$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft File: -0q1qaTcN7vWXmHkKkJWz5UbjHM.mft (raw, json) Hash identifier: C2OUWKA6+g2AFIU4m74ZyykBuZSoG2gMHVgSIUtoj4g= Subject key identifier: 65:C5:42:D8:F6:1B:DA:4F:E7:19:F9:EA:09:11:72:5A:A1:0A:67:B4 Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73 Certificate issuer: /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73 Certificate serial: 0468 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft Manifest number: 045A Signing time: Tue 24 Mar 2026 23:52:29 +0000 Manifest this update: Tue 24 Mar 2026 23:52:28 +0000 Manifest next update: Tue 31 Mar 2026 23:52:28 +0000 Files and hashes: 1: -0q1qaTcN7vWXmHkKkJWz5UbjHM.crl (hash: b1t7T9AkTNETrjz6CZh+mVWfty1Uj9qwSNcBX1INFUA=) 2: C657777835BD11EEBBA15F71C4F9AE02.roa (hash: m5Zp36HLKWq14buNjXUXM88ah3I3cvh6NwVn7wphM5U=) 3: B1B6929CCFD611ED8BEF6866C4F9AE02.roa (hash: g8QyFrY2SL1yfIP7mOq7u1s7UxTRzh1nPBxe7Z6/CnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1128 (0x468) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE567, serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73 Validity Not Before: Mar 24 23:52:28 2026 GMT Not After : Mar 31 23:52:28 2026 GMT Subject: CN=69c323bd-a5bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:c3:66:51:b7:d2:73:dc:82:04:f2:34:4e: 38:ad:b9:1f:8a:9d:53:63:10:60:71:37:88:74:de: 71:5f:57:a0:d0:72:19:4d:4e:97:3e:2e:d8:c0:09: c9:85:ff:8d:51:31:90:7b:b3:a7:67:8d:b0:b9:6f: 18:42:de:33:fd:ef:c6:04:8d:33:2f:41:77:57:b4: 27:2f:a7:9f:a8:87:0d:db:fe:5c:89:31:a1:d6:56: 47:09:39:7c:60:58:43:6b:1b:3a:38:40:17:2a:3d: e6:ee:77:df:53:46:d0:3c:0d:27:01:d4:5b:08:14: d0:e7:d0:da:d5:c6:bd:98:45:32:f3:93:3d:d4:5c: 68:f6:cf:96:f4:d3:ac:a6:c3:0f:de:fb:fb:bc:ab: f8:90:78:bd:b1:72:9b:95:9a:35:63:d2:f1:f7:9b: 3a:7d:c9:bd:3d:6e:f5:1e:a2:3d:6d:b7:dc:e0:ad: e3:2a:a2:2e:11:8e:e8:f1:55:ff:a1:ee:fe:dc:68: 31:3f:8f:f9:0b:84:76:38:1c:13:35:de:7e:a8:4d: 12:aa:27:e6:d3:e3:31:0e:d4:8c:fe:17:48:1f:de: 37:c3:51:e4:31:20:33:23:e3:a8:af:8f:41:9a:2f: fa:5a:27:75:c3:eb:5c:f7:db:33:d8:53:ce:17:d2: bd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C5:42:D8:F6:1B:DA:4F:E7:19:F9:EA:09:11:72:5A:A1:0A:67:B4 X509v3 Authority Key Identifier: keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:5e:aa:e9:bd:b9:ee:9c:86:00:ee:73:7f:7f:d9:f4:14:2b: