$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft File: P484Yw9NPXDt2eXJHjbsSO-5_WI.mft (raw, json) Hash identifier: oMjFGAH0oZBC/rvkphxNERdClw3/1WH52pYfjJ8KN/Q= Subject key identifier: 10:B2:A0:8A:72:5D:4D:04:27:8C:BD:AD:18:D6:3E:D5:66:88:1A:5C Authority key identifier: 3F:8F:38:63:0F:4D:3D:70:ED:D9:E5:C9:1E:36:EC:48:EF:B9:FD:62 Certificate issuer: /CN=A91E9CD4/serialNumber=3F8F38630F4D3D70EDD9E5C91E36EC48EFB9FD62 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft Manifest number: 40 Signing time: Sun 01 Mar 2026 09:51:26 +0000 Manifest this update: Sun 01 Mar 2026 09:51:26 +0000 Manifest next update: Sun 08 Mar 2026 09:51:26 +0000 Files and hashes: 1: P484Yw9NPXDt2eXJHjbsSO-5_WI.crl (hash: Isrh4S3vQPrChE4cAsuWQSH9Gf7en+GLfOElC7xMfi0=) 2: 6E08B7E2B96111F0B44EA641C4F9AE02.roa (hash: 58sEBeu/Lw41bnGWkn+BoX7gGqJ3oc1042/9t7Bx+7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.crl rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CD4, serialNumber=3F8F38630F4D3D70EDD9E5C91E36EC48EFB9FD62 Validity Not Before: Mar 1 09:51:26 2026 GMT Not After : Mar 8 09:51:26 2026 GMT Subject: CN=69a40c1e-9633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dc:4b:97:5d:53:09:36:48:6c:68:e8:cc:fd: 19:da:e2:3b:84:75:0a:16:dc:f4:ab:13:85:56:6e: ad:8f:c2:d3:87:db:99:b6:a9:13:ae:e6:69:e4:14: 5f:7f:54:d6:0e:87:16:be:e6:53:ed:31:72:96:7c: c0:ba:6e:f1:b4:30:4e:ea:75:e5:89:8a:0e:29:53: 93:77:95:1c:67:00:1e:43:08:27:77:03:ea:65:e8: 97:de:35:8c:c0:7c:66:be:a2:1f:8e:35:15:a6:bc: 6e:f6:de:40:e1:c2:b8:1a:25:e7:ae:f9:77:f1:1c: 11:a0:f2:7f:4d:34:33:87:e1:40:6f:e1:f3:3e:98: b3:b7:98:52:a8:ed:13:7b:cf:b4:cf:6c:a2:37:aa: fd:04:af:98:57:45:55:fc:38:f3:65:e8:d2:43:a9: 86:c8:91:45:9e:04:27:58:b7:62:28:bd:f1:33:aa: 7c:83:23:3c:6e:85:c6:c8:0e:70:38:89:bd:0c:4e: 30:35:e6:1c:89:46:4d:5d:71:2b:26:1c:6b:62:35: 47:5a:94:3c:3b:dc:84:a3:1a:ae:43:3e:4f:27:ff: 69:fb:70:aa:99:2c:fb:ff:be:79:66:eb:5c:8f:1b: c2:65:34:0f:b2:d8:c2:5d:d8:22:1e:08:42:ea:a6: 99:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B2:A0:8A:72:5D:4D:04:27:8C:BD:AD:18:D6:3E:D5:66:88:1A:5C X509v3 Authority Key Identifier: keyid:3F:8F:38:63:0F:4D:3D:70:ED:D9:E5:C9:1E:36:EC:48:EF:B9:FD:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:8c:bf:f8:26:e7:fd:c1:46:f1:55:cd:5d:40:d2:0c:a7:ae: