$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft File: mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft (raw, json) Hash identifier: /qXom+HLNdx2y6IxM/ZpzYJr9c4uvMkenlQ0C78fX+k= Subject key identifier: FD:9F:CE:09:36:02:AA:15:CA:B0:D4:A9:76:BB:16:E4:A9:A7:F2:2C Authority key identifier: 98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70 Certificate issuer: /CN=A91DA5F7/serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft Manifest number: 20 Signing time: Sat 07 Mar 2026 08:07:12 +0000 Manifest this update: Sat 07 Mar 2026 08:07:11 +0000 Manifest next update: Sat 14 Mar 2026 08:07:11 +0000 Files and hashes: 1: mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl (hash: CEZWUz782BBYBvwALbaIvgBhLMw1bkQ9gwoM8YWnRgk=) 2: 30D2517AF1F211F0B442E9B1456F56BC.roa (hash: UAtyjnkkGVt2+haohA8ppdzMqX4q+YbKNZp+6njQiaY=) 3: 3150E4A4F1F211F0B442E9B1456F56BC.roa (hash: NONLn4Akv/l6YL+qj6DEc725hoLYdC323Fs/6ORru7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 02:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA5F7, serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270 Validity Not Before: Mar 7 08:07:11 2026 GMT Not After : Mar 14 08:07:11 2026 GMT Subject: CN=69abdcaf-8643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:98:19:29:ab:b0:42:f5:5b:2f:09:a1:50:b0: 0b:b5:e6:ea:52:e9:01:c6:bf:b0:35:aa:a0:a7:5c: b5:6a:7d:d2:ca:8a:eb:1e:77:03:92:5f:f7:45:ed: 6e:1e:9b:2d:aa:7e:ce:61:09:e2:c3:37:7b:6b:81: 45:33:b6:7a:e0:1b:65:05:6e:1a:f8:d3:82:f7:65: ae:88:e3:20:e2:23:69:d6:f5:05:4a:61:ee:de:77: 3e:91:0f:5a:9b:7a:98:b7:79:cb:fe:42:d9:21:06: f1:d0:0f:28:d6:e9:70:f8:40:a0:d6:28:3d:d6:35: ec:df:70:0e:b0:5b:74:3e:1e:3f:2e:5a:37:20:a2: 74:04:b3:8d:26:0c:d5:d5:6d:16:93:b1:3d:be:c2: f4:f0:29:94:24:6d:f3:1a:f9:70:57:97:d9:13:a9: 87:b1:e3:fc:1a:78:00:1e:85:43:db:8a:6d:ee:86: c7:59:26:8c:d2:e7:40:c1:29:7e:de:6c:ee:93:b1: a2:db:7c:af:61:8b:63:f8:f0:51:df:63:e0:a3:b5: a6:e5:5a:71:73:97:10:26:d6:28:74:1a:2f:dc:25: 8f:d4:0f:67:e5:b2:b9:ae:f4:d6:ab:c1:39:d9:b1: ba:31:f8:02:db:f6:7f:4c:17:3e:fc:af:17:e4:4e: 3c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9F:CE:09:36:02:AA:15:CA:B0:D4:A9:76:BB:16:E4:A9:A7:F2:2C X509v3 Authority Key Identifier: keyid:98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:5c:05:6e:64:3c:67:65:12:09:3f:9f:28:62:14:58:69:db: a7:cc:e4:50:fc:e7:e7:e7:bc:4d:5c:d4:09:e9:f6:01:66:b4: c8:f9:94:0d:ef:e8:3b:6a:65:01:03:9f:00:82:e1:e9:07:7e: 63:c3:16:ca:46:c3:ee:af:14:d6:87:01:3f:a1:63:32:53:e8: 6e:1b:86:58:55:0a:5f:dd:2c:10:f2:a0:49:bc:a8:a9:9c:89: c2:85:15:fb:11:45:e5:49:1f:22:11:76:15:46:17:67:b2:32: ab:91:04:f4:5f:11:0a:d4:a4:bb:d0:b8:55:9e:1b:ae:f5:17: 1b:de:01:d4:07:aa:3d:eb:7e:b9:7d:42:56:8b:96:16:b3:53: d7:a1:6f:68:a2:fc:d9:67:cb:72:a7:5c:d6:8c:5a:83:03:d0: c2:e4:45:4a:28:70:1a:86:ea:b9:ae:ff:e6:7d:5c:67:82:ef: 44:89:eb:96:4d:3e:e6:8a:37:87:c7:84:05:f7:f4:ff:91:1b: 85:de:f6:da:2d:d6:b8:cd:55:38:5b:9a:23:6f:e4:fc:a7:79: 5b:4c:1c:a9:cf:07:57:67:bf:be:c3:8b:f8:21:48:3c:8c:4b: ed:d4:87:40:9c:17:b4:16:2b:dd:89:d0:e2:38:1d:50:e8:4c: 96:31:89:ec -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QTVGNzExMC8GA1UEBRMoOThFOTk1QkMzQTRGRjJDRDA4QzZFMzU1NEI2NjM3NEI2 Njk3OTI3MDAeFw0yNjAzMDcwODA3MTFaFw0yNjAzMTQwODA3MTFaMBgxFjAUBgNV BAMTDTY5YWJkY2FmLTg2NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTmBkpq7BC9VsvCaFQsAu15upS6QHGv7A1qqCnXLVqfdLKiusedwOSX/dF7W4e my2qfs5hCeLDN3trgUUztnrgG2UFbhr404L3Za6I4yDiI2nW9QVKYe7edz6RD1qb epi3ecv+QtkhBvHQDyjW6XD4QKDWKD3WNezfcA6wW3Q+Hj8uWjcgonQEs40mDNXV bRaTsT2+wvTwKZQkbfMa+XBXl9kTqYex4/waeAAehUPbim3uhsdZJozS50DBKX7e bO6TsaLbfK9hi2P48FHfY+CjtablWnFzlxAm1ih0Gi/cJY/UD2flsrmu9NarwTnZ sbox+ALb9n9MFz78rxfkTjyrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/Z/OCTYC qhXKsNSpdrsW5Kmn8iwwHwYDVR0jBBgwFoAUmOmVvDpP8s0IxuNVS2Y3S2aXknAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBNUY3L0YwRENDREQ0RjFG MTExRjBBQjIxRjkzQjQ1NkY1NkJDL21PbVZ2RHBQOHMwSXh1TlZTMlkzUzJhWGtu QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbU9tVnZEcFA4czBJeHVOVlMyWTNTMmFYa25BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB NUY3L0YwRENDREQ0RjFGMTExRjBBQjIxRjkzQjQ1NkY1NkJDL21PbVZ2RHBQOHMw SXh1TlZTMlkzUzJhWGtuQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB5XAVuZDxnZRIJP58oYhRYadunzORQ/Ofn57xNXNQJ6fYBZrTI+ZQN7+g7amUB A58AguHpB35jwxbKRsPurxTWhwE/oWMyU+huG4ZYVQpf3SwQ8qBJvKipnInChRX7 EUXlSR8iEXYVRhdnsjKrkQT0XxEK1KS70LhVnhuu9Rcb3gHUB6o96365fUJWi5YW s1PXoW9oovzZZ8typ1zWjFqDA9DC5EVKKHAahuq5rv/mfVxngu9EieuWTT7mijeH x4QF9/T/kRuF3vbaLda4zVU4W5ojb+T8p3lbTBypzwdXZ7++w4v4IUg8jEvt1IdA nBe0FivdidDiOB1Q6EyWMYns -----END CERTIFICATE-----Generated at Sat Mar 7 14:34:56 2026 by rpki-client