$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft File: a1P4D46IGzcxlyZjuhiXt0qS1E0.mft (raw, json) Hash identifier: xVD014+47IbKrqXy9vKBv0nN3XhH/ciQWHyg0qCFEHA= Subject key identifier: 0C:17:FF:AC:7C:56:37:80:5B:DF:27:1A:3B:DF:B3:61:BB:BD:DC:62 Authority key identifier: 6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D Certificate issuer: /CN=A91991D3/serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft Manifest number: 026E Signing time: Mon 02 Mar 2026 02:07:25 +0000 Manifest this update: Mon 02 Mar 2026 02:07:24 +0000 Manifest next update: Mon 09 Mar 2026 02:07:24 +0000 Files and hashes: 1: a1P4D46IGzcxlyZjuhiXt0qS1E0.crl (hash: tQBsfkev0YB+n8LMfXQa/rXWhQpvtDXgbGwcxhgcI4s=) 2: A216EC4E3C7911F0B25C0585C4F9AE02.roa (hash: PzMKVF5RWKMCBBz+uMcp/BJxucoQAleKAMkhu2SsbNI=) 3: 531EFB4A8DD311EFAF53373AC4F9AE02.roa (hash: D3QE+K/fDpz/3eSAi1rPfAFHFlOdI3dak+hzzYghHZo=) 4: 8361CB4E5AE611F0963E5C62C4F9AE02.roa (hash: jj9Anb+YltSNZ7XXzklotQBXr3n/2KBa9WPb7jR7Hmc=) 5: B856D46C3B9611F0B2363C74C4F9AE02.roa (hash: bXMhRP5t5yXxZ38+U5zANdmRNyogxO2UTQiQkXvbZD8=) 6: FA9BD5C2C5DC11F0A5504261C4F9AE02.roa (hash: iXf9KuDSIbIFYMh4V2pQ7flo3c0UEktI37Pu46KLsLQ=) 7: 6709E1D0D0FB11F08508FE58C4F9AE02.roa (hash: yB3ol9rUcdCMd9JnZM0DHqWp/9+cmY3NhYZPNGTCgSk=) 8: 026537E8861E11F0BC465F85C4F9AE02.roa (hash: jND/P0to+up6kdOpyJDFygxyQBhs5JfYLpar96q+qQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D Validity Not Before: Mar 2 02:07:24 2026 GMT Not After : Mar 9 02:07:24 2026 GMT Subject: CN=69a4f0dd-2147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1c:63:39:77:6a:0d:40:5b:90:84:7a:0c:e7: fc:3f:ff:0c:05:f0:e8:de:ad:e3:05:91:56:be:96: 35:c7:70:a1:73:c3:4f:84:98:31:9f:6c:82:55:86: fc:82:0a:67:04:3e:51:40:7a:16:5e:f3:0f:97:4b: 95:ee:e7:b0:82:22:8f:e0:84:d4:57:fc:2c:88:da: b1:69:9e:15:a0:3f:b3:85:b4:21:7a:6e:a8:42:dc: 57:0e:59:c0:f9:e7:3b:d5:f5:1a:19:16:53:43:33: e5:6c:49:b0:35:74:de:70:b3:5c:8d:af:81:f8:14: 7e:1f:73:76:02:66:1c:bc:4e:1f:64:70:70:10:6c: 36:aa:9a:a5:19:34:2a:d4:4b:ef:a2:43:34:6e:7e: d8:e8:14:d5:23:f5:e3:1e:b9:94:33:2a:b5:47:4a: 73:02:f8:70:ea:c4:d9:15:67:d5:12:a2:5b:5e:00: 42:36:78:80:70:89:aa:5d:d6:33:d7:41:97:28:3b: 65:80:37:18:3a:66:e2:74:e0:66:9b:87:08:8a:5c: fa:17:27:9c:eb:28:a4:b1:c8:e8:de:a5:06:c2:28: 02:d9:b8:88:15:0c:7e:e4:4f:91:0b:f7:8c:26:e7: a0:a0:a5:03:f4:e8:01:49:34:00:3e:a6:ed:a6:f2: f9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:17:FF:AC:7C:56:37:80:5B:DF:27:1A:3B:DF:B3:61:BB:BD:DC:62 