$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json) Hash identifier: Ff5Wb2BRkoM61J8sK9V3snCGoKNLZzm3sFGO+TO67/o= Subject key identifier: C8:6E:22:01:6A:35:0A:BA:30:2B:A1:18:C4:1A:9F:2B:3D:FE:87:4E Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft Manifest number: 91 Signing time: Sun 01 Mar 2026 08:49:03 +0000 Manifest this update: Sun 01 Mar 2026 08:49:02 +0000 Manifest next update: Sun 08 Mar 2026 08:49:02 +0000 Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: c+BZOKTLr0u3yK+AHR002fOUsikbD+XXqG5PoLTbljo=) 2: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: H/XGmOZJbxNUFS8Tcof2YjyntGMBezbzD9QlTVis80k=) 3: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: GIHBXBl2pD21pCNcWV3u/+IbfxIubhK1MF7gCF8syoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Mar 1 08:49:02 2026 GMT Not After : Mar 8 08:49:02 2026 GMT Subject: CN=69a3fd7f-338c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:52:6d:c5:a0:1a:aa:56:d0:32:46:09:58:d9: 77:a3:8d:82:09:0d:4f:4c:d5:3e:f8:d9:79:85:53: 9b:c9:a2:a3:d3:0f:1e:15:7a:07:4d:25:95:d7:93: b2:02:eb:13:c1:a0:da:3f:69:b1:52:2b:90:0d:cc: 9b:2e:e9:8b:53:dd:bd:70:82:1c:20:2f:b4:f3:de: 6b:6a:63:94:07:5b:92:5d:9d:aa:64:d8:6f:e9:8a: e7:e7:74:5b:21:b4:1e:7a:5a:40:23:a7:50:52:80: c3:1d:dd:63:1c:13:31:d4:ce:29:6a:12:2c:6a:05: df:ab:57:9d:4a:aa:1a:5d:64:8f:6e:d4:87:a2:6e: 5a:94:93:21:d5:5f:32:a2:c5:a0:69:08:db:b7:06: fc:26:80:20:64:90:fb:20:31:64:98:64:9f:4c:f6: 69:9f:36:c9:17:49:f7:48:ba:9a:cd:f1:76:40:88: b3:70:be:b3:7d:5a:01:66:62:09:5a:12:2e:27:70: 4f:56:c2:68:45:35:6f:d8:cf:96:f8:bf:1c:68:e2: d0:9f:0a:5f:25:5e:b0:b2:64:20:20:9b:0f:af:5a: e8:4c:fd:d6:8a:69:26:32:11:35:62:76:09:a2:d2: 74:e1:90:30:50:17:f6:e8:c1:08:f5:ef:e3:79:ee: 8d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6E:22:01:6A:35:0A:BA:30:2B:A1:18:C4:1A:9F:2B:3D:FE:87:4E X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:22:6e:93:ec:cb:5d:3c:73:dd:02:b4:9a:37:ff:05:3a:3e: 14:28:a5:6b:df:2b:09:5d:f7:b8:74:f6:5f:a2:06:0a:aa:32: 92:4d:77:dc:fa:66:13:ea:3f:25:c8:9f:2d:44:cc:c6:87:06: 36:fe:ca:ef:7e:de:ff:b1:a4:26:16:31:e6:da:c1:26:17:91: 0c:58:b6:3e:85:ab:0c:64:68:81:25:78:99:e1:fb:dc:ea:bd: 17:1d:b2:c5:d0:0d:17:04:83:fc:1f:55:b4:5c:c7:c1:19:af: a7:b6:28:4e:e6:a5:63:51:5b:07:1f:df:9c:52:0a:8c:f0:db: e8:32:7f:11:8b:ae:9a:ba:fb:09:34:a4:93:23:46:25:69:54: 93:e0:3f:cb:8a:26:69:82:33:19:55:d4:16:55:c8:39:4b:58: e5:8d:79:0b:58:d8:25:b5:cb:be:52:7e:7d:87:14:9d:3e:23: ca:e8:16:77:9b:fc:16:37:f6:c4:ef:e7:77:0b:49:c0:76:40: 88:a3:f6:50:65:86:7e:0a:51:6b:3d:70:6e:fb:74:47:d7:40: 16:ed:6c:6b:28:34:82:42:1b:3d:59:8b:7e:71:9b:09:03:39: d6:a8:2d:a4:24:21:b0:2c:fd:1f:77:4f:9c:44:8b:b0:f9:52: aa:26:d2:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgzRTIxMTAvBgNVBAUTKDVENkYyNjdCN0FBM0NDMzY0N0M5MzEzQjlFRUM3RDY5 QTE2NzM5NTgwHhcNMjYwMzAxMDg0OTAyWhcNMjYwMzA4MDg0OTAyWjAYMRYwFAYD VQQDEw02OWEzZmQ3Zi0zMzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA61JtxaAaqlbQMkYJWNl3o42CCQ1PTNU++Nl5hVObyaKj0w8eFXoHTSWV15Oy AusTwaDaP2mxUiuQDcybLumLU929cIIcIC+0895ramOUB1uSXZ2qZNhv6Yrn53Rb IbQeelpAI6dQUoDDHd1jHBMx1M4pahIsagXfq1edSqoaXWSPbtSHom5alJMh1V8y osWgaQjbtwb8JoAgZJD7IDFkmGSfTPZpnzbJF0n3SLqazfF2QIizcL6zfVoBZmIJ WhIuJ3BPVsJoRTVv2M+W+L8caOLQnwpfJV6wsmQgIJsPr1roTP3WimkmMhE1YnYJ otJ04ZAwUBf26MEI9e/jee6NbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMhuIgFq NQq6MCuhGMQanys9/odOMB8GA1UdIwQYMBaAFF1vJnt6o8w2R8kxO57sfWmhZzlY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODNFMi80M0ZCNzg3QzNC OTkxMUYwQTBDQzU5NzhDNEY5QUUwMi9YVzhtZTNxanpEWkh5VEU3bnV4OWFhRm5P VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9WZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODNFMi80M0ZCNzg3QzNCOTkxMUYwQTBDQzU5NzhDNEY5QUUwMi9YVzhtZTNxanpE Wkh5VEU3bnV4OWFhRm5PVmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjCJuk+zLXTxz3QK0mjf/BTo+FCila98rCV33uHT2X6IGCqoykk133PpmE+o/ JcifLUTMxocGNv7K737e/7GkJhYx5trBJheRDFi2PoWrDGRogSV4meH73Oq9Fx2y xdANFwSD/B9VtFzHwRmvp7YoTualY1FbBx/fnFIKjPDb6DJ/EYuumrr7CTSkkyNG JWlUk+A/y4omaYIzGVXUFlXIOUtY5Y15C1jYJbXLvlJ+fYcUnT4jyugWd5v8Fjf2 xO/ndwtJwHZAiKP2UGWGfgpRaz1wbvt0R9dAFu1sayg0gkIbPVmLfnGbCQM51qgt pCQhsCz9H3dPnESLsPlSqibScQ== -----END CERTIFICATE-----Generated at Mon Mar 2 13:53:50 2026 by rpki-client