$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft File: Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft (raw, json) Hash identifier: h3HLl8nMomtRbo5wsHZ8qgw4Z/ieVL7ei+U9fBJ/9ao= Subject key identifier: ED:F7:5B:68:75:9D:85:A5:EE:F3:98:43:89:90:4E:13:17:D8:DC:DA Authority key identifier: 49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81 Certificate issuer: /CN=A91FDE13/serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft Manifest number: A8 Signing time: Wed 11 Mar 2026 06:07:49 +0000 Manifest this update: Wed 11 Mar 2026 06:07:49 +0000 Manifest next update: Wed 18 Mar 2026 06:07:49 +0000 Files and hashes: 1: Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl (hash: AGiF8KzzWyJsTtXsP6cLqVLC4RRDOKUEGsMQ1LMqCvI=) 2: 189D8FCE565D11F0B381417EC4F9AE02.roa (hash: 9z7Ll9dojNMEUlBBIqJpSsSbtBgcRmtw3vXnIn3kJKs=) 3: 5B45D97C2A5611F0B7C8BB20C4F9AE02.roa (hash: ndGtL9DWzP+Gi20WrvLlerj6NUiEwQx9cGu+2aOuFD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Mar 2026 06:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDE13, serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81 Validity Not Before: Mar 11 06:07:49 2026 GMT Not After : Mar 18 06:07:49 2026 GMT Subject: CN=69b106b5-c839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b3:97:08:31:d6:a1:74:28:df:e9:fe:9d:21: 17:5a:71:ef:86:4e:a1:7f:e0:b7:5c:93:b4:f1:6c: b7:87:da:83:cf:ae:bc:e3:ee:fd:4e:be:ca:95:e3: 80:10:e7:b0:e6:74:89:67:1c:4e:d5:7f:f3:a5:dd: 9b:0b:de:0f:ef:ee:8a:89:fe:6b:e1:d2:7e:07:79: 3c:3f:2d:35:19:3f:e6:b7:b7:2f:9f:3e:0d:05:cc: 3e:49:22:78:fc:8c:0b:0d:01:76:7f:00:32:6d:48: 7b:f7:2e:e7:a2:7b:64:2c:b7:e1:95:7d:07:d9:e6: 32:63:fc:ac:ec:f6:3b:7a:f7:74:1a:70:78:e6:71: 68:3c:d5:e8:3e:21:45:ca:15:2c:5b:c8:40:df:fe: 41:5e:40:a8:d0:8a:0b:b8:64:60:8c:81:cd:9d:14: 46:63:54:3d:1f:63:8c:91:93:a9:c3:ca:a9:c7:04: 90:6d:f2:0e:b4:9b:0f:d4:37:36:59:8c:75:83:b1: 60:af:4c:94:a4:f4:ab:91:0d:26:72:ef:ae:bd:51: fc:16:c7:3f:73:e1:72:93:20:e0:cf:95:b0:15:51: 74:35:06:74:ac:93:1d:a3:d6:1f:1b:a8:42:c6:d7: 4b:c4:6f:df:54:6f:b5:fe:0a:5d:99:f8:83:16:20: a5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F7:5B:68:75:9D:85:A5:EE:F3:98:43:89:90:4E:13:17:D8:DC:DA X509v3 Authority Key Identifier: keyid:49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:12:14:b4:83:00:bc:6e:84:45:84:6b:8a:ce:ec:d8:fd:92: 