$ rpki-client -vvf rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft File: SRNmdefiNOfS-IRZmOLGLbSIgso.mft (raw, json) Hash identifier: IvYeIMqZdMD+PyIGpMZAzSPz6UnEMv7ooRQIAxwq/E0= Subject key identifier: E3:0A:9B:AC:8A:6A:3E:0B:D2:A7:66:23:96:15:6D:32:ED:71:EA:7B Authority key identifier: 49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA Certificate issuer: /CN=A91A31F5/serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft Manifest number: D5 Signing time: Tue 03 Mar 2026 06:17:23 +0000 Manifest this update: Tue 03 Mar 2026 06:17:23 +0000 Manifest next update: Tue 10 Mar 2026 06:17:23 +0000 Files and hashes: 1: SRNmdefiNOfS-IRZmOLGLbSIgso.crl (hash: Hj9jaRc0gMt82lG+pwJ2S4iSPdcSvS4BUvXQnBSTwi8=) 2: A8A5C28ED6ED11EFB4D7876BC4F9AE02.roa (hash: VY1rUPr6EXTZh6NWaqpR1v2JRKFtMHVjZuzu+EK7FeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 06:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A31F5, serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA Validity Not Before: Mar 3 06:17:23 2026 GMT Not After : Mar 10 06:17:23 2026 GMT Subject: CN=69a67cf3-c93c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:26:fb:46:13:f2:57:f9:b2:6a:a7:4d:15:73: ff:2b:6f:67:f6:e5:71:4d:8f:aa:00:f7:82:ae:db: 21:49:c3:88:70:ee:87:a2:8f:c9:7c:c1:93:26:f4: 96:56:a5:55:79:a6:bd:a0:54:fe:d2:be:2f:f6:39: 95:0c:15:ff:fd:01:5e:d8:fd:2d:15:88:64:0c:ad: 94:d4:a3:b3:a3:26:0d:72:f6:56:9a:e9:4b:08:ed: 6d:74:2b:ee:47:a4:95:c1:12:c9:af:98:bd:df:9a: fc:59:37:d7:0c:47:5a:fa:8f:ed:99:c7:84:78:d1: 78:59:10:aa:81:4a:4d:9c:32:c5:f1:d1:f9:d4:69: 5f:f8:e9:59:e8:27:cb:7a:66:3e:0b:98:75:d7:ef: 26:2f:54:95:f5:14:23:cb:b3:9f:72:d3:12:b3:d1: 11:38:b8:d3:c8:95:49:4b:84:af:9a:f3:5d:f3:ff: a5:fc:56:65:87:c6:8e:df:97:c5:f1:d2:81:c4:4c: 1a:ac:eb:d3:df:97:98:2c:5c:91:21:7f:19:5f:cd: 9c:95:28:68:7e:73:eb:8f:fa:0e:52:b2:1a:67:a5: 74:a2:6d:8b:ef:56:66:ea:1b:e4:7a:a3:aa:fd:85: 3f:bb:a4:bc:cd:a8:e2:bf:7e:f3:ee:5d:d7:26:12: 22:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0A:9B:AC:8A:6A:3E:0B:D2:A7:66:23:96:15:6D:32:ED:71:EA:7B X509v3 Authority Key Identifier: keyid:49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:54:d0:71:63:2c:c8:d7:30:ad:5c:62:cb:44:a0:32:5a:ee: 47:c4:99:f5:72:a4:b5:47:4c:02:32:a9:0f:d8:50:54:27:dc: 