$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft File: poNjJUbxoQeEvBpP9voLvmzsLU4.mft (raw, json) Hash identifier: NxyQ6UioJ09EYizsB+HW+3fb1WdqYt+2OpuP+GrVjK4= Subject key identifier: 7E:61:21:8F:C7:A8:E8:02:54:B1:FD:43:A3:62:1E:42:86:CE:31:98 Authority key identifier: A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E Certificate issuer: /CN=A91EF547/serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E Certificate serial: 0442 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft Manifest number: 0434 Signing time: Mon 02 Mar 2026 01:09:47 +0000 Manifest this update: Mon 02 Mar 2026 01:09:45 +0000 Manifest next update: Mon 09 Mar 2026 01:09:45 +0000 Files and hashes: 1: poNjJUbxoQeEvBpP9voLvmzsLU4.crl (hash: /RU5laglz5rplpuLWF/Zf56yMoDpfV3Rn17b8oxG4Ug=) 2: 6246B1F2609A11EDAAF70C26C4F9AE02.roa (hash: BOEExBy+QaPnsKDJ+gbhFQuFa7d7NxoUneMKG9j7QtI=) 3: 636B090C609A11EDAAF70C26C4F9AE02.roa (hash: G+lt/1Mwh8N7G8KWZS1xUI3dDM2zaitfuprZkeWdjHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1090 (0x442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF547, serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E Validity Not Before: Mar 2 01:09:45 2026 GMT Not After : Mar 9 01:09:45 2026 GMT Subject: CN=69a4e35a-7039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:81:3b:c5:b3:9e:cf:21:47:73:01:6f:3e:36: 9f:cf:e0:23:8b:9a:bf:4e:79:02:e8:31:fd:43:56: 15:54:c9:82:49:ea:27:f6:3f:54:2f:42:55:04:5b: e5:b3:b7:1d:2d:c1:66:eb:69:42:9d:5c:24:81:36: 01:26:7a:59:5a:ef:ae:7d:51:92:ea:92:e9:52:d5: 58:ac:d5:e1:ba:75:57:fc:f3:41:c3:ed:14:da:3b: 9f:ea:61:5e:e9:9f:7c:70:29:35:75:e4:b0:67:06: 3a:9f:90:fd:9a:15:ea:a9:85:37:ae:8c:db:fb:73: 75:17:0e:ed:d9:90:f7:73:34:d3:cb:08:26:6c:51: 3c:55:51:de:42:07:0b:8c:c7:60:6d:81:5a:3f:df: fb:0f:7f:cf:38:2f:99:67:31:a2:2c:e5:19:17:9d: bd:68:73:44:9d:f2:ba:b2:ef:15:53:cf:3a:8d:ff: da:3e:dc:a7:49:4e:d7:3d:48:fc:65:f8:5c:0a:1a: d9:f7:a7:3d:4e:7f:ae:5d:09:e1:00:f4:c9:06:6a: 4e:f2:99:e8:7b:64:ef:7f:ab:19:b4:3f:01:77:ce: 89:56:cc:b0:8e:fc:4a:06:26:d5:c5:80:88:78:98: 1d:65:74:e1:23:45:a9:16:53:11:d2:0e:37:87:8c: b5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:61:21:8F:C7:A8:E8:02:54:B1:FD:43:A3:62:1E:42:86:CE:31:98 X509v3 Authority Key Identifier: keyid:A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:8a:d5:0a:6d:0d:93:c9:ff:2e:d9:91:fb:24:df:03:bc:5f: 