$ rpki-client -vvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft File: m7K00aj-gR3ElT2ALRAvXQSNCB0.mft (raw, json) Hash identifier: Ff/oMmtMwFAXnbe9Okv21/YlWjj/Lb6UOUZ9uMK3uCM= Subject key identifier: 74:A2:23:C7:C9:92:D8:DF:C3:B5:73:87:1D:8D:D2:68:E6:F2:E8:E2 Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D Certificate issuer: /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Certificate serial: 08C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft Manifest number: 08B9 Signing time: Wed 04 Mar 2026 20:07:04 +0000 Manifest this update: Wed 04 Mar 2026 20:07:04 +0000 Manifest next update: Wed 11 Mar 2026 20:07:04 +0000 Files and hashes: 1: m7K00aj-gR3ElT2ALRAvXQSNCB0.crl (hash: +pO98xRMfM20sC6Q4q5siF6Lew4GaZKCoKDEJI4J9cI=) 2: 91CB02E0DBDD11F0B3C660C858641951.roa (hash: guESDtRP9qOcesOQufoat5VtGELu5d7cHiiI+UKjLlQ=) 3: 7B3B0868DBDD11F089B5B5C658641951.roa (hash: ewYDV2AeFSraFT8cqNKwnfuovfJu1fvrIxXBNUNfFI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Mar 2026 20:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2243 (0x8c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454A8, serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Validity Not Before: Mar 4 20:07:04 2026 GMT Not After : Mar 11 20:07:04 2026 GMT Subject: CN=69a890e8-d5c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:09:df:60:41:15:69:fc:f9:09:f9:58:dc:fc: 94:29:bd:55:51:74:27:c1:6e:6a:fd:80:4e:97:48: 03:a5:69:da:d0:af:7d:21:bc:3e:2a:53:55:6e:4a: d5:08:e1:0f:7d:6b:c9:b3:5d:55:82:18:b3:01:b0: 1d:6d:66:56:b4:94:70:96:46:0a:03:b3:e3:21:45: 3f:d5:7d:e8:a2:47:6b:25:bb:df:28:66:ca:85:0c: 5b:56:50:ed:c7:64:8e:13:f3:6a:87:de:6c:e9:a9: 97:e5:35:b9:55:37:bb:92:13:cb:ef:24:33:fa:5a: 3c:44:e8:ff:28:cc:7e:e5:5b:2d:99:d1:4c:b8:5a: 7e:18:1d:8f:7b:0b:e6:84:c8:95:50:5f:a7:ed:ac: ad:e5:09:ea:f4:97:0e:88:74:ed:da:f4:7a:c8:46: b5:88:b7:bf:38:6f:5e:5a:7d:ad:e5:96:f3:e5:b5: ab:99:b6:38:c9:d3:c7:4e:31:13:d1:a9:ea:3b:8d: cb:c0:06:9b:da:3b:ea:6c:5b:e4:97:3b:0c:3a:a4: 38:14:5d:d9:06:06:36:5d:e6:ef:74:a5:41:42:8f: 5f:5d:3e:1d:86:2a:48:8e:bf:55:38:b4:32:de:65: bd:57:ca:d4:4b:ad:82:46:f9:1b:d5:7c:0b:8a:82: 1f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A2:23:C7:C9:92:D8:DF:C3:B5:73:87:1D:8D:D2:68:E6:F2:E8:E2 X509v3 Authority Key Identifier: keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:0f:45:68:90:67:34:01:9a:08:4b:6c:67:40:64:c2:08:78: d4:57:52:e8:70:8f:0e:2b:af:82:7c:be:cd:94:6f:b1:eb:37: b9:d3:47:98:f9:d4:f0:4e:00:f1:44:fa:8d:fd:e7:db:91:d1: 8c:21:b4:e6:e5:a6:1b:49:2e:83:e1:8b:c1:ac:87:26:2a:50: 0f:f7:41:70:b4:f1:3c:11:5d:81:aa:5b:7f:71:19:4e:83:34: 93:2c:5b:ba:62:31:b0:4e:1f:ef:fa:f9:5b:bc:1d:9d:3c:99: 2c:34:e0:02:20:c6:b1:87:0a:16:20:3e:01:04:69:6d:3b:8c: e9:c0:90:c4:12:ed:2c:7d:dd:ab:db:21:9d:d7:83:9e:df:c6: 39:08:f9:c2:73:7f:0f:55:4e:80:b0:cb:20:2d:aa:39:c3:4c: 80:6e:cb:97:d2:2e:15:29:1b:84:4d:0d:07:75:c6:7f:92:fb: f7:94:e5:d1:0a:cd:ff:5b:73:79:d3:ba:1d:af:bb:83:b6:16: cc:a3:39:bc:77:37:a7:f1:37:bf:11:dc:8b:85:36:97:38:4d: ae:f8:79:6c:af:16:e8:8c:34:08:51:5c:ec:96:dd:b3:62:a0: 36:1b:a5:76:a3:4d:09:aa:11:fa:f8:37:08:b8:e1:62:18:8c: ea:90:a2:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0QTgxMTAvBgNVBAUTKDlCQjJCNEQxQThGRTgxMURDNDk1M0Q4MDJEMTAyRjVE MDQ4RDA4MUQwHhcNMjYwMzA0MjAwNzA0WhcNMjYwMzExMjAwNzA0WjAYMRYwFAYD VQQDEw02OWE4OTBlOC1kNWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QnfYEEVafz5CflY3PyUKb1VUXQnwW5q/YBOl0gDpWna0K99Ibw+KlNVbkrV COEPfWvJs11VghizAbAdbWZWtJRwlkYKA7PjIUU/1X3ookdrJbvfKGbKhQxbVlDt x2SOE/Nqh95s6amX5TW5VTe7khPL7yQz+lo8ROj/KMx+5VstmdFMuFp+GB2Pewvm hMiVUF+n7ayt5Qnq9JcOiHTt2vR6yEa1iLe/OG9eWn2t5Zbz5bWrmbY4ydPHTjET 0anqO43LwAab2jvqbFvklzsMOqQ4FF3ZBgY2XebvdKVBQo9fXT4dhipIjr9VOLQy 3mW9V8rUS62CRvkb1XwLioIfzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHSiI8fJ ktjfw7Vzhx2N0mjm8ujiMB8GA1UdIwQYMBaAFJuytNGo/oEdxJU9gC0QL10EjQgd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRBOC9FMjk1MjBCOEQx Q0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdSM0VsVDJBTFJBdlhRU05D QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL203SzAwYWotZ1IzRWxUMkFMUkF2WFFTTkNCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRBOC9FMjk1MjBCOEQxQ0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdS M0VsVDJBTFJBdlhRU05DQjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARg9FaJBnNAGaCEtsZ0Bkwgh41FdS6HCPDiuvgny+zZRvses3udNHmPnU8E4A 8UT6jf3n25HRjCG05uWmG0kug+GLwayHJipQD/dBcLTxPBFdgapbf3EZToM0kyxb umIxsE4f7/r5W7wdnTyZLDTgAiDGsYcKFiA+AQRpbTuM6cCQxBLtLH3dq9shndeD nt/GOQj5wnN/D1VOgLDLIC2qOcNMgG7Ll9IuFSkbhE0NB3XGf5L795Tl0QrN/1tz edO6Ha+7g7YWzKM5vHc3p/E3vxHci4U2lzhNrvh5bK8W6Iw0CFFc7Jbds2KgNhul dqNNCaoR+vg3CLjhYhiM6pCieQ== -----END CERTIFICATE-----Generated at Thu Mar 5 17:44:16 2026 by rpki-client