X509v3 Authority Key Identifier: keyid:6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:dd:f0:69:45:ee:74:85:ad:9f:9c:3a:fc:aa:b3:d2:27:3c: af:c2:8d:85:90:87:c3:0b:6e:93:ad:44:69:a7:f3:76:7c:3b: b3:21:26:08:dd:0e:6a:5d:35:b3:16:bc:dc:6e:ec:dc:2a:b9: 83:b6:44:29:30:81:9c:b3:7c:74:c1:71:97:ea:00:34:be:28: e3:7e:d9:72:48:aa:6f:0e:c7:3a:59:c4:28:77:52:7c:12:df: 96:9b:01:23:4f:53:0d:59:29:1b:dd:69:ed:fd:aa:fc:2b:bc: a7:93:d8:c3:f3:a2:63:38:f8:50:84:c7:3b:1b:ac:ef:9f:4a: 7f:0f:df:22:3b:00:45:f1:f7:84:a7:b7:54:5e:4f:f1:29:28: fc:91:b9:7e:a5:65:d9:92:17:9b:16:0c:93:d4:71:e0:1b:23: 83:c7:e8:40:56:6e:03:55:3c:38:63:b0:ab:fa:af:9a:b5:2f: 28:d7:c1:39:b6:09:1c:c2:22:7d:80:00:4e:1a:97:19:35:52: ba:6c:f8:75:23:6e:17:52:6d:4b:d0:33:de:ba:af:f7:a4:75: 2f:52:e7:f4:ce:a5:12:c1:a8:93:5c:d6:ee:cf:10:2f:eb:36: 2a:17:de:25:a6:3a:b9:01:51:16:20:76:aa:c7:05:7b:72:f5: d1:ee:c1:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDZCNTNGODBGOEU4ODFCMzczMTk3MjY2M0JBMTg5N0I3 NEE5MkQ0NEQwHhcNMjYwMzAyMDIwNzI0WhcNMjYwMzA5MDIwNzI0WjAYMRYwFAYD VQQDEw02OWE0ZjBkZC0yMTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBxjOXdqDUBbkIR6DOf8P/8MBfDo3q3jBZFWvpY1x3Chc8NPhJgxn2yCVYb8 ggpnBD5RQHoWXvMPl0uV7uewgiKP4ITUV/wsiNqxaZ4VoD+zhbQhem6oQtxXDlnA +ec71fUaGRZTQzPlbEmwNXTecLNcja+B+BR+H3N2AmYcvE4fZHBwEGw2qpqlGTQq 1EvvokM0bn7Y6BTVI/XjHrmUMyq1R0pzAvhw6sTZFWfVEqJbXgBCNniAcImqXdYz 10GXKDtlgDcYOmbidOBmm4cIilz6Fyec6yikscjo3qUGwigC2biIFQx+5E+RC/eM JuegoKUD9OgBSTQAPqbtpvL5iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAwX/6x8 VjeAW98nGjvfs2G7vdxiMB8GA1UdIwQYMBaAFGtT+A+OiBs3MZcmY7oYl7dKktRN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy81RkEzNkUzNDg5 MjMxMUVEQkNBMjk2MTNDNEY5QUUwMi9hMVA0RDQ2SUd6Y3hseVpqdWhpWHQwcVMx RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExUDRENDZJR3pjeGx5Wmp1aGlYdDBxUzFFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEMy81RkEzNkUzNDg5MjMxMUVEQkNBMjk2MTNDNEY5QUUwMi9hMVA0RDQ2SUd6 Y3hseVpqdWhpWHQwcVMxRTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyd3waUXudIWtn5w6/Kqz0ic8r8KNhZCHwwtuk61Eaafzdnw7syEmCN0Oal01 sxa83G7s3Cq5g7ZEKTCBnLN8dMFxl+oANL4o437Zckiqbw7HOlnEKHdSfBLflpsB I09TDVkpG91p7f2q/Cu8p5PYw/OiYzj4UITHOxus759Kfw/fIjsARfH3hKe3VF5P 8Sko/JG5fqVl2ZIXmxYMk9Rx4Bsjg8foQFZuA1U8OGOwq/qvmrUvKNfBObYJHMIi fYAAThqXGTVSumz4dSNuF1JtS9Az3rqv96R1L1Ln9M6lEsGok1zW7s8QL+s2Khfe JaY6uQFRFiB2qscFe3L10e7BSQ== -----END CERTIFICATE-----Generated at Mon Mar 2 17:58:54 2026 by rpki-client