$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft File: oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft (raw, json) Hash identifier: sRiizvAYhXv85nfy1jPIoI/uqHUz29dzkuJwh0MQ81w= Subject key identifier: 7B:9E:99:E8:E9:12:98:28:8C:C6:77:1D:01:17:DB:B2:BC:98:D7:C5 Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 Certificate issuer: /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Certificate serial: 0254 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft Manifest number: 022D Signing time: Sat 21 Mar 2026 02:11:34 +0000 Manifest this update: Sat 21 Mar 2026 02:11:34 +0000 Manifest next update: Sat 28 Mar 2026 02:11:34 +0000 Files and hashes: 1: oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl (hash: dF2eCBsJBz8WDuDBpx0p/gPgB6y+pLU+6tP4AyMgpn0=) 2: D0103496FD6611EE9188C568C4F9AE02.roa (hash: 8jWtzjSsUygdzDOwuRDWbJ+/Oi0HeYvaJIf1pNwKDHM=) 3: CE65A4E4A57E11EFA1B6E428C4F9AE02.roa (hash: O0Z9WR74ZqHIIViEx/QrJsLKy5xwDiS8tDAgBMROtv8=) 4: 803597528D5911F087734E0BC4F9AE02.roa (hash: qjwNHVxj8rh4p5dbVDJ7FmnGLRA0aF4pw1XtOGgQ9/I=) 5: 13D68EB430AB11F0A15DC75AC4F9AE02.roa (hash: Df8chXaHVx7SlzUpc1kpONRIDx/OSWJIy+4OsePAPPY=) 6: E762B166FAF811EE92A3642EC4F9AE02.roa (hash: KuP7ghPE5jbRo6RpIG8mjTF5foQeJCW+P2dt3dU5qe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAA91, serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Validity Not Before: Mar 21 02:11:34 2026 GMT Not After : Mar 28 02:11:34 2026 GMT Subject: CN=69bdfe56-a561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e6:ea:9d:05:6c:fb:35:c4:de:ce:70:38:9c: 6d:4e:2b:a7:7f:f7:bb:73:2a:7c:b4:e0:25:2e:ab: 64:1f:73:d1:c0:da:89:f0:c0:2f:1c:43:2a:f9:54: 3c:28:3c:43:53:df:3b:03:0e:a0:86:a4:a1:31:98: 46:ac:06:6f:dc:b7:cd:4d:43:e1:89:7d:68:a6:c8: fc:a5:63:c5:ff:e5:79:74:5f:ef:4f:5c:c6:84:5a: 8b:84:2f:6c:fe:e7:28:63:d5:8c:29:f6:c6:13:51: de:ec:68:a5:9f:e7:7c:4d:e5:2d:dc:f2:ba:a1:f2: 1f:07:14:9d:27:5d:d3:22:85:ad:a0:10:56:72:2d: 55:83:08:d7:7b:0a:25:14:31:66:6c:98:c5:e6:aa: 3b:0c:08:e1:73:18:26:eb:64:ce:ef:40:b3:15:5a: 14:3b:8e:f8:0c:80:b6:b5:05:65:ba:30:5d:e3:41: cf:15:20:8b:3e:70:46:6d:58:49:84:f6:14:b0:75: 18:bc:a1:a0:38:cf:9f:8d:eb:4f:eb:48:b6:ef:a9: 47:ec:26:56:7d:7a:8a:fc:b1:d4:4b:1b:4f:44:99: b9:97:e6:d5:2d:24:fb:9c:a3:32:7b:4f:43:1e:e6: d8:c4:a6:a5:ef:27:6c:66:b8:6f:b0:79:20:0e:25: fb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9E:99:E8:E9:12:98:28:8C:C6:77:1D:01:17:DB:B2:BC:98:D7:C5 X509v3 Authority Key