c6:7e:d7:f6:86:cc:ae:67:91:9c:ad:79:97:e0:a8:3c:84:a8: 2d:76:12:80:8c:b1:53:97:60:b8:1c:4d:fc:ec:de:0c:24:65: 4d:6d:3e:94:2c:6a:62:77:e5:db:ca:f0:e2:6c:6f:2f:df:5d: 1f:5e:65:bd:3a:a2:18:a5:9e:8a:14:ec:ca:ec:30:7d:f7:08: 56:ff:f2:4a:7c:70:c5:22:11:d5:e8:7a:47:eb:d3:db:60:2c: 3a:1b:49:6f:12:03:a6:a9:b8:bc:74:3d:0a:64:60:5d:15:a1: 11:79:98:70:2d:91:01:ea:22:ac:90:0b:71:c2:8b:ea:5a:38: 1b:d3:37:7e:c3:b5:fb:8b:61:18:99:51:a4:7f:a8:65:47:1d: 79:10:fb:46:de:ed:6e:af:5c:b9:10:4c:ff:20:bf:7a:52:00: c8:bd:8e:a3:33:0e:d2:78:48:de:c6:e4:af:e3:62:37:1f:b4: 76:f1:77:60:ba:7f:85:6d:e7:d0:a2:52:d6:47:b3:84:bb:78: 1e:91:67:d3:3d:7c:d8:e8:1f:69:22:a8:06:03:17:4a:10:d6: c4:53:a0:ee:6d:d9:73:c7:e6:79:49:8d:f7:ab:4d:1c:b1:bc: 89:24:4d:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU1NjcxMTAvBgNVBAUTKEZCNEFCNUE5QTREQzM3QkJENjVFNjFFNDJBNDI1NkNG OTUxQjhDNzMwHhcNMjYwMzI0MjM1MjI4WhcNMjYwMzMxMjM1MjI4WjAYMRYwFAYD VQQDEw02OWMzMjNiZC1hNWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxLDZlG30nPcggTyNE44rbkfip1TYxBgcTeIdN5xX1eg0HIZTU6XPi7YwAnJ hf+NUTGQe7OnZ42wuW8YQt4z/e/GBI0zL0F3V7QnL6efqIcN2/5ciTGh1lZHCTl8 YFhDaxs6OEAXKj3m7nffU0bQPA0nAdRbCBTQ59Da1ca9mEUy85M91Fxo9s+W9NOs psMP3vv7vKv4kHi9sXKblZo1Y9Lx95s6fcm9PW71HqI9bbfc4K3jKqIuEY7o8VX/ oe7+3GgxP4/5C4R2OBwTNd5+qE0Sqifm0+MxDtSM/hdIH943w1HkMSAzI+Oor49B mi/6Wid1w+tc99sz2FPOF9K93wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGXFQtj2 G9pP5xn56gkRclqhCme0MB8GA1UdIwQYMBaAFPtKtamk3De71l5h5CpCVs+VG4xz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTU2Ny9FNjc5OTRERThG RjQxMUVDOTA0NzJGN0RDNEY5QUUwMi8tMHExcWFUY043dldYbUhrS2tKV3o1VWJq SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0wcTFxYVRjTjd2V1htSGtLa0pXejVVYmpITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTU2Ny9FNjc5OTRERThGRjQxMUVDOTA0NzJGN0RDNEY5QUUwMi8tMHExcWFUY043 dldYbUhrS2tKV3o1VWJqSE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQV6q6b257pyGAO5zf3/Z9BQrxn7X9obMrmeRnK15l+CoPISoLXYSgIyxU5dg uBxN/OzeDCRlTW0+lCxqYnfl28rw4mxvL99dH15lvTqiGKWeihTsyuwwffcIVv/y SnxwxSIR1eh6R+vT22AsOhtJbxIDpqm4vHQ9CmRgXRWhEXmYcC2RAeoirJALccKL 6lo4G9M3fsO1+4thGJlRpH+oZUcdeRD7Rt7tbq9cuRBM/yC/elIAyL2OozMO0nhI 3sbkr+NiNx+0dvF3YLp/hW3n0KJS1kezhLt4HpFn0z182OgfaSKoBgMXShDWxFOg 7m3Zc8fmeUmN96tNHLG8iSRNEg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:43:47 2026 by rpki-client