$ rpki-client -vvf rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft File: pkvkSssA5L2uRJGw-gzXCZ0scnw.mft (raw, json) Hash identifier: EQWnPAEBSl+HGkIMyb/M2AoBnXXL/LsSmQhkTYmA/Y4= Subject key identifier: 86:F8:3B:D3:35:BC:BC:98:00:FA:AB:B1:5A:20:93:5B:9D:2C:45:BB Authority key identifier: A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C Certificate issuer: /CN=A91288D9/serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft Manifest number: EF Signing time: Mon 02 Mar 2026 01:07:20 +0000 Manifest this update: Mon 02 Mar 2026 01:07:16 +0000 Manifest next update: Mon 09 Mar 2026 01:07:16 +0000 Files and hashes: 1: pkvkSssA5L2uRJGw-gzXCZ0scnw.crl (hash: nYLXNB8Z06H85Yl6CVRdWe8+HITb/y0c98QCcy6nbNw=) 2: 8D431594FFDF11EF8DF72930C4F9AE02.roa (hash: pkoy3XTlYyZ8zRpQAksJG/nCLkfVOV6ccFZKSXm/Z5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91288D9, serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C Validity Not Before: Mar 2 01:07:16 2026 GMT Not After : Mar 9 01:07:16 2026 GMT Subject: CN=69a4e2c7-1509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:63:56:55:77:f7:e4:c6:de:b0:a8:3f:0c:54: f1:ff:9f:a3:e5:96:ad:1e:a6:65:6a:2b:3e:ec:4a: fb:18:d5:4f:13:49:9f:0a:4f:74:40:8f:35:18:64: 84:8e:a6:f5:b3:3a:ce:ba:59:d4:5c:d1:bc:52:d3: 55:7e:84:b7:9d:ba:57:78:a7:d4:cf:09:76:d7:3a: 4f:9f:81:7f:19:d9:b4:bd:36:e4:cc:db:9b:ba:b8: 57:1b:e4:b9:54:fb:c2:5e:4a:69:ae:1d:c0:d8:f4: 40:e0:fd:d2:0f:69:36:84:81:9b:5f:fe:61:d0:d9: 2c:0a:a7:5b:b5:07:13:dd:2a:fb:55:1a:34:c6:ac: 86:4b:fe:31:46:8c:a2:e1:45:0e:41:1b:87:37:b0: 70:d3:f5:2c:32:84:b0:64:a3:c4:e1:a0:30:26:33: 6f:9d:f0:03:ca:78:8f:6b:06:61:76:df:e2:9d:7c: d9:c7:15:3c:72:a3:1d:3b:08:bb:0a:e0:c1:0a:36: 51:9f:75:1a:80:10:e3:f3:02:2a:d9:63:f1:32:89: 53:e4:4a:01:18:e7:f4:73:4e:34:6c:7c:af:54:c4: 4f:0a:a8:f2:c8:80:c8:e2:8f:90:f6:a6:fb:2e:1e: d3:c7:f1:ea:1f:e7:16:fd:0d:f6:73:2b:94:3e:b3: 48:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F8:3B:D3:35:BC:BC:98:00:FA:AB:B1:5A:20:93:5B:9D:2C:45:BB X509v3 Authority Key Identifier: keyid:A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:67:c5:09:12:bd:63:86:19:98:c1:57:99:7c:b7:d7:34:ac: 6f:c6:1e:b4:87:f9:d3:fa:d2:0f:74:19:b4:57:ef:83:d4:62: 31:6d:a4:af:10:02:df:80:5b:2e:53:82:91:cf:d4:83:ad:dd: c0:02:30:b9:91:c4:e2:ec:3e:dc:97:c2:5a:c3:8b:9a:25:75: 2c:a1:48:16:74:f6:a7:ba:83:4c:1e:82:d2:cc:22:d1:57:2f: b9:0d:3f:53:7d:17:e4:4c:48:36:80:1e:e5:e0:67:05:2f:18: 44:37:61:ca:9c:6f:53:c1:53:9e:80:76:e5:72:82:87:cb:6c: f0:d4:a4:33:32:0f:7c:68:84:56:c8:d8:fe:4b:e6:27:1c:06: c0:46:0e:90:a5:5e:72:a6:d7:c0:d6:b1:d2:9f:cb:07:5f:28: eb:d6:ed:e7:26:81:0a:30:68:3d:11:1d:28:8f:de:e2:8f:6e: 09:8f:88:f9:b0:1b:d0:9a:c9:a8:d7:82:21:c8:5e:e9:a3:0d: a5:10:48:aa:bf:66:25:46:c5:97:2c:02:9c:e2:ea:2a:62:bb: f0:37:77:64:2d:61:ce:50:3a:7b:b5:cd:c7:fc:92:83:89:04: 63:e0:d0:c0:90:2c:9e:a6:70:9a:be:46:d4:87:ae:94:73:08: bc:dc:64:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4RDkxMTAvBgNVBAUTKEE2NEJFNDRBQ0IwMEU0QkRBRTQ0OTFCMEZBMENENzA5 OUQyQzcyN0MwHhcNMjYwMzAyMDEwNzE2WhcNMjYwMzA5MDEwNzE2WjAYMRYwFAYD VQQDEw02OWE0ZTJjNy0xNTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6WNWVXf35MbesKg/DFTx/5+j5ZatHqZlais+7Er7GNVPE0mfCk90QI81GGSE jqb1szrOulnUXNG8UtNVfoS3nbpXeKfUzwl21zpPn4F/Gdm0vTbkzNuburhXG+S5 VPvCXkpprh3A2PRA4P3SD2k2hIGbX/5h0NksCqdbtQcT3Sr7VRo0xqyGS/4xRoyi 4UUOQRuHN7Bw0/UsMoSwZKPE4aAwJjNvnfADyniPawZhdt/inXzZxxU8cqMdOwi7 CuDBCjZRn3UagBDj8wIq2WPxMolT5EoBGOf0c040bHyvVMRPCqjyyIDI4o+Q9qb7 Lh7Tx/HqH+cW/Q32cyuUPrNI7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIb4O9M1 vLyYAPqrsVogk1udLEW7MB8GA1UdIwQYMBaAFKZL5ErLAOS9rkSRsPoM1wmdLHJ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODhEOS9GODNFM0ZDRUFE QkMxMUVGQjMwMjk4M0VDNEY5QUUwMi9wa3ZrU3NzQTVMMnVSSkd3LWd6WENaMHNj bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BrdmtTc3NBNUwydVJKR3ctZ3pYQ1owc2Nudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODhEOS9GODNFM0ZDRUFEQkMxMUVGQjMwMjk4M0VDNEY5QUUwMi9wa3ZrU3NzQTVM MnVSSkd3LWd6WENaMHNjbncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW2fFCRK9Y4YZmMFXmXy31zSsb8YetIf50/rSD3QZtFfvg9RiMW2krxAC34Bb LlOCkc/Ug63dwAIwuZHE4uw+3JfCWsOLmiV1LKFIFnT2p7qDTB6C0swi0VcvuQ0/ U30X5ExINoAe5eBnBS8YRDdhypxvU8FTnoB25XKCh8ts8NSkMzIPfGiEVsjY/kvm JxwGwEYOkKVecqbXwNax0p/LB18o69bt5yaBCjBoPREdKI/e4o9uCY+I+bAb0JrJ qNeCIche6aMNpRBIqr9mJUbFlywCnOLqKmK78Dd3ZC1hzlA6e7XNx/ySg4kEY+DQ wJAsnqZwmr5G1IeulHMIvNxkAg== -----END CERTIFICATE-----Generated at Mon Mar 2 06:39:13 2026 by rpki-client