$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft File: hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft (raw, json) Hash identifier: 5XgY0HomZyFS3v9Zdo+Ftmi10aWNbtZPcOJBMInZMcM= Subject key identifier: DE:36:F8:6D:A0:F7:F0:ED:CB:6F:59:E6:79:B0:1C:FB:CA:F7:11:E7 Authority key identifier: 84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 Certificate issuer: /CN=A91F4091/serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft Manifest number: 0147 Signing time: Sun 01 Mar 2026 06:11:04 +0000 Manifest this update: Sun 01 Mar 2026 06:11:04 +0000 Manifest next update: Sun 08 Mar 2026 06:11:04 +0000 Files and hashes: 1: hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl (hash: lBXohikJP3mfykX7LEUa+DKGEhOF18UQqmrI4ALrKFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:11:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4091, serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Validity Not Before: Mar 1 06:11:04 2026 GMT Not After : Mar 8 06:11:04 2026 GMT Subject: CN=69a3d878-2b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9c:c9:9f:44:21:a0:c4:11:02:c8:79:db:15: 02:fe:ee:65:3b:48:3a:35:50:d5:f9:5c:82:55:e3: ac:39:2b:31:48:dc:e8:98:2d:fe:f1:c6:b9:21:3f: 44:3b:e7:12:0f:27:c4:17:97:e4:c2:d0:08:4d:4a: 7f:1e:37:f8:d1:9f:84:51:f0:01:e7:6a:81:ce:55: 8b:68:59:ff:3b:74:0a:cb:6b:86:62:0f:99:c4:df: 2b:9f:9c:70:c7:80:a6:bb:84:03:1c:76:d1:bc:3a: 13:11:92:1d:90:26:b5:9f:86:04:a1:97:c0:8b:f5: a3:0f:cf:ef:29:7b:c7:4a:e1:93:f3:dd:3b:52:57: f4:10:94:40:82:d5:87:5b:15:6e:f0:89:52:29:6f: 9c:0b:c4:2e:49:b9:73:a5:79:f7:7e:af:d2:67:9f: 28:e6:3c:c8:6b:58:31:e4:a5:3f:2c:a3:43:48:ce: ba:16:f9:69:af:d2:94:1a:79:58:aa:08:8a:3c:9b: 07:9a:b0:12:0c:77:00:26:3b:d5:88:66:64:66:41: 13:2a:09:4b:37:0c:d6:c1:7d:b3:cf:4a:3e:2b:6e: a6:9d:bb:17:b8:d3:9c:e3:c0:58:59:9e:cd:c0:48: f5:4b:ec:93:bd:05:fd:72:16:70:5a:51:ed:13:ee: fb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:36:F8:6D:A0:F7:F0:ED:CB:6F:59:E6:79:B0:1C:FB:CA:F7:11:E7 X509v3 Authority Key Identifier: keyid:84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e5:ea:0a:46:ab:ac:0f:b0:72:f4:87:58:c7:35:42:ba:b2: 3a:c3:72:51:8f:09:db:48:f9:77:e3:e6:f0:b5:4e:1e:cf:a4: 15:4f:ea:c1:77:ae:f3:ec:ab:47:5b:ea:eb:50:fa:4c:e7:1d: 87:40:57:ac:f2:1f:8e:a2:29:00:18:d1:7a:4f:ee:86:1e:26: 4e:1c:26:f0:94:ce:57:ac:34:c4:1d:92:96:f9:cf:c3:92:f6: dc:97:6d:29:fe:7a:3d:53:14:55:d2:be:14:f2:f8:6f:8c:fb: 16:12:0e:03:ae:67:d0:dc:c8:80:2c:f3:5e:9b:35:21:74:f9: 36:3c:1f:9e:ea:ff:34:b6:26:6e:53:94:99:b7:38:53:c5:1f: 69:64:48:37:c6:d8:b7:41:06:95:65:b3:3b:b6:7e:e6:d9:e6: 90:ce:78:22:13:49:99:dd:f4:82:de:62:32:71:b7:24:5c:59: 94:b6:51:bf:2e:a2:ee:1d:64:5e:76:12:29:e0:2c:b8:29:f4: 5c:db:78:00:7b:44:61:4b:de:b2:3d:66:b7:99:8d:ec:b3:66: 4b:cd:00:87:01:53:ea:f1:b4:dd:58:d7:cc:bb:0b:77:e8:a0: e0:65:b1:21:0d:85:82:e4:f0:ef:62:45:b4:4e:14:43:81:1f: 62:14:83:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQwOTExMTAvBgNVBAUTKDg0NTlGQjcyOTBENzRBOUJDRTI2MEUzRkFCNjA1RDdG RDgzMjQ5MzEwHhcNMjYwMzAxMDYxMTA0WhcNMjYwMzA4MDYxMTA0WjAYMRYwFAYD VQQDEw02OWEzZDg3OC0yYjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pzJn0QhoMQRAsh52xUC/u5lO0g6NVDV+VyCVeOsOSsxSNzomC3+8ca5IT9E O+cSDyfEF5fkwtAITUp/Hjf40Z+EUfAB52qBzlWLaFn/O3QKy2uGYg+ZxN8rn5xw x4Cmu4QDHHbRvDoTEZIdkCa1n4YEoZfAi/WjD8/vKXvHSuGT8907Ulf0EJRAgtWH WxVu8IlSKW+cC8QuSblzpXn3fq/SZ58o5jzIa1gx5KU/LKNDSM66Fvlpr9KUGnlY qgiKPJsHmrASDHcAJjvViGZkZkETKglLNwzWwX2zz0o+K26mnbsXuNOc48BYWZ7N wEj1S+yTvQX9chZwWlHtE+77TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN42+G2g 9/Dty29Z5nmwHPvK9xHnMB8GA1UdIwQYMBaAFIRZ+3KQ10qbziYOP6tgXX/YMkkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDA5MS82NTIxQTBGMDFE OUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNwdk9KZzRfcTJCZGY5Z3lT VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hGbjdjcERYU3B2T0pnNF9xMkJkZjlneVNURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDA5MS82NTIxQTBGMDFEOUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNw dk9KZzRfcTJCZGY5Z3lTVEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP+XqCkarrA+wcvSHWMc1QrqyOsNyUY8J20j5d+Pm8LVOHs+kFU/qwXeu8+yr R1vq61D6TOcdh0BXrPIfjqIpABjRek/uhh4mThwm8JTOV6w0xB2SlvnPw5L23Jdt Kf56PVMUVdK+FPL4b4z7FhIOA65n0NzIgCzzXps1IXT5Njwfnur/NLYmblOUmbc4 U8UfaWRIN8bYt0EGlWWzO7Z+5tnmkM54IhNJmd30gt5iMnG3JFxZlLZRvy6i7h1k XnYSKeAsuCn0XNt4AHtEYUvesj1mt5mN7LNmS80AhwFT6vG03VjXzLsLd+ig4GWx IQ2FguTw72JFtE4UQ4EfYhSDhw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:28:52 2026 by rpki-client