ed:80:6f:51:f5:ce:e4:bb:d2:3d:9c:73:f2:1c:27:22:ba:fe: 35:08:00:21:0c:4d:25:5a:55:c0:9f:fe:36:69:94:84:a8:a8: 00:7e:c7:87:57:5d:22:5c:df:c8:21:03:9a:4b:8d:c6:93:17: 83:4d:b0:2c:ce:53:88:42:38:81:74:d0:72:2e:bb:c3:d2:cf: a1:90:72:73:1c:75:53:68:92:a6:a9:82:ff:75:0f:38:38:a7: 3c:15:a3:2f:0e:83:8b:6a:87:7d:70:4d:2f:1a:ec:dc:f9:66: 20:85:e8:8d:d2:de:95:8b:e2:ea:5a:55:52:88:de:6d:e2:00: eb:90:f6:c7:82:8e:85:77:8e:6b:9a:95:4d:c8:93:28:e3:cf: c4:d4:05:12:5a:1d:b1:e4:ce:fc:32:81:60:28:c9:56:9e:b1: 13:f0:18:cc:9a:cb:db:24:36:21:2f:5a:0f:fb:83:9b:e3:cf: 1c:f9:04:56:07:3c:4d:1d:91:66:85:91:a3:37:e8:18:a7:23: da:62:9b:c3:be:4f:9d:ea:e8:41:57:5a:43:5a:cb:ac:3c:58: bb:00:74:24:94:8f:a1:84:f3:e4:33:a1:38:dd:2b:c3:b2:97: 64:35:95:2f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUNENDExMC8GA1UEBRMoM0Y4RjM4NjMwRjREM0Q3MEVERDlFNUM5MUUzNkVDNDhF RkI5RkQ2MjAeFw0yNjAzMDEwOTUxMjZaFw0yNjAzMDgwOTUxMjZaMBgxFjAUBgNV BAMTDTY5YTQwYzFlLTk2MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy3EuXXVMJNkhsaOjM/Rna4juEdQoW3PSrE4VWbq2PwtOH25m2qROu5mnkFF9/ VNYOhxa+5lPtMXKWfMC6bvG0ME7qdeWJig4pU5N3lRxnAB5DCCd3A+pl6JfeNYzA fGa+oh+ONRWmvG723kDhwrgaJeeu+XfxHBGg8n9NNDOH4UBv4fM+mLO3mFKo7RN7 z7TPbKI3qv0Er5hXRVX8OPNl6NJDqYbIkUWeBCdYt2IovfEzqnyDIzxuhcbIDnA4 ib0MTjA15hyJRk1dcSsmHGtiNUdalDw73ISjGq5DPk8n/2n7cKqZLPv/vnlm61yP G8JlNA+y2MJd2CIeCELqppmNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUELKginJd TQQnjL2tGNY+1WaIGlwwHwYDVR0jBBgwFoAUP484Yw9NPXDt2eXJHjbsSO+5/WIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Q0Q0L0RFNTMxMDgwQjk1 NTExRjA5QTdGNkQ3MUM0RjlBRTAyL1A0ODRZdzlOUFhEdDJlWEpIamJzU08tNV9X SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDQ4NFl3OU5QWER0MmVYSkhqYnNTTy01X1dJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 Q0Q0L0RFNTMxMDgwQjk1NTExRjA5QTdGNkQ3MUM0RjlBRTAyL1A0ODRZdzlOUFhE dDJlWEpIamJzU08tNV9XSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA/jL/4Juf9wUbxVc1dQNIMp67tgG9R9c7ku9I9nHPyHCciuv41CAAhDE0lWlXA n/42aZSEqKgAfseHV10iXN/IIQOaS43GkxeDTbAszlOIQjiBdNByLrvD0s+hkHJz HHVTaJKmqYL/dQ84OKc8FaMvDoOLaod9cE0vGuzc+WYgheiN0t6Vi+LqWlVSiN5t 4gDrkPbHgo6Fd45rmpVNyJMo48/E1AUSWh2x5M78MoFgKMlWnrET8BjMmsvbJDYh L1oP+4Ob488c+QRWBzxNHZFmhZGjN+gYpyPaYpvDvk+d6uhBV1pDWsusPFi7AHQk lI+hhPPkM6E43SvDspdkNZUv -----END CERTIFICATE-----Generated at Mon Mar 2 13:02:12 2026 by rpki-client