14:97:5c:57:46:2d:9b:a8:44:65:74:8f:c1:c7:e4:16:4a:2f: 9a:d8:2d:37:8f:fa:ec:0f:10:88:37:5c:f1:45:36:67:cf:f5: c1:90:cf:0a:4b:a7:26:7d:0a:31:6f:12:13:5f:5c:3a:5e:b8: 4b:39:ce:eb:2f:3b:59:94:3e:35:86:69:94:19:5c:9a:20:bb: 22:76:23:58:5a:09:ba:a3:b8:64:b8:ae:89:4b:f3:8d:cc:b2: 88:0c:71:b1:cc:1f:09:6d:0f:c4:29:f2:78:3b:20:84:01:64: 23:76:13:65:87:6c:dd:8b:3c:e6:26:a3:0d:f9:68:8d:54:12: 6e:78:bc:58:2c:ca:ad:f9:a2:74:1c:fe:33:7d:34:64:6c:00: 91:1b:66:3d:d3:72:bd:5c:93:81:4c:be:5c:e0:a1:5c:f5:f0: 11:79:88:0d:fb:57:9d:21:46:5b:3e:1f:06:8a:1e:71:b6:eb: 98:04:fb:3f:f7:37:41:b2:19:4d:c3:06:ef:5a:ed:9b:7b:51: d5:f0:4d:65:47:2c:e0:c3:2e:63:9d:45:7e:30:c7:19:2d:8c: 67:fa:2b:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMxRjUxMTAvBgNVBAUTKDQ5MTM2Njc1RTdFMjM0RTdEMkY4ODQ1OTk4RTJDNjJE QjQ4ODgyQ0EwHhcNMjYwMzAzMDYxNzIzWhcNMjYwMzEwMDYxNzIzWjAYMRYwFAYD VQQDEw02OWE2N2NmMy1jOTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Sb7RhPyV/myaqdNFXP/K29n9uVxTY+qAPeCrtshScOIcO6Hoo/JfMGTJvSW VqVVeaa9oFT+0r4v9jmVDBX//QFe2P0tFYhkDK2U1KOzoyYNcvZWmulLCO1tdCvu R6SVwRLJr5i935r8WTfXDEda+o/tmceEeNF4WRCqgUpNnDLF8dH51Glf+OlZ6CfL emY+C5h11+8mL1SV9RQjy7OfctMSs9EROLjTyJVJS4SvmvNd8/+l/FZlh8aO35fF 8dKBxEwarOvT35eYLFyRIX8ZX82clShofnPrj/oOUrIaZ6V0om2L71Zm6hvkeqOq /YU/u6S8zajiv37z7l3XJhIipQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOMKm6yK aj4L0qdmI5YVbTLtcep7MB8GA1UdIwQYMBaAFEkTZnXn4jTn0viEWZjixi20iILK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzFGNS9BNzU0RDM4MEQ2 RUMxMUVGQTI3OTlDNjlDNEY5QUUwMi9TUk5tZGVmaU5PZlMtSVJabU9MR0xiU0ln c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1NSTm1kZWZpTk9mUy1JUlptT0xHTGJTSWdzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzFGNS9BNzU0RDM4MEQ2RUMxMUVGQTI3OTlDNjlDNEY5QUUwMi9TUk5tZGVmaU5P ZlMtSVJabU9MR0xiU0lnc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASFTQcWMsyNcwrVxiy0SgMlruR8SZ9XKktUdMAjKpD9hQVCfcFJdcV0Ytm6hE ZXSPwcfkFkovmtgtN4/67A8QiDdc8UU2Z8/1wZDPCkunJn0KMW8SE19cOl64SznO 6y87WZQ+NYZplBlcmiC7InYjWFoJuqO4ZLiuiUvzjcyyiAxxscwfCW0PxCnyeDsg hAFkI3YTZYds3Ys85iajDflojVQSbni8WCzKrfmidBz+M300ZGwAkRtmPdNyvVyT gUy+XOChXPXwEXmIDftXnSFGWz4fBooecbbrmAT7P/c3QbIZTcMG71rtm3tR1fBN ZUcs4MMuY51FfjDHGS2MZ/orNg== -----END CERTIFICATE-----Generated at Wed Mar 4 08:37:20 2026 by rpki-client