$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft File: AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json) Hash identifier: krS0vwQYDDjfYPjKRL8R51avOHDvSEw7Ha7oebX8Njk= Subject key identifier: 03:0E:B1:9E:3F:BD:7A:3C:A6:B8:76:81:D6:41:0B:DA:89:26:A0:50 Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Certificate serial: 028A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft Manifest number: 026E Signing time: Mon 02 Mar 2026 02:11:08 +0000 Manifest this update: Mon 02 Mar 2026 02:11:06 +0000 Manifest next update: Mon 09 Mar 2026 02:11:06 +0000 Files and hashes: 1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: fy3zRemVKt+k2F979OlO7brtaESE2vCsFM+xZ9vpZq8=) 2: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: CpnchC9OahhdANlSfhFvVdfnSg3biYPUOpoScQBe9aw=) 3: 3B6578C47F4211F084F6C541C4F9AE02.roa (hash: 6uwKNJvEHKpPiCqmXc5jxVWJ0Ysu4SZXJVBzZPWGq0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 650 (0x28a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Validity Not Before: Mar 2 02:11:06 2026 GMT Not After : Mar 9 02:11:06 2026 GMT Subject: CN=69a4f1bc-ded2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5f:c5:1c:ae:9f:2f:7e:36:11:14:d9:67:0a: 7f:43:0c:dc:c8:68:47:9c:c1:cd:3e:f8:9b:5f:52: 69:24:f3:4c:4d:c0:1b:b6:5a:a0:bf:72:39:bb:6a: 65:8e:bc:68:10:6e:40:e2:6a:47:94:72:c4:9f:a3: 2c:4c:7d:c9:63:ae:71:c2:b8:2d:d7:f7:87:c1:48: 06:42:aa:1c:cf:73:0a:77:3b:87:24:12:71:c8:8e: e3:58:78:53:3a:2d:5f:36:05:d7:d2:3a:81:9d:c4: fa:6a:37:8e:9a:c8:bc:82:66:d5:16:4a:5c:37:50: 87:de:9d:47:e1:a5:b0:64:c4:66:2b:e3:b5:f6:08: 31:83:15:1b:14:e3:98:75:63:82:5b:09:d0:a5:70: 4c:cf:fa:ea:c6:92:b5:25:61:3b:82:50:35:56:2f: ed:6b:ae:bd:f8:aa:9d:92:ac:72:4c:35:a1:98:cb: 8d:d6:59:38:fe:66:53:86:7e:03:3d:e0:8c:14:29: 86:c2:f6:4f:cb:ac:64:b0:37:7f:21:a7:10:d8:25: 53:07:c1:69:c2:8c:78:25:28:69:c7:a6:70:32:8b: 08:ef:0f:ca:59:f1:a7:68:c9:4a:fb:35:73:67:3f: 32:06:59:e8:b3:b6:7d:cb:fe:dd:b4:84:6a:9d:5c: 00:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0E:B1:9E:3F:BD:7A:3C:A6:B8:76:81:D6:41:0B:DA:89:26:A0:50 X509v3 Authority Key Identifier: keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:0f:91:22:c0:0d:5b:58:3f:95:39:70:6b:e9:ca:34:72:ee: 94:e9:af:c3:90:37:33:de:ea:1e:2b:e0:f5:0a:85:1c:c6:4a: 53:47:b4:4a:05:e1:f4:11:db:d5:18:e9:a0:4b:27:8f:5c:8a: 98:e5:bd:ef:12:3b:4e:f9:9e:e1:77:28:a3:c4:70:d0:c1:83: 9a:a8:31:ae:7b:57:42:0b:eb:eb:8d:ee:aa:d3:d1:b7:f7:2b: 1b:9b:cb:c1:15:fc:75:89:17:3b:c4:02:83:6c:d3:9a:b2:41: e9:7a:35:85:b7:3a:d9:65:8c:7a:16:10:d4:ed:ad:fc:d8:17: d8:07:57:7e:a9:64:b9:c6:3a:31:63:1b:38:7e:1b:c2:21:ae: 32:6d:22:ea:50:b3:8e:12:54:0d:58:f2:4a:bb:66:69:e5:87: 4f:88:58:67:f8:5d:67:b0:87:90:48:e2:57:f4:b6:5c:fc:6d: ba:9e:b0:de:92:09:ba:20:c1:87:3e:89:6c:f8:65:74:44:7e: a7:1b:7d:4a:87:2e:ce:9c:ac:d1:a0:21:49:dc:69:bd:9b:79: bc:cf:28:80:1a:56:13:0e:a9:70:bb:4f:e4:e0:09:70:6b:f9: 32:68:22:fe:81:0b:86:35:33:c4:96:8d:c1:ea:06:ff:2b:4f: 8b:88:40:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4NDgxMTAvBgNVBAUTKDAyNDIyOUM4MUFDMzUzNUEyMUQ2MEUyREMzMkE5Qjg4 QkQ2QUQ4MUYwHhcNMjYwMzAyMDIxMTA2WhcNMjYwMzA5MDIxMTA2WjAYMRYwFAYD VQQDEw02OWE0ZjFiYy1kZWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuF/FHK6fL342ERTZZwp/QwzcyGhHnMHNPvibX1JpJPNMTcAbtlqgv3I5u2pl jrxoEG5A4mpHlHLEn6MsTH3JY65xwrgt1/eHwUgGQqocz3MKdzuHJBJxyI7jWHhT Oi1fNgXX0jqBncT6ajeOmsi8gmbVFkpcN1CH3p1H4aWwZMRmK+O19ggxgxUbFOOY dWOCWwnQpXBMz/rqxpK1JWE7glA1Vi/ta669+KqdkqxyTDWhmMuN1lk4/mZThn4D PeCMFCmGwvZPy6xksDd/IacQ2CVTB8Fpwox4JShpx6ZwMosI7w/KWfGnaMlK+zVz Zz8yBlnos7Z9y/7dtIRqnVwAZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAMOsZ4/ vXo8prh2gdZBC9qJJqBQMB8GA1UdIwQYMBaAFAJCKcgaw1NaIdYOLcMqm4i9atgf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDg0OC82NEQ4QjFERTc3 RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUxb2gxZzR0d3lxYmlMMXEy QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FrSXB5QnJEVTFvaDFnNHR3eXFiaUwxcTJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDg0OC82NEQ4QjFERTc3RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUx b2gxZzR0d3lxYmlMMXEyQjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVw+RIsANW1g/lTlwa+nKNHLulOmvw5A3M97qHivg9QqFHMZKU0e0SgXh9BHb 1RjpoEsnj1yKmOW97xI7Tvme4Xcoo8Rw0MGDmqgxrntXQgvr643uqtPRt/crG5vL wRX8dYkXO8QCg2zTmrJB6Xo1hbc62WWMehYQ1O2t/NgX2AdXfqlkucY6MWMbOH4b wiGuMm0i6lCzjhJUDVjySrtmaeWHT4hYZ/hdZ7CHkEjiV/S2XPxtup6w3pIJuiDB hz6JbPhldER+pxt9Socuzpys0aAhSdxpvZt5vM8ogBpWEw6pcLtP5OAJcGv5Mmgi /oELhjUzxJaNweoG/ytPi4hAGA== -----END CERTIFICATE-----Generated at Mon Mar 2 12:18:51 2026 by rpki-client