$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft File: vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft (raw, json) Hash identifier: qFeGyKPfCczjYU/zC5Khoi48UlvEdyIs+fB9d9BXXiA= Subject key identifier: D1:40:8C:68:50:97:20:15:5F:C8:79:FA:E7:2D:1F:31:E1:12:77:FD Authority key identifier: BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F Certificate issuer: /CN=A91F4957/serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft Manifest number: 01F4 Signing time: Mon 02 Mar 2026 01:45:30 +0000 Manifest this update: Mon 02 Mar 2026 01:45:28 +0000 Manifest next update: Mon 09 Mar 2026 01:45:28 +0000 Files and hashes: 1: vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl (hash: GrNRTFbDHPrvxDj3RuwFdM4PSIGY3M/9TO6ctDlZwQk=) 2: 60B707FA1AEA11EE92BEA24CC4F9AE02.roa (hash: PcMogtfn+YPuITurYeyK8uNtV3C3XT0ngOP7RTAUjf8=) 3: 4231A1AA1B1711EEA5566A23C4F9AE02.roa (hash: jEhZmuHcoeruFIR0Y77hz4lKfuTb1W/btI0kxlrhND0=) 4: F0237E941B1911EE9DFF2942C4F9AE02.roa (hash: qzHIk1toZb4KKScZkuD/1Cu6hTkWnTtVmDyS3VXcG9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:45:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4957, serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Validity Not Before: Mar 2 01:45:28 2026 GMT Not After : Mar 9 01:45:28 2026 GMT Subject: CN=69a4ebba-0202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:56:20:41:de:2f:d1:0e:7f:f8:b8:55:87:6b: 5b:f2:8c:77:f8:96:a1:8d:41:9f:56:ae:d9:18:58: fc:b5:10:da:db:0d:b6:bb:5c:7e:b4:36:a9:ec:6b: 7b:08:23:1c:af:06:e9:fe:f5:02:0a:9d:68:09:63: a6:96:51:1c:89:c0:a1:1f:9e:10:99:51:b4:8c:f8: ca:a9:59:53:54:1d:c9:c2:c2:97:f3:61:62:33:4d: c3:97:b6:cf:b0:f6:a7:c8:24:3d:5a:7c:2a:4e:13: 51:df:01:83:57:55:27:ca:9d:b6:b8:e3:5c:af:d4: b4:84:c6:35:6a:27:7c:3b:a9:31:09:d0:8a:ce:17: 2f:fd:e8:0b:e1:81:b6:3d:8b:ab:0f:34:72:7f:76: 2d:08:15:0f:74:82:df:0d:c9:fd:34:72:8d:ad:40: c7:d5:b2:69:e7:d0:31:56:d3:5f:91:81:89:74:ef: 76:73:59:81:4b:c6:99:85:ee:c1:59:be:94:02:2e: a7:77:8c:18:a6:4a:f5:ce:f8:09:a9:7d:e7:b1:65: 60:da:80:1a:55:be:67:23:f4:61:ee:eb:ae:69:f1: 96:a0:ae:77:2a:4b:5a:d9:e1:17:8f:dc:64:55:c3: a7:1c:64:4f:e3:37:39:13:ed:03:4f:76:d2:3b:da: d2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:40:8C:68:50:97:20:15:5F:C8:79:FA:E7:2D:1F:31:E1:12:77:FD X509v3 Authority Key Identifier: keyid:BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ee:92:50:49:d5:ed:ae:94:4b:f0:9a:ed:77:59:1d:7f:c8: 54:9e:da:94:08:bb:7d:21:58:06:d0:14:ed:ef:c5:c5:bd:ad: 1b:55:4e:05:1a:14:6c:8f:73:0c:94:1d:e1:e4:38:7f:b9:02: af:30:a0:7b:fd:d8:24:e5:ca:cb:1a:ab:0f:be:e1:c5:c0:2d: e1:75:cb:1c:c1:15:41:be:03:98:c7:10:e3:04:a2:40:dc:16: 7e:c7:2f:78:c4:78:ea:aa:db:54:8f:8a:a2:99:09:32:13:56: 8a:66:ad:17:17:24:3f:69:88:38:a2:d1:a0:84:5e:68:76:61: 60:6a:a9:24:0d:2e:82:c1:47:03:ac:d9:d0:86:78:ae:5f:43: 5c:bd:0b:54:06:b0:a7:be:2a:2a:c0:f2:dc:a1:79:e5:cd:40: 86:52:25:d4:bf:2b:75:58:19:23:8d:5b:33:8c:00:3d:56:64: 9f:ae:50:be:3f:2a:42:c6:c0:24:5e:cb:21:bd:d1:f1:72:e1: 77:f8:ac:21:c2:aa:31:30:62:59:6d:2c:f6:ac:d1:8a:6c:72: 2b:fb:85:94:f8:82:7f:d4:76:01:08:1f:a2:d0:14:8b:e2:a8: 39:a4:49:0c:74:59:7d:4c:2b:7f:9b:bb:f8:4a:81:d7:77:a6: 9a:0f:07:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NTcxMTAvBgNVBAUTKEJGMkQxQjM5RDNDMkU5QUUwQUE4RkFCOTRCQUM1NDBD QzUyNjUyNEYwHhcNMjYwMzAyMDE0NTI4WhcNMjYwMzA5MDE0NTI4WjAYMRYwFAYD VQQDEw02OWE0ZWJiYS0wMjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1YgQd4v0Q5/+LhVh2tb8ox3+JahjUGfVq7ZGFj8tRDa2w22u1x+tDap7Gt7 CCMcrwbp/vUCCp1oCWOmllEcicChH54QmVG0jPjKqVlTVB3JwsKX82FiM03Dl7bP sPanyCQ9WnwqThNR3wGDV1Unyp22uONcr9S0hMY1aid8O6kxCdCKzhcv/egL4YG2 PYurDzRyf3YtCBUPdILfDcn9NHKNrUDH1bJp59AxVtNfkYGJdO92c1mBS8aZhe7B Wb6UAi6nd4wYpkr1zvgJqX3nsWVg2oAaVb5nI/Rh7uuuafGWoK53Kkta2eEXj9xk VcOnHGRP4zc5E+0DT3bSO9rSuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNFAjGhQ lyAVX8h5+uctHzHhEnf9MB8GA1UdIwQYMBaAFL8tGznTwumuCqj6uUusVAzFJlJP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Ny81NzFCMjIxMDFB RTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZhNEtxUHE1UzZ4VURNVW1V azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z5MGJPZFBDNmE0S3FQcTVTNnhVRE1VbVVrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Ny81NzFCMjIxMDFBRTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZh NEtxUHE1UzZ4VURNVW1VazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbe6SUEnV7a6US/Ca7XdZHX/IVJ7alAi7fSFYBtAU7e/Fxb2tG1VOBRoUbI9z DJQd4eQ4f7kCrzCge/3YJOXKyxqrD77hxcAt4XXLHMEVQb4DmMcQ4wSiQNwWfscv eMR46qrbVI+KopkJMhNWimatFxckP2mIOKLRoIReaHZhYGqpJA0ugsFHA6zZ0IZ4 rl9DXL0LVAawp74qKsDy3KF55c1AhlIl1L8rdVgZI41bM4wAPVZkn65Qvj8qQsbA JF7LIb3R8XLhd/isIcKqMTBiWW0s9qzRimxyK/uFlPiCf9R2AQgfotAUi+KoOaRJ DHRZfUwrf5u7+EqB13emmg8H4w== -----END CERTIFICATE-----Generated at Mon Mar 2 09:05:02 2026 by rpki-client