$ rpki-client -vvf rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft File: I90ea4NEljsEULkpM3adRKcyUWs.mft (raw, json) Hash identifier: MshzRu4mZyo5vgqs/twknirXtgP8sFFkjGc8ZDWtD1Q= Subject key identifier: D9:00:A8:36:BC:73:6C:39:D5:53:62:4E:60:49:62:41:C3:E4:7B:84 Authority key identifier: 23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B Certificate issuer: /CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Certificate serial: 01E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft Manifest number: 01D5 Signing time: Mon 02 Mar 2026 02:47:11 +0000 Manifest this update: Mon 02 Mar 2026 02:47:10 +0000 Manifest next update: Mon 09 Mar 2026 02:47:10 +0000 Files and hashes: 1: I90ea4NEljsEULkpM3adRKcyUWs.crl (hash: prxeg3JlqfaXE6wrRYaJvgbTJxHL7KKGn3O/zJhuXZA=) 2: 229EA4AC57D811EEAB6EE280C4F9AE02.roa (hash: hnFKBBY108dazlRhnbTksklhF3iwtTcT7etyMAPxnIw=) 3: 413CAD964D6011EE80905941C4F9AE02.roa (hash: 58pWdHGWJ/ggfr/u1qdz2+yvUUIbs/1dEuDaPVOcwn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 481 (0x1e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91437AC, serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Validity Not Before: Mar 2 02:47:10 2026 GMT Not After : Mar 9 02:47:10 2026 GMT Subject: CN=69a4fa2f-bc36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:38:27:6b:52:48:2a:fb:f1:49:38:10:fb:e4: c9:50:06:85:ec:ef:38:14:2c:82:4f:9e:96:fb:84: 64:34:23:54:5c:89:91:52:c7:0d:84:85:25:44:34: 68:78:a1:65:de:9f:c7:47:86:c4:37:8d:89:dd:3c: fc:47:d5:9e:2b:57:97:95:05:ef:8b:3a:8a:fb:a2: 2c:82:98:d8:0f:2d:ac:e6:23:61:aa:de:58:3d:c1: d0:69:1d:bd:0e:44:c9:ec:75:32:91:3d:5f:06:47: 1b:11:97:ee:e3:34:56:93:ce:60:68:df:9d:8e:5f: 1d:cf:f9:0e:fa:db:82:31:c2:0b:fe:3b:f1:1d:cf: 5b:f9:0a:1d:9c:10:8d:2a:d1:18:bb:92:97:f4:e1: 78:9e:13:a6:8f:e7:00:66:35:f1:ca:98:cb:a3:8f: 57:5c:af:af:71:e2:53:d4:fe:a5:e2:b2:b5:1f:63: f6:92:1c:e0:60:bd:35:ed:75:d5:3d:9d:08:3d:93: 31:bb:b8:fc:25:18:97:ff:26:ae:6e:60:1d:21:4c: b1:f3:71:8d:1f:42:ac:36:b7:b5:c6:11:e2:99:13: f6:8d:d8:f7:a9:ec:b0:ca:cf:5e:d0:c3:32:e4:49: dc:44:0d:50:1f:35:66:0f:e6:25:cb:09:8f:52:85: 0e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:00:A8:36:BC:73:6C:39:D5:53:62:4E:60:49:62:41:C3:E4:7B:84 X509v3 Authority Key Identifier: keyid:23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:4e:ee:e9:bd:77:09:85:7b:92:ff:a1:fb:0d:48:a5:64:68: 76:a2:90:e3:9d:72:ea:62:1a:1c:1f:fe:de:ca:be:c5:f1:86: 55:8c:ae:d9:22:80:cc:23:ae:43:99:7c:fb:11:44:f5:a9:cd: 25:78:7a:8b:f4:eb:eb:f0:7f:87:4f:f2:21:dc:83:da:63:2e: 26:42:d2:a1:93:bc:ce:83:b9:e0:cd:52:f3:81:f8:8a:73:61: 41:96:fd:34:44:b0:69:e4:53:7e:4e:1e:f0:a4:e4:db:9f:50: d6:0a:7a:08:94:24:ab:12:66:c1:5f:64:34:f1:30:2d:fd:35: 9a:92:96:a0:fa:64:16:0a:0a:ac:ab:38:3d:1f:1a:50:22:a1: 4b:9a:d4:f7:2e:05:44:61:4b:f8:19:26:0d:9c:89:ae:e7:c1: 92:98:19:f3:33:e4:52:93:83:ae:cb:03:27:81:83:1d:f6:4c: 0f:41:c1:e8:13:f0:3c:ed:18:a7:a0:58:d3:32:4b:74:45:59: f0:c8:00:28:a3:15:14:3c:fb:93:55:db:87:8a:3b:3f:49:66: 4c:4e:10:b3:7a:c4:bf:de:0e:c9:02:86:fb:1b:7c:48:df:84: 88:eb:cc:e2:dc:55:51:71:4a:8b:52:9e:e6:3e:01:47:5a:09: 91:2c:0d:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM3QUMxMTAvBgNVBAUTKDIzREQxRTZCODM0NDk2M0IwNDUwQjkyOTMzNzY5RDQ0 QTczMjUxNkIwHhcNMjYwMzAyMDI0NzEwWhcNMjYwMzA5MDI0NzEwWjAYMRYwFAYD VQQDEw02OWE0ZmEyZi1iYzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDgna1JIKvvxSTgQ++TJUAaF7O84FCyCT56W+4RkNCNUXImRUscNhIUlRDRo eKFl3p/HR4bEN42J3Tz8R9WeK1eXlQXvizqK+6IsgpjYDy2s5iNhqt5YPcHQaR29 DkTJ7HUykT1fBkcbEZfu4zRWk85gaN+djl8dz/kO+tuCMcIL/jvxHc9b+QodnBCN KtEYu5KX9OF4nhOmj+cAZjXxypjLo49XXK+vceJT1P6l4rK1H2P2khzgYL017XXV PZ0IPZMxu7j8JRiX/yaubmAdIUyx83GNH0KsNre1xhHimRP2jdj3qeywys9e0MMy 5EncRA1QHzVmD+YlywmPUoUO/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNkAqDa8 c2w51VNiTmBJYkHD5HuEMB8GA1UdIwQYMBaAFCPdHmuDRJY7BFC5KTN2nUSnMlFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzdBQy8wMjU2RUI5NjRE NjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxqc0VVTGtwTTNhZFJLY3lV V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5MGVhNE5FbGpzRVVMa3BNM2FkUktjeVVXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzdBQy8wMjU2RUI5NjRENjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxq c0VVTGtwTTNhZFJLY3lVV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK07u6b13CYV7kv+h+w1IpWRodqKQ451y6mIaHB/+3sq+xfGGVYyu2SKAzCOu Q5l8+xFE9anNJXh6i/Tr6/B/h0/yIdyD2mMuJkLSoZO8zoO54M1S84H4inNhQZb9 NESwaeRTfk4e8KTk259Q1gp6CJQkqxJmwV9kNPEwLf01mpKWoPpkFgoKrKs4PR8a UCKhS5rU9y4FRGFL+BkmDZyJrufBkpgZ8zPkUpODrssDJ4GDHfZMD0HB6BPwPO0Y p6BY0zJLdEVZ8MgAKKMVFDz7k1Xbh4o7P0lmTE4Qs3rEv94OyQKG+xt8SN+EiOvM 4txVUXFKi1Ke5j4BR1oJkSwNrA== -----END CERTIFICATE-----Generated at Mon Mar 2 19:42:13 2026 by rpki-client