$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft File: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json) Hash identifier: p/DugA0y/sDC40hwNkxjJI0CjdTZRwNm+NWjq8SXcSc= Subject key identifier: 57:B1:68:D8:CE:E1:03:CE:34:3E:FE:00:E4:53:06:B5:B3:E7:F7:15 Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Certificate serial: 08F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft Manifest number: 08E1 Signing time: Sun 01 Mar 2026 15:19:04 +0000 Manifest this update: Sun 01 Mar 2026 15:19:03 +0000 Manifest next update: Sun 08 Mar 2026 15:19:03 +0000 Files and hashes: 1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: X20EcczFfVYv0RKg7Oj9f/9dbhVPc3q6eek2tJTYV+c=) 2: 12789D14F82E11F09E4CD127396F56BC.roa (hash: jrubN9FoDrR0nxaerp9Oi132xG5U8KpYn5tsStQf2cc=) 3: 35F78322157A11F1B5E2F6BC3D3D8C67.roa (hash: 4B2gWhB5Y4ILw7gHlXuWLfEmtRcz3baNrh2+32uCSBU=) 4: 37A30AA2157A11F1B5E2F6BC3D3D8C67.roa (hash: dBkk8gzxpWAkhHfAOLQ7jEXfDy4v7KWWXX08BHROty0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 15:19:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2294 (0x8f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Validity Not Before: Mar 1 15:19:03 2026 GMT Not After : Mar 8 15:19:03 2026 GMT Subject: CN=69a458e8-346a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d7:ad:33:45:05:d4:a8:ef:95:8a:46:91:77: b5:d4:64:e7:69:bc:cb:25:ce:7b:40:46:73:42:94: 3f:55:ec:f5:73:cf:38:fe:78:e4:50:b9:11:cd:89: b8:04:e9:f2:38:bc:6c:9e:c5:38:d7:02:1a:9e:f6: a3:a1:23:a4:e0:b1:69:40:4c:29:e4:10:b8:d0:fb: bf:b5:54:ef:dd:6f:ee:d4:ac:9c:ae:69:b0:c6:89: 41:f3:f5:99:6a:96:9c:b6:18:6b:d8:cc:6d:48:8b: e9:83:36:5e:2a:bc:47:a2:8e:f9:bf:40:69:f9:15: b8:a9:8d:19:71:11:50:1d:07:e7:3e:07:1f:50:bb: b8:2d:c4:14:8e:7a:99:8f:17:b7:75:f6:07:5e:f4: 64:61:0f:3e:99:19:3f:f6:2a:3e:6e:c3:be:09:9a: 75:70:14:a2:f4:56:7d:18:81:31:c5:11:53:fb:96: d6:17:04:2b:c2:b9:95:b1:2d:4a:73:58:8c:9c:3a: 20:97:6f:c1:10:81:e0:14:5a:8f:e3:c7:40:45:87: 59:85:45:57:72:ca:7d:5f:19:dc:7d:c5:3e:1c:dc: 87:0a:58:7d:12:4f:a6:3d:e3:71:e4:03:0a:05:18: 77:5a:33:4c:a4:3f:7b:74:1f:b5:b3:c1:a6:3b:9d: 9e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B1:68:D8:CE:E1:03:CE:34:3E:FE:00:E4:53:06:B5:B3:E7:F7:15 X509v3 Authority Key Identifier: keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:68:92:90:fb:cb:76:70:65:98:6b:84:5f:cc:85:6f:98:4b: 3b:b3:fc:3d:fb:54:12:95:10:6a:88:26:7c:a3:28:89:d6:8f: c6:24:ed:10:c5:e0:1c:71:39:4f:3d:e4:6a:01:38:84:83:95: a8:e2:f7:9c:4c:7d:ec:c0:b1:af:47:09:fc:f3:9a:ab:31:7d: 6f:04:9b:57:73:a5:2a:43:f6:58:e6:8f:6a:fb:df:f6:56:fa: cc:ec:b0:b1:3d:c1:ea:e1:83:c9:ff:a7:46:88:58:ae:2b:67: 86:2d:c2:37:4c:af:6d:3d:42:3d:70:a4:4e:9f:9c:f3:67:98: 4e:15:11:ba:e1:ab:52:06:a1:5a:0d:b7:ae:25:7a:41:e3:b0: 2d:6f:da:6f:04:55:bd:76:c1:72:e1:80:7a:fa:c7:6f:68:a0: f2:3e:41:ef:e5:54:f0:e3:a4:08:cc:46:67:b5:e3:c8:e3:3e: 9c:7b:d9:6a:3b:05:d7:cc:d3:87:4e:16:9e:3e:0c:6c:c7:53: d7:1f:fb:bf:a3:fb:c7:a8:8d:37:65:26:fa:9b:3b:cb:b3:2f: 12:41:55:a9:e8:13:82:44:a5:a1:99:58:79:db:a0:69:49:b3: e2:e4:5e:da:22:ce:30:67:1f:c0:a8:6f:22:85:86:f5:42:74: 3d:59:c0:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU0Q0YxMTAvBgNVBAUTKEMxQkVDRjk3Q0E5NUUwNkRDMDZFMDBDMjM5RjYyQ0M2 OTQyNDE2RDEwHhcNMjYwMzAxMTUxOTAzWhcNMjYwMzA4MTUxOTAzWjAYMRYwFAYD VQQDEw02OWE0NThlOC0zNDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09etM0UF1KjvlYpGkXe11GTnabzLJc57QEZzQpQ/Vez1c884/njkULkRzYm4 BOnyOLxsnsU41wIanvajoSOk4LFpQEwp5BC40Pu/tVTv3W/u1KycrmmwxolB8/WZ apacthhr2MxtSIvpgzZeKrxHoo75v0Bp+RW4qY0ZcRFQHQfnPgcfULu4LcQUjnqZ jxe3dfYHXvRkYQ8+mRk/9io+bsO+CZp1cBSi9FZ9GIExxRFT+5bWFwQrwrmVsS1K c1iMnDogl2/BEIHgFFqP48dARYdZhUVXcsp9XxncfcU+HNyHClh9Ek+mPeNx5AMK BRh3WjNMpD97dB+1s8GmO52e6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFexaNjO 4QPOND7+AORTBrWz5/cVMB8GA1UdIwQYMBaAFMG+z5fKleBtwG4Awjn2LMaUJBbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTRDRi9EOEYzQUNBQ0ND OEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRHM0FiZ0RDT2ZZc3hwUWtG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diN1BsOHFWNEczQWJnRENPZllzeHBRa0Z0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTRDRi9EOEYzQUNBQ0NDOEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRH M0FiZ0RDT2ZZc3hwUWtGdEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJGiSkPvLdnBlmGuEX8yFb5hLO7P8PftUEpUQaogmfKMoidaPxiTtEMXgHHE5 Tz3kagE4hIOVqOL3nEx97MCxr0cJ/POaqzF9bwSbV3OlKkP2WOaPavvf9lb6zOyw sT3B6uGDyf+nRohYritnhi3CN0yvbT1CPXCkTp+c82eYThURuuGrUgahWg23riV6 QeOwLW/abwRVvXbBcuGAevrHb2ig8j5B7+VU8OOkCMxGZ7XjyOM+nHvZajsF18zT h04Wnj4MbMdT1x/7v6P7x6iNN2Um+ps7y7MvEkFVqegTgkSloZlYedugaUmz4uRe 2iLOMGcfwKhvIoWG9UJ0PVnA2A== -----END CERTIFICATE-----Generated at Mon Mar 2 00:35:32 2026 by rpki-client