$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft File: mnPxqRn79GyHLjiAWxZQtfiCdtM.mft (raw, json) Hash identifier: wGpihOGHHUr9aZrLRFRpNBFn9vqDTTvptt35EI0KoK8= Subject key identifier: 0A:D9:EC:6E:C9:A3:DF:63:7F:73:9A:F7:20:B6:11:F8:B0:D8:9E:DC Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Certificate serial: 11F1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft Manifest number: 0D81 Signing time: Mon 02 Mar 2026 00:00:16 +0000 Manifest this update: Mon 02 Mar 2026 00:00:14 +0000 Manifest next update: Mon 09 Mar 2026 00:00:14 +0000 Files and hashes: 1: mnPxqRn79GyHLjiAWxZQtfiCdtM.crl (hash: HeJMoDGeaDIvB0BG5jggRV3NmP8PushxzdX0KFgvnqI=) 2: 24B754BA9B7911EFBA9A2A42C4F9AE02.roa (hash: nYeFBOsuOa+AhwOe+QjEdtDHW5x1Jxsma/8+kniQAXk=) 3: A173B894112711F0845DF16FC4F9AE02.roa (hash: G6+GS22xNwr0Km9vx99x7wOcMdZwDFcolP4ZXOu6yf4=) 4: 8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa (hash: 9kr7YRweIjs9sYz5LEa5FyxtFuVknS+hpV3R4t44fNs=) 5: 6BE346006D1A11F0B1F1074DC4F9AE02.roa (hash: B6cIG1afbkG3vI1TqciNvobQif79q4lJ3Y9WuIuXm0U=) 6: F7E266FEDA5211F09C836FE292D3641D.roa (hash: cGDK0o7QZlPNPAFr4dfh+NVJSW7tkzbeeXcZE45hJYI=) 7: 5C2A5AE670FD11F08583BE3AC4F9AE02.roa (hash: 2AJYc+N2PADxY4y49OSZDcckeuGN7xHXkNXTwPuT8fs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4593 (0x11f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Validity Not Before: Mar 2 00:00:14 2026 GMT Not After : Mar 9 00:00:14 2026 GMT Subject: CN=69a4d310-03d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:13:73:59:47:3d:87:ef:bb:2d:09:4b:17:c8: 70:4e:d8:42:09:67:42:c2:af:51:4d:24:34:a3:62: 29:9b:98:b5:fb:63:2c:ab:af:22:ae:f4:04:78:38: 8d:6f:5f:5a:00:a1:4c:91:95:ee:c1:04:2b:ba:ff: 09:e7:80:86:8e:9b:de:90:0e:15:e9:bb:31:65:be: 57:93:1b:45:65:e1:1b:b1:d7:23:eb:b5:6a:4d:bd: ea:1a:26:02:a8:a4:cb:52:2b:db:1f:c2:b6:23:c8: c4:14:c6:57:e0:4c:2e:69:05:29:9e:d9:fd:4b:90: 19:8e:02:cd:7e:c4:17:d8:b8:4c:b2:f6:5f:19:18: 9d:01:e9:56:bf:e5:54:33:51:1a:d4:5f:4e:c4:27: 85:21:6e:d8:07:c9:a4:26:a5:dd:db:8a:9e:21:02: d4:6d:dc:1e:7c:ff:f7:39:c9:5c:ca:f8:f0:f4:3f: 39:68:7f:01:64:92:54:9a:de:e9:28:cc:0e:93:98: cc:13:4e:7b:7f:a1:0e:38:dc:da:45:56:2a:66:a1: e6:5b:7e:9d:30:33:31:67:91:09:af:90:c3:ef:45: a5:52:5e:f5:6c:d5:7a:4f:8b:db:b7:9e:b2:b9:d1: