$ rpki-client -vvf rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft File: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft (raw, json) Hash identifier: nCcZ9wmM+S3d3uOMa4Nv/dNHB69yN4qtnAt41luFn9A= Subject key identifier: 8E:43:51:CF:47:F7:97:16:6D:A5:4A:7F:16:32:8B:8A:2F:8E:CD:9C Authority key identifier: A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B Certificate issuer: /CN=A91E953B/serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft Manifest number: 01BF Signing time: Sun 01 Mar 2026 23:01:53 +0000 Manifest this update: Sun 01 Mar 2026 23:01:53 +0000 Manifest next update: Sun 08 Mar 2026 23:01:53 +0000 Files and hashes: 1: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl (hash: ZeIvP5GI3yEBl1Tc+JdQnl8kBlmkINDErqyFNoXjVSw=) 2: 12E1FD886C9C11EE9F3C5653C4F9AE02.roa (hash: 5SIEytqj/kUtficVvfQzNkbf84VZDuhF0/ee1j7nlyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E953B, serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B Validity Not Before: Mar 1 23:01:53 2026 GMT Not After : Mar 8 23:01:53 2026 GMT Subject: CN=69a4c561-9d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4b:e0:a7:fd:80:ba:03:b6:9b:c0:43:b8:a5: 96:96:4b:67:66:04:94:9d:c0:dc:39:7b:61:3c:26: b4:c3:03:04:87:b3:d6:cd:f0:6c:bc:c4:5e:11:c4: 7a:d0:ac:5f:69:2e:ad:52:84:89:71:46:c2:3d:02: d4:17:a5:03:3e:32:a9:05:15:4e:24:ee:96:55:5b: 6a:58:46:2e:a3:72:a9:5b:84:01:40:f1:08:a1:2f: 15:a7:6d:bb:e4:ab:39:e8:d6:dd:11:eb:01:9a:67: 59:ca:ac:5a:ea:37:df:7c:7b:9f:e3:4e:8a:19:f9: e1:63:dc:21:a8:39:60:56:5f:0f:92:5a:6a:3e:9a: 8b:68:f2:45:16:ff:5e:28:83:e2:bf:08:4c:4f:59: 7a:d0:ce:95:1b:f3:12:45:b6:63:cb:12:d9:ad:ab: af:5e:01:f7:f1:21:0d:70:90:09:59:30:0d:98:54: 29:de:39:15:55:50:e8:7a:81:28:87:76:9c:02:46: c4:68:1d:81:ea:82:60:c5:ea:4a:5a:6a:36:05:82: fe:25:00:22:16:da:e5:30:fa:e0:36:08:fc:29:06: 2d:5f:94:ac:f5:c6:32:66:28:0d:4f:df:8d:3c:0e: e5:8a:66:f6:bc:a6:c9:dd:73:b5:27:43:5d:63:38: a2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:43:51:CF:47:F7:97:16:6D:A5:4A:7F:16:32:8B:8A:2F:8E:CD:9C X509v3 Authority Key Identifier: keyid:A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:24:0f:6b:54:9d:ae:6b:0f:79:a4:87:9f:55:97:18:b0:de: fb:42:e8:d1:ea:0b:fc:b1:0a:6d:19:b2:4e:58:f0:e1:46:e3: 31:50:6d:02:19:49:d8:dc:51:70:42:44:ea:a6:67:a1:5a:d9: b3:31:e8:d1:92:68:cb:6d:55:5a:fb:91:a7:87:f7:07:5d:ea: c7:22:bf:00:52:7c:86:94:ed:b0:38:e3:3f:a7:7e:ce:88:b5: 96:60:40:be:b0:c7:48:f0:0b:20:e9:d3:be:1a:73:a1:c2:07: 55:05:94:d6:39:f0:e2:29:63:36:87:60:81:dd:ac:7d:08:ae: ab:ee:c1:53:3c:51:77:7b:bf:7b:22:ed:ba:c6:e3:e5:4d:f8: 64:b2:48:dc:98:f0:71:3f:c9:a9:73:61:33:c3:39:ad:7a:43: f5:24:01:9d:85:0b:7a:6b:b6:e0:2d:45:9c:c1:1c:b1:e1:ac: 80:9f:7d:b5:cf:01:33:ea:af:3a:50:37:d4:97:24:9a:33:6f: 06:3a:34:6b:cf:2c:13:fc:ed:da:19:22:a7:4a:f5:ea:3a:3d: 1c:32:e9:8f:be:17:25:a8:e7:20:f9:f9:2e:0b:40:c0:c0:9b: 7e:d6:59:5d:de:aa:5b:62:3d:bf:a6:6d:5f:4f:aa:51:3c:01: 70:eb:3f:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1M0IxMTAvBgNVBAUTKEEyMjQzNjg0MjIzRDJDMjVDNkFGMTc2QTVGMDJGQTAy QjI0RjY4MEIwHhcNMjYwMzAxMjMwMTUzWhcNMjYwMzA4MjMwMTUzWjAYMRYwFAYD VQQDEw02OWE0YzU2MS05ZDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0vgp/2AugO2m8BDuKWWlktnZgSUncDcOXthPCa0wwMEh7PWzfBsvMReEcR6 0KxfaS6tUoSJcUbCPQLUF6UDPjKpBRVOJO6WVVtqWEYuo3KpW4QBQPEIoS8Vp227 5Ks56NbdEesBmmdZyqxa6jfffHuf406KGfnhY9whqDlgVl8PklpqPpqLaPJFFv9e KIPivwhMT1l60M6VG/MSRbZjyxLZrauvXgH38SENcJAJWTANmFQp3jkVVVDoeoEo h3acAkbEaB2B6oJgxepKWmo2BYL+JQAiFtrlMPrgNgj8KQYtX5Ss9cYyZigNT9+N PA7limb2vKbJ3XO1J0NdYziiFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI5DUc9H 95cWbaVKfxYyi4ovjs2cMB8GA1UdIwQYMBaAFKIkNoQiPSwlxq8Xal8C+gKyT2gL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTUzQi9DOEQwMzkyMjZD OUExMUVFODVCRkRGNEZDNEY5QUUwMi9vaVEyaENJOUxDWEdyeGRxWHdMNkFySlBh QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29pUTJoQ0k5TENYR3J4ZHFYd0w2QXJKUGFBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTUzQi9DOEQwMzkyMjZDOUExMUVFODVCRkRGNEZDNEY5QUUwMi9vaVEyaENJOUxD WEdyeGRxWHdMNkFySlBhQXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJCQPa1SdrmsPeaSHn1WXGLDe+0Lo0eoL/LEKbRmyTljw4UbjMVBtAhlJ2NxR cEJE6qZnoVrZszHo0ZJoy21VWvuRp4f3B13qxyK/AFJ8hpTtsDjjP6d+zoi1lmBA vrDHSPALIOnTvhpzocIHVQWU1jnw4iljNodggd2sfQiuq+7BUzxRd3u/eyLtusbj 5U34ZLJI3JjwcT/JqXNhM8M5rXpD9SQBnYULemu24C1FnMEcseGsgJ99tc8BM+qv OlA31JckmjNvBjo0a88sE/zt2hkip0r16jo9HDLpj74XJajnIPn5LgtAwMCbftZZ Xd6qW2I9v6ZtX0+qUTwBcOs/4Q== -----END CERTIFICATE-----Generated at Mon Mar 2 10:54:30 2026 by rpki-client