$ rpki-client -vvf rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft File: J04DtnsxEz3nwKrpninBmVlSta0.mft (raw, json) Hash identifier: FIb4vMx99Oh1Wycz8RfXv5XaoG43hJvv9ecBFCbG6dY= Subject key identifier: E4:21:A9:56:5D:99:FF:5D:77:C3:96:2B:6E:D1:AF:DB:0E:FF:1D:87 Authority key identifier: 27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD Certificate issuer: /CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD Certificate serial: 0BFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft Manifest number: 0BF0 Signing time: Sat 28 Feb 2026 19:03:22 +0000 Manifest this update: Sat 28 Feb 2026 19:03:22 +0000 Manifest next update: Sat 07 Mar 2026 19:03:22 +0000 Files and hashes: 1: J04DtnsxEz3nwKrpninBmVlSta0.crl (hash: 7bMF78W8nXXuMZftacN/HKiqP9Xt/sDI9ehoQapqHpA=) 2: E1647F18303311EA8796D584C4F9AE02.roa (hash: A+siabWCuB3xIRMkeynsCCrAfo8cD2JRUNWKm9UeiPs=) 3: E1FC5A5E303311EA8796D584C4F9AE02.roa (hash: DlWNPzEgwL6rY9jLVqQ4BkKSA+pMzEb7rL1OQsFzSd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 19:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3068 (0xbfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91384FB, serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD Validity Not Before: Feb 28 19:03:22 2026 GMT Not After : Mar 7 19:03:22 2026 GMT Subject: CN=69a33bfa-ec40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ce:54:b8:68:10:0c:3f:71:47:3a:09:87:40: 1f:cd:43:ba:e0:c7:7f:e9:60:2c:8c:8f:4d:56:f2: 0e:5a:aa:45:c5:4c:65:4f:83:e2:e1:d3:11:6d:12: b6:0f:53:43:31:65:78:c3:ee:96:74:79:9f:85:2c: 3f:aa:e3:72:fe:65:eb:2d:9c:16:d0:b4:25:f8:b7: 56:e5:3c:05:5f:c1:28:79:7d:a2:ab:bb:35:64:82: f6:7b:62:83:7f:cf:d6:8e:31:76:fb:7e:e2:26:7d: a0:07:ad:70:7d:04:ba:da:b8:8e:90:93:01:0b:8d: de:ca:7b:36:5d:53:e7:dd:40:1b:02:63:23:20:84: cf:2d:62:0f:fd:09:86:0c:e6:ca:60:d1:91:de:f2: 3a:58:0e:8a:9d:a9:18:fb:d3:b0:ea:ee:3f:89:72: b3:5e:3d:f0:87:6b:6e:0a:21:b8:57:a9:42:f3:d1: b9:0f:d0:1c:6d:98:5a:d1:0d:c0:43:c2:47:92:86: af:53:91:a5:0c:42:79:6c:95:93:3f:9b:de:d0:bb: 03:09:33:d6:8f:5c:ed:06:c9:c9:31:8e:2d:6e:67: ff:17:7e:43:fb:9b:95:5e:1a:7a:05:3a:83:da:41: a4:32:d3:f6:43:ed:de:1c:77:bc:bf:6f:4b:d9:b1: cf:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:21:A9:56:5D:99:FF:5D:77:C3:96:2B:6E:D1:AF:DB:0E:FF:1D:87 X509v3 Authority Key Identifier: keyid:27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:41:a5:79:76:19:61:76:df:40:58:74:63:2d:c2:d6:1a:f6: 