$ rpki-client -vvf rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft File: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft (raw, json) Hash identifier: Kt2dDE1oOMJ5HSKLsoF8Pjk7Lg4m7SEMqiZg6lEfgEA= Subject key identifier: C3:EF:A6:26:78:4D:72:EA:E4:60:83:EE:47:37:56:E5:3A:CB:2B:30 Authority key identifier: 68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18 Certificate issuer: /CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018 Certificate serial: 35A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft Manifest number: 3555 Signing time: Sat 28 Feb 2026 14:18:00 +0000 Manifest this update: Sat 28 Feb 2026 14:17:59 +0000 Manifest next update: Sat 07 Mar 2026 14:17:59 +0000 Files and hashes: 1: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl (hash: xJMdw5Uc3cib3AwRlggFzBnVLKlxnL8Cvc7buobaG1s=) 2: 6A18A5B0F88811EF9CB20317C4F9AE02.roa (hash: H76rrDZxK8h/g51b1krAIQ2ulCKuPO82m4joCbnFfEs=) 3: 19ACBFF66CDF11EAB92A3A24C4F9AE02.roa (hash: rb6m6NgtqMNqMVoEYBcUFewdPh6xLzsagwAw8cSDCbE=) 4: 73E75DA6F94711EF9B713B3AC4F9AE02.roa (hash: jqW67pSJSIsRiaBgE6s/DK3BAL3JeM6fk0sbod9Ihss=) 5: 749BE0C8F94711EF9B713B3AC4F9AE02.roa (hash: D48/pxU7MzDuerY2hyHqIJz8Ni5AYoPlrPyxeWvQn8M=) 6: EDCDDF00FA7811EFAF0CDF57C4F9AE02.roa (hash: kN3zyoollwJXDugnYM0yHLk48cRpRCSo426eiI4jnbk=) 7: 35415D50FA7711EFB598EF54C4F9AE02.roa (hash: tqonfMb2T4kEzGLFTTW3PK/xQqepl87jr8dA78s4VGI=) 8: 797B4DEC293B11E8B187196DC4F9AE02.roa (hash: m0T5p+j/9s+rm9D6YdSh//2Alx2Eae+Du8lbaB1hR7Y=) 9: 1921C8926CDF11EAB92A3A24C4F9AE02.roa (hash: IkqW+PwyXlQ+AUTKEJ4fHo5q5mHtKj5Ve8Q8p0ADu48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 14:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13735 (0x35a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED, serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018 Validity Not Before: Feb 28 14:17:59 2026 GMT Not After : Mar 7 14:17:59 2026 GMT Subject: CN=69a2f918-0efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:22:39:9b:59:07:0a:8d:04:6b:20:54:3a:66: 0b:cc:b7:8e:35:3b:b5:48:a3:ad:0b:58:7e:09:bf: 19:7c:98:d9:78:f6:ec:56:f8:83:2f:4b:f7:36:53: 9f:9d:f5:e6:90:a9:a3:2f:f4:e9:24:d0:0f:1e:28: 63:31:6c:c5:d5:af:40:98:7d:c3:8e:25:7e:2c:3e: 99:78:34:69:3e:82:60:03:ea:e7:72:95:b8:48:6a: 9e:e6:83:cb:f3:44:10:af:81:26:06:1f:f0:83:84: 66:1e:32:45:00:c4:13:3b:b6:a8:1f:1d:95:4a:86: de:b7:1a:0a:23:e3:49:b8:83:fc:5d:e3:5e:eb:f1: d7:47:a9:07:6a:9f:83:46:8f:fc:3b:94:e2:c5:db: ef:b2:be:93:bb:d3:8b:3e:ac:52:4a:50:0c:8c:d3: 4f:64:57:cc:81:d8:8c:1b:ff:dc:3f:65:a2:6a:67: 30:cd:3c:97:cd:66:1c:d7:37:63:3b:29:26:86:6a: b5:b1:64:f8:c7:2a:c7:4d:80:3d:d9:00:08:a5:9d: fe:7c:a7:77:27:b6:8f:46:f4:bf:66:e1:e7:b8:c8: b6:0c:cc:54:a7:c3:98:f2:b8:0a:37:3f:72:35:e7: d2:e7:bb:e7:95:11:06:26:51:cb:c4:2a:4a:61:96: 6c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EF:A6:26:78:4D:72:EA:E4:60:83:EE:47:37:56:E5:3A:CB:2B:30 X509v3 Authority Key Identifier: keyid:68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:1d:6f:47:4e:7e:c6:99:a5:b3:ec:80:32:cb:0b:73:ef:68: 1e:68:46:6c:58:f8:2c:41:ba:a8:b7:db:3d:23:4e:a1:07:bd: 65:c1:ff:ff:4a:51:d4:32:ba:db:0d:e2:41:bf:9b:01:24:00: 0d:12:4f:ef:ad:04:8d:69:32:2a:53:7b:0c:20:54:1d:4d:58: 55:fb:55:67:12:fa:b4:f7:98:42:e7:e9:e9:96:9f:90:d9:c2: 5c:e5:b4:5d:87:60:b7:04:ee:67:29:33:53:2b:13:c7:8b:3b: 52:8e:a8:a2:de:9f:76:ae:17:cf:11:a9:81:7a:f9:12:c1:af: 63:57:bf:24:86:7c:55:3c:1b:92:df:b3:66:29:4e:ee:50:0b: 40:31:9d:cd:a8:1b:56:42:2f:1c:9a:68:4c:72:51:7d:03:78: e5:6d:a2:2f:ef:2f:f9:47:f3:d1:00:cb:bf:b4:43:5e:76:ec: 9f:c7:9b:47:86:bf:49:b1:38:09:a3:55:c7:ab:92:54:99:ef: 97:c5:3a:15:d3:09:c0:80:02:60:85:b6:9c:c4:81:48:fc:4c: 15:df:33:38:bf:07:e9:b1:9e:63:41:8f:69:7e:2e:44:47:10: d0:32:90:81:1e:e2:52:5e:bf:91:c1:5c:73:e4:99:75:2b:12: 44:9b:58:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcyRUQxMTAvBgNVBAUTKDY4RkFGOURBQ0UxOTc2OENBQzNENEVEN0JCMjQzNzJC RkZBNkQwMTgwHhcNMjYwMjI4MTQxNzU5WhcNMjYwMzA3MTQxNzU5WjAYMRYwFAYD VQQDDA02OWEyZjkxOC0wZWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1iI5m1kHCo0EayBUOmYLzLeONTu1SKOtC1h+Cb8ZfJjZePbsVviDL0v3NlOf nfXmkKmjL/TpJNAPHihjMWzF1a9AmH3DjiV+LD6ZeDRpPoJgA+rncpW4SGqe5oPL 80QQr4EmBh/wg4RmHjJFAMQTO7aoHx2VSobetxoKI+NJuIP8XeNe6/HXR6kHap+D Ro/8O5Tixdvvsr6Tu9OLPqxSSlAMjNNPZFfMgdiMG//cP2WiamcwzTyXzWYc1zdj Oykmhmq1sWT4xyrHTYA92QAIpZ3+fKd3J7aPRvS/ZuHnuMi2DMxUp8OY8rgKNz9y NefS57vnlREGJlHLxCpKYZZs3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMPvpiZ4 TXLq5GCD7kc3VuU6yyswMB8GA1UdIwQYMBaAFGj6+drOGXaMrD1O17skNyv/ptAY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzJFRC9FRDhDOTY5MDFE NkMxMUUyOEEzOEEzQUQwOEIwMkNEMi9hUHI1MnM0WmRveXNQVTdYdXlRM0tfLW0w QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FQcjUyczRaZG95c1BVN1h1eVEzS18tbTBCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzJFRC9FRDhDOTY5MDFENkMxMUUyOEEzOEEzQUQwOEIwMkNEMi9hUHI1MnM0WmRv eXNQVTdYdXlRM0tfLW0wQmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOx1vR05+xpmls+yAMssLc+9oHmhGbFj4LEG6qLfbPSNOoQe9ZcH//0pR1DK6 2w3iQb+bASQADRJP760EjWkyKlN7DCBUHU1YVftVZxL6tPeYQufp6ZafkNnCXOW0 XYdgtwTuZykzUysTx4s7Uo6oot6fdq4XzxGpgXr5EsGvY1e/JIZ8VTwbkt+zZilO 7lALQDGdzagbVkIvHJpoTHJRfQN45W2iL+8v+Ufz0QDLv7RDXnbsn8ebR4a/SbE4 CaNVx6uSVJnvl8U6FdMJwIACYIW2nMSBSPxMFd8zOL8H6bGeY0GPaX4uREcQ0DKQ gR7iUl6/kcFcc+SZdSsSRJtYyA== -----END CERTIFICATE-----Generated at Sun Mar 1 16:39:47 2026 by rpki-client