b5:f7:76:d5:a5:6b:ae:9f:fc:78:19:08:38:df:23: 1e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D9:EC:6E:C9:A3:DF:63:7F:73:9A:F7:20:B6:11:F8:B0:D8:9E:DC X509v3 Authority Key Identifier: keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:3a:66:41:02:b9:4b:d5:7e:bf:51:37:25:86:05:b9:f8:60: 61:6f:32:4b:43:97:45:29:af:31:5e:74:08:32:59:6d:d4:d9: ba:61:1f:c7:e7:8e:ec:aa:0e:c3:ff:f0:9f:93:05:76:d0:a0: 01:d8:5c:9a:fe:16:ce:36:bb:e0:d3:a7:72:2f:b4:c7:86:99: f8:37:81:29:36:b3:7c:c9:10:8f:95:34:c3:e1:74:f9:53:90: 81:89:6c:de:75:0a:a3:40:ac:e6:54:f0:00:75:07:b2:4f:89: ed:ac:3e:d7:67:65:22:f4:3f:93:00:a6:09:fc:ed:20:10:93: d9:68:3a:a6:64:7b:b5:78:ad:d4:7b:4f:f0:97:c7:83:9d:81: 15:be:98:20:f2:2f:90:aa:7a:26:94:0f:22:ca:a9:c8:bd:48: 6d:9b:7c:c8:d4:46:6f:8a:87:00:ac:95:13:c4:b9:65:b9:da: 7f:d5:24:1b:4a:34:ce:f3:6b:ab:31:f1:38:d2:2f:06:5b:03: 67:f9:54:00:89:2e:05:2d:88:b0:09:a3:5b:a4:57:7b:37:22: 81:6e:3e:6e:78:ff:fb:5e:e0:cd:81:66:aa:ef:09:c8:c1:f3: 4e:d9:91:9d:4f:fe:f7:ec:f4:94:41:ad:5f:82:10:2a:c2:91: 11:b1:fa:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1 Rjg4Mjc2RDMwHhcNMjYwMzAyMDAwMDE0WhcNMjYwMzA5MDAwMDE0WjAYMRYwFAYD VQQDEw02OWE0ZDMxMC0wM2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhNzWUc9h++7LQlLF8hwTthCCWdCwq9RTSQ0o2Ipm5i1+2Msq68irvQEeDiN b19aAKFMkZXuwQQruv8J54CGjpvekA4V6bsxZb5XkxtFZeEbsdcj67VqTb3qGiYC qKTLUivbH8K2I8jEFMZX4EwuaQUpntn9S5AZjgLNfsQX2LhMsvZfGRidAelWv+VU M1Ea1F9OxCeFIW7YB8mkJqXd24qeIQLUbdwefP/3Oclcyvjw9D85aH8BZJJUmt7p KMwOk5jME057f6EOONzaRVYqZqHmW36dMDMxZ5EJr5DD70WlUl71bNV6T4vbt56y udG193bVpWuun/x4GQg43yMenwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFArZ7G7J o99jf3Oa9yC2Efiw2J7cMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjEzNC81N0IzRTBCQ0MyQTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlH eUhMamlBV3haUXRmaUNkdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzjpmQQK5S9V+v1E3JYYFufhgYW8yS0OXRSmvMV50CDJZbdTZumEfx+eO7KoO w//wn5MFdtCgAdhcmv4Wzja74NOnci+0x4aZ+DeBKTazfMkQj5U0w+F0+VOQgYls 3nUKo0Cs5lTwAHUHsk+J7aw+12dlIvQ/kwCmCfztIBCT2Wg6pmR7tXit1HtP8JfH g52BFb6YIPIvkKp6JpQPIsqpyL1IbZt8yNRGb4qHAKyVE8S5Zbnaf9UkG0o0zvNr qzHxONIvBlsDZ/lUAIkuBS2IsAmjW6RXezcigW4+bnj/+17gzYFmqu8JyMHzTtmR nU/+9+z0lEGtX4IQKsKREbH6Og== -----END CERTIFICATE-----Generated at Mon Mar 2 10:22:10 2026 by rpki-client