4c:4a:de:22:8c:75:4f:4c:d1:2e:9a:ca:73:30:8d:82:49:41: 55:20:9d:0e:cd:3e:ae:eb:b9:86:a3:d0:dd:eb:52:d3:4b:c4: 66:ac:5b:dc:5c:a9:1b:fd:13:77:6e:27:69:6c:0a:b0:7b:c0: bc:c8:39:ab:0b:b8:8a:93:bf:60:dd:ad:2a:86:14:e1:77:2d: 5f:36:18:cf:34:ce:a5:0e:76:41:bc:15:0f:4b:40:15:0b:62: d0:07:37:da:ae:0f:e4:54:e4:4e:fd:fd:da:71:0d:43:36:bd: 3f:13:ce:d2:f0:06:cb:1f:89:03:66:8c:6f:76:74:e6:fd:63: f9:f7:d5:02:64:d2:cb:9b:61:e9:7d:eb:94:40:4b:41:d0:f9: b1:47:0c:82:a1:0a:46:be:13:c3:e4:97:2b:7d:a1:42:88:b6: 1e:ae:82:96:7a:85:1e:b6:25:41:91:7c:31:4a:65:d3:fc:b2: e5:2e:bf:22:17:94:03:cb:b6:b1:ad:d4:3b:8c:d1:c9:9d:53: cc:1e:5f:ad:46:91:47:71:26:6e:76:1a:8e:1d:5f:e8:ca:3f: 93:64:e8:a4:5b:53:21:71:8b:0a:12:ed:fd:45:62:1d:5f:20: 3f:8a:b5:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0RkIxMTAvBgNVBAUTKDI3NEUwM0I2N0IzMTEzM0RFN0MwQUFFOTlFMjlDMTk5 NTk1MkI1QUQwHhcNMjYwMjI4MTkwMzIyWhcNMjYwMzA3MTkwMzIyWjAYMRYwFAYD VQQDDA02OWEzM2JmYS1lYzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsM5UuGgQDD9xRzoJh0AfzUO64Md/6WAsjI9NVvIOWqpFxUxlT4Pi4dMRbRK2 D1NDMWV4w+6WdHmfhSw/quNy/mXrLZwW0LQl+LdW5TwFX8EoeX2iq7s1ZIL2e2KD f8/WjjF2+37iJn2gB61wfQS62riOkJMBC43eyns2XVPn3UAbAmMjIITPLWIP/QmG DObKYNGR3vI6WA6KnakY+9Ow6u4/iXKzXj3wh2tuCiG4V6lC89G5D9AcbZha0Q3A Q8JHkoavU5GlDEJ5bJWTP5ve0LsDCTPWj1ztBsnJMY4tbmf/F35D+5uVXhp6BTqD 2kGkMtP2Q+3eHHe8v29L2bHPcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOQhqVZd mf9dd8OWK27Rr9sO/x2HMB8GA1UdIwQYMBaAFCdOA7Z7MRM958Cq6Z4pwZlZUrWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODRGQi8yREQ5MEYyQzMw MzMxMUVBOEQ2NjJDODRDNEY5QUUwMi9KMDREdG5zeEV6M253S3JwbmluQm1WbFN0 YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0owNER0bnN4RXozbndLcnBuaW5CbVZsU3RhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODRGQi8yREQ5MEYyQzMwMzMxMUVBOEQ2NjJDODRDNEY5QUUwMi9KMDREdG5zeEV6 M253S3JwbmluQm1WbFN0YTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiUGleXYZYXbfQFh0Yy3C1hr2TEreIox1T0zRLprKczCNgklBVSCdDs0+ruu5 hqPQ3etS00vEZqxb3FypG/0Td24naWwKsHvAvMg5qwu4ipO/YN2tKoYU4XctXzYY zzTOpQ52QbwVD0tAFQti0Ac32q4P5FTkTv392nENQza9PxPO0vAGyx+JA2aMb3Z0 5v1j+ffVAmTSy5th6X3rlEBLQdD5sUcMgqEKRr4Tw+SXK32hQoi2Hq6ClnqFHrYl QZF8MUpl0/yy5S6/IheUA8u2sa3UO4zRyZ1TzB5frUaRR3EmbnYajh1f6Mo/k2To pFtTIXGLChLt/UViHV8gP4q1og== -----END CERTIFICATE-----Generated at Sun Mar 1 21:06:45 2026 by rpki-client