$ rpki-client -vvf rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft File: _Er4bnAJnaC6rC7dx30b70x1qJU.mft (raw, json) Hash identifier: HD7/nPmAq3z6Wys8+0NwOr27wQY4mp0fHzNpwGm1+N0= Subject key identifier: D3:CB:5F:27:3F:5D:05:DB:8E:84:B3:31:E7:FC:31:90:18:13:D9:2C Authority key identifier: FC:4A:F8:6E:70:09:9D:A0:BA:AC:2E:DD:C7:7D:1B:EF:4C:75:A8:95 Certificate issuer: /CN=A917D31E/serialNumber=FC4AF86E70099DA0BAAC2EDDC77D1BEF4C75A895 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft Manifest number: 44 Signing time: Sun 01 Mar 2026 09:49:50 +0000 Manifest this update: Sun 01 Mar 2026 09:49:49 +0000 Manifest next update: Sun 08 Mar 2026 09:49:49 +0000 Files and hashes: 1: _Er4bnAJnaC6rC7dx30b70x1qJU.crl (hash: q38UhoPcMLWBXzvefmueT3MJcAAKHbDg0TvKN3w6jVI=) 2: 3505DC88B6E411F090AAA224C4F9AE02.roa (hash: 0eYQs4+CcW1n3DAWa3b99gSSE/qKrGxFztudMbxy8B8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.crl rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D31E, serialNumber=FC4AF86E70099DA0BAAC2EDDC77D1BEF4C75A895 Validity Not Before: Mar 1 09:49:49 2026 GMT Not After : Mar 8 09:49:49 2026 GMT Subject: CN=69a40bbe-f17a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:30:da:71:68:58:a3:55:2a:3f:3a:2b:c5: 5c:1c:33:8b:0d:99:93:51:6b:c0:12:9a:18:d5:0a: 95:00:b8:67:17:17:2c:f8:28:7b:93:46:57:68:41: 14:ba:ad:8c:8b:82:1e:28:45:d3:a2:0a:90:be:04: 66:8f:73:a1:30:72:0a:c6:86:fa:1b:d6:09:e8:93: ca:fb:f2:80:84:79:4c:21:a6:e7:3b:56:93:d4:e2: f5:6c:72:67:fe:77:e1:65:0d:48:51:98:0d:6e:6f: 5d:a8:d4:10:d4:74:9b:5b:ec:81:d6:a2:6c:e9:b2: 41:35:51:dd:e1:cc:05:af:dc:a1:da:79:db:f3:74: 3d:8e:2c:92:68:a9:63:c6:01:54:82:7f:e9:69:19: d9:3a:8e:29:96:c7:77:60:00:78:c1:bf:28:ee:52: 17:74:ab:69:d7:50:78:cc:f8:81:90:ae:56:7b:60: e8:84:7e:41:56:68:f4:65:19:1d:76:da:78:d8:72: 16:8a:b2:72:7d:f4:2c:9b:98:ea:95:ce:96:d2:0c: 1b:d3:fd:3d:bd:a3:cd:20:80:34:85:62:1d:33:3f: 50:85:86:b9:e6:18:e1:6a:53:43:3b:6e:96:e9:bd: d5:b5:83:cb:89:24:33:36:16:26:e3:4a:82:de:59: aa:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CB:5F:27:3F:5D:05:DB:8E:84:B3:31:E7:FC:31:90:18:13:D9:2C X509v3 Authority Key Identifier: keyid:FC:4A:F8:6E:70:09:9D:A0:BA:AC:2E:DD:C7:7D:1B:EF:4C:75:A8:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:de:05:ec:c2:c7:55:1d:f0:d8:13:1d:c8:66:ef:73:1d:1d: 