$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft File: mK6VbUJuFgLO2LtyWI9io9oSqVU.mft (raw, json) Hash identifier: jC+YWaTyySjGZ8aYYrWvwWzds+6rJ1GyP36QA33PLKQ= Subject key identifier: 46:94:1E:40:21:C2:FC:07:6B:FC:4F:C2:C8:20:90:12:9A:63:11:5D Authority key identifier: 98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55 Certificate issuer: /CN=A91A5FCF/serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft Manifest number: A1 Signing time: Sun 01 Mar 2026 08:34:28 +0000 Manifest this update: Sun 01 Mar 2026 08:34:28 +0000 Manifest next update: Sun 08 Mar 2026 08:34:28 +0000 Files and hashes: 1: mK6VbUJuFgLO2LtyWI9io9oSqVU.crl (hash: yLSriDTQVlawFFaScC9kVatlztiQ3dpTKFcBeiHXBs0=) 2: 301DED0C86F911F08DBDFA61C4F9AE02.roa (hash: vsIGVvlGCJQuRvbSj+mUc0cTXNJknUlsD/Soxx53ucA=) 3: 943B92961E6011F0B81D3A54C4F9AE02.roa (hash: 2Zw4KOVcRPZL7NToz0OAHJZCRTk4ni0giRlBSLkkuak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5FCF, serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955 Validity Not Before: Mar 1 08:34:28 2026 GMT Not After : Mar 8 08:34:28 2026 GMT Subject: CN=69a3fa14-5cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ff:e9:4b:51:12:e3:ab:9c:a2:8b:eb:91:e4: 79:09:c7:25:a9:44:68:26:c7:5b:1e:16:24:b8:25: 9c:37:f1:58:8d:82:c2:25:02:0b:22:bc:6f:88:57: 43:73:5e:c7:a1:26:c8:3d:41:21:b3:26:60:3c:3e: 01:7e:bb:4c:4f:2b:f0:74:10:c1:fe:9c:a2:d1:f6: 18:02:92:cc:4b:b1:17:fc:c0:80:47:5a:6f:54:fd: 08:19:9a:02:2c:ec:00:ac:9c:5c:fb:7d:c8:a1:3f: a4:c3:39:58:c0:da:70:29:98:a7:bf:b6:a3:b3:7b: 71:2f:e4:69:4b:55:3c:17:3f:d7:08:38:8d:7a:0d: 7f:34:82:0f:30:1e:41:4e:81:15:cd:f3:50:1d:bb: 77:b5:8d:0a:26:a9:58:27:88:e2:39:49:a5:10:a0: 39:b2:f0:19:ed:64:c9:c6:b8:7e:88:7e:e0:63:34: 67:40:b8:ed:f0:c9:bb:f9:c3:df:7b:a4:e3:d9:08: 9a:4f:ce:e6:bf:db:82:7a:05:f3:74:3c:c9:f6:f2: 7c:1a:ec:6d:74:99:c9:5e:40:e6:c3:a6:e4:d5:09: 69:d6:d6:ac:d9:b7:a0:0b:5e:a1:13:51:19:82:c0: ad:d5:0e:5b:f1:d0:95:f9:6b:d3:0b:f6:5d:1b:94: 4a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:94:1E:40:21:C2:FC:07:6B:FC:4F:C2:C8:20:90:12:9A:63:11:5D X509v3 Authority Key Identifier: keyid:98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:28:38:4a:b4:ed:0c:60:e2:bf:61:7b:a6:d7:12:42:ad:e8: c5:c6:0d:a6:4b:e3:2f:3b:7d:88:01:2d:66:88:83:0c:19:b4: 1a:62:eb:ea:66:73:b4:8d:84:ab:b3:0f:3c:ad:17:c9:6c:94: 1e:09:57:22:25:ef:b1:94:dd:3b:db:3a:b4:c7:54:98:be:4d: 9e:fa:d1:7b:88:19:8e:99:3f:13:62:81:88:65:89:5d:bc:20: 08:e5:46:6e:3a:88:79:e7:1d:ff:0e:77:ca:e7:2f:78:0c:ad: d2:3d:52:15:a3:56:a2:76:eb:d7:47:e0:bb:13:68:e9:12:6b: f3:99:30:cf:00:70:75:db:fb:3c:56:3e:e0:48:13:d1:5c:04: 41:1c:ee:db:19:69:e4:7f:58:14:1e:74:c2:ae:a3:85:14:c5: c6:48:79:bd:be:a3:f5:be:13:f3:40:aa:97:1d:13:e4:39:bf: 5b:46:2a:31:57:f4:fa:56:79:ed:01:2a:4c:74:19:07:ce:25: 73:3d:03:11:85:c1:ad:da:26:de:d2:b5:46:d1:eb:df:f3:49: 74:c3:08:38:5f:02:0f:7f:13:13:cd:88:96:53:bf:f4:4f:17: d9:2d:ff:78:be:51:2d:66:c6:49:57:01:5a:a3:7d:46:2b:74: c4:0b:b4:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVGQ0YxMTAvBgNVBAUTKDk4QUU5NTZENDI2RTE2MDJDRUQ4QkI3MjU4OEY2MkEz REExMkE5NTUwHhcNMjYwMzAxMDgzNDI4WhcNMjYwMzA4MDgzNDI4WjAYMRYwFAYD VQQDEw02OWEzZmExNC01Y2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqv/pS1ES46ucoovrkeR5CcclqURoJsdbHhYkuCWcN/FYjYLCJQILIrxviFdD c17HoSbIPUEhsyZgPD4BfrtMTyvwdBDB/pyi0fYYApLMS7EX/MCAR1pvVP0IGZoC LOwArJxc+33IoT+kwzlYwNpwKZinv7ajs3txL+RpS1U8Fz/XCDiNeg1/NIIPMB5B ToEVzfNQHbt3tY0KJqlYJ4jiOUmlEKA5svAZ7WTJxrh+iH7gYzRnQLjt8Mm7+cPf e6Tj2QiaT87mv9uCegXzdDzJ9vJ8GuxtdJnJXkDmw6bk1Qlp1tas2begC16hE1EZ gsCt1Q5b8dCV+WvTC/ZdG5RKCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEaUHkAh wvwHa/xPwsggkBKaYxFdMB8GA1UdIwQYMBaAFJiulW1CbhYCzti7cliPYqPaEqlV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUZDRi9CODRDNjAzQTFF NUYxMUYwOUU2QTZCNEZDNEY5QUUwMi9tSzZWYlVKdUZnTE8yTHR5V0k5aW85b1Nx VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21LNlZiVUp1RmdMTzJMdHlXSTlpbzlvU3FWVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUZDRi9CODRDNjAzQTFFNUYxMUYwOUU2QTZCNEZDNEY5QUUwMi9tSzZWYlVKdUZn TE8yTHR5V0k5aW85b1NxVlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfyg4SrTtDGDiv2F7ptcSQq3oxcYNpkvjLzt9iAEtZoiDDBm0GmLr6mZztI2E q7MPPK0XyWyUHglXIiXvsZTdO9s6tMdUmL5NnvrRe4gZjpk/E2KBiGWJXbwgCOVG bjqIeecd/w53yucveAyt0j1SFaNWonbr10fguxNo6RJr85kwzwBwddv7PFY+4EgT 0VwEQRzu2xlp5H9YFB50wq6jhRTFxkh5vb6j9b4T80Cqlx0T5Dm/W0YqMVf0+lZ5 7QEqTHQZB84lcz0DEYXBrdom3tK1RtHr3/NJdMMIOF8CD38TE82IllO/9E8X2S3/ eL5RLWbGSVcBWqN9Rit0xAu0Mg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:17:17 2026 by rpki-client