$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft File: g71HreMCJZx1jHTIMLKebzpXc9s.mft (raw, json) Hash identifier: /HFNG+0socw1XswCdeYS3xmyHtrMG6Dv/3ec4P5lUw8= Subject key identifier: 67:32:34:A6:B1:EB:66:A8:1E:E8:22:43:59:8C:0F:13:50:B4:C6:AA Authority key identifier: 83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB Certificate issuer: /CN=A91EC7F2/serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Certificate serial: 126B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft Manifest number: 1250 Signing time: Sat 28 Feb 2026 17:11:21 +0000 Manifest this update: Sat 28 Feb 2026 17:11:20 +0000 Manifest next update: Sat 07 Mar 2026 17:11:20 +0000 Files and hashes: 1: g71HreMCJZx1jHTIMLKebzpXc9s.crl (hash: eiSPo0chczBtVhWF03aSf2EGDUm0Cv1agNqGp09/SpY=) 2: 9D003F28621711E9B8C69E15C4F9AE02.roa (hash: 9dqK7fwX1U+8A9fcOv7N2ng0+RyVg5lfklaoSqiStho=) 3: 09F041C675FB11EAB470A130C4F9AE02.roa (hash: RMsg5QWeiEkRgPY6Tmmzu/lfOLCSCEngacbP0E3B76I=) 4: 9C7048DC621711E9B8C69E15C4F9AE02.roa (hash: xRGejBtSvmSQiXiFTmSi8Viq6cXlkkmhK13khjlMJ6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 17:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4715 (0x126b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC7F2, serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Validity Not Before: Feb 28 17:11:20 2026 GMT Not After : Mar 7 17:11:20 2026 GMT Subject: CN=69a321b8-6a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5c:86:77:cf:21:9c:9e:a9:9f:26:b9:0e:55: 6d:7c:93:eb:ac:3b:7f:b1:30:02:c1:27:d3:b2:1e: 71:1b:1d:b5:2c:2a:48:25:17:24:73:49:83:5a:59: c9:52:2d:8a:6e:23:f4:a9:34:d8:1d:ca:ed:fd:9c: de:c6:10:e6:3c:16:77:0c:1d:13:78:07:a3:09:e6: ba:f6:c4:68:ad:59:d3:ba:ae:f4:05:41:0c:56:95: cb:77:8f:df:23:f0:9c:ea:8a:24:eb:c4:ea:7e:de: 45:63:1b:95:fb:5f:2d:4b:b0:4c:0c:29:88:aa:fe: 7c:6d:4f:1e:d6:f8:3f:d9:02:2c:9e:ad:17:a1:32: 7e:ae:8d:e5:a6:92:e1:ae:f7:c1:19:95:b5:7f:44: 12:11:d6:08:c0:21:31:da:ab:50:48:be:00:69:f1: 8a:c6:35:e9:8f:90:a6:fc:10:6a:3f:c3:8c:c0:1d: 6c:fe:ea:8c:99:49:6b:af:4a:0e:15:ab:ae:47:47: 42:e5:99:87:0e:9d:51:01:28:ff:a6:70:fb:96:84: 1b:fb:d7:ab:55:ec:32:b5:61:62:40:75:c0:49:0d: 01:ee:f6:16:54:84:6c:5a:fc:66:df:1a:84:0b:b6: 26:6c:10:e0:58:bf:c8:89:e0:c8:41:b6:4e:85:65: 59:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:32:34:A6:B1:EB:66:A8:1E:E8:22:43:59:8C:0F:13:50:B4:C6:AA X509v3 Authority Key Identifier: