$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft File: 0eKZ-egsk3yysqaQYegXNB-FCPU.mft (raw, json) Hash identifier: utQtx5NSt9VjpILYKwKnn3pvvuwxLXB20ShF5mgeM8A= Subject key identifier: CA:02:04:D3:84:B8:B1:88:5F:2C:50:13:95:7C:B5:37:26:75:6F:B0 Authority key identifier: D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 Certificate issuer: /CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft Manifest number: 021B Signing time: Sun 01 Mar 2026 03:39:38 +0000 Manifest this update: Sun 01 Mar 2026 03:39:37 +0000 Manifest next update: Sun 08 Mar 2026 03:39:37 +0000 Files and hashes: 1: 0eKZ-egsk3yysqaQYegXNB-FCPU.crl (hash: 2GatAnJhxu+TcTIw+JxhdvrieiiwLT8VmJQ5ag/DdLQ=) 2: AD9C1DEE9E2311F0A35D7D1FC4F9AE02.roa (hash: 2AFvxOgERN6IP1ghZwOz+nDsY9qU1LoYMzKU7ME8H9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC, serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Validity Not Before: Mar 1 03:39:37 2026 GMT Not After : Mar 8 03:39:37 2026 GMT Subject: CN=69a3b4fa-c73a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1d:40:c6:6e:09:c2:3d:df:0d:4f:99:0d:2a: eb:2d:b4:b1:d8:bf:16:b3:db:05:c9:bb:ed:f4:e4: 73:f3:00:24:a2:54:8c:31:05:72:da:58:bb:40:6f: 63:82:66:60:d2:ef:f8:33:df:e7:33:99:6b:20:0b: a3:c0:2c:f8:0f:8e:1d:82:4c:f6:d7:97:df:2e:b2: 43:2c:b5:fd:35:23:1b:18:18:84:cc:55:75:ca:76: 28:2e:8a:d7:89:2d:4f:5c:1d:53:30:5f:b4:fe:88: be:96:35:b0:e9:01:66:b6:fd:9e:ae:dc:a3:14:39: d3:ac:86:a3:28:89:0c:74:ab:85:1f:8b:72:1b:f2: 5a:b0:65:d3:6b:bd:fd:4c:8f:57:3f:b4:12:e3:b4: b4:91:93:e5:af:f5:8a:df:ca:8d:64:1c:bd:13:da: a2:0f:44:53:b6:43:a2:7f:46:d5:c4:b1:01:c7:d5: 8c:ae:5d:41:7b:2c:19:af:5a:00:e6:16:58:90:c3: d3:a5:61:f0:bf:f5:14:21:8e:fe:ba:28:2e:ad:c8: 7d:40:46:1c:94:84:53:3b:4d:9e:74:be:7b:69:6c: e5:ae:b2:8c:e8:7d:3f:4b:74:37:d8:79:4f:31:0e: d3:a4:a4:a7:63:7f:73:d8:f3:33:ff:41:dd:e7:3d: 96:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:02:04:D3:84:B8:B1:88:5F:2C:50:13:95:7C:B5:37:26:75:6F:B0 X509v3 Authority Key Identifier: keyid:D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:61:d7:72:b6:41:09:47:df:22:5e:3d:6f:6f:28:81:36:27: d2:1e:5f:3f:90:4e:f7:f3:29:b7:5a:e1:6b:f5:e0:f9:73:0a: 9d:72:f0:64:6f:42:56:f0:4c:c1:3d:a2:b4:3d:85:52:aa:eb: 3f:6f:58:35:b3:f5:63:2b:8c:7c:c7:f8:f1:19:af:d2:70:2b: 4e:e5:6b:7e:23:dd:0d:11:f5:ea:90:0b:93:4a:27:6d:6b:52: 2e:e3:3f:7c:ac:db:f5:35:b5:be:b3:8c:ce:1c:cd:85:bb:2b: e3:6e:ce:cf:ba:4c:f8:29:15:e6:e1:8c:d2:00:e0:3d:d8:9e: 9a:d2:b3:f0:68:83:ac:00:ca:62:4c:09:a4:d6:99:3e:eb:91: 10:ce:23:a8:48:0e:61:c3:48:6c:c9:ce:7b:a5:b7:6d:c2:9a: 04:e3:51:e3:d9:ab:07:85:90:8c:60:71:78:7d:8a:dd:c1:3a: 90:96:cf:88:3c:f9:88:c2:a5:48:75:f7:f9:39:97:09:fa:04: 06:3d:51:3d:c9:74:4b:dc:83:dc:ac:0b:32:bf:6c:79:2a:b6: 96:90:05:2d:82:ac:6b:34:84:65:95:32:25:78:44:78:c2:3a: 62:76:4f:a2:eb:ab:2f:b7:78:a7:0d:c2:dd:19:02:e6:39:af: 4b:e6:dc:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKEQxRTI5OUY5RTgyQzkzN0NCMkIyQTY5MDYxRTgxNzM0 MUY4NTA4RjUwHhcNMjYwMzAxMDMzOTM3WhcNMjYwMzA4MDMzOTM3WjAYMRYwFAYD VQQDDA02OWEzYjRmYS1jNzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArB1Axm4Jwj3fDU+ZDSrrLbSx2L8Ws9sFybvt9ORz8wAkolSMMQVy2li7QG9j gmZg0u/4M9/nM5lrIAujwCz4D44dgkz215ffLrJDLLX9NSMbGBiEzFV1ynYoLorX iS1PXB1TMF+0/oi+ljWw6QFmtv2ertyjFDnTrIajKIkMdKuFH4tyG/JasGXTa739 TI9XP7QS47S0kZPlr/WK38qNZBy9E9qiD0RTtkOif0bVxLEBx9WMrl1BeywZr1oA 5hZYkMPTpWHwv/UUIY7+uigurch9QEYclIRTO02edL57aWzlrrKM6H0/S3Q32HlP MQ7TpKSnY39z2PMz/0Hd5z2WlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMoCBNOE uLGIXyxQE5V8tTcmdW+wMB8GA1UdIwQYMBaAFNHimfnoLJN8srKmkGHoFzQfhQj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy80RUE2QzYxOEU4 QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2szeXlzcWFRWWVnWE5CLUZD UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBlS1otZWdzazN5eXNxYVFZZWdYTkItRkNQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy80RUE2QzYxOEU4QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2sz eXlzcWFRWWVnWE5CLUZDUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGGHXcrZBCUffIl49b28ogTYn0h5fP5BO9/Mpt1rha/Xg+XMKnXLwZG9CVvBM wT2itD2FUqrrP29YNbP1YyuMfMf48Rmv0nArTuVrfiPdDRH16pALk0onbWtSLuM/ fKzb9TW1vrOMzhzNhbsr427Oz7pM+CkV5uGM0gDgPdiemtKz8GiDrADKYkwJpNaZ PuuREM4jqEgOYcNIbMnOe6W3bcKaBONR49mrB4WQjGBxeH2K3cE6kJbPiDz5iMKl SHX3+TmXCfoEBj1RPcl0S9yD3KwLMr9seSq2lpAFLYKsazSEZZUyJXhEeMI6YnZP ouurL7d4pw3C3RkC5jmvS+bcFQ== -----END CERTIFICATE-----Generated at Sun Mar 1 23:29:45 2026 by rpki-client