$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft File: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft (raw, json) Hash identifier: B/xMtbfCvx2jaEbRGUC96B4DOJFvg136UxHvFUUQl8s= Subject key identifier: 25:84:F9:13:E0:F9:36:17:C3:AC:A0:E1:BB:C2:2C:B1:DF:75:F3:BE Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB Certificate issuer: /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft Manifest number: 91 Signing time: Sun 01 Mar 2026 08:49:16 +0000 Manifest this update: Sun 01 Mar 2026 08:49:15 +0000 Manifest next update: Sun 08 Mar 2026 08:49:15 +0000 Files and hashes: 1: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl (hash: CcGtPCQ8Zcy20YG6Vd/c3kMEeH8KbXhU+UwofAq2N+M=) 2: F88154843B9D11F091B39D67C4F9AE02.roa (hash: wMwLSmFRfR346APII8vghU3TqvB3B1WbFWhhmiBY1Cg=) 3: 7D7F13983B9D11F08338F965C4F9AE02.roa (hash: XSwVZuQMZueg82HIFiPpMPU9EzBekqKAK4a9KZWvFLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Validity Not Before: Mar 1 08:49:15 2026 GMT Not After : Mar 8 08:49:15 2026 GMT Subject: CN=69a3fd8c-edba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4c:2d:bd:fe:e3:ad:8a:cd:bf:67:d4:0b:71: b8:14:0e:3f:b2:80:05:61:f5:22:4d:a1:1c:d1:26: fb:fd:bd:42:21:03:fa:ab:fa:76:fc:0c:4c:e1:ea: 77:e6:90:65:9d:d6:55:0a:62:71:93:bf:65:e5:a9: b8:92:da:c2:d6:69:ae:35:3b:a2:86:dd:56:36:54: 4f:6b:90:28:53:ae:87:7a:0b:2c:19:45:43:5c:20: 4b:c9:27:d6:75:5e:a6:fa:a0:14:b5:db:57:2c:35: ed:57:a0:fa:bd:c8:5f:e5:c4:d5:99:66:a9:86:3f: 6f:f1:e6:57:e1:d1:4a:64:6d:8d:e7:71:a3:e8:1e: 38:ff:13:44:6b:2b:83:4a:75:11:0f:63:f5:7d:9d: cd:17:ff:7d:5b:2f:39:dc:3f:fa:ff:af:ef:a7:b7: 7b:76:45:e1:02:86:2c:5e:e2:29:28:c2:6c:41:c8: c4:5a:55:14:18:80:aa:46:f9:3b:b2:02:60:cb:1a: b1:e5:f0:cf:e1:b2:f1:3f:fb:94:14:1c:54:77:d4: a4:3b:26:ce:8b:73:cb:3f:b4:65:ea:e2:21:44:77: bd:66:17:15:a2:8e:19:21:49:3b:30:88:9c:66:cc: 2a:3f:d5:76:cc:01:74:80:60:26:15:24:dc:77:67: 61:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:84:F9:13:E0:F9:36:17:C3:AC:A0:E1:BB:C2:2C:B1:DF:75:F3:BE X509v3 Authority Key Identifier: keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:9e:0d:dc:16:3f:9f:87:97:0a:1a:6f:12:c0:0f:8a:ec:42: a5:3c:53:3d:ea:13:e3:ed:cb:90:81:bc:79:aa:f6:c0:01:25: 26:7e:90:39:ae:ac:d3:fc:56:9f:0f:f4:d5:9b:f4:29:df:8b: ca:6c:07:55:aa:94:13:69:ec:68:66:ee:fa:9c:fe:04:42:77: cb:fb:27:73:78:42:bc:3b:fd:3b:c0:aa:55:05:80:3c:68:46: dd:c2:91:a7:6e:1f:71:f8:b2:dd:f1:8e:44:6c:82:3b:62:20: a2:5c:31:b6:1b:ee:a0:fc:55:6d:6f:c9:b3:2b:b1:50:3d:3f: 47:06:74:f9:0f:d8:4d:db:99:19:ab:0d:44:ff:65:ba:a0:f7: f3:20:7e:60:ce:df:57:6b:b2:5a:ed:17:b4:52:d0:8b:05:0d: 46:a5:95:7f:ce:3a:b0:b3:93:7a:ee:35:c5:a2:15:25:62:17: ae:92:54:f0:63:8c:36:9c:db:9f:bd:ea:31:3a:13:8b:e9:4a: 76:62:3e:77:5c:3a:40:03:49:4d:ff:ae:ff:81:8e:dc:29:1b: 7f:86:57:cd:40:ce:1a:e8:12:fc:49:08:d3:46:54:5a:e5:f3: 02:17:50:32:16:50:3c:39:9c:91:b5:c5:a1:b1:a5:bf:35:b8: a5:47:9e:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZDMTAxMTAvBgNVBAUTKEUyQjBERkE2OTBEMkM3RUFDNDM2MzY3NTZFNDM3QjdD MjYyNkY0QkIwHhcNMjYwMzAxMDg0OTE1WhcNMjYwMzA4MDg0OTE1WjAYMRYwFAYD VQQDEw02OWEzZmQ4Yy1lZGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4kwtvf7jrYrNv2fUC3G4FA4/soAFYfUiTaEc0Sb7/b1CIQP6q/p2/AxM4ep3 5pBlndZVCmJxk79l5am4ktrC1mmuNTuiht1WNlRPa5AoU66HegssGUVDXCBLySfW dV6m+qAUtdtXLDXtV6D6vchf5cTVmWaphj9v8eZX4dFKZG2N53Gj6B44/xNEayuD SnURD2P1fZ3NF/99Wy853D/6/6/vp7d7dkXhAoYsXuIpKMJsQcjEWlUUGICqRvk7 sgJgyxqx5fDP4bLxP/uUFBxUd9SkOybOi3PLP7Rl6uIhRHe9ZhcVoo4ZIUk7MIic ZswqP9V2zAF0gGAmFSTcd2dh+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCWE+RPg +TYXw6yg4bvCLLHfdfO+MB8GA1UdIwQYMBaAFOKw36aQ0sfqxDY2dW5De3wmJvS7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkMxMC8wRTk0MDVCQTNC OUQxMUYwOTAxQ0IyNjJDNEY5QUUwMi80ckRmcHBEU3gtckVOaloxYmtON2ZDWW05 THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRyRGZwcERTeC1yRU5qWjFia043ZkNZbTlMcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkMxMC8wRTk0MDVCQTNCOUQxMUYwOTAxQ0IyNjJDNEY5QUUwMi80ckRmcHBEU3gt ckVOaloxYmtON2ZDWW05THMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA54N3BY/n4eXChpvEsAPiuxCpTxTPeoT4+3LkIG8ear2wAElJn6QOa6s0/xW nw/01Zv0Kd+LymwHVaqUE2nsaGbu+pz+BEJ3y/snc3hCvDv9O8CqVQWAPGhG3cKR p24fcfiy3fGORGyCO2IgolwxthvuoPxVbW/JsyuxUD0/RwZ0+Q/YTduZGasNRP9l uqD38yB+YM7fV2uyWu0XtFLQiwUNRqWVf846sLOTeu41xaIVJWIXrpJU8GOMNpzb n73qMToTi+lKdmI+d1w6QANJTf+u/4GO3Ckbf4ZXzUDOGugS/EkI00ZUWuXzAhdQ MhZQPDmckbXFobGlvzW4pUeeTQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:39:04 2026 by rpki-client