa7Lo7YAIbxXf2bnCkDjTILh0NQ= Subject key identifier: 76:B9:36:93:38:7E:2C:68:BB:E9:CD:BA:61:1C:82:F6:DD:2F:23:98 Authority key identifier: 37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB Certificate issuer: /CN=A91E3E33/serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Certificate serial: 12A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft Manifest number: 1281 Signing time: Mon 02 Mar 2026 00:24:47 +0000 Manifest this update: Mon 02 Mar 2026 00:24:46 +0000 Manifest next update: Mon 09 Mar 2026 00:24:46 +0000 Files and hashes: 1: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl (hash: d1ssfzv/d70vA2lVHjIagItpc4+7MzIY7a8zstssbeM=) 2: 29ED0D46839011EE946C5E63C4F9AE02.roa (hash: Mk7axMLu02fCkeBHGlKgm1yoa0p6/cjOgQ2Y7Q06Kao=) 3: D0B8C09E1BBF11EAA64ECF70C4F9AE02.roa (hash: QNLelKdMSlDKmsbvqvRzrLkhu/2hfJJqmOa+I6J1bAk=) 4: 4551BE2CD19D11EAA120EE14C4F9AE02.roa (hash: yX0Uzg9eTPoxhzg9lrLk/1K20OmA34T+jetmGie5oOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4777 (0x12a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E33, serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Validity Not Before: Mar 2 00:24:46 2026 GMT Not After : Mar 9 00:24:46 2026 GMT Subject: CN=69a4d8cf-3246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:01:05:b1:f2:5e:a7:f0:23:7d:b7:81:cd:d0: 04:0b:da:b4:40:eb:7d:29:87:82:e1:91:4f:c7:97: c4:cd:75:56:1f:88:2a:af:91:69:c8:e2:b1:6b:9c: 2d:88:87:c9:fd:eb:ed:bf:c8:cc:7b:70:75:bf:ab: 0b:40:82:93:ee:82:54:65:7c:b8:ba:a6:44:a7:d1: dd:a2:75:40:1c:f0:21:62:53:2e:e2:11:62:b2:ea: 8b:d6:e2:ae:b9:e1:f2:2d:67:ac:2c:b9:db:ff:19: dc:56:ee:48:c9:92:21:a6:aa:2b:e2:b3:f1:86:6d: 49:3b:56:40:eb:55:11:6a:a5:ad:35:d3:06:97:b0: af:de:e3:51:43:c1:f2:0b:b1:5c:52:33:56:84:b2: 0e:f2:bb:ee:71:8e:11:dc:09:d2:db:9d:2a:c0:f4: 47:2a:85:71:ff:4f:2d:5f:2b:90:67:b2:3f:84:de: dd:f9:42:ce:4d:f8:ed:42:51:56:98:bf:79:4d:14: 53:f0:f7:60:97:45:df:2d:9d:6c:aa:a9:e1:94:25: 24:23:f8:9d:04:f0:d9:0e:b3:fb:d7:0e:96:ef:a6: b7:8a:0e:ba:0f:2b:c3:7d:1a:86:7a:fd:88:ef:2a: e3:b8:e3:0c:ee:54:82:80:1f:fe:fa:9e:bf:06:0d: 3d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B9:36:93:38:7E:2C:68:BB:E9:CD:BA:61:1C:82:F6:DD:2F:23:98 X509v3 Authority Key Identifier: keyid:37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:42:0f:3c:9b:b8:30:39:03:14:46:ac:ce:3f:0e:54:13:5a: 