$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft File: h25oE78sGBHNEd6ZKBrNRL7A3nM.mft (raw, json) Hash identifier: ajnEGkGWegVbXDwX5Ql7CtubmQCvav4JoIwMpuUidr0= Subject key identifier: 54:F8:33:0E:4E:17:4D:D7:53:7C:4B:5E:91:7C:D9:FA:57:22:93:D6 Authority key identifier: 87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 Certificate issuer: /CN=A91F4FB0/serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft Manifest number: 0176 Signing time: Mon 02 Mar 2026 00:46:12 +0000 Manifest this update: Mon 02 Mar 2026 00:46:10 +0000 Manifest next update: Mon 09 Mar 2026 00:46:10 +0000 Files and hashes: 1: h25oE78sGBHNEd6ZKBrNRL7A3nM.crl (hash: /tTO7SDpf6u/Hfd3v/UEp9yknXoevRQJ41Pt5zx/uC8=) 2: 2EFBFF901C0611EF883D807CC4F9AE02.roa (hash: uc4RYqpjqZuGmSUCE9a97wEXjfj0RfCgzqbAD8ekhMc=) 3: 0B5DBB081C0311EF8B8AB54DC4F9AE02.roa (hash: WQwwG0p66GxjEWNcaSKndoSIUakwMJP7WJLK7nMnWQI=) 4: EEC42F86232311EFAF815012C4F9AE02.roa (hash: o8afSdgZmX58QcVUZe75xNDu09+q2TPxGPAeyh/MOEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FB0, serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Validity Not Before: Mar 2 00:46:10 2026 GMT Not After : Mar 9 00:46:10 2026 GMT Subject: CN=69a4ddd4-3fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:bd:28:6f:ee:6e:22:b3:9c:1b:b6:8d:b9:77: 4a:a6:87:5f:ec:54:9d:2e:41:4b:c4:be:fe:66:39: ca:36:3b:b8:af:b7:25:32:5e:dc:5d:c5:db:0f:ce: c3:a1:bf:82:0e:f6:78:bc:0a:a3:3b:24:75:8d:90: 82:bc:b2:c0:34:66:94:32:c0:27:cd:46:7c:56:77: b6:20:a6:b3:57:86:74:21:b1:8a:9a:12:71:bf:bb: f1:47:31:1a:e4:f6:a9:ef:48:9a:46:46:19:6d:7b: 67:fd:61:57:c6:91:d0:cd:c4:73:80:70:0f:0b:70: 4d:52:c5:ff:c5:6b:b2:31:01:78:15:62:89:ba:ad: e8:a7:a4:e1:2c:fd:48:46:d3:82:bd:0b:22:c8:bb: bc:19:ea:38:d5:a9:18:98:4b:5f:5c:3b:1c:2a:49: 8d:f8:b9:64:94:98:ea:fd:9b:6a:bf:c6:53:29:cb: 47:4c:7f:0e:a9:39:42:a9:1a:ec:56:a0:03:c5:46: 59:b2:09:de:4e:08:51:82:81:19:1f:fc:b0:55:0b: a1:fe:97:a3:27:fc:d4:bc:fc:d4:1f:d8:7d:23:2c: b4:98:2c:cb:85:7e:46:a8:da:35:0e:ef:0e:60:a3: e8:64:00:91:3a:6a:f8:b9:eb:ad:14:22:63:40:d0: fa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F8:33:0E:4E:17:4D:D7:53:7C:4B:5E:91:7C:D9:FA:57:22:93:D6 X509v3 Authority Key Identifier: keyid:87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:81:b9:eb:9e:ef:e7:19:f4:90:b9:34:5c:7f:94:d0:e1:68: 