56:72:c0:92:68:1d:97:84:46:38:bc:1c:eb:5d:22:6d:d5:26: 2c:a8:84:4e:d0:95:30:3a:7d:e8:cd:31:4f:79:45:20:d6:d2: 80:f7:4f:30:e1:fc:2e:30:fe:0c:ee:7d:42:13:96:a0:a1:d2: 57:37:8b:79:d6:7f:47:12:ce:6d:20:01:44:65:ed:a5:84:cc: d0:00:1f:1e:30:c2:e9:4c:98:40:1f:30:43:81:f6:f7:b6:e3: d3:d6:56:6c:37:6d:20:e8:d0:c6:7b:f6:05:c5:d5:84:6c:88: 7f:3c:07:a0:ba:b8:4e:6f:ea:de:fa:02:9a:da:6c:e2:88:ec: e9:10:f1:07:47:7a:5f:da:cf:31:02:04:b2:1b:ea:c7:03:66: c4:62:2c:16:fd:60:63:6b:d4:57:8b:82:20:09:25:64:fa:ea: 3f:6d:ec:35:97:64:c4:c4:1c:4c:13:48:13:72:31:2d:41:5a: 57:2e:3b:e1:fb:7d:4a:b6:3f:43:ff:99:cc:91:88:35:8b:80: 8d:1f:90:55:9d:db:6f:a8:d8:7b:e4:16:42:c5:bf:40:31:b5: 7e:fd:97:0f:05:0f:1c:71:48:b5:30:61:d7:69:1a:96:0c:be: 84:69:d8:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NDcxMTAvBgNVBAUTKEE2ODM2MzI1NDZGMUExMDc4NEJDMUE0RkY2RkEwQkJF NkNFQzJENEUwHhcNMjYwMzAyMDEwOTQ1WhcNMjYwMzA5MDEwOTQ1WjAYMRYwFAYD VQQDEw02OWE0ZTM1YS03MDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlYE7xbOezyFHcwFvPjafz+Aji5q/TnkC6DH9Q1YVVMmCSeon9j9UL0JVBFvl s7cdLcFm62lCnVwkgTYBJnpZWu+ufVGS6pLpUtVYrNXhunVX/PNBw+0U2juf6mFe 6Z98cCk1deSwZwY6n5D9mhXqqYU3rozb+3N1Fw7t2ZD3czTTywgmbFE8VVHeQgcL jMdgbYFaP9/7D3/POC+ZZzGiLOUZF529aHNEnfK6su8VU886jf/aPtynSU7XPUj8 ZfhcChrZ96c9Tn+uXQnhAPTJBmpO8pnoe2Tvf6sZtD8Bd86JVsywjvxKBibVxYCI eJgdZXThI0WpFlMR0g43h4y1HwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH5hIY/H qOgCVLH9Q6NiHkKGzjGYMB8GA1UdIwQYMBaAFKaDYyVG8aEHhLwaT/b6C75s7C1O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU0Ny82MjZFMTA5NDk4 QzcxMUVDODZBMDA5NDlDNEY5QUUwMi9wb05qSlVieG9RZUV2QnBQOXZvTHZtenNM VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvTmpKVWJ4b1FlRXZCcFA5dm9Mdm16c0xVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU0Ny82MjZFMTA5NDk4QzcxMUVDODZBMDA5NDlDNEY5QUUwMi9wb05qSlVieG9R ZUV2QnBQOXZvTHZtenNMVTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGYrVCm0Nk8n/LtmR+yTfA7xfVnLAkmgdl4RGOLwc610ibdUmLKiETtCVMDp9 6M0xT3lFINbSgPdPMOH8LjD+DO59QhOWoKHSVzeLedZ/RxLObSABRGXtpYTM0AAf HjDC6UyYQB8wQ4H297bj09ZWbDdtIOjQxnv2BcXVhGyIfzwHoLq4Tm/q3voCmtps 4ojs6RDxB0d6X9rPMQIEshvqxwNmxGIsFv1gY2vUV4uCIAklZPrqP23sNZdkxMQc TBNIE3IxLUFaVy474ft9SrY/Q/+ZzJGINYuAjR+QVZ3bb6jYe+QWQsW/QDG1fv2X DwUPHHFItTBh12kalgy+hGnYoQ== -----END CERTIFICATE-----Generated at Mon Mar 2 08:07:12 2026 by rpki-client