$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft File: _CT1OQdHh-zqsAwkJgbCvWiBmg0.mft (raw, json) Hash identifier: SGbBH24feOGfm8AP3+8Iywo1XFDpVd3MqSK3DBNAYco= Subject key identifier: A1:9E:F2:7D:FA:19:41:D8:A6:79:B1:64:57:8D:21:2C:75:1B:10:83 Authority key identifier: FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D Certificate issuer: /CN=A91A9CBB/serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft Manifest number: A8 Signing time: Sun 01 Mar 2026 08:31:34 +0000 Manifest this update: Sun 01 Mar 2026 08:31:33 +0000 Manifest next update: Sun 08 Mar 2026 08:31:33 +0000 Files and hashes: 1: _CT1OQdHh-zqsAwkJgbCvWiBmg0.crl (hash: jOx1GPxWgsWvZg5kdu5lmJ4uwYXvM+zrttm2Eid12KM=) 2: 2A8C8F02198E11F09D302145C4F9AE02.roa (hash: P98MLa//N/AtsKsIaeAkQnM7+Sh5w9q7o4QngCybDKA=) 3: 947AB09E459C11F0BF881335C4F9AE02.roa (hash: /savhlBX8yuqhwBG9bwr+ymXN5AO8aEM3V2xkRwTRxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CBB, serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Validity Not Before: Mar 1 08:31:33 2026 GMT Not After : Mar 8 08:31:33 2026 GMT Subject: CN=69a3f965-b46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4c:7a:18:03:1e:07:37:cc:ce:07:d7:d7:12: 90:ac:8d:1a:8d:bd:fa:60:2a:65:b7:96:f9:16:cd: a7:7e:62:82:13:fa:81:a4:d9:97:