$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft File: DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft (raw, json) Hash identifier: k4wnfeLHnVVYPTecfBZchcBjamJG5tSH57y5MXlCp0I= Subject key identifier: 5B:B2:D0:D8:A1:96:54:5A:5D:68:B8:AE:A3:F6:B3:7D:9D:95:EB:79 Authority key identifier: 0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6 Certificate issuer: /CN=A91F2C07/serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft Manifest number: A1 Signing time: Sun 01 Mar 2026 08:34:35 +0000 Manifest this update: Sun 01 Mar 2026 08:34:34 +0000 Manifest next update: Sun 08 Mar 2026 08:34:34 +0000 Files and hashes: 1: DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl (hash: NGFWZ1AS+NW/raVG4P76JSMNOc592pgKar1VvxC6vrg=) 2: 6028335E86F911F084A9FF7FC4F9AE02.roa (hash: Tf+58DskyuKcNrsQ4r3ooxgX47hlH0wcibKiamYc6IA=) 3: FDD4FA341E6111F0B8D45B79C4F9AE02.roa (hash: v7HNEpVU0ZSJ+pYu3658FLrBTtMxCHM73asvlQOtkZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2C07, serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6 Validity Not Before: Mar 1 08:34:34 2026 GMT Not After : Mar 8 08:34:34 2026 GMT Subject: CN=69a3fa1b-92c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b1:a2:15:7b:ec:5d:f6:c5:cf:1c:b6:e7:72: 17:2a:d1:3f:a5:03:e3:4c:1a:41:71:5e:6d:13:a1: eb:b7:63:c4:d3:c8:a3:92:5e:43:cb:49:9a:20:42: 03:49:42:e7:47:a6:4d:2a:bb:8b:2e:27:e6:c9:ec: 97:9d:c3:2d:2a:6e:3a:20:e8:6a:bb:e3:4f:58:4a: 39:14:d9:46:01:a4:c1:2f:03:80:50:6e:f4:00:7c: d5:45:46:6c:2c:51:a5:27:17:51:66:87:d2:5a:0d: 79:c5:89:0c:f4:fc:b6:52:28:cd:d1:85:f3:83:7b: 95:a0:5e:c6:6d:70:03:11:42:7e:c0:f0:21:d0:d4: ba:68:7f:3d:7e:cb:95:90:b9:ba:ea:c2:d1:ad:37: 3e:43:34:9a:78:44:f9:ae:d5:d2:3c:2b:5c:3b:92: e4:6b:61:6d:37:25:2e:0e:c9:6b:e1:1c:ec:43:39: 66:41:03:c9:8a:08:e9:fb:27:94:71:2a:5a:13:da: 4e:48:8b:ec:2e:9c:15:82:aa:3c:f2:ce:b3:5f:a6: 62:e4:b4:48:55:d7:76:87:c2:78:12:75:ae:78:e7: 08:a3:f5:99:78:37:b9:0e:84:c9:12:6f:3f:88:e9: 30:41:ea:30:a2:9f:76:60:c9:6c:6c:76:d9:ba:a8: af:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B2:D0:D8:A1:96:54:5A:5D:68:B8:AE:A3:F6:B3:7D:9D:95:EB:79 X509v3 Authority Key Identifier: keyid:0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ca:46:e1:d3:0d:fb:c5:43:43:81:23:b0:5e:5b:26:a0:9c: 62:4b:0c:38:4f:61:bb:9c:cd:58:b2:ce:2d:49:89:b9:87:02: c7:3f:52:53:1b:83:c1:bc:32:6d:3e:8a:76:82:13:3b:47:19: be:68:50:78:0f:67:08:b1:03:25:3e:05:29:85:c3:aa:ba:09: 43:ba:48:d6:fa:a0:23:08:83:bb:e0:af:80:de:f6:05:f9:97: f2:05:ae:49:c2:ec:bd:63:1a:0b:08:84:55:73:41:9f:4f:f8: e4:18:89:7a:0a:46:db:0a:a1:7e:19:9d:49:ea:65:20:27:31: b3:9d:1f:2e:b3:f8:d4:51:e7:ac:cc:c9:cd:d5:29:46:ab:b7: 29:1d:86:80:0e:fc:c7:54:2e:a8:18:2f:53:83:4f:e6:2f:72: cc:14:88:f2:6b:10:b0:52:e8:e2:70:39:2f:98:aa:22:f8:3c: d5:df:e3:b3:75:c7:66:e9:4b:02:df:3a:7e:13:0c:09:73:14: 5c:5b:45:8c:3d:04:73:25:78:41:61:38:68:f4:2f:7d:f0:e3: fc:06:02:e6:9e:2d:fc:04:a3:b3:eb:77:ec:39:d2:c1:fa:2f: 08:d8:81:f5:c7:c5:1f:dd:2a:1e:e3:84:88:e1:fa:22:1c:11: 71:0a:0c:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJDMDcxMTAvBgNVBAUTKDBDRTA2MEMyRTQzMEREODUxODEwQzlGMjBGRUMxQkEy MTE5OUUzRDYwHhcNMjYwMzAxMDgzNDM0WhcNMjYwMzA4MDgzNDM0WjAYMRYwFAYD VQQDEw02OWEzZmExYi05MmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrGiFXvsXfbFzxy253IXKtE/pQPjTBpBcV5tE6Hrt2PE08ijkl5Dy0maIEID SULnR6ZNKruLLifmyeyXncMtKm46IOhqu+NPWEo5FNlGAaTBLwOAUG70AHzVRUZs LFGlJxdRZofSWg15xYkM9Py2UijN0YXzg3uVoF7GbXADEUJ+wPAh0NS6aH89fsuV kLm66sLRrTc+QzSaeET5rtXSPCtcO5Lka2FtNyUuDslr4RzsQzlmQQPJigjp+yeU cSpaE9pOSIvsLpwVgqo88s6zX6Zi5LRIVdd2h8J4EnWueOcIo/WZeDe5DoTJEm8/ iOkwQeowop92YMlsbHbZuqivbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFuy0Nih llRaXWi4rqP2s32dlet5MB8GA1UdIwQYMBaAFAzgYMLkMN2FGBDJ8g/sG6IRmePW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkMwNy9BNzc0QTlDRTFF NjAxMUYwQjdEQzc2NTRDNEY5QUUwMi9ET0Jnd3VRdzNZVVlFTW55RC13Ym9oR1o0 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPQmd3dVF3M1lVWUVNbnlELXdib2hHWjQ5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkMwNy9BNzc0QTlDRTFFNjAxMUYwQjdEQzc2NTRDNEY5QUUwMi9ET0Jnd3VRdzNZ VVlFTW55RC13Ym9oR1o0OVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW8pG4dMN+8VDQ4EjsF5bJqCcYksMOE9hu5zNWLLOLUmJuYcCxz9SUxuDwbwy bT6KdoITO0cZvmhQeA9nCLEDJT4FKYXDqroJQ7pI1vqgIwiDu+CvgN72BfmX8gWu ScLsvWMaCwiEVXNBn0/45BiJegpG2wqhfhmdSeplICcxs50fLrP41FHnrMzJzdUp Rqu3KR2GgA78x1QuqBgvU4NP5i9yzBSI8msQsFLo4nA5L5iqIvg81d/js3XHZulL At86fhMMCXMUXFtFjD0EcyV4QWE4aPQvffDj/AYC5p4t/ASjs+t37DnSwfovCNiB 9cfFH90qHuOEiOH6IhwRcQoMAQ== -----END CERTIFICATE-----Generated at Mon Mar 2 07:33:56 2026 by rpki-client