$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft File: tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft (raw, json) Hash identifier: wzAYW90zHPuCnhFRX8r59TJ75k9KhGzranxncv3eLVk= Subject key identifier: 96:05:34:E5:D3:EA:05:3A:3B:D1:49:83:64:B0:45:28:5E:74:0F:0C Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 Certificate issuer: /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Certificate serial: 0237 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft Manifest number: 0216 Signing time: Mon 02 Mar 2026 02:47:48 +0000 Manifest this update: Mon 02 Mar 2026 02:47:46 +0000 Manifest next update: Mon 09 Mar 2026 02:47:46 +0000 Files and hashes: 1: tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl (hash: 9mzHIhuhtLP7BmKWQ4JVWYuL0ZN92bn88Dq1c9BXkFc=) 2: 221A3064480411F0A14D5A83C4F9AE02.roa (hash: j+rKZJevpIGC1sf1OUnZrF6Qqhjbev7FmmF2TRVvEEw=) 3: 6F4F0F4230AA11F0AD39210DC4F9AE02.roa (hash: cV1FUQ8j7Fc28oanTu0oeEUibe4kPctH/MKiCjzAiiQ=) 4: 3A9B86AED0C011EEB134543DC4F9AE02.roa (hash: ZfhjsvZo9nirkvWfNtmPWNkeFUQmmPyqQ7LPgQBVs7Q=) 5: 2D450BA8B58211F094C92178C4F9AE02.roa (hash: CYyBpgev2I8lIYy5euAo+T58y5gvQtb1JaMBoaDc3j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 567 (0x237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Validity Not Before: Mar 2 02:47:46 2026 GMT Not After : Mar 9 02:47:46 2026 GMT Subject: CN=69a4fa53-fe51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a8:3d:ba:ed:68:10:4d:6c:a7:ae:db:b7:33: e7:77:71:6d:0b:4d:7b:75:03:cf:6a:15:8b:c9:fb: 93:22:4a:ad:62:c5:86:21:0d:e1:98:b3:dc:d2:a8: 7a:a9:63:64:dd:ef:1d:66:4b:61:8d:66:82:66:cc: 4d:cc:9b:24:61:22:d5:8b:46:90:98:e4:c8:f3:b2: e5:34:c0:63:ca:48:34:cb:42:8c:60:0c:6d:27:4b: 7a:3b:cc:60:d7:3e:59:ea:35:70:3e:c2:64:1f:15: 27:65:4d:e6:8a:41:cc:92:5e:35:86:6e:dd:1b:dd: e8:9e:79:69:05:76:96:ee:60:9f:0c:d9:57:4b:7a: a6:07:d6:c7:dd:66:ad:de:09:43:0b:2d:3e:79:d9: ee:7f:ea:43:19:3c:bb:3b:fa:0d:75:ca:c6:34:49: 46:78:85:4b:5b:84:b6:0a:06:1b:69:df:44:c0:d0: f4:f0:36:71:98:85:7a:fa:ce:cc:d7:cc:9f:34:d2: 65:d7:67:61:74:37:e1:9d:04:03:53:17:95:e4:af: 4e:f2:ba:bb:0a:1b:de:a9:08:bd:13:39:35:91:ee: 56:df:05:ba:cb:e8:a7:d3:ea:e3:3a:20:ad:27:ef: 27:b5:eb:44:b4:cc:0f:4b:1a:dd:43:e3:4e:e6:d4: 11:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:05:34:E5:D3:EA:05:3A:3B:D1:49:83:64:B0:45:28:5E:74:0F:0C X509v3 Authority Key Identifier: keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:c7:2d:cc:4d:99:e9:52:1a:f4:e9:83:e2:d2:49:6a:9e:4d: 8c:bc:31:b2:27:63:19:9e:1d:52:b0:8e:83:81:01:ad:46:88: 15:8b:1d:a0:f8:0a:2b:8f:84:05:cf:52:be:5d:0d:c6:81:fa: fb:ba:dd:e6:20:34:b4:44:cc:e2:19:e1:34:f9:73:fb:45:11: 86:ed:96:6c:df:a5:88:f5:ac:3f:28:68:f6:78:12:c6:89:bb: d3:31:d5:d2:0e:75:e4:cb:b0:2b:c2:c8:8a:f4:5b:de:92:a4: a4:08:6c:63:0a:5a:e7:c9:7d:4c:41:7e:72:1c:35:98:5c:72: 5d:bc:a7:8b:b3:e8:cf:d2:5a:30:f0:6d:37:95:8d:9e:b2:ef: eb:e8:c3:4e:31:e7:8e:7b:f6:f0:f5:27:08:b3:f3:22:c1:7f: f6:74:44:a8:cd:ea:cf:dc:e7:d8:77:c0:5b:00:4b:7f:7c:3f: ac:c6:5d:76:00:fb:56:ab:a3:87:c0:f2:87:e1:45:28:58:a6: bc:24:b5:02:b5:2f:70:73:49:82:e4:3c:4d:ad:cb:89:9d:c6: d4:09:30:1e:19:34:71:0a:13:c3:f6:cb:fa:7f:4e:38:c4:3c: 6c:77:00:de:e3:82:31:06:a6:e6:c6:05:19:0c:1d:a4:55:60: c5:3f:cd:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEQxMTAvBgNVBAUTKEI0NTlCOTE1RDY3QjcyRDgzMzUzODQyMDJEQkZCQjM5 NTY1Qzk0RDgwHhcNMjYwMzAyMDI0NzQ2WhcNMjYwMzA5MDI0NzQ2WjAYMRYwFAYD VQQDEw02OWE0ZmE1My1mZTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiag9uu1oEE1sp67btzPnd3FtC017dQPPahWLyfuTIkqtYsWGIQ3hmLPc0qh6 qWNk3e8dZkthjWaCZsxNzJskYSLVi0aQmOTI87LlNMBjykg0y0KMYAxtJ0t6O8xg 1z5Z6jVwPsJkHxUnZU3mikHMkl41hm7dG93onnlpBXaW7mCfDNlXS3qmB9bH3Wat 3glDCy0+ednuf+pDGTy7O/oNdcrGNElGeIVLW4S2CgYbad9EwND08DZxmIV6+s7M 18yfNNJl12dhdDfhnQQDUxeV5K9O8rq7ChveqQi9Ezk1ke5W3wW6y+in0+rjOiCt J+8ntetEtMwPSxrdQ+NO5tQRJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJYFNOXT 6gU6O9FJg2SwRShedA8MMB8GA1UdIwQYMBaAFLRZuRXWe3LYM1OEIC2/uzlWXJTY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0RC81N0MzN0UzODBB NTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0Z3pVNFFnTGItN09WWmNs TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RGbTVGZFo3Y3RnelU0UWdMYi03T1ZaY2xOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0RC81N0MzN0UzODBBNTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0 Z3pVNFFnTGItN09WWmNsTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdcctzE2Z6VIa9OmD4tJJap5NjLwxsidjGZ4dUrCOg4EBrUaIFYsdoPgKK4+E Bc9Svl0NxoH6+7rd5iA0tETM4hnhNPlz+0URhu2WbN+liPWsPyho9ngSxom70zHV 0g515MuwK8LIivRb3pKkpAhsYwpa58l9TEF+chw1mFxyXbyni7Poz9JaMPBtN5WN nrLv6+jDTjHnjnv28PUnCLPzIsF/9nREqM3qz9zn2HfAWwBLf3w/rMZddgD7Vquj h8Dyh+FFKFimvCS1ArUvcHNJguQ8Ta3LiZ3G1AkwHhk0cQoTw/bL+n9OOMQ8bHcA 3uOCMQam5sYFGQwdpFVgxT/NIQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:30:49 2026 by rpki-client