$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft File: D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft (raw, json) Hash identifier: +9hNNlrrN9H03gpZJEBRY4sEoXBbw+gUYfNd8qbaPxY= Subject key identifier: 6A:0F:C1:BA:12:00:43:AE:30:29:BA:4F:5E:B8:C5:8C:FF:55:5F:78 Authority key identifier: 0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75 Certificate issuer: /CN=A91A9720/serialNumber=0F5467A9D1EB098B52CC139D5743B4745BF59075 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft Manifest number: 24 Signing time: Sun 01 Mar 2026 10:18:32 +0000 Manifest this update: Sun 01 Mar 2026 10:18:31 +0000 Manifest next update: Sun 08 Mar 2026 10:18:31 +0000 Files and hashes: 1: D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl (hash: lc5gx2yCMOqFQ16bwima9H69AX/kmi0Ymxn2zTAE0cI=) 2: 88128B34E55A11F0A78CF268396F56BC.roa (hash: rkDeFlmd5GKow5toLJKpXkhy9It1msy7eliFypTprmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9720, serialNumber=0F5467A9D1EB098B52CC139D5743B4745BF59075 Validity Not Before: Mar 1 10:18:31 2026 GMT Not After : Mar 8 10:18:31 2026 GMT Subject: CN=69a41278-e896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2f:d7:f4:e1:03:b0:bc:6f:88:bf:dc:1c:05: d1:cb:2d:b1:44:eb:f2:a9:dd:35:3f:ef:8d:50:3d: 7b:fe:ca:71:8f:f4:62:38:b5:64:b7:f5:18:17:73: 1f:95:2a:28:c8:fa:b3:af:ae:1c:1d:c8:bb:20:c7: e5:39:a8:b9:d5:9f:5b:9e:bb:b8:6d:42:ae:c7:9c: b9:bb:bd:8f:a5:76:eb:71:8c:9f:37:68:c6:08:54: 96:dc:48:e6:14:74:43:c3:58:59:84:07:c7:79:6d: ba:d8:35:6f:c2:32:a0:dc:8a:f7:a8:3a:3d:c8:c2: 88:af:ca:b8:ed:bc:39:71:eb:59:bf:0f:54:9e:45: 11:e5:de:8d:7f:7d:db:62:e9:4a:79:97:61:83:5f: a8:b0:78:db:4a:a2:80:95:e4:f3:84:78:fa:ae:b5: bb:f4:0e:68:d1:af:1f:78:60:37:93:6a:f1:3d:7b: b6:08:ac:1e:91:6b:4c:8c:7f:04:11:b6:dd:d6:84: d0:aa:b6:1a:62:b6:51:22:a8:3d:fe:7f:3b:1a:05: 77:1b:8c:f5:6f:74:38:ac:51:47:87:e9:7f:54:a2: ab:78:5e:a5:a4:5f:d2:f5:f9:38:ae:df:69:88:26: 22:75:2c:d9:c8:0f:c4:a4:b9:94:0d:40:0d:bd:80: 30:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0F:C1:BA:12:00:43:AE:30:29:BA:4F:5E:B8:C5:8C:FF:55:5F:78 X509v3 Authority Key Identifier: keyid:0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:20:00:e2:e8:82:8c:6a:c5:cf:9d:9f:f0:c1:bf:0e:e3:5b: 98:f0:31:3a:6e:11:a8:2e:a7:07:c6:8b:cd:74:54:d6:14:79: 49:8d:9c:e1:e3:27:7e:2d:f5:c3:84:07:b4:fe:df:95:f2:12: c7:e0:1a:d9:4d:4c:40:79:22:41:91:70:25:36:59:7a:bc:5c: d9:0e:21:d7:12:78:14:85:b2:6c:eb:71:67:d9:c3:ec:42:0e: 51:32:b1:b6:46:c2:de:fe:95:bc:2d:a8:40:22:07:49:61:9d: 0f:8a:b2:72:83:93:b0:95:4d:c0:d6:44:c6:16:37:57:1d:36: d4:82:ad:18:53:55:0c:0e:71:2b:58:1c:45:60:d6:04:f4:7b: 3f:c4:a1:f9:88:94:27:1e:2b:1e:03:18:63:3f:de:e7:72:9c: 4a:99:18:6a:7c:8a:cf:5a:c1:d4:fe:2b:cc:25:b9:a6:94:8e: 9b:e5:18:5f:18:35:bb:c6:47:2e:98:27:97:cc:89:9a:a8:1c: 71:76:8e:a3:24:dc:7e:01:c7:fb:62:0f:34:b1:fc:04:08:a9: 2c:01:7f:fc:15:e4:83:23:00:2b:25:0d:2a:29:3f:54:e9:38: 2e:9d:75:8c:73:ff:0b:39:b5:1d:d0:f6:a4:98:90:c3:d1:7f: fa:10:b9:0c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTcyMDExMC8GA1UEBRMoMEY1NDY3QTlEMUVCMDk4QjUyQ0MxMzlENTc0M0I0NzQ1 QkY1OTA3NTAeFw0yNjAzMDExMDE4MzFaFw0yNjAzMDgxMDE4MzFaMBgxFjAUBgNV BAMTDTY5YTQxMjc4LWU4OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcL9f04QOwvG+Iv9wcBdHLLbFE6/Kp3TU/741QPXv+ynGP9GI4tWS39RgXcx+V KijI+rOvrhwdyLsgx+U5qLnVn1ueu7htQq7HnLm7vY+ldutxjJ83aMYIVJbcSOYU dEPDWFmEB8d5bbrYNW/CMqDciveoOj3IwoivyrjtvDlx61m/D1SeRRHl3o1/fdti 6Up5l2GDX6iweNtKooCV5POEePqutbv0DmjRrx94YDeTavE9e7YIrB6Ra0yMfwQR tt3WhNCqthpitlEiqD3+fzsaBXcbjPVvdDisUUeH6X9Uoqt4XqWkX9L1+Tiu32mI JiJ1LNnID8SkuZQNQA29gDCDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUag/BuhIA Q64wKbpPXrjFjP9VX3gwHwYDVR0jBBgwFoAUD1RnqdHrCYtSzBOdV0O0dFv1kHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5NzIwLzUxOUMxMDRFRTU1 OTExRjBCMjI4ODk1ODM4NkY1NkJDL0QxUm5xZEhyQ1l0U3pCT2RWME8wZEZ2MWtI VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRDFSbnFkSHJDWXRTekJPZFYwTzBkRnYxa0hVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 NzIwLzUxOUMxMDRFRTU1OTExRjBCMjI4ODk1ODM4NkY1NkJDL0QxUm5xZEhyQ1l0 U3pCT2RWME8wZEZ2MWtIVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA3IADi6IKMasXPnZ/wwb8O41uY8DE6bhGoLqcHxovNdFTWFHlJjZzh4yd+LfXD hAe0/t+V8hLH4BrZTUxAeSJBkXAlNll6vFzZDiHXEngUhbJs63Fn2cPsQg5RMrG2 RsLe/pW8LahAIgdJYZ0PirJyg5OwlU3A1kTGFjdXHTbUgq0YU1UMDnErWBxFYNYE 9Hs/xKH5iJQnHiseAxhjP97ncpxKmRhqfIrPWsHU/ivMJbmmlI6b5RhfGDW7xkcu mCeXzImaqBxxdo6jJNx+Acf7Yg80sfwECKksAX/8FeSDIwArJQ0qKT9U6TgunXWM c/8LObUd0PakmJDD0X/6ELkM -----END CERTIFICATE-----Generated at Mon Mar 2 12:22:22 2026 by rpki-client