$ rpki-client -vvf rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft File: nB5FqAhMMR3VAEShc2BejuPEzJU.mft (raw, json) Hash identifier: Q1kDPaIqJ7BuO1vD622dTlRANjHuR65aCdW5zaP/rLs= Subject key identifier: D2:FF:BB:6A:A1:53:A2:94:B4:F0:5F:BA:DA:E0:B8:37:FF:99:EB:82 Authority key identifier: 9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95 Certificate issuer: /CN=A91491CC/serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft Manifest number: 53 Signing time: Sun 01 Mar 2026 09:37:20 +0000 Manifest this update: Sun 01 Mar 2026 09:37:20 +0000 Manifest next update: Sun 08 Mar 2026 09:37:20 +0000 Files and hashes: 1: nB5FqAhMMR3VAEShc2BejuPEzJU.crl (hash: 2q/DZ3nWYlAMWCD80dkj45lSiqfy3TZfj+8i44DGaUM=) 2: 31E9004E9A0F11F0BC057E7DC4F9AE02.roa (hash: lMXIM574jb3Z0QsqRGCGYyP7C5VSgFPD1a4YIovILSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91491CC, serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95 Validity Not Before: Mar 1 09:37:20 2026 GMT Not After : Mar 8 09:37:20 2026 GMT Subject: CN=69a408d0-9231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e1:85:7d:99:a9:10:63:3d:3f:13:72:8a:25: 44:61:be:69:5d:b9:a4:82:b5:34:61:04:81:ab:ff: cb:31:9b:2a:82:b5:4a:fa:b6:da:24:96:a9:19:82: 69:1c:09:5f:97:ea:8c:9e:f7:7e:6f:9f:b8:1f:ec: be:02:a8:88:7f:fc:f1:93:0f:9f:0c:1b:bc:93:61: 58:3a:44:88:24:87:51:a4:85:ab:a4:b5:ff:67:09: 9c:d0:e0:5a:1c:78:bb:31:a2:6e:1d:42:2f:fd:d0: b6:5a:33:af:8b:73:cc:c9:45:d8:ad:a5:e0:c7:4c: e0:ad:d2:d3:a9:2f:a3:2d:bf:8c:c8:74:11:c5:c1: 8f:a9:61:83:6a:5e:47:23:00:ce:5e:a2:8d:84:8c: 27:4f:df:88:32:16:fb:63:3c:4c:99:e5:4d:db:f3: a2:f3:e8:37:f9:98:79:90:ab:74:3d:c3:75:0e:e8: 55:b3:51:c1:61:02:ad:4b:e3:3d:f5:8b:bd:bd:09: 4d:54:e6:4a:8d:af:a7:bd:c9:14:79:e9:8a:89:d7: 72:22:71:a4:cd:4c:7c:6f:1b:8f:21:0d:f6:54:b5: 17:47:a5:8e:76:ce:8d:c1:3f:ed:7c:48:40:a4:08: 67:7e:6f:de:ad:ee:aa:ad:e3:07:d0:5b:bb:9d:25: d5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FF:BB:6A:A1:53:A2:94:B4:F0:5F:BA:DA:E0:B8:37:FF:99:EB:82 X509v3 Authority Key Identifier: keyid:9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:28:d8:c0:ea:e5:bd:5f:f8:c8:e1:f7:0b:bb:d3:a6:68:33: 7f:a6:5a:cd:b8:46:09:ae:bb:e5:3d:52:ff:6a:27:5f:81:9d: 7b:b1:53:6d:28:e2:a3:65:91:c8:4c:41:94:cc:3f:ae:72:72: c0:bf:03:bb:89:04:de:26:97:8f:c7:ad:3b:da:b6:b5:04:d1: 13:04:7f:f9:7a:d2:f3:31:f3:0a:54:2a:1b:4d:d3:6f:06:67: 7a:23:20:b3:3d:59:2a:f8:ee:f3:1b:e6:58:49:95:eb:2c:2b: 98:b7:4c:82:eb:e3:e7:7c:d1:21:02:35:6d:b6:de:19:d4:60: 1c:40:d8:70:f7:89:d4:ae:7d:52:04:97:33:0e:c2:66:bc:37: 48:26:53:61:80:17:55:c0:b4:9c:6e:06:3d:29:d7:07:c8:9a: 90:d8:cd:a0:57:7d:d1:58:7d:b7:95:a4:b9:5c:ca:8b:2b:33: 5a:a2:61:2a:57:80:7e:3a:f1:23:82:9a:7e:82:ba:9d:b4:36: 02:f3:4e:56:d3:6e:31:0f:37:31:8a:3b:01:93:e3:07:23:4b: dd:6f:db:06:12:0d:51:95:9b:4d:b8:f7:f5:92:87:a3:89:3f: 9f:9b:7b:ba:b3:a7:b4:13:1f:c9:07:ea:5d:50:4e:9b:72:bd: bc:24:16:74 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OTFDQzExMC8GA1UEBRMoOUMxRTQ1QTgwODRDMzExREQ1MDA0NEExNzM2MDVFOEVF M0M0Q0M5NTAeFw0yNjAzMDEwOTM3MjBaFw0yNjAzMDgwOTM3MjBaMBgxFjAUBgNV BAMTDTY5YTQwOGQwLTkyMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCl4YV9makQYz0/E3KKJURhvmlduaSCtTRhBIGr/8sxmyqCtUr6ttoklqkZgmkc CV+X6oye935vn7gf7L4CqIh//PGTD58MG7yTYVg6RIgkh1Gkhauktf9nCZzQ4Foc eLsxom4dQi/90LZaM6+Lc8zJRditpeDHTOCt0tOpL6Mtv4zIdBHFwY+pYYNqXkcj AM5eoo2EjCdP34gyFvtjPEyZ5U3b86Lz6Df5mHmQq3Q9w3UO6FWzUcFhAq1L4z31 i729CU1U5kqNr6e9yRR56YqJ13IicaTNTHxvG48hDfZUtRdHpY52zo3BP+18SECk CGd+b96t7qqt4wfQW7udJdWTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0v+7aqFT opS08F+62uC4N/+Z64IwHwYDVR0jBBgwFoAUnB5FqAhMMR3VAEShc2BejuPEzJUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5MUNDLzlERjA3RTQ0OUEw RTExRjA4OUM4OEI3Q0M0RjlBRTAyL25CNUZxQWhNTVIzVkFFU2hjMkJlanVQRXpK VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbkI1RnFBaE1NUjNWQUVTaGMyQmVqdVBFekpVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 MUNDLzlERjA3RTQ0OUEwRTExRjA4OUM4OEI3Q0M0RjlBRTAyL25CNUZxQWhNTVIz VkFFU2hjMkJlanVQRXpKVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCEKNjA6uW9X/jI4fcLu9OmaDN/plrNuEYJrrvlPVL/aidfgZ17sVNtKOKjZZHI TEGUzD+ucnLAvwO7iQTeJpePx6072ra1BNETBH/5etLzMfMKVCobTdNvBmd6IyCz PVkq+O7zG+ZYSZXrLCuYt0yC6+PnfNEhAjVttt4Z1GAcQNhw94nUrn1SBJczDsJm vDdIJlNhgBdVwLScbgY9KdcHyJqQ2M2gV33RWH23laS5XMqLKzNaomEqV4B+OvEj gpp+grqdtDYC805W024xDzcxijsBk+MHI0vdb9sGEg1RlZtNuPf1koejiT+fm3u6 s6e0Ex/JB+pdUE6bcr28JBZ0 -----END CERTIFICATE-----Generated at Mon Mar 2 10:56:08 2026 by rpki-client