$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft File: MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft (raw, json) Hash identifier: hlZUa/eEdxRSlGEmHGrT/ruga/b/FzVBRlCFyaUgcM0= Subject key identifier: 31:82:28:C8:F6:BE:4D:07:FE:5A:31:35:02:C8:57:69:52:C2:F2:5D Authority key identifier: 31:6D:89:64:7F:0D:0C:B0:6B:37:32:07:8A:42:30:AF:11:56:53:34 Certificate issuer: /CN=A91E3441/serialNumber=316D89647F0D0CB06B3732078A4230AF11565334 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft Manifest number: 1E Signing time: Tue 03 Mar 2026 08:32:43 +0000 Manifest this update: Tue 03 Mar 2026 08:32:43 +0000 Manifest next update: Tue 10 Mar 2026 08:32:43 +0000 Files and hashes: 1: MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl (hash: ZvP1HMUzXDs/Cpzlcnbo3RTfeZ37FVdLB4lcJ6M5jYM=) 2: 3954E33CEE9E11F0B32FB2E5666F56BC.roa (hash: 91UfSDMa7uQJKbxkjWHGuOg640JuLtPHQKq29mthHYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3441, serialNumber=316D89647F0D0CB06B3732078A4230AF11565334 Validity Not Before: Mar 3 08:32:43 2026 GMT Not After : Mar 10 08:32:43 2026 GMT Subject: CN=69a69cab-e6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b6:e9:ef:a4:f9:aa:13:3d:57:e6:7e:b8:5c: 63:56:90:6e:d6:bb:93:d1:46:47:68:bf:80:11:dc: 27:66:e2:88:2f:0a:8d:1b:dc:58:e9:c9:4f:65:20: 15:fc:03:19:91:55:e6:1a:fc:a8:55:15:bd:2c:4e: eb:6f:69:db:d9:e6:44:95:7b:8b:cc:62:07:f9:c6: 56:f4:cc:ad:63:9f:fe:7f:87:27:1e:3f:2f:59:31: e4:5a:33:19:8a:84:6e:65:b6:b6:88:f8:d4:9b:82: 40:a2:77:c6:30:c0:14:e1:88:6f:6b:58:ee:20:de: 6d:24:d4:de:1f:e4:c5:29:40:50:e2:0e:ac:0b:96: 84:47:86:de:65:ba:cf:c7:56:7c:b1:47:a2:00:9d: 15:d8:c1:85:58:72:eb:74:4b:d3:5d:68:d7:4c:54: 22:ba:f0:c4:ea:04:e9:ea:f6:30:76:dc:9e:a3:8e: 40:3d:97:72:b1:a1:ce:c5:01:d5:67:f3:6b:6d:60: a6:a5:e7:35:14:75:8a:d2:bf:7f:ef:13:53:0b:79: c2:42:a7:fe:e5:43:5f:3a:f3:61:f1:ad:ae:43:3b: 5a:9d:dd:61:1f:20:cb:1b:9f:1e:e3:1b:c8:c1:dc: 6c:08:04:fd:85:d0:e8:5e:85:31:88:f0:c6:dd:2c: f7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:82:28:C8:F6:BE:4D:07:FE:5A:31:35:02:C8:57:69:52:C2:F2:5D X509v3 Authority Key Identifier: keyid:31:6D:89:64:7F:0D:0C:B0:6B:37:32:07:8A:42:30:AF:11:56:53:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:53:3c:8b:bd:78:17:cb:26:fc:55:6b:c0:a8:ca:58:7e:7b: b1:ad:d2:19:d5:5e:60:0e:17:65:ca:9f:8d:1f:1f:75:9b:8f: 84:98:4e:c0:cf:a0:36:b9:51:54:dc:f5:18:df:90:c2:ff:4f: 99:22:c6:df:04:1b:79:83:64:a2:7d:64:84:14:b5:d9:27:ec: 93:2f:60:e8:97:2a:0e:a0:bf:b5:7b:8b:5e:53:1e:bd:54:89: 45:1e:ad:5d:15:02:3a:47:4d:31:f6:d7:fd:2b:3e:52:90:79: d4:d1:04:43:05:89:70:ae:30:6b:c1:ef:e9:26:0c:42:31:4d: 77:ec:c3:b3:a9:82:1f:bb:54:ac:b1:13:52:30:a5:28:9d:d7: 06:8d:1a:23:c5:e4:43:79:4c:61:82:5f:6d:eb:d4:3a:e8:9b: 9c:0a:c8:50:4a:a6:0d:38:27:3d:c8:81:a9:ea:5a:5f:2c:a7: 81:57:81:02:80:21:03:fe:3f:56:dc:74:cc:26:ea:94:61:73: 6d:cd:31:e1:3b:60:8d:54:4a:43:86:92:ea:63:f5:79:53:54: fa:cb:b2:c5:48:ae:44:1c:df:fd:da:64:9d:fa:3c:cb:fa:a7: 75:ba:2b:68:5b:30:a2:65:97:e7:59:32:71:42:28:c9:4e:ec: b9:16:8f:fb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzQ0MTExMC8GA1UEBRMoMzE2RDg5NjQ3RjBEMENCMDZCMzczMjA3OEE0MjMwQUYx MTU2NTMzNDAeFw0yNjAzMDMwODMyNDNaFw0yNjAzMTAwODMyNDNaMBgxFjAUBgNV BAMTDTY5YTY5Y2FiLWU2ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCMtunvpPmqEz1X5n64XGNWkG7Wu5PRRkdov4AR3Cdm4ogvCo0b3FjpyU9lIBX8 AxmRVeYa/KhVFb0sTutvadvZ5kSVe4vMYgf5xlb0zK1jn/5/hycePy9ZMeRaMxmK hG5ltraI+NSbgkCid8YwwBThiG9rWO4g3m0k1N4f5MUpQFDiDqwLloRHht5lus/H VnyxR6IAnRXYwYVYcut0S9NdaNdMVCK68MTqBOnq9jB23J6jjkA9l3Kxoc7FAdVn 82ttYKal5zUUdYrSv3/vE1MLecJCp/7lQ18682Hxra5DO1qd3WEfIMsbnx7jG8jB 3GwIBP2F0OhehTGI8MbdLPfdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMYIoyPa+ TQf+WjE1AshXaVLC8l0wHwYDVR0jBBgwFoAUMW2JZH8NDLBrNzIHikIwrxFWUzQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNDQxL0UwODFBNjBBRUU5 RDExRjBBQ0UyNUM5RDY2NkY1NkJDL01XMkpaSDhORExCck56SUhpa0l3cnhGV1V6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVcySlpIOE5ETEJyTnpJSGlrSXdyeEZXVXpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz NDQxL0UwODFBNjBBRUU5RDExRjBBQ0UyNUM5RDY2NkY1NkJDL01XMkpaSDhORExC ck56SUhpa0l3cnhGV1V6US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAPUzyLvXgXyyb8VWvAqMpYfnuxrdIZ1V5gDhdlyp+NHx91m4+EmE7Az6A2uVFU 3PUY35DC/0+ZIsbfBBt5g2SifWSEFLXZJ+yTL2DolyoOoL+1e4teUx69VIlFHq1d FQI6R00x9tf9Kz5SkHnU0QRDBYlwrjBrwe/pJgxCMU137MOzqYIfu1SssRNSMKUo ndcGjRojxeRDeUxhgl9t69Q66JucCshQSqYNOCc9yIGp6lpfLKeBV4ECgCED/j9W 3HTMJuqUYXNtzTHhO2CNVEpDhpLqY/V5U1T6y7LFSK5EHN/92mSd+jzL+qd1uito WzCiZZfnWTJxQijJTuy5Fo/7 -----END CERTIFICATE-----Generated at Wed Mar 4 08:40:54 2026 by rpki-client