6f:dc:bd:ac:5f:d8:9a:3c:59:5c:4d:6e:8e:f7:18:24:e8:d0: ea:bd:c7:77:35:39:8e:e8:3d:93:5a:5d:cd:18:ad:98:38:f0: f9:2c:5b:4d:eb:cc:37:b3:9d:2e:4e:9f:1d:8d:64:b1:6a:4a: a7:1c:46:d3:15:c7:44:45:a2:41:47:71:18:99:67:58:94:b8: a8:f8:ba:ce:c8:7d:3a:a3:39:74:9d:07:eb:79:52:a4:85:e3: 9b:32:0c:a4:62:64:d8:86:2e:45:ed:09:a3:81:b6:f3:d6:3f: c5:bc:8b:99:fe:92:5b:07:35:36:82:0e:2b:1c:b8:43:fe:b8: 2d:67:15:1c:aa:bd:80:13:b6:a0:b4:13:d6:bd:d6:cb:c3:7d: 1d:85:3d:6d:f9:ba:ac:68:6b:96:58:f4:3a:47:b3:b7:35:a2: 7f:71:e3:cb:cd:a3:9b:be:a0:55:f0:ab:76:0e:31:6a:a0:db: 6a:78:37:79:d5:fc:87:e4:75:8c:56:b8:92:fc:91:93:2b:f7: 23:4f:d7:ab:22:19:62:70:30:e2:8c:c8:7f:7d:2a:5a:5f:70: 9e:15:41:41:68:36:31:23:fe:fa:2e:9c:7f:2e:54:8b:d2:51: 8f:22:bf:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFMzMxMTAvBgNVBAUTKDM3OTc0MzcxNENFMDEyMjMwQUE5NzhCQjFBQThDNzkw RTcwNjY3QUIwHhcNMjYwMzAyMDAyNDQ2WhcNMjYwMzA5MDAyNDQ2WjAYMRYwFAYD VQQDEw02OWE0ZDhjZi0zMjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkgEFsfJep/AjfbeBzdAEC9q0QOt9KYeC4ZFPx5fEzXVWH4gqr5FpyOKxa5wt iIfJ/evtv8jMe3B1v6sLQIKT7oJUZXy4uqZEp9HdonVAHPAhYlMu4hFisuqL1uKu ueHyLWesLLnb/xncVu5IyZIhpqor4rPxhm1JO1ZA61URaqWtNdMGl7Cv3uNRQ8Hy C7FcUjNWhLIO8rvucY4R3AnS250qwPRHKoVx/08tXyuQZ7I/hN7d+ULOTfjtQlFW mL95TRRT8Pdgl0XfLZ1sqqnhlCUkI/idBPDZDrP71w6W76a3ig66DyvDfRqGev2I 7yrjuOMM7lSCgB/++p6/Bg09rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHa5NpM4 fixou+nNumEcgvbdLyOYMB8GA1UdIwQYMBaAFDeXQ3FM4BIjCql4uxqox5DnBmer MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UzMy84NzdBNzlCNkU5 RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0VpTUtxWGk3R3FqSGtPY0da NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041ZERjVXpnRWlNS3FYaTdHcWpIa09jR1o2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0UzMy84NzdBNzlCNkU5RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0Vp TUtxWGk3R3FqSGtPY0daNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALkIPPJu4MDkDFEaszj8OVBNab9y9rF/YmjxZXE1ujvcYJOjQ6r3HdzU5jug9 k1pdzRitmDjw+SxbTevMN7OdLk6fHY1ksWpKpxxG0xXHREWiQUdxGJlnWJS4qPi6 zsh9OqM5dJ0H63lSpIXjmzIMpGJk2IYuRe0Jo4G289Y/xbyLmf6SWwc1NoIOKxy4 Q/64LWcVHKq9gBO2oLQT1r3Wy8N9HYU9bfm6rGhrllj0OkeztzWif3Hjy82jm76g VfCrdg4xaqDbang3edX8h+R1jFa4kvyRkyv3I0/XqyIZYnAw4ozIf30qWl9wnhVB QWg2MSP++i6cfy5Ui9JRjyK/TA== -----END CERTIFICATE-----Generated at Mon Mar 2 17:17:09 2026 by rpki-client