$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft File: oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft (raw, json) Hash identifier: biFFEbrw+rD9aZnsgQIcw/BIBKlm1JXml0XFxavvf/I= Subject key identifier: D3:62:83:92:3A:77:A1:E5:60:F3:FC:3B:E9:3B:BA:00:17:E0:E2:E1 Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 Certificate issuer: /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Certificate serial: 0256 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft Manifest number: 022F Signing time: Wed 25 Mar 2026 02:21:35 +0000 Manifest this update: Wed 25 Mar 2026 02:21:35 +0000 Manifest next update: Wed 01 Apr 2026 02:21:35 +0000 Files and hashes: 1: oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl (hash: 0ng+YFIcv6HkraFECSIWPMhWa9XRMKcAs6bVbk+bHaE=) 2: 803597528D5911F087734E0BC4F9AE02.roa (hash: qjwNHVxj8rh4p5dbVDJ7FmnGLRA0aF4pw1XtOGgQ9/I=) 3: D0103496FD6611EE9188C568C4F9AE02.roa (hash: 8jWtzjSsUygdzDOwuRDWbJ+/Oi0HeYvaJIf1pNwKDHM=) 4: E762B166FAF811EE92A3642EC4F9AE02.roa (hash: KuP7ghPE5jbRo6RpIG8mjTF5foQeJCW+P2dt3dU5qe4=) 5: 13D68EB430AB11F0A15DC75AC4F9AE02.roa (hash: Df8chXaHVx7SlzUpc1kpONRIDx/OSWJIy+4OsePAPPY=) 6: CE65A4E4A57E11EFA1B6E428C4F9AE02.roa (hash: O0Z9WR74ZqHIIViEx/QrJsLKy5xwDiS8tDAgBMROtv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 598 (0x256) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAA91, serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Validity Not Before: Mar 25 02:21:35 2026 GMT Not After : Apr 1 02:21:35 2026 GMT Subject: CN=69c346af-f319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b8:33:b9:9d:c1:28:56:d3:f8:5b:f4:04:51: 20:2d:10:79:75:bf:86:05:9a:51:05:8f:e6:fa:b3: 89:70:cd:fa:a3:22:7d:69:9c:09:6b:db:1e:3d:9a: 12:bb:d1:f1:92:db:42:a0:ca:fc:ba:a5:f2:d3:0e: 64:1a:d1:30:a5:44:b3:f8:45:98:b9:d3:88:b6:bf: 92:15:35:f4:f0:92:9f:d8:d3:62:03:6c:de:2a:4c: ab:b5:41:56:be:ac:94:c7:f8:76:31:31:ba:bc:a4: 4c:b3:2a:b6:a9:f6:59:4c:fb:f9:12:02:61:31:00: d3:84:1f:5e:84:a8:e5:1c:31:e5:07:aa:f2:ca:bf: 90:cd:b6:e2:83:c0:fa:09:24:61:d9:39:70:e3:22: a0:d0:4f:a0:14:23:2e:9f:8b:81:e8:d9:36:17:5d: 21:e5:ef:87:59:c9:c2:a6:8a:be:17:b1:2b:d9:42: 84:4a:65:4f:8e:67:d7:61:7b:20:4a:6b:06:e3:c5: 85:f9:90:69:9e:de:22:c9:c6:6d:eb:8d:b6:7f:ac: 28:46:d7:83:b7:41:2c:98:0c:08:80:81:0b:50:b4: 97:72:c5:92:39:8c:62:0b:9b:4a:9d:1b:5f:bf:aa: 4a:d2:08:2c:ac:9e:72:f6:41:04:0c:05:ab:c8:56: 20:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:62:83:92:3A:77:A1:E5:60:F3:FC:3B:E9:3B:BA:00:17:E0:E2:E1 