$ rpki-client -vvf rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft File: 82dKiQfpsa6O4m-c88mcR_dUk0w.mft (raw, json) Hash identifier: lgtiOzPEiF0b9IlINzsSa7lwgiUdnjbqJQNajyVmy5M= Subject key identifier: 34:D1:FF:24:F0:22:1D:C6:3A:5E:A2:11:3E:D0:D5:7F:C7:58:EE:DB Authority key identifier: F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C Certificate issuer: /CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C Certificate serial: 043D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft Manifest number: 042E Signing time: Sun 01 Mar 2026 01:07:38 +0000 Manifest this update: Sun 01 Mar 2026 01:07:37 +0000 Manifest next update: Sun 08 Mar 2026 01:07:37 +0000 Files and hashes: 1: 82dKiQfpsa6O4m-c88mcR_dUk0w.crl (hash: HGcKAIkM4sKqetJogc3ZXsIjKTjfmmhG8DvlvdMdPqI=) 2: F47320C4E04111EE8F798E3DC4F9AE02.roa (hash: +qgf84XC7fwqmND33skSgzHGmdhqJ+EK/64iZ97m69g=) 3: 5C27D4DCB0DB11EC87206C69C4F9AE02.roa (hash: M3aykX0j4vteJ7Aeu69jjSSSHCYOZs36DtkdcU8NJ0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91910A8, serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C Validity Not Before: Mar 1 01:07:37 2026 GMT Not After : Mar 8 01:07:37 2026 GMT Subject: CN=69a3915a-9626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d4:02:a4:24:3f:3d:a0:73:ab:d6:00:61:36: 51:2c:e2:35:e7:96:3a:89:bc:23:1b:89:f2:0a:cc: c7:1a:53:21:f9:aa:5a:95:54:f6:2f:76:d0:6d:d9: b3:3f:4d:55:8f:0b:b4:2f:42:85:8e:75:22:c5:9c: 8a:64:46:e6:94:65:a9:31:69:43:93:8d:2f:f9:a9: 35:6d:49:a2:fd:1c:e6:bb:88:22:82:04:5c:39:b1: f1:12:54:fe:55:36:41:e1:02:53:3d:b2:6f:bb:c6: a6:97:56:02:dc:40:d6:61:9d:7a:3b:88:7f:94:54: bb:72:6d:44:d9:88:3a:11:52:0b:e8:de:1d:d7:49: aa:6d:d7:16:4e:e5:15:17:07:47:41:b7:00:8b:89: 84:52:fc:d8:a0:a5:9a:24:cc:8f:d9:73:61:69:38: de:f0:35:9e:fc:e6:fb:be:7e:d0:fc:79:b4:31:ad: 0b:a3:34:98:b6:b0:0b:10:2e:aa:2f:b0:70:45:32: b1:11:fd:22:ae:87:97:68:53:43:37:d2:bf:db:c3: 0b:71:1e:ab:26:da:5c:34:5e:99:83:3d:3f:09:a1: 41:35:50:ad:d9:1f:07:34:36:1b:80:ce:c6:bd:e9: 2c:d7:d3:0d:22:29:24:d8:06:fa:6a:f0:6d:dd:46: e1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D1:FF:24:F0:22:1D:C6:3A:5E:A2:11:3E:D0:D5:7F:C7:58:EE:DB X509v3 Authority Key Identifier: keyid:F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:14:fc:ef:26:48:d3:2a:62:84:d6:82:5b:8a:77:39:4d:a5: db:f3:bd:2b:ce:5b:07:68:e8:bc:67:72:ed:5c:70:79:81:bd: 6b:3b:54:17:8b:d8:58:d5:41:1d:c3:0b:c0:d4:a3:43:89:77: 61:df:be:2b:2b:74:6f:f5:ac:1b:03:9d:1e:5a:35:81:8f:28: ad:dc:98:23:9b:ba:7d:4a:f0:51:20:00:3c:d0:a2:bf:95:2b: a2:86:33:db:2c:46:35:6a:f6:b2:9d:3f:95:3e:04:49:ce:a7: 80:af:94:8b:b7:d0:3d:89:ce:17:8d:97:43:8a:8d:88:53:c6: 5b:61:a6:5b:65:8b:00:e0:51:20:4b:63:81:bb:fe:8f:2d:1a: bf:9b:76:2f:af:e9:fa:d9:d7:95:82:12:b8:9e:05:f7:5a:29: ff:4d:aa:19:cc:64:49:77:df:d2:08:b1:de:a5:b3:85:4f:ad: de:5c:2d:bd:17:39:55:87:27:62:7c:76:b9:05:ce:d4:53:2a: d6:ef:f5:28:96:45:76:a7:fd:a2:69:20:00:1e:cb:10:4a:7b: 39:e5:f3:af:cd:86:67:f3:88:c0:ed:2f:f2:a6:a3:33:0b:63: 12:25:38:f6:a0:77:d6:0b:4a:b8:ac:62:16:d1:45:45:1f:79: 7a:d4:fd:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwQTgxMTAvBgNVBAUTKEYzNjc0QTg5MDdFOUIxQUU4RUUyNkY5Q0YzQzk5QzQ3 Rjc1NDkzNEMwHhcNMjYwMzAxMDEwNzM3WhcNMjYwMzA4MDEwNzM3WjAYMRYwFAYD VQQDDA02OWEzOTE1YS05NjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmdQCpCQ/PaBzq9YAYTZRLOI155Y6ibwjG4nyCszHGlMh+apalVT2L3bQbdmz P01Vjwu0L0KFjnUixZyKZEbmlGWpMWlDk40v+ak1bUmi/Rzmu4giggRcObHxElT+ VTZB4QJTPbJvu8aml1YC3EDWYZ16O4h/lFS7cm1E2Yg6EVIL6N4d10mqbdcWTuUV FwdHQbcAi4mEUvzYoKWaJMyP2XNhaTje8DWe/Ob7vn7Q/Hm0Ma0LozSYtrALEC6q L7BwRTKxEf0iroeXaFNDN9K/28MLcR6rJtpcNF6Zgz0/CaFBNVCt2R8HNDYbgM7G veks19MNIikk2Ab6avBt3UbhRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDTR/yTw Ih3GOl6iET7Q1X/HWO7bMB8GA1UdIwQYMBaAFPNnSokH6bGujuJvnPPJnEf3VJNM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTBBOC83QjIwMDczRTlD NEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNhNk80bS1jODhtY1JfZFVr MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgyZEtpUWZwc2E2TzRtLWM4OG1jUl9kVWswdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTBBOC83QjIwMDczRTlDNEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNh Nk80bS1jODhtY1JfZFVrMHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAchT87yZI0ypihNaCW4p3OU2l2/O9K85bB2jovGdy7VxweYG9aztUF4vYWNVB HcMLwNSjQ4l3Yd++Kyt0b/WsGwOdHlo1gY8ordyYI5u6fUrwUSAAPNCiv5UrooYz 2yxGNWr2sp0/lT4ESc6ngK+Ui7fQPYnOF42XQ4qNiFPGW2GmW2WLAOBRIEtjgbv+ jy0av5t2L6/p+tnXlYISuJ4F91op/02qGcxkSXff0gix3qWzhU+t3lwtvRc5VYcn Ynx2uQXO1FMq1u/1KJZFdqf9omkgAB7LEEp7OeXzr82GZ/OIwO0v8qajMwtjEiU4 9qB31gtKuKxiFtFFRR95etT9IA== -----END CERTIFICATE-----Generated at Mon Mar 2 00:35:46 2026 by rpki-client