$ rpki-client -vvf rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft File: 0va3pYZYVsPyxEYWNgMfsFtgYGo.mft (raw, json) Hash identifier: J+dVd3vUxSVfUilse+KGGrejOgWPWRs7dnZ8nEouZAU= Subject key identifier: E7:39:01:47:B3:EF:CF:40:B8:73:0F:10:BF:31:64:2F:95:94:96:2F Authority key identifier: D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A Certificate issuer: /CN=A91149C8/serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Certificate serial: 0CFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft Manifest number: 0CF3 Signing time: Sat 28 Feb 2026 18:16:32 +0000 Manifest this update: Sat 28 Feb 2026 18:16:31 +0000 Manifest next update: Sat 07 Mar 2026 18:16:31 +0000 Files and hashes: 1: 0va3pYZYVsPyxEYWNgMfsFtgYGo.crl (hash: F1uqHl54Z1iNAp8qVch804+RwXzSiLXulD2H6cY/esg=) 2: A2A7584ACA7F11EAB343722AC4F9AE02.roa (hash: fAbemN+lwz0SU1+ivydeiDA0TzR3+7XHqo4CZ/rRSIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 18:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3326 (0xcfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149C8, serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Validity Not Before: Feb 28 18:16:31 2026 GMT Not After : Mar 7 18:16:31 2026 GMT Subject: CN=69a33100-49ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:57:29:ee:6a:29:63:23:72:15:fc:1f:80:76: 4f:5f:25:07:3a:f3:d0:dc:61:af:5e:5b:be:84:ab: e5:19:2f:b2:1e:49:67:b2:3f:16:54:9a:fc:e1:e2: 0e:ba:36:e4:a4:a9:ed:4d:d3:93:ec:5e:e5:b5:6a: d9:57:ad:f3:2d:e9:d6:2d:c6:5f:6f:28:15:16:90: ae:d9:0e:f7:63:c6:7f:b7:af:0a:b9:62:98:f2:65: 21:aa:fb:f6:48:8d:d9:13:a1:93:24:8d:9c:fc:f2: 98:02:7e:b0:b5:14:6f:72:9e:06:6d:ac:f9:ef:25: 13:c5:f2:51:25:82:86:5e:b2:5c:a3:74:c4:a2:58: 32:6a:01:ea:2f:32:a9:54:62:7e:0a:4b:1e:3b:46: 5b:da:47:5b:5c:12:e6:c9:19:46:0d:5b:91:c6:be: 76:d6:7f:72:39:d8:04:65:58:47:b7:09:a3:4d:fb: e3:21:00:f2:4b:c7:f0:cd:65:00:99:88:2d:62:34: 1a:db:cc:3e:3b:e7:98:2a:94:49:8e:73:c9:81:8a: 13:de:da:95:0d:a4:b5:fa:b8:31:ac:09:cf:e3:d9: a6:e7:13:28:f6:9a:6e:6f:0f:17:e2:22:06:ac:49: 1b:37:49:4e:db:0b:7d:18:45:f7:d6:0f:0b:b3:aa: 41:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:39:01:47:B3:EF:CF:40:B8:73:0F:10:BF:31:64:2F:95:94:96:2F X509v3 Authority Key Identifier: keyid:D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:fe:fe:36:d5:5e:51:50:0d:c7:38:c5:0a:6b:4a:e2:7d:16: 83:2e:7d:eb:12:c6:93:ec:13:2f:99:b4:f7:7b:d7:f2:5b:f8: fa:18:d2:0f:41:4e:89:51:18:f8:cb:7d:92:48:dc:ef:75:41: 1e:03:b0:9d:ce:9c:e3:0f:f0:8a:c4:e5:41:bf:cd:83:32:c2: da:b5:00:f2:2a:07:2a:b0:4f:38:58:8d:0b:65:f3:0f:53:3b: 0b:8e:59:66:a9:3d:87:e2:53:36:73:0f:a6:57:c5:22:97:6e: 4c:3f:70:5e:26:78:78:eb:c2:e2:b4:53:73:6c:a3:d2:2c:f0: e7:95:0b:76:95:d5:e5:0d:f0:3a:df:23:e1:af:50:83:7f:b3: 6f:0b:be:e8:21:ad:83:56:f4:d5:07:e9:8b:bf:9d:d3:b8:ee: 1a:c5:dd:44:a9:90:28:43:8e:0e:9e:8a:92:85:c3:0d:07:ba: dd:7c:db:31:50:6a:dc:da:28:de:28:29:e5:31:3e:6e:6f:93: 1c:f0:83:1a:4a:9c:75:85:8b:36:ec:4a:9c:d8:81:cb:42:4f: 9a:92:74:78:c3:4d:86:ce:c3:5e:b2:5a:dc:1d:cb:e1:8b:3e: f7:52:20:c9:30:84:5a:66:c9:86:c6:d0:00:83:3c:79:9d:9d: e5:80:ae:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5QzgxMTAvBgNVBAUTKEQyRjZCN0E1ODY1ODU2QzNGMkM0NDYxNjM2MDMxRkIw NUI2MDYwNkEwHhcNMjYwMjI4MTgxNjMxWhcNMjYwMzA3MTgxNjMxWjAYMRYwFAYD VQQDDA02OWEzMzEwMC00OWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Vcp7mopYyNyFfwfgHZPXyUHOvPQ3GGvXlu+hKvlGS+yHklnsj8WVJr84eIO ujbkpKntTdOT7F7ltWrZV63zLenWLcZfbygVFpCu2Q73Y8Z/t68KuWKY8mUhqvv2 SI3ZE6GTJI2c/PKYAn6wtRRvcp4Gbaz57yUTxfJRJYKGXrJco3TEolgyagHqLzKp VGJ+CkseO0Zb2kdbXBLmyRlGDVuRxr521n9yOdgEZVhHtwmjTfvjIQDyS8fwzWUA mYgtYjQa28w+O+eYKpRJjnPJgYoT3tqVDaS1+rgxrAnP49mm5xMo9ppubw8X4iIG rEkbN0lO2wt9GEX31g8Ls6pB0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOc5AUez 789AuHMPEL8xZC+VlJYvMB8GA1UdIwQYMBaAFNL2t6WGWFbD8sRGFjYDH7BbYGBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlDOC8yRkM0NjU5MEZG MkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZzUHl4RVlXTmdNZnNGdGdZ R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB2YTNwWVpZVnNQeXhFWVdOZ01mc0Z0Z1lHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlDOC8yRkM0NjU5MEZGMkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZz UHl4RVlXTmdNZnNGdGdZR28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIv7+NtVeUVANxzjFCmtK4n0Wgy596xLGk+wTL5m093vX8lv4+hjSD0FOiVEY +Mt9kkjc73VBHgOwnc6c4w/wisTlQb/NgzLC2rUA8ioHKrBPOFiNC2XzD1M7C45Z Zqk9h+JTNnMPplfFIpduTD9wXiZ4eOvC4rRTc2yj0izw55ULdpXV5Q3wOt8j4a9Q g3+zbwu+6CGtg1b01Qfpi7+d07juGsXdRKmQKEOODp6KkoXDDQe63XzbMVBq3Noo 3igp5TE+bm+THPCDGkqcdYWLNuxKnNiBy0JPmpJ0eMNNhs7DXrJa3B3L4Ys+91Ig yTCEWmbJhsbQAIM8eZ2d5YCuXQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:18:47 2026 by rpki-client