keyid:83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:5a:bc:72:db:a3:a7:dc:0f:5a:b4:56:dd:c6:97:af:4b:bf: 74:bd:f6:3a:87:0c:2c:c5:8b:15:39:78:43:01:8f:db:6d:20: c9:6f:b0:fb:cf:fc:8d:27:a3:7f:35:d1:9d:43:a4:a2:c3:49: 1e:cc:03:dc:1c:43:eb:6f:b4:f7:26:d7:ba:a6:c3:7a:7f:49: 26:89:25:fd:05:2e:6b:20:61:67:30:7a:5f:ec:21:51:17:32: 42:0a:a6:8b:e3:53:d9:70:54:32:3d:2e:67:27:b3:03:d5:e2: 64:94:b4:dc:c8:3c:33:f6:55:ea:eb:1a:6e:bc:1a:f0:11:2d: 28:4a:0f:bb:6f:1f:ba:90:c0:5a:51:1f:1b:32:0b:eb:73:e6: 2e:f4:25:f7:4c:71:5f:1c:2f:32:58:15:78:59:9c:df:45:72: 05:83:a8:ee:9d:19:a1:d1:cb:08:db:c6:ba:2e:56:bf:ac:a1: 54:b5:e3:d3:43:2e:50:df:0b:e2:1c:f6:33:3b:96:dc:2e:2c: 8a:ee:d6:08:a2:f6:74:7b:5a:5e:59:7a:a5:06:77:08:13:6e: ab:e1:2b:cc:0c:2e:8c:59:6f:59:a7:c4:4b:65:13:3f:40:e7: fb:85:fa:03:93:a8:2f:e1:36:cf:6c:7a:b4:f9:e6:45:7d:ac: 76:0d:4c:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM3RjIxMTAvBgNVBAUTKDgzQkQ0N0FERTMwMjI1OUM3NThDNzRDODMwQjI5RTZG M0E1NzczREIwHhcNMjYwMjI4MTcxMTIwWhcNMjYwMzA3MTcxMTIwWjAYMRYwFAYD VQQDDA02OWEzMjFiOC02YTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1yGd88hnJ6pnya5DlVtfJPrrDt/sTACwSfTsh5xGx21LCpIJRckc0mDWlnJ Ui2KbiP0qTTYHcrt/ZzexhDmPBZ3DB0TeAejCea69sRorVnTuq70BUEMVpXLd4/f I/Cc6ook68Tqft5FYxuV+18tS7BMDCmIqv58bU8e1vg/2QIsnq0XoTJ+ro3lppLh rvfBGZW1f0QSEdYIwCEx2qtQSL4AafGKxjXpj5Cm/BBqP8OMwB1s/uqMmUlrr0oO FauuR0dC5ZmHDp1RASj/pnD7loQb+9erVewytWFiQHXASQ0B7vYWVIRsWvxm3xqE C7YmbBDgWL/IieDIQbZOhWVZsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGcyNKax 62aoHugiQ1mMDxNQtMaqMB8GA1UdIwQYMBaAFIO9R63jAiWcdYx0yDCynm86V3Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzdGMi80OEVGRDE3Q0Yx QTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0paeDFqSFRJTUxLZWJ6cFhj OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3MUhyZU1DSlp4MWpIVElNTEtlYnpwWGM5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzdGMi80OEVGRDE3Q0YxQTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0pa eDFqSFRJTUxLZWJ6cFhjOXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAplq8ctujp9wPWrRW3caXr0u/dL32OocMLMWLFTl4QwGP220gyW+w+8/8jSej fzXRnUOkosNJHswD3BxD62+09ybXuqbDen9JJokl/QUuayBhZzB6X+whURcyQgqm i+NT2XBUMj0uZyezA9XiZJS03Mg8M/ZV6usabrwa8BEtKEoPu28fupDAWlEfGzIL 63PmLvQl90xxXxwvMlgVeFmc30VyBYOo7p0ZodHLCNvGui5Wv6yhVLXj00MuUN8L 4hz2MzuW3C4siu7WCKL2dHtaXll6pQZ3CBNuq+ErzAwujFlvWafES2UTP0Dn+4X6 A5OoL+E2z2x6tPnmRX2sdg1Maw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:22:50 2026 by rpki-client