$ rpki-client -vvf rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft File: s5MbVo8uudLtLKTWS-vAhvuduJo.mft (raw, json) Hash identifier: DQsEgnItmz8VKHyUgo7cwcEeOgpPbbJJE4O/5gE1eyE= Subject key identifier: BA:17:24:43:E2:77:1B:DB:2A:2F:1A:2E:65:B1:C5:EC:43:B4:40:9F Authority key identifier: B3:93:1B:56:8F:2E:B9:D2:ED:2C:A4:D6:4B:EB:C0:86:FB:9D:B8:9A Certificate issuer: /CN=A91867F1/serialNumber=B3931B568F2EB9D2ED2CA4D64BEBC086FB9DB89A Certificate serial: 0B27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft Manifest number: 0B1F Signing time: Mon 02 Mar 2026 02:47:30 +0000 Manifest this update: Mon 02 Mar 2026 02:47:28 +0000 Manifest next update: Mon 09 Mar 2026 02:47:28 +0000 Files and hashes: 1: s5MbVo8uudLtLKTWS-vAhvuduJo.crl (hash: KZtEtqOvkByXILUY8wGB9TGwIN8XXkQlM7AUE1M93gk=) 2: 6FEF33E05C2B11EAAE63403FC4F9AE02.roa (hash: B0MwvTpAg5W6wPRcDcSU74/8QNU8Daja2GzwEix8B2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.crl rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2855 (0xb27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91867F1, serialNumber=B3931B568F2EB9D2ED2CA4D64BEBC086FB9DB89A Validity Not Before: Mar 2 02:47:28 2026 GMT Not After : Mar 9 02:47:28 2026 GMT Subject: CN=69a4fa41-d838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7d:fe:38:06:b6:e3:4c:aa:66:33:c6:ce:4d: 2f:df:1c:7c:d8:12:bb:cf:b0:fc:78:34:cc:1e:1c: 2c:42:67:d3:bf:b8:38:89:16:ec:6c:37:6c:ea:55: 68:d9:23:4f:37:1d:9f:df:ed:93:89:97:a0:e1:d1: f0:e3:f3:f8:f6:7d:c1:87:d5:8c:03:08:7b:e3:9c: 8d:40:2d:b5:39:b5:dd:08:2e:26:d4:1a:35:44:a4: fa:ed:37:2a:cc:06:16:89:59:10:37:3c:a2:58:8e: eb:2a:00:91:e1:f1:05:9a:cc:58:8b:7f:f7:2b:b4: 3f:35:18:19:d3:c4:c4:d9:21:85:fb:64:db:b0:8e: 60:e3:6c:48:7c:b3:2e:03:c1:cb:19:03:ac:d3:08: 9f:a7:7e:49:0d:61:c8:0b:bd:c2:75:cc:0d:cb:f0: 3e:61:a1:5f:6a:64:41:20:c9:de:ee:98:92:8a:6e: 3b:5d:54:e6:18:d6:ef:5b:99:25:c2:1f:d3:c0:da: ca:2e:ef:59:fd:30:79:37:3d:fb:a1:fa:3f:bc:78: 1f:ee:ed:bc:cd:f7:45:b3:58:66:20:f9:e3:cc:ec: 3d:4b:c2:a9:24:5f:fa:25:67:3d:d7:26:98:4c:9e: b6:54:ef:e8:41:34:24:b1:c8:4a:eb:bd:2a:13:be: 70:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:17:24:43:E2:77:1B:DB:2A:2F:1A:2E:65:B1:C5:EC:43:B4:40:9F X509v3 Authority Key Identifier: keyid:B3:93:1B:56:8F:2E:B9:D2:ED:2C:A4:D6:4B:EB:C0:86:FB:9D:B8:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:e4:7c:4b:7a:27:98:16:6f:09:a8:a7:cd:d4:34:71:82:4e: 