$ rpki-client -vvf rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft File: 40gJvFtFT8eZSH_u2tcCEkAkYjo.mft (raw, json) Hash identifier: Xp6pmnoaH5tGDykZM2KaHezcZwZ6EtUuZ8ZAOPBT6m8= Subject key identifier: 96:EA:F4:1B:F4:1F:16:60:A8:E9:7B:1D:60:E3:F5:E5:41:DC:07:1B Authority key identifier: E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A Certificate issuer: /CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Certificate serial: 0C56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft Manifest number: 0C42 Signing time: Sat 28 Feb 2026 18:57:01 +0000 Manifest this update: Sat 28 Feb 2026 18:57:01 +0000 Manifest next update: Sat 07 Mar 2026 18:57:01 +0000 Files and hashes: 1: 40gJvFtFT8eZSH_u2tcCEkAkYjo.crl (hash: oyLcnu2NYlyLIvu0qZLejqjiNqI6WIGVjFxhcD85JlA=) 2: 78CFD3CC225E11EA8BD18A62C4F9AE02.roa (hash: L1wiXm6f0BfV9abgB0GxLBuSGYeuHdtpS3mqAGNzxF8=) 3: 783907BC225E11EA8BD18A62C4F9AE02.roa (hash: qxIX2+bcJClsIb5W3/a7Mw+8KH7iCZQgMPUKaaOlI/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 18:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3158 (0xc56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91734C9, serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Validity Not Before: Feb 28 18:57:01 2026 GMT Not After : Mar 7 18:57:01 2026 GMT Subject: CN=69a33a7d-35e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bb:13:90:21:f0:af:00:ce:dc:d3:8e:0c:19: 2a:d3:18:da:47:0e:32:cf:4b:a4:ae:c8:0c:4a:95: a1:77:c3:2c:89:54:27:13:c4:50:5f:01:03:6e:3b: fb:eb:5e:f5:ef:d6:35:1a:e9:59:53:6e:a8:b4:05: c0:85:09:90:4b:01:30:52:ee:d9:89:4a:05:b5:84: a5:10:eb:9f:bc:96:4d:ad:f8:4b:6c:41:1a:35:82: 87:b7:38:d3:64:c1:f4:c1:8f:42:e3:4a:0f:e8:47: c9:62:7c:a1:41:71:14:fa:ba:2a:25:d0:b1:08:ad: d6:cd:3b:d8:b3:53:7f:9b:93:a5:23:cd:18:a2:29: 5a:d3:f7:78:86:cc:bd:92:88:aa:0b:b1:70:3e:8b: e0:2d:56:77:72:7c:85:c8:e4:11:29:38:8d:68:22: f6:2b:19:e2:02:58:7a:01:98:46:85:81:5e:fc:44: 2a:e6:c9:16:d1:1c:61:e0:53:b0:e5:aa:12:b5:43: f8:e8:d6:12:68:58:a8:1b:23:3c:e7:b5:30:77:4e: 95:4e:07:db:81:8f:3d:3d:3a:00:27:04:46:c3:2a: 93:de:ea:3b:a4:b6:a5:5b:3e:95:27:7c:d4:7f:8f: 9c:bf:49:b5:4b:82:8f:63:3a:0e:91:d2:dc:9d:fa: 2f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EA:F4:1B:F4:1F:16:60:A8:E9:7B:1D:60:E3:F5:E5:41:DC:07:1B X509v3 Authority Key Identifier: keyid:E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:24:6e:15:2e:26:fa:28:82:7c:da:cf:7b:55:c0:ad:04:4a: bb:93:e3:c1:ed:54:98:46:14:7a:b5:19:39:f6:45:d6:a3:22: 96:e8:4c:03:b5:55:e4:ce:4d:8a:54:6b:c9:b7:05:63:2f:24: ad:3b:8d:9c:cb:c2:42:6c:5e:d2:5d:13:0d:d0:3f:1b:6d:1a: f4:7b:02:51:c2:69:ed:86:d1:4d:e2:89:c0:e6:81:b7:66:31: 16:64:d4:6d:23:47:d5:20:34:09:10:7c:b8:50:25:ea:14:ab: 5f:55:9b:e7:e0:92:11:48:e7:a3:7a:ef:5d:f3:a1:00:50:5e: 39:fe:2c:7a:c1:f4:87:d8:4d:2a:81:62:5a:69:c5:0a:cb:d2: d6:a9:8d:65:70:79:4d:cd:fe:5e:6c:cb:d4:01:d1:97:01:a8: 6e:55:a6:68:d5:c4:e4:11:2f:58:8b:61:64:52:00:26:bb:93: 46:b5:1f:f6:6b:90:cc:15:73:91:aa:52:7b:ea:88:53:7e:a5: 38:91:8c:47:a5:ad:44:5d:70:d4:f3:d0:26:10:db:64:d8:3c: a6:74:63:fb:2b:03:e2:68:87:01:69:65:e2:33:15:e7:8f:91: 6d:5a:52:2e:f2:c9:9f:e2:6e:a2:e1:1a:d7:ff:26:66:8f:00: 87:2b:89:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM0QzkxMTAvBgNVBAUTKEUzNDgwOUJDNUI0NTRGQzc5OTQ4N0ZFRURBRDcwMjEy NDAyNDYyM0EwHhcNMjYwMjI4MTg1NzAxWhcNMjYwMzA3MTg1NzAxWjAYMRYwFAYD VQQDDA02OWEzM2E3ZC0zNWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrsTkCHwrwDO3NOODBkq0xjaRw4yz0ukrsgMSpWhd8MsiVQnE8RQXwEDbjv7 617179Y1GulZU26otAXAhQmQSwEwUu7ZiUoFtYSlEOufvJZNrfhLbEEaNYKHtzjT ZMH0wY9C40oP6EfJYnyhQXEU+roqJdCxCK3WzTvYs1N/m5OlI80Yoila0/d4hsy9 koiqC7FwPovgLVZ3cnyFyOQRKTiNaCL2KxniAlh6AZhGhYFe/EQq5skW0Rxh4FOw 5aoStUP46NYSaFioGyM857Uwd06VTgfbgY89PToAJwRGwyqT3uo7pLalWz6VJ3zU f4+cv0m1S4KPYzoOkdLcnfov+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJbq9Bv0 HxZgqOl7HWDj9eVB3AcbMB8GA1UdIwQYMBaAFONICbxbRU/HmUh/7trXAhJAJGI6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzRDOS82NzM2MDI0QTIy NUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4ZVpTSF91MnRjQ0VrQWtZ am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwZ0p2RnRGVDhlWlNIX3UydGNDRWtBa1lqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzRDOS82NzM2MDI0QTIyNUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4 ZVpTSF91MnRjQ0VrQWtZam8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoCRuFS4m+iiCfNrPe1XArQRKu5Pjwe1UmEYUerUZOfZF1qMiluhMA7VV5M5N ilRrybcFYy8krTuNnMvCQmxe0l0TDdA/G20a9HsCUcJp7YbRTeKJwOaBt2YxFmTU bSNH1SA0CRB8uFAl6hSrX1Wb5+CSEUjno3rvXfOhAFBeOf4sesH0h9hNKoFiWmnF CsvS1qmNZXB5Tc3+XmzL1AHRlwGoblWmaNXE5BEvWIthZFIAJruTRrUf9muQzBVz kapSe+qIU36lOJGMR6WtRF1w1PPQJhDbZNg8pnRj+ysD4miHAWll4jMV54+RbVpS LvLJn+JuouEa1/8mZo8AhyuJEQ== -----END CERTIFICATE-----Generated at Mon Mar 2 02:00:26 2026 by rpki-client