X509v3 Authority Key Identifier: keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:7e:a4:d1:b4:f4:4a:0b:99:87:1f:92:36:12:8d:f6:a1:9a: 5e:7e:dd:db:e6:f1:05:7e:6e:a6:97:3e:03:cd:44:f2:9e:fa: a1:45:6d:a9:43:18:71:3d:b8:93:b4:7e:a6:4f:9e:6f:da:b9: 5e:0f:b9:94:3d:5d:b2:9a:6a:11:de:02:c2:b8:8c:89:54:5a: 98:b1:49:07:c1:82:cd:14:18:cc:de:3c:00:54:73:21:69:40: 58:f9:7f:e8:07:e9:d2:37:d4:34:17:d3:1a:47:a7:76:e6:85: 02:8e:88:10:5d:51:ac:24:c0:56:d0:83:90:e5:ab:23:84:6f: 26:e6:d7:2f:68:02:3f:52:66:31:1b:b3:76:a2:28:01:67:de: b5:2e:a4:3f:d9:98:41:31:3f:38:91:24:3e:70:3d:e9:95:e7: 54:cb:c6:30:0c:5f:8d:2c:d7:c1:b8:3e:78:13:3a:39:fa:df: 16:c1:cb:90:0c:08:59:20:0e:fb:52:74:47:2c:5f:db:a6:7a: 36:8a:fa:6f:0b:da:e1:3a:75:f4:3f:ae:d6:2c:de:43:57:e4: 7a:3c:b9:d2:23:b9:94:b1:68:88:6e:64:c9:2f:99:b5:7e:01: ba:21:9f:19:71:f1:81:96:c3:ab:7a:03:b4:3a:da:d1:9c:41: fe:46:44:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFBOTExMTAvBgNVBAUTKEEwQzgwQ0VFMDYzQzlDQzgyQ0RDQjBCQzc0NUM0RkU0 NkREMDI2NTcwHhcNMjYwMzI1MDIyMTM1WhcNMjYwNDAxMDIyMTM1WjAYMRYwFAYD VQQDEw02OWMzNDZhZi1mMzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8bgzuZ3BKFbT+Fv0BFEgLRB5db+GBZpRBY/m+rOJcM36oyJ9aZwJa9sePZoS u9HxkttCoMr8uqXy0w5kGtEwpUSz+EWYudOItr+SFTX08JKf2NNiA2zeKkyrtUFW vqyUx/h2MTG6vKRMsyq2qfZZTPv5EgJhMQDThB9ehKjlHDHlB6ryyr+Qzbbig8D6 CSRh2Tlw4yKg0E+gFCMun4uB6Nk2F10h5e+HWcnCpoq+F7Er2UKESmVPjmfXYXsg SmsG48WF+ZBpnt4iycZt6422f6woRteDt0EsmAwIgIELULSXcsWSOYxiC5tKnRtf v6pK0ggsrJ5y9kEEDAWryFYgoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNNig5I6 d6HlYPP8O+k7ugAX4OLhMB8GA1UdIwQYMBaAFKDIDO4GPJzILNywvHRcT+Rt0CZX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUE5MS85NDIwRDIxMDBB NUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5NZ3MzTEM4ZEZ4UDVHM1FK bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NZ003Z1k4bk1nczNMQzhkRnhQNUczUUpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUE5MS85NDIwRDIxMDBBNUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5N Z3MzTEM4ZEZ4UDVHM1FKbGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlH6k0bT0SguZhx+SNhKN9qGaXn7d2+bxBX5uppc+A81E8p76oUVtqUMYcT24 k7R+pk+eb9q5Xg+5lD1dsppqEd4CwriMiVRamLFJB8GCzRQYzN48AFRzIWlAWPl/ 6Afp0jfUNBfTGkenduaFAo6IEF1RrCTAVtCDkOWrI4RvJubXL2gCP1JmMRuzdqIo AWfetS6kP9mYQTE/OJEkPnA96ZXnVMvGMAxfjSzXwbg+eBM6OfrfFsHLkAwIWSAO +1J0Ryxf26Z6Nor6bwva4Tp19D+u1izeQ1fkejy50iO5lLFoiG5kyS+ZtX4BuiGf GXHxgZbDq3oDtDra0ZxB/kZEJA== -----END CERTIFICATE-----Generated at Thu Mar 26 12:00:08 2026 by rpki-client