$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft File: mpJehowmrjzn4Iztb8MRL2QPLM8.mft (raw, json) Hash identifier: 7iVn1sInTZi3DRy6cpYuDjFwHRnJ1k9Yso30Kzdr6w8= Subject key identifier: 9E:61:48:AA:F1:09:5D:BF:E2:3F:46:51:BC:7A:E9:9F:95:C9:E4:55 Authority key identifier: 9A:92:5E:86:8C:26:AE:3C:E7:E0:8C:ED:6F:C3:11:2F:64:0F:2C:CF Certificate issuer: /CN=A91FBC9F/serialNumber=9A925E868C26AE3CE7E08CED6FC3112F640F2CCF Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft Manifest number: 09 Signing time: Sun 01 Mar 2026 10:40:40 +0000 Manifest this update: Sun 01 Mar 2026 10:40:40 +0000 Manifest next update: Sun 08 Mar 2026 10:40:40 +0000 Files and hashes: 1: mpJehowmrjzn4Iztb8MRL2QPLM8.crl (hash: 7vEFapKTm/jukLnbD9j2pJw1NpGtZasw5LaDApCPoak=) 2: C19B197610BA11F1B3CC5F673F3D8C67.roa (hash: nbWqFsXOGQVBZJtlbml0ul0k6Hbkpv/zcG8VXeCWUuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.crl rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:40:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBC9F, serialNumber=9A925E868C26AE3CE7E08CED6FC3112F640F2CCF Validity Not Before: Mar 1 10:40:40 2026 GMT Not After : Mar 8 10:40:40 2026 GMT Subject: CN=69a417a8-8bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6a:ca:5f:6c:0b:1c:41:a5:26:8e:c3:87:b1: 56:3a:1a:b4:44:4d:f0:4b:f8:91:5b:a9:b4:42:a1: 3d:56:a1:2c:34:0f:4b:75:7e:1e:d5:8c:67:85:fa: 84:c4:a5:ec:7b:dd:be:b2:e6:1a:d8:c6:81:ba:26: 34:0d:de:03:a4:95:07:00:a3:c2:b8:f2:c6:4c:36: ca:c6:cc:f1:24:49:13:20:ef:82:f9:24:f2:8d:0a: dd:c4:ad:6e:d8:23:f5:ca:98:01:06:8f:f3:6d:f7: 82:61:4c:a8:4d:d2:70:b1:81:34:b0:2e:19:7e:42: 12:de:91:7d:fb:91:29:ea:53:0a:db:e2:56:e9:f4: fe:42:32:42:39:91:79:0a:c3:fb:96:f4:9d:f0:88: e5:73:d7:af:bc:f5:66:b5:5c:f0:98:10:59:27:0e: 44:81:ab:01:aa:c2:e4:d7:21:5c:38:15:b1:af:9a: a1:dc:13:ec:cb:24:50:0b:e2:d4:61:ce:83:76:dd: 9f:d1:65:17:1f:ea:e9:e2:94:80:5c:68:f0:c3:3c: 75:28:e1:5c:a8:87:72:0d:3b:cf:58:4d:bf:bc:4c: b6:d9:19:5c:c4:40:73:ec:2c:f0:24:28:8a:b8:cc: 17:b3:47:81:63:6b:bb:84:0d:c5:57:a9:fe:03:75: fa:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:61:48:AA:F1:09:5D:BF:E2:3F:46:51:BC:7A:E9:9F:95:C9:E4:55 X509v3 Authority Key Identifier: keyid:9A:92:5E:86:8C:26:AE:3C:E7:E0:8C:ED:6F:C3:11:2F:64:0F:2C:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:80:6a:a6:8d:46:ba:1f:aa:5b:c7:b3:2d:f1:91:88:21:80: ef:89:80:3e:8b:b4:ab:f3:4c:26:a4:28:94:86:7a:d9:3d:6a: 30:7d:5b:96:03:2c:8f:9e:16:39:6b:c4:3c:73:fa:2d:4b:77: 15:e2:35:7e:3d:99:71:4d:65:d8:40:cc:7f:e1:0e:c8:eb:a7: fc:9c:37:88:01:c5:a8:98:ed:29:5c:49:38:29:6d:93:0c:a7: 26:91:40:d1:2f:34:33:30:b7:20:a9:ea:67:4f:ea:45:8b:7d: 9a:06:18:c4:20:62:da:27:cd:68:52:73:89:3f:06:4d:a9:c2: fe:98:77:c8:9c:cf:d2:5d:86:06:80:5f:42:15:23:89:da:85: 98:2e:df:1f:35:f0:8d:34:4b:ca:a2:9e:15:84:a9:69:7e:79: ff:00:7b:49:db:7d:f5:95:7d:e6:eb:76:1f:a6:fb:8a:00:65: 9c:1b:4d:3c:87:02:09:ff:0e:75:e6:11:a2:e5:e5:74:e4:10: e1:43:00:5c:77:9d:5f:af:00:8d:40:cf:ad:4d:af:6c:96:ee: 00:b2:27:58:c2:14:db:4b:ea:b6:5b:7b:9b:89:03:35:03:09: 44:12:d5:6f:6f:9a:1f:1d:90:f5:34:e7:ef:df:7c:05:ca:25: 43:27:33:db -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkM5RjExMC8GA1UEBRMoOUE5MjVFODY4QzI2QUUzQ0U3RTA4Q0VENkZDMzExMkY2 NDBGMkNDRjAeFw0yNjAzMDExMDQwNDBaFw0yNjAzMDgxMDQwNDBaMBgxFjAUBgNV BAMTDTY5YTQxN2E4LThiZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiaspfbAscQaUmjsOHsVY6GrRETfBL+JFbqbRCoT1WoSw0D0t1fh7VjGeF+oTE pex73b6y5hrYxoG6JjQN3gOklQcAo8K48sZMNsrGzPEkSRMg74L5JPKNCt3ErW7Y I/XKmAEGj/Nt94JhTKhN0nCxgTSwLhl+QhLekX37kSnqUwrb4lbp9P5CMkI5kXkK w/uW9J3wiOVz16+89Wa1XPCYEFknDkSBqwGqwuTXIVw4FbGvmqHcE+zLJFAL4tRh zoN23Z/RZRcf6unilIBcaPDDPHUo4Vyoh3INO89YTb+8TLbZGVzEQHPsLPAkKIq4 zBezR4Fja7uEDcVXqf4DdfqLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnmFIqvEJ Xb/iP0ZRvHrpn5XJ5FUwHwYDVR0jBBgwFoAUmpJehowmrjzn4Iztb8MRL2QPLM8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCQzlGLzdGRDk2QkY2MEQ4 MDExRjE5MjBCM0EwRTI0M0Q4QzY3L21wSmVob3dtcmp6bjRJenRiOE1STDJRUExN OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbXBKZWhvd21yanpuNEl6dGI4TVJMMlFQTE04LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC QzlGLzdGRDk2QkY2MEQ4MDExRjE5MjBCM0EwRTI0M0Q4QzY3L21wSmVob3dtcmp6 bjRJenRiOE1STDJRUExNOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAEgGqmjUa6H6pbx7Mt8ZGIIYDviYA+i7Sr80wmpCiUhnrZPWowfVuWAyyPnhY5 a8Q8c/otS3cV4jV+PZlxTWXYQMx/4Q7I66f8nDeIAcWomO0pXEk4KW2TDKcmkUDR LzQzMLcgqepnT+pFi32aBhjEIGLaJ81oUnOJPwZNqcL+mHfInM/SXYYGgF9CFSOJ 2oWYLt8fNfCNNEvKop4VhKlpfnn/AHtJ2331lX3m63YfpvuKAGWcG008hwIJ/w51 5hGi5eV05BDhQwBcd51frwCNQM+tTa9slu4AsidYwhTbS+q2W3ubiQM1AwlEEtVv b5ofHZD1NOfv33wFyiVDJzPb -----END CERTIFICATE-----Generated at Sun Mar 1 20:03:10 2026 by rpki-client