41:f5:fc:b4:2b:f4:db:66:56:aa:e5:92:38:a4:9a:ce:20:85: 79:26:64:f3:48:09:6a:17:6a:93:9c:20:f0:03:13:de:20:45: db:f7:52:2c:11:f4:96:f8:b2:72:db:49:87:30:64:f7:df:62: 74:4a:7c:d5:d8:9f:b5:d1:54:52:05:18:5b:cc:62:2a:94:80: 7d:78:2d:94:31:f7:d6:7f:57:60:2c:e9:87:0c:af:c9:a2:59: 47:3b:33:38:fa:94:50:8c:2b:85:2f:82:40:1b:ec:93:c8:5d: 3e:32:09:b0:7d:fb:83:33:ac:10:b4:7e:25:3b:47:fd:32:32: 20:21:74:9a:ed:ea:8f:94:8f:d1:e3:c4:c5:32:c3:c8:df:81: 4e:27:dd:66:37:68:42:b0:0d:59:0b:3a:2c:c2:df:d1:a7:db: 13:f2:d3:9c:98:03:8c:51:3d:79:72:d3:35:a6:9e:68:c6:29: ba:d4:da:f0:4d:05:64:3d:62:52:61:8c:6d:f5:bd:19:68:e0: 8a:8d:3a:93:28:ee:92:74:0f:f2:3a:ba:46:60:ec:37:f9:f0: ee:20:4d:f8:c5:76:9a:c8:e0:32:29:a2:41:02:3f:dc:c9:ab: d7:73:30:54 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDMxRTExMC8GA1UEBRMoRkM0QUY4NkU3MDA5OURBMEJBQUMyRUREQzc3RDFCRUY0 Qzc1QTg5NTAeFw0yNjAzMDEwOTQ5NDlaFw0yNjAzMDgwOTQ5NDlaMBgxFjAUBgNV BAMTDTY5YTQwYmJlLWYxN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3zDDacWhYo1UqPzorxVwcM4sNmZNRa8ASmhjVCpUAuGcXFyz4KHuTRldoQRS6 rYyLgh4oRdOiCpC+BGaPc6EwcgrGhvob1gnok8r78oCEeUwhpuc7VpPU4vVscmf+ d+FlDUhRmA1ub12o1BDUdJtb7IHWomzpskE1Ud3hzAWv3KHaedvzdD2OLJJoqWPG AVSCf+lpGdk6jimWx3dgAHjBvyjuUhd0q2nXUHjM+IGQrlZ7YOiEfkFWaPRlGR12 2njYchaKsnJ99CybmOqVzpbSDBvT/T29o80ggDSFYh0zP1CFhrnmGOFqU0M7bpbp vdW1g8uJJDM2FibjSoLeWaqZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU08tfJz9d BduOhLMx5/wxkBgT2SwwHwYDVR0jBBgwFoAU/Er4bnAJnaC6rC7dx30b70x1qJUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEMzFFLzUzNzg0NUEwQjRC QjExRjBBMTM1MzcyMkM0RjlBRTAyL19FcjRibkFKbmFDNnJDN2R4MzBiNzB4MXFK VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0VyNGJuQUpuYUM2ckM3ZHgzMGI3MHgxcUpVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE MzFFLzUzNzg0NUEwQjRCQjExRjBBMTM1MzcyMkM0RjlBRTAyL19FcjRibkFKbmFD NnJDN2R4MzBiNzB4MXFKVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCZ3gXswsdVHfDYEx3IZu9zHR1B9fy0K/TbZlaq5ZI4pJrOIIV5JmTzSAlqF2qT nCDwAxPeIEXb91IsEfSW+LJy20mHMGT332J0SnzV2J+10VRSBRhbzGIqlIB9eC2U MffWf1dgLOmHDK/JollHOzM4+pRQjCuFL4JAG+yTyF0+MgmwffuDM6wQtH4lO0f9 MjIgIXSa7eqPlI/R48TFMsPI34FOJ91mN2hCsA1ZCzoswt/Rp9sT8tOcmAOMUT15 ctM1pp5oxim61NrwTQVkPWJSYYxt9b0ZaOCKjTqTKO6SdA/yOrpGYOw3+fDuIE34 xXaayOAyKaJBAj/cyavXczBU -----END CERTIFICATE-----Generated at Mon Mar 2 13:38:33 2026 by rpki-client