57:cf:50:b9:2a:e6:fa:38:94:d3:b9:2c:ba:19:fb:c6:a5:30: 44:45:c6:2e:4f:82:21:ef:5e:a9:6f:9c:27:e1:7b:6f:7f:7d: 24:54:9c:4d:0c:9f:f3:c6:e9:a8:ac:26:b6:10:71:6a:ff:3a: 04:a3:e4:6d:1e:95:11:6d:5a:af:a6:b8:be:74:66:d6:77:f4: c0:61:45:3d:b6:21:af:0c:4a:c3:23:8d:ee:b7:c9:2b:d0:dc: 98:7b:f3:43:4f:6e:40:2c:b8:7a:37:95:57:6b:69:de:a8:6d: 8b:84:2b:6e:e3:4b:b5:78:9b:5a:f2:44:16:91:6f:bd:e7:7f: 66:5f:67:ea:dd:cd:99:57:24:c4:bb:b7:2d:8e:5e:be:73:87: 2a:1a:39:46:36:15:4a:62:94:38:f7:a7:00:a4:35:b6:7b:23: 91:3c:8b:b1:cf:76:af:10:70:59:08:78:70:8d:ef:e2:b7:3d: d0:52:4d:c1:4a:60:e0:86:5a:bb:3f:87:b9:6d:d6:55:73:02: e4:de:a4:87:ff:a3:0e:88:86:eb:49:19:75:63:e9:bf:13:e5: 02:7f:8a:70:c6:c0:ae:52:fa:ab:dd:5d:10:2d:5b:ec:2d:61: ae:50:9d:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGQjAxMTAvBgNVBAUTKDg3NkU2ODEzQkYyQzE4MTFDRDExREU5OTI4MUFDRDQ0 QkVDMERFNzMwHhcNMjYwMzAyMDA0NjEwWhcNMjYwMzA5MDA0NjEwWjAYMRYwFAYD VQQDEw02OWE0ZGRkNC0zZmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/L0ob+5uIrOcG7aNuXdKpodf7FSdLkFLxL7+ZjnKNju4r7clMl7cXcXbD87D ob+CDvZ4vAqjOyR1jZCCvLLANGaUMsAnzUZ8Vne2IKazV4Z0IbGKmhJxv7vxRzEa 5Pap70iaRkYZbXtn/WFXxpHQzcRzgHAPC3BNUsX/xWuyMQF4FWKJuq3op6ThLP1I RtOCvQsiyLu8Geo41akYmEtfXDscKkmN+LlklJjq/Ztqv8ZTKctHTH8OqTlCqRrs VqADxUZZsgneTghRgoEZH/ywVQuh/pejJ/zUvPzUH9h9Iyy0mCzLhX5GqNo1Du8O YKPoZACROmr4ueutFCJjQND6qQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFT4Mw5O F03XU3xLXpF82fpXIpPWMB8GA1UdIwQYMBaAFIduaBO/LBgRzRHemSgazUS+wN5z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZCMC8wNThDRUMxNDE5 QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dCSE5FZDZaS0JyTlJMN0Ez bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gyNW9FNzhzR0JITkVkNlpLQnJOUkw3QTNuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZCMC8wNThDRUMxNDE5QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dC SE5FZDZaS0JyTlJMN0Ezbk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT4G5657v5xn0kLk0XH+U0OFoV89QuSrm+jiU07ksuhn7xqUwREXGLk+CIe9e qW+cJ+F7b399JFScTQyf88bpqKwmthBxav86BKPkbR6VEW1ar6a4vnRm1nf0wGFF PbYhrwxKwyON7rfJK9DcmHvzQ09uQCy4ejeVV2tp3qhti4QrbuNLtXibWvJEFpFv ved/Zl9n6t3NmVckxLu3LY5evnOHKho5RjYVSmKUOPenAKQ1tnsjkTyLsc92rxBw WQh4cI3v4rc90FJNwUpg4IZauz+HuW3WVXMC5N6kh/+jDoiG60kZdWPpvxPlAn+K cMbArlL6q91dEC1b7C1hrlCdXw== -----END CERTIFICATE-----Generated at Mon Mar 2 16:49:44 2026 by rpki-client