7a:ea:ee:87:6e:73:a5:29:20:b2:7d:af:77:50:36:ad:90:0a: 70:78:09:d8:63:09:71:d7:41:87:6d:05:94:70:cd:c5:ba:07: ec:c0:97:7e:b5:7b:92:13:0e:d0:9d:a5:c5:b0:07:40:0c:f5: 1e:b9:ca:15:2a:b2:19:e9:c2:fa:90:da:e2:22:36:00:cc:00: 7e:d8:eb:41:ec:33:72:31:6a:f8:0d:55:32:23:6f:85:3c:c7: 35:4f:33:57:8a:a6:2c:b8:e2:2b:ba:fa:00:f8:5d:59:4b:76: 81:3b:d0:d3:55:51:da:84:c6:a7:be:c3:f6:e8:ab:63:ef:38: cb:a3:9c:8e:7c:66:eb:06:42:5f:d9:4c:64:6d:7f:b1:a6:a2: f7:94:f2:74:b6:fa:04:ac:62:06:0e:9c:84:1b:4b:13:0f:07: e4:99:6c:04:7b:08:42:29:47:23:48:5a:82:fc:44:bb:72:13: 3a:a3:b8:3d:a3:f4:75:f9:13:11:c5:c1:76:99:16:e2:5c:4b: 59:54:0a:59:62:3f:11:47:e2:3f:a3:88:b8:06:ea:a9:e0:2f: d7:bc:e7:fd:69:8d:db:92:06:43:f3:24:16:02:5c:bc:d5:c6: da:06:f3:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY3RjExMTAvBgNVBAUTKEIzOTMxQjU2OEYyRUI5RDJFRDJDQTRENjRCRUJDMDg2 RkI5REI4OUEwHhcNMjYwMzAyMDI0NzI4WhcNMjYwMzA5MDI0NzI4WjAYMRYwFAYD VQQDEw02OWE0ZmE0MS1kODM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAg33+OAa240yqZjPGzk0v3xx82BK7z7D8eDTMHhwsQmfTv7g4iRbsbDds6lVo 2SNPNx2f3+2TiZeg4dHw4/P49n3Bh9WMAwh745yNQC21ObXdCC4m1Bo1RKT67Tcq zAYWiVkQNzyiWI7rKgCR4fEFmsxYi3/3K7Q/NRgZ08TE2SGF+2TbsI5g42xIfLMu A8HLGQOs0wifp35JDWHIC73CdcwNy/A+YaFfamRBIMne7piSim47XVTmGNbvW5kl wh/TwNrKLu9Z/TB5Nz37ofo/vHgf7u28zfdFs1hmIPnjzOw9S8KpJF/6JWc91yaY TJ62VO/oQTQkschK670qE75wcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLoXJEPi dxvbKi8aLmWxxexDtECfMB8GA1UdIwQYMBaAFLOTG1aPLrnS7Syk1kvrwIb7nbia MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjdGMS84MDlENzE1QzU5 MUExMUVBOTY5MkFBM0NDNEY5QUUwMi9zNU1iVm84dXVkTHRMS1RXUy12QWh2dWR1 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1TWJWbzh1dWRMdExLVFdTLXZBaHZ1ZHVKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjdGMS84MDlENzE1QzU5MUExMUVBOTY5MkFBM0NDNEY5QUUwMi9zNU1iVm84dXVk THRMS1RXUy12QWh2dWR1Sm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgOR8S3onmBZvCainzdQ0cYJOeuruh25zpSkgsn2vd1A2rZAKcHgJ2GMJcddB h20FlHDNxboH7MCXfrV7khMO0J2lxbAHQAz1HrnKFSqyGenC+pDa4iI2AMwAftjr QewzcjFq+A1VMiNvhTzHNU8zV4qmLLjiK7r6APhdWUt2gTvQ01VR2oTGp77D9uir Y+84y6Ocjnxm6wZCX9lMZG1/saai95TydLb6BKxiBg6chBtLEw8H5JlsBHsIQilH I0hagvxEu3ITOqO4PaP0dfkTEcXBdpkW4lxLWVQKWWI/EUfiP6OIuAbqqeAv17zn /WmN25IGQ/MkFgJcvNXG2gbzFw== -----END CERTIFICATE-----Generated at Mon Mar 2 11:58:32 2026 by rpki-client