65:5f:87:0f:39:38:8d:63:d6:97:f1:84:0a:6a:47:de:a2:37: 61:fe:fd:fa:b2:13:84:12:09:d3:ba:ec:0d:5b:2d:94:f5:6c: ce:2a:91:30:45:ed:95:49:36:de:85:04:89:ff:19:12:c7:c8: 14:38:60:ab:ea:25:75:60:f9:1c:89:7a:cc:2b:51:50:df:87: ab:27:0f:94:b5:4c:c2:fd:dc:af:d4:22:bd:2e:f1:54:95:1f: a7:55:42:0b:30:4b:28:e9:aa:9f:cd:e1:91:cb:df:6e:f0:9c: af:94:5d:8e:0c:de:d9:16:97:7b:00:cc:b1:f0:76:94:d8:19: 66:83:a7:f8:08:ab:18:ea:d8:01:88:71:bc:97:32:f7:9a:49: 67:95:b7:7f:d7:d7:0e:35:95:b6:a8:3e:e5:a4:86:2e:ac:4f: 53:56:18:ee:03:17:bd:79:30:94:4d:f1:15:3f:d2:dc:a8:3d: 81:1b:a5:3d:50:ce:19:51:b4:c5:b0:aa:fe:25:3b:93:21:5f: 46:ea:bf:55:82:fc:d4:01:08:3a:dc:39:ab:40:a5:4b:3f:8a: 00:11:33:d0:b9:28:47:7b:03:06:eb:7a:7e:8d:cb:69:60:d6: 21:ee:c8:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRFMTMxMTAvBgNVBAUTKDQ5RkQzM0Q2RjUxQUQ2QTQ5ODg0NDY5RkEzOUZFRjA0 MzIzMzZGODEwHhcNMjYwMzExMDYwNzQ5WhcNMjYwMzE4MDYwNzQ5WjAYMRYwFAYD VQQDEw02OWIxMDZiNS1jODM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7OXCDHWoXQo3+n+nSEXWnHvhk6hf+C3XJO08Wy3h9qDz6684+79Tr7KleOA EOew5nSJZxxO1X/zpd2bC94P7+6Kif5r4dJ+B3k8Py01GT/mt7cvnz4NBcw+SSJ4 /IwLDQF2fwAybUh79y7nontkLLfhlX0H2eYyY/ys7PY7evd0GnB45nFoPNXoPiFF yhUsW8hA3/5BXkCo0IoLuGRgjIHNnRRGY1Q9H2OMkZOpw8qpxwSQbfIOtJsP1Dc2 WYx1g7Fgr0yUpPSrkQ0mcu+uvVH8Fsc/c+FykyDgz5WwFVF0NQZ0rJMdo9YfG6hC xtdLxG/fVG+1/gpdmfiDFiCl+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO33W2h1 nYWl7vOYQ4mQThMX2NzaMB8GA1UdIwQYMBaAFEn9M9b1GtakmIRGn6Of7wQyM2+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREUxMy8xNTFGRTQ3RTJB NTYxMUYwQjg0RjUyMjBDNEY5QUUwMi9TZjB6MXZVYTFxU1loRWFmbzVfdkJESXpi NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NmMHoxdlVhMXFTWWhFYWZvNV92QkRJemI0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REUxMy8xNTFGRTQ3RTJBNTYxMUYwQjg0RjUyMjBDNEY5QUUwMi9TZjB6MXZVYTFx U1loRWFmbzVfdkJESXpiNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnhIUtIMAvG6ERYRris7s2P2SZV+HDzk4jWPWl/GECmpH3qI3Yf79+rIThBIJ 07rsDVstlPVsziqRMEXtlUk23oUEif8ZEsfIFDhgq+oldWD5HIl6zCtRUN+HqycP lLVMwv3cr9QivS7xVJUfp1VCCzBLKOmqn83hkcvfbvCcr5Rdjgze2RaXewDMsfB2 lNgZZoOn+AirGOrYAYhxvJcy95pJZ5W3f9fXDjWVtqg+5aSGLqxPU1YY7gMXvXkw lE3xFT/S3Kg9gRulPVDOGVG0xbCq/iU7kyFfRuq/VYL81AEIOtw5q0ClSz+KABEz 0LkoR3sDBut6fo3LaWDWIe7Img== -----END CERTIFICATE-----Generated at Fri Mar 13 04:16:28 2026 by rpki-client