Identifier: keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:43:0d:78:85:da:11:9d:ec:8f:a2:2f:a3:37:cd:15:c9:9a: d9:33:9b:5e:6a:54:52:ce:79:1f:67:61:60:dc:a4:55:ba:79: d2:f2:23:5e:d6:5a:88:a1:20:bf:d5:e1:23:10:ab:ae:80:0c: 22:49:2b:74:3c:fd:32:c8:cd:4b:82:90:62:f1:fe:1e:52:e9: 05:86:ac:49:f6:70:69:bc:09:c4:6f:2d:33:07:fb:50:3d:f7: 27:6d:93:c6:1c:fa:92:11:2a:28:56:c4:32:78:36:81:83:af: 37:23:6c:2d:c7:af:74:89:18:77:06:2f:7e:24:f6:18:75:12: a1:3b:b1:a1:28:4d:39:c6:ab:8f:0b:1e:d2:e0:86:c8:32:eb: 06:7b:66:d3:9a:b6:ab:b6:f2:cb:cf:43:66:e7:64:59:89:5b: a3:89:ad:c2:e1:40:b5:3b:e6:38:66:39:9a:b6:f9:74:dd:f1: 83:7e:64:03:5a:35:0b:73:84:a9:a1:f0:b1:5a:18:86:18:fd: 42:01:3c:59:36:58:f3:6e:06:38:c0:b5:2b:3a:1c:43:28:5c: 55:f8:fc:3d:cc:23:98:84:16:28:70:83:55:59:d4:94:b3:20: 94:8d:d4:de:22:11:7d:be:30:5b:f8:75:76:35:c7:88:52:69: 9e:88:fd:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFBOTExMTAvBgNVBAUTKEEwQzgwQ0VFMDYzQzlDQzgyQ0RDQjBCQzc0NUM0RkU0 NkREMDI2NTcwHhcNMjYwMzIxMDIxMTM0WhcNMjYwMzI4MDIxMTM0WjAYMRYwFAYD VQQDEw02OWJkZmU1Ni1hNTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqebqnQVs+zXE3s5wOJxtTiunf/e7cyp8tOAlLqtkH3PRwNqJ8MAvHEMq+VQ8 KDxDU987Aw6ghqShMZhGrAZv3LfNTUPhiX1opsj8pWPF/+V5dF/vT1zGhFqLhC9s /ucoY9WMKfbGE1He7Giln+d8TeUt3PK6ofIfBxSdJ13TIoWtoBBWci1VgwjXewol FDFmbJjF5qo7DAjhcxgm62TO70CzFVoUO474DIC2tQVlujBd40HPFSCLPnBGbVhJ hPYUsHUYvKGgOM+fjetP60i276lH7CZWfXqK/LHUSxtPRJm5l+bVLST7nKMye09D HubYxKal7ydsZrhvsHkgDiX7jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHuemejp EpgojMZ3HQEX27K8mNfFMB8GA1UdIwQYMBaAFKDIDO4GPJzILNywvHRcT+Rt0CZX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUE5MS85NDIwRDIxMDBB NUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5NZ3MzTEM4ZEZ4UDVHM1FK bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NZ003Z1k4bk1nczNMQzhkRnhQNUczUUpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUE5MS85NDIwRDIxMDBBNUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5N Z3MzTEM4ZEZ4UDVHM1FKbGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOEMNeIXaEZ3sj6IvozfNFcma2TObXmpUUs55H2dhYNykVbp50vIjXtZaiKEg v9XhIxCrroAMIkkrdDz9MsjNS4KQYvH+HlLpBYasSfZwabwJxG8tMwf7UD33J22T xhz6khEqKFbEMng2gYOvNyNsLcevdIkYdwYvfiT2GHUSoTuxoShNOcarjwse0uCG yDLrBntm05q2q7byy89DZudkWYlbo4mtwuFAtTvmOGY5mrb5dN3xg35kA1o1C3OE qaHwsVoYhhj9QgE8WTZY824GOMC1KzocQyhcVfj8PcwjmIQWKHCDVVnUlLMglI3U 3iIRfb4wW/h1djXHiFJpnoj9CA== -----END CERTIFICATE-----Generated at Sat Mar 21 13:37:23 2026 by rpki-client