$ rpki-client -vvf rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft File: fTWFKD3zPrULnDiNWc14bLudw54.mft (raw, json) Hash identifier: 5QaJBDEs8OeammVUttdteZaedch6KxNcLlvZl7+weGw= Subject key identifier: 99:AD:36:C5:98:4B:23:CA:D3:27:9C:CF:EF:CE:64:A9:71:85:B4:7A Authority key identifier: 7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E Certificate issuer: /CN=A91352D1/serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft Manifest number: 3E Signing time: Sun 01 Mar 2026 09:55:02 +0000 Manifest this update: Sun 01 Mar 2026 09:55:01 +0000 Manifest next update: Sun 08 Mar 2026 09:55:01 +0000 Files and hashes: 1: fTWFKD3zPrULnDiNWc14bLudw54.crl (hash: xMi9nZkRp8epVUo6ELYqRo4KgzgLzPrWD+0XqXMs+tw=) 2: F0F521DEC10B11F0B1AC197FC4F9AE02.roa (hash: GOuUl8j+KrJKN/gcw/cqwqcTvAUg8ALJCq8KS5t0JeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.crl rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91352D1, serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E Validity Not Before: Mar 1 09:55:01 2026 GMT Not After : Mar 8 09:55:01 2026 GMT Subject: CN=69a40cf5-86c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b7:85:69:d8:3e:aa:37:8c:05:32:cd:38:69: 8d:ca:cc:36:98:fe:06:f5:47:fd:ad:61:91:49:9e: 0d:be:52:46:05:a3:1d:eb:87:da:fd:6b:d0:63:fa: 97:0c:fc:32:f3:db:cf:94:6b:7b:fe:e2:bc:e8:d1: 53:ed:e4:14:68:dd:1e:7e:fe:42:e0:5e:b5:d8:9a: 72:d1:be:1b:1f:22:ae:b3:41:c5:2b:d2:d3:f3:c6: c2:45:2d:ad:8e:81:70:07:3e:15:1f:8d:83:e9:fe: 2e:33:4f:84:58:0f:05:01:f8:95:c9:f8:3c:40:92: fc:8f:9b:15:29:6f:17:29:f5:55:41:12:62:b2:0d: a2:9e:71:0d:2f:e4:eb:13:1e:0b:32:e3:e9:ac:c7: db:00:75:76:7f:46:33:a6:bd:9f:89:23:1e:73:32: 06:25:3c:81:b3:4d:a0:46:28:7d:06:54:d1:5e:8b: 50:38:9d:49:1e:bd:ea:61:29:f9:c1:d8:31:28:23: 4a:ab:d8:16:f4:a8:a8:64:f6:a8:59:8d:eb:d4:45: a5:dc:6a:27:d2:b8:1f:7a:ae:53:65:1a:51:6c:dd: 84:2f:1f:4b:d2:ce:3d:3d:b2:89:60:bd:5a:cc:60: f6:88:5d:ee:87:8a:21:ef:c0:41:8a:8f:1b:73:a4: 1e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AD:36:C5:98:4B:23:CA:D3:27:9C:CF:EF:CE:64:A9:71:85:B4:7A X509v3 Authority Key Identifier: keyid:7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:cc:2e:e6:8c:9a:6c:96:56:a4:d0:b7:d9:60:a7:b9:1b:27: 7b:c1:8c:62:1c:46:ff:7b:32:4e:40:f9:d2:bf:ec:53:6c:6c: 7f:53:60:e7:ec:ed:67:38:38:93:1d:f3:80:00:7b:5e:d1:5a: 71:5e:93:13:5b:12:a1:66:e2:84:5e:0f:0f:eb:6c:71:f4:87: 81:bf:e9:b7:36:87:09:71:7c:cd:40:7d:b6:fe:74:e0:51:ec: 8b:59:b0:2e:5c:d5:e8:9a:98:79:70:0d:71:f7:41:0d:f9:b3: 9a:82:c9:ba:ec:89:8f:52:44:68:2e:6d:96:aa:74:ce:54:2b: b8:e2:cf:94:30:1c:32:3a:ca:6b:28:89:a8:04:e7:f2:e6:a8: 43:75:76:4c:04:6e:60:35:7e:09:e9:8e:dc:e3:59:22:bb:57: 47:1a:fe:eb:2d:0a:66:9a:34:90:39:85:5c:7f:d0:2b:02:66: cf:26:1b:85:d8:b2:78:f5:33:58:19:43:19:11:1c:2d:19:86: f4:70:34:5c:80:91:33:58:53:8e:70:86:01:22:3b:ca:1c:cf: e5:d6:53:9a:76:d4:22:78:6d:c4:c1:85:1a:52:43:4c:02:2b: a4:70:c5:a2:b4:c8:fa:2f:4b:34:38:8b:2d:ae:5c:bf:cb:ca: 5e:a7:62:b5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NTJEMTExMC8GA1UEBRMoN0QzNTg1MjgzREYzM0VCNTBCOUMzODhENTlDRDc4NkNC QjlEQzM5RTAeFw0yNjAzMDEwOTU1MDFaFw0yNjAzMDgwOTU1MDFaMBgxFjAUBgNV BAMTDTY5YTQwY2Y1LTg2YzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCht4Vp2D6qN4wFMs04aY3KzDaY/gb1R/2tYZFJng2+UkYFox3rh9r9a9Bj+pcM /DLz28+Ua3v+4rzo0VPt5BRo3R5+/kLgXrXYmnLRvhsfIq6zQcUr0tPzxsJFLa2O gXAHPhUfjYPp/i4zT4RYDwUB+JXJ+DxAkvyPmxUpbxcp9VVBEmKyDaKecQ0v5OsT Hgsy4+msx9sAdXZ/RjOmvZ+JIx5zMgYlPIGzTaBGKH0GVNFei1A4nUkevephKfnB 2DEoI0qr2Bb0qKhk9qhZjevURaXcaifSuB96rlNlGlFs3YQvH0vSzj09solgvVrM YPaIXe6HiiHvwEGKjxtzpB6dAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUma02xZhL I8rTJ5zP785kqXGFtHowHwYDVR0jBBgwFoAUfTWFKD3zPrULnDiNWc14bLudw54w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1MkQxLzY0QTVBQjg0QzBF QTExRjA5QkE5REI3NEM0RjlBRTAyL2ZUV0ZLRDN6UHJVTG5EaU5XYzE0Ykx1ZHc1 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZlRXRktEM3pQclVMbkRpTldjMTRiTHVkdzU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 MkQxLzY0QTVBQjg0QzBFQTExRjA5QkE5REI3NEM0RjlBRTAyL2ZUV0ZLRDN6UHJV TG5EaU5XYzE0Ykx1ZHc1NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDBzC7mjJpsllak0LfZYKe5Gyd7wYxiHEb/ezJOQPnSv+xTbGx/U2Dn7O1nODiT HfOAAHte0VpxXpMTWxKhZuKEXg8P62xx9IeBv+m3NocJcXzNQH22/nTgUeyLWbAu XNXomph5cA1x90EN+bOagsm67ImPUkRoLm2WqnTOVCu44s+UMBwyOsprKImoBOfy 5qhDdXZMBG5gNX4J6Y7c41kiu1dHGv7rLQpmmjSQOYVcf9ArAmbPJhuF2LJ49TNY GUMZERwtGYb0cDRcgJEzWFOOcIYBIjvKHM/l1lOadtQieG3EwYUaUkNMAiukcMWi tMj6L0s0OIstrly/y8pep2K1 -----END CERTIFICATE-----Generated at Mon Mar 2 00:17:08 2026 by rpki-client