$ rpki-client -vvf rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft File: uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft (raw, json) Hash identifier: oqqGOnaIQN+ONbYM57ShK21hoWhB810CIUvlkOl9DHo= Subject key identifier: 4D:6A:46:C8:FD:04:0B:98:1F:28:D8:1B:BC:3C:9B:67:5F:27:2B:1D Authority key identifier: B8:AD:8D:91:6C:D9:48:2B:6D:A5:5D:30:7C:E9:5C:07:A9:5B:2F:74 Certificate issuer: /CN=A91103CF/serialNumber=B8AD8D916CD9482B6DA55D307CE95C07A95B2F74 Certificate serial: 0423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft Manifest number: 0418 Signing time: Mon 02 Mar 2026 00:54:34 +0000 Manifest this update: Mon 02 Mar 2026 00:54:32 +0000 Manifest next update: Mon 09 Mar 2026 00:54:32 +0000 Files and hashes: 1: uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl (hash: JbZCNf8ORJ5jreSPXjYs85AYYiox98vTpojIWHzudfs=) 2: 931A51C07F5811EE82ECE456C4F9AE02.roa (hash: iqRn8MuwHOm1OeP7OiaBzMQDUZroez3UjhhvxuLDGhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1059 (0x423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91103CF, serialNumber=B8AD8D916CD9482B6DA55D307CE95C07A95B2F74 Validity Not Before: Mar 2 00:54:32 2026 GMT Not After : Mar 9 00:54:32 2026 GMT Subject: CN=69a4dfc9-91bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:65:66:38:a2:a3:6f:53:6a:f7:55:67:e5:c2: 5c:4d:b8:e6:2f:64:b5:68:d5:d6:c2:b9:58:e1:c4: 15:14:50:b6:e9:4f:2d:9f:8b:7d:c6:67:e5:3c:85: 00:d4:0c:57:6a:52:78:85:f6:f7:18:c1:3c:1a:12: c3:a7:99:f1:f5:f0:ad:55:1c:8d:88:58:48:2d:45: 1a:fe:7b:03:aa:5a:d2:ee:8f:83:a4:a4:e7:a2:88: e6:34:68:03:ea:3e:c1:2c:a6:4a:f1:07:19:17:e9: 64:69:38:24:31:2d:ed:14:21:48:fa:60:26:e2:f3: 51:b7:2f:4d:3a:ca:d0:43:bf:e2:39:f5:60:a0:cc: 4e:81:d1:00:65:3e:3c:0a:db:8a:fd:72:04:9a:76: d2:2c:b7:91:d9:91:b6:64:06:e7:37:45:ff:80:00: 4b:64:78:23:02:e8:da:05:a5:36:40:f1:d4:73:53: c6:c3:1b:2a:cb:70:35:e1:60:da:49:77:4c:c4:95: ac:c6:bc:f5:3a:ff:b3:76:dd:bd:78:ca:f1:34:00: 1a:cc:eb:80:d3:6d:e1:b3:23:f0:6c:95:4a:e9:b1: a9:b8:a8:23:8a:2d:a5:17:1e:79:89:9e:ee:45:a5: 85:a2:2b:d4:48:c0:cc:12:77:f6:7b:c8:56:50:98: 42:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6A:46:C8:FD:04:0B:98:1F:28:D8:1B:BC:3C:9B:67:5F:27:2B:1D X509v3 Authority Key Identifier: keyid:B8:AD:8D:91:6C:D9:48:2B:6D:A5:5D:30:7C:E9:5C:07:A9:5B:2F:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:21:23:db:2b:b0:44:49:09:ca:13:66:15:d0:a0:15:8f:73: e3:23:03:34:31:d1:2b:24:d4:e5:db:ae:38:25:d2:6b:e7:1d: 63:9e:d6:5e:bd:0e:bb:df:bf:19:71:43:b2:93:df:ab:c7:6a: 29:0c:72:be:ef:9d:b5:12:b0:ab:4d:10:b4:b2:1c:78:9d:7e: a7:88:f3:1f:22:26:a5:07:f8:82:82:d5:73:de:2e:f7:54:48: 47:eb:90:d6:f0:d9:a2:ad:ae:db:1b:35:14:81:a0:97:bd:c2: 70:3a:c4:0c:88:e3:17:3f:c6:2c:b8:88:b3:a4:70:96:88:e3: 19:b8:97:62:79:1c:91:df:f4:f2:66:db:43:59:2e:7b:23:3b: 74:c9:3f:a6:c7:4e:5b:88:af:a3:29:9a:a7:58:4b:f1:45:2a: 4a:fa:a8:26:32:5f:e2:f1:15:ec:2c:59:14:4b:80:02:9a:ba: 86:dd:fa:83:15:0f:7f:75:0e:4d:2f:72:c6:93:92:8f:8a:c5: 1b:9b:17:cf:5a:4a:55:26:f8:d5:fa:25:61:7b:52:6a:9e:b5: 61:2a:d9:f1:30:55:b9:4a:d4:36:e2:1e:59:13:cc:2f:48:43: cf:7a:d1:64:d4:aa:b7:1b:c7:8b:92:b8:a3:fd:83:63:18:17: ed:ca:a5:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAzQ0YxMTAvBgNVBAUTKEI4QUQ4RDkxNkNEOTQ4MkI2REE1NUQzMDdDRTk1QzA3 QTk1QjJGNzQwHhcNMjYwMzAyMDA1NDMyWhcNMjYwMzA5MDA1NDMyWjAYMRYwFAYD VQQDEw02OWE0ZGZjOS05MWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2VmOKKjb1Nq91Vn5cJcTbjmL2S1aNXWwrlY4cQVFFC26U8tn4t9xmflPIUA 1AxXalJ4hfb3GME8GhLDp5nx9fCtVRyNiFhILUUa/nsDqlrS7o+DpKTnoojmNGgD 6j7BLKZK8QcZF+lkaTgkMS3tFCFI+mAm4vNRty9NOsrQQ7/iOfVgoMxOgdEAZT48 CtuK/XIEmnbSLLeR2ZG2ZAbnN0X/gABLZHgjAujaBaU2QPHUc1PGwxsqy3A14WDa SXdMxJWsxrz1Ov+zdt29eMrxNAAazOuA023hsyPwbJVK6bGpuKgjii2lFx55iZ7u RaWFoivUSMDMEnf2e8hWUJhCmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE1qRsj9 BAuYHyjYG7w8m2dfJysdMB8GA1UdIwQYMBaAFLitjZFs2UgrbaVdMHzpXAepWy90 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDNDRi8xN0Q2RTRDMkE2 OEExMUVDQTlBNjM1NTFDNEY5QUUwMi91SzJOa1d6WlNDdHRwVjB3Zk9sY0I2bGJM M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VLMk5rV3paU0N0dHBWMHdmT2xjQjZsYkwzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDNDRi8xN0Q2RTRDMkE2OEExMUVDQTlBNjM1NTFDNEY5QUUwMi91SzJOa1d6WlND dHRwVjB3Zk9sY0I2bGJMM1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAiEj2yuwREkJyhNmFdCgFY9z4yMDNDHRKyTU5duuOCXSa+cdY57WXr0Ou9+/ GXFDspPfq8dqKQxyvu+dtRKwq00QtLIceJ1+p4jzHyImpQf4goLVc94u91RIR+uQ 1vDZoq2u2xs1FIGgl73CcDrEDIjjFz/GLLiIs6RwlojjGbiXYnkckd/08mbbQ1ku eyM7dMk/psdOW4ivoymap1hL8UUqSvqoJjJf4vEV7CxZFEuAApq6ht36gxUPf3UO TS9yxpOSj4rFG5sXz1pKVSb41folYXtSap61YSrZ8TBVuUrUNuIeWRPML0hDz3rR ZNSqtxvHi5K4o/2DYxgX7cql+g== -----END CERTIFICATE-----Generated at Mon Mar 2 07:42:13 2026 by rpki-client