$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft File: -gRcYwK4c-iDZfqaAhSZtPPFhog.mft (raw, json) Hash identifier: NnWCNyLMabiL7yrrxKj32KwLpAdVBRpSWYlO2A8b+J8= Subject key identifier: 83:6F:B0:9D:2E:C4:E4:BF:72:8D:DC:75:90:50:99:18:0D:AC:5D:F9 Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 Certificate issuer: /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Certificate serial: 05EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft Manifest number: 05D1 Signing time: Sat 28 Feb 2026 23:42:34 +0000 Manifest this update: Sat 28 Feb 2026 23:42:34 +0000 Manifest next update: Sat 07 Mar 2026 23:42:34 +0000 Files and hashes: 1: -gRcYwK4c-iDZfqaAhSZtPPFhog.crl (hash: Tb/97lo8Jauy10Qsinqwh4IkH92FJux3nbsC2LNZflY=) 2: 36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa (hash: KP27oWwshi1ZI1hZNDH63RAAkLv0dKJvlvJEGsDjzKs=) 3: 5C9E3A00E83111F0B570A08B79EE528E.roa (hash: s/UhkyPyKTMHGbvjJlgXfdwpVyieYATdESrNaRuG6IQ=) 4: 52A1A77A6ECF11F0B2785815C4F9AE02.roa (hash: ZDRfk70st2kL6l3vbu2GItPWm8/EuvkzaT+2ep7EeqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 23:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1515 (0x5eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Validity Not Before: Feb 28 23:42:34 2026 GMT Not After : Mar 7 23:42:34 2026 GMT Subject: CN=69a37d6a-c11e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:70:e4:91:c8:01:c9:c7:94:94:90:5c:b9:b5: 39:05:b3:fa:e9:23:25:19:d7:2e:4d:8e:a1:24:d1: 8d:d7:ed:4c:6b:f1:f3:c2:17:02:77:26:dc:39:ed: 4d:e0:78:8f:2d:fb:ae:44:b3:a6:48:d3:24:7f:19: a2:21:9d:11:2b:aa:ba:e3:20:ca:a9:49:20:2e:bd: 7c:48:5b:dc:85:07:db:c5:d0:75:b5:78:fc:cd:79: 5a:14:47:1d:22:1b:86:5a:06:67:66:d0:40:27:18: 35:6b:e4:55:e6:70:e5:c6:67:32:a2:ab:14:3d:e6: 5b:39:5b:f6:11:f2:b0:10:aa:15:26:ec:22:08:c5: db:ce:d6:b4:43:0d:f5:c2:ee:ea:96:b5:fd:ef:81: 97:c6:34:5d:b1:f8:23:b8:d9:b3:f2:23:7e:e5:bd: 65:ed:78:d0:f8:0a:f9:c1:85:e3:a5:cf:58:57:92: bd:61:bd:a7:80:fb:5c:d6:e5:22:4f:89:11:8d:77: bc:6d:ff:63:3d:62:59:fb:1a:20:03:a4:b4:83:49: 07:5f:42:d0:d3:55:ea:16:8f:07:e8:93:9b:95:6a: aa:1f:f9:96:fc:01:16:86:65:e3:32:5a:23:15:db: a4:9d:45:00:5b:dc:0b:7e:84:4e:0a:32:73:3c:2e: 70:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:6F:B0:9D:2E:C4:E4:BF:72:8D:DC:75:90:50:99:18:0D:AC:5D:F9 X509v3 Authority Key Identifier: keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:4c:e7:c2:9d:50:23:95:54:32:c0:87:1f:5c:56:ae:96:60: dc:72:bd:f1:8b:6b:c6:db:c9:d2:d4:16:ed:75:77:dc:6a:d5: fd:56:1e:92:0a:99:5d:81:42:63:bc:41:a5:1e:02:7c:ed:e2: 82:e4:bc:79:67:e4:03:88:46:5c:c9:74:9a:27:c3:40:70:fb: 30:a9:1d:cd:4e:92:16:cc:ce:30:b6:df:f4:0c:75:ab:3c:85: f1:4f:02:49:13:72:fc:88:07:86:e8:47:d2:84:22:e5:2d:d8: ce:47:b5:16:0c:13:1f:4a:d3:23:0b:0c:de:e7:2f:0c:0c:39: 7f:8e:93:d0:04:57:f4:c6:92:92:91:d1:7d:a9:42:11:58:f5: bc:ba:73:cd:01:d6:ee:84:3d:3d:f6:45:09:57:0f:dd:a0:41: 2e:82:c4:0c:f0:33:04:04:ce:6e:dd:e9:7b:2e:ff:8f:96:0d: 62:f0:fb:68:03:95:57:c1:0a:95:9d:74:4a:e1:69:d9:25:fb: 9e:9e:f3:b7:e6:0f:9c:3a:ae:95:85:a6:e8:ea:f7:17:62:67: 68:f6:50:10:55:5b:8f:57:13:65:2c:82:61:68:1f:87:1d:af: 22:9d:10:a4:df:f2:e0:aa:56:9d:07:1f:de:75:16:24:8c:27: 51:f7:d5:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKEZBMDQ1QzYzMDJCODczRTg4MzY1RkE5QTAyMTQ5OUI0 RjNDNTg2ODgwHhcNMjYwMjI4MjM0MjM0WhcNMjYwMzA3MjM0MjM0WjAYMRYwFAYD VQQDDA02OWEzN2Q2YS1jMTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3DkkcgByceUlJBcubU5BbP66SMlGdcuTY6hJNGN1+1Ma/HzwhcCdybcOe1N 4HiPLfuuRLOmSNMkfxmiIZ0RK6q64yDKqUkgLr18SFvchQfbxdB1tXj8zXlaFEcd IhuGWgZnZtBAJxg1a+RV5nDlxmcyoqsUPeZbOVv2EfKwEKoVJuwiCMXbzta0Qw31 wu7qlrX974GXxjRdsfgjuNmz8iN+5b1l7XjQ+Ar5wYXjpc9YV5K9Yb2ngPtc1uUi T4kRjXe8bf9jPWJZ+xogA6S0g0kHX0LQ01XqFo8H6JOblWqqH/mW/AEWhmXjMloj FduknUUAW9wLfoROCjJzPC5wHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFINvsJ0u xOS/co3cdZBQmRgNrF35MB8GA1UdIwQYMBaAFPoEXGMCuHPog2X6mgIUmbTzxYaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82RUMwRTM2ODAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMtaURaZnFhQWhTWnRQUEZo b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nUmNZd0s0Yy1pRFpmcWFBaFNadFBQRmhvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82RUMwRTM2ODAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMt aURaZnFhQWhTWnRQUEZob2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABkznwp1QI5VUMsCHH1xWrpZg3HK98YtrxtvJ0tQW7XV33GrV/VYekgqZXYFC Y7xBpR4CfO3iguS8eWfkA4hGXMl0mifDQHD7MKkdzU6SFszOMLbf9Ax1qzyF8U8C SRNy/IgHhuhH0oQi5S3Yzke1FgwTH0rTIwsM3ucvDAw5f46T0ARX9MaSkpHRfalC EVj1vLpzzQHW7oQ9PfZFCVcP3aBBLoLEDPAzBATObt3pey7/j5YNYvD7aAOVV8EK lZ10SuFp2SX7np7zt+YPnDqulYWm6Or3F2JnaPZQEFVbj1cTZSyCYWgfhx2vIp0Q pN/y4KpWnQcf3nUWJIwnUffVxQ== -----END CERTIFICATE-----Generated at Sun Mar 1 20:46:42 2026 by rpki-client