$ rpki-client -vvf rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft File: d4fx5T6beBMt6aeHEQiDFt1gVbM.mft (raw, json) Hash identifier: gg1NbCdFUEseTX1fOrEYidee/dwJ5cGy3yKzJboOBCg= Subject key identifier: 76:D1:9F:4F:13:CD:AD:0F:76:EB:43:C4:66:C9:54:76:49:5D:E3:91 Authority key identifier: 77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3 Certificate issuer: /CN=A91A60A9/serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3 Certificate serial: 3549 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft Manifest number: 3524 Signing time: Mon 02 Mar 2026 01:14:40 +0000 Manifest this update: Mon 02 Mar 2026 01:14:38 +0000 Manifest next update: Mon 09 Mar 2026 01:14:38 +0000 Files and hashes: 1: d4fx5T6beBMt6aeHEQiDFt1gVbM.crl (hash: qCD43RT/1RQ35kLxHJ2i2uDZ6gFyxnBsbTEoPbPD18I=) 2: 8F368BEEF9C411EB9F9E645DC4F9AE02.roa (hash: hu4/Lak7f/lOdT0sej4Iilh6Wr2QTf9+LdnHpbx9BwY=) 3: C3C5C43A0A2011EC8B517885C4F9AE02.roa (hash: wACutP1f1rqOkMuUfI0y6o4RkmpusyPFR7IEkRsm+4E=) 4: C28E34620A2011EC8B517885C4F9AE02.roa (hash: 4c64YIFR5i1jys+se/EAtLozRy8qGvjic4t8YcggS5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13641 (0x3549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A60A9, serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3 Validity Not Before: Mar 2 01:14:38 2026 GMT Not After : Mar 9 01:14:38 2026 GMT Subject: CN=69a4e47f-66b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5d:e3:55:99:2d:82:44:90:c8:af:80:92:48: 6a:8d:b0:6d:4b:d6:98:5d:dc:2a:40:f4:9a:cf:33: 81:16:6a:1d:d5:de:fd:a1:ad:33:77:99:82:2c:23: 46:8e:3c:4b:49:22:7f:0c:88:f6:39:e3:fd:21:6f: 38:4c:83:53:e0:db:13:bb:c1:cf:7d:d5:65:58:f9: ea:f3:29:bb:3b:6d:79:00:4a:e6:a1:bd:d4:e8:77: 07:7f:67:31:72:32:b0:7d:ff:52:c1:29:af:d3:7e: f9:5c:bf:0c:5d:99:d7:2d:b0:70:4b:df:82:b6:8e: 43:c7:16:16:bb:f5:d1:23:67:c0:c3:a2:ca:0b:0e: ca:19:fc:bd:d5:d6:2c:40:ba:75:62:49:d1:62:1c: 51:1e:3f:6a:87:d2:92:1b:7d:3a:4c:c2:47:b4:e5: 4d:63:e3:fb:89:d7:dd:f5:44:fb:c6:ab:d5:01:03: 7e:6e:98:bf:89:af:f0:b9:9a:7c:0f:84:ec:2c:0a: 7a:ad:1b:ab:af:e8:58:95:0f:17:fc:0e:f0:40:7d: ec:2a:82:fd:82:5d:e1:83:8e:ea:7e:76:f0:c1:f3: 91:df:94:45:7c:91:64:a5:e4:93:62:ae:5a:70:a6: 79:fc:76:22:c5:ad:34:94:46:34:22:13:2c:27:26: 86:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D1:9F:4F:13:CD:AD:0F:76:EB:43:C4:66:C9:54:76:49:5D:E3:91 X509v3 Authority Key Identifier: keyid:77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:f5:b4:ff:cb:06:02:5c:96:83:66:08:23:8c:30:12:3f:ea: 75:03:e7:82:48:22:c9:d0:2b:58:d1:08:79:2e:aa:8d:82:ca: 2f:2e:42:d7:a6:8e:6b:f9:cd:3f:ae:29:27:89:b2:4c:c7:11: da:fa:f2:10:42:70:90:7c:82:53:f5:e7:11:d2:6c:31:46:b4: 0d:33:ba:11:56:f2:e6:ab:eb:8d:39:ff:7d:a9:92:a4:14:c7: e2:d0:57:c8:a0:58:5e:12:84:78:9a:61:00:30:d5:b3:8b:ab: 2b:69:b4:a6:b2:1f:9a:81:ed:5c:6f:d6:da:ce:ba:38:c7:f1: 59:09:f3:cb:67:e5:f2:d6:2e:50:bf:0d:52:7e:dc:b7:6b:21: 18:29:f8:14:68:d2:32:b4:52:e5:87:f8:3f:bd:8f:81:9b:c1: 45:83:f0:83:64:d5:6e:e9:48:df:16:34:32:a8:da:b8:d5:cd: 32:04:54:ea:35:0c:d9:02:3f:e6:05:84:25:fb:24:d4:1b:b7: 2a:57:ad:b9:f1:db:73:e8:3b:dc:38:cf:9e:02:1f:6e:5f:e8: 86:93:4f:49:c9:d4:3d:d9:51:6e:6f:f1:d0:bc:46:46:90:fb: b9:57:67:ac:d7:87:16:8e:b6:e8:0e:cc:93:66:d7:5f:40:84: 21:fe:96:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYwQTkxMTAvBgNVBAUTKDc3ODdGMUU1M0U5Qjc4MTMyREU5QTc4NzExMDg4MzE2 REQ2MDU1QjMwHhcNMjYwMzAyMDExNDM4WhcNMjYwMzA5MDExNDM4WjAYMRYwFAYD VQQDEw02OWE0ZTQ3Zi02NmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsl3jVZktgkSQyK+AkkhqjbBtS9aYXdwqQPSazzOBFmod1d79oa0zd5mCLCNG jjxLSSJ/DIj2OeP9IW84TINT4NsTu8HPfdVlWPnq8ym7O215AErmob3U6HcHf2cx cjKwff9SwSmv0375XL8MXZnXLbBwS9+Cto5DxxYWu/XRI2fAw6LKCw7KGfy91dYs QLp1YknRYhxRHj9qh9KSG306TMJHtOVNY+P7idfd9UT7xqvVAQN+bpi/ia/wuZp8 D4TsLAp6rRurr+hYlQ8X/A7wQH3sKoL9gl3hg47qfnbwwfOR35RFfJFkpeSTYq5a cKZ5/HYixa00lEY0IhMsJyaGIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHbRn08T za0PdutDxGbJVHZJXeORMB8GA1UdIwQYMBaAFHeH8eU+m3gTLemnhxEIgxbdYFWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjBBOS82QkE4MDYxQTFE ODQxMUUyQjNBNTRGREEwOEIwMkNEMi9kNGZ4NVQ2YmVCTXQ2YWVIRVFpREZ0MWdW Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q0Zng1VDZiZUJNdDZhZUhFUWlERnQxZ1ZiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjBBOS82QkE4MDYxQTFEODQxMUUyQjNBNTRGREEwOEIwMkNEMi9kNGZ4NVQ2YmVC TXQ2YWVIRVFpREZ0MWdWYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANfW0/8sGAlyWg2YII4wwEj/qdQPngkgiydArWNEIeS6qjYLKLy5C16aOa/nN P64pJ4myTMcR2vryEEJwkHyCU/XnEdJsMUa0DTO6EVby5qvrjTn/famSpBTH4tBX yKBYXhKEeJphADDVs4urK2m0prIfmoHtXG/W2s66OMfxWQnzy2fl8tYuUL8NUn7c t2shGCn4FGjSMrRS5Yf4P72PgZvBRYPwg2TVbulI3xY0MqjauNXNMgRU6jUM2QI/ 5gWEJfsk1Bu3KletufHbc+g73DjPngIfbl/ohpNPScnUPdlRbm/x0LxGRpD7uVdn rNeHFo626A7Mk2bXX0CEIf6W5Q== -----END CERTIFICATE-----Generated at Mon Mar 2 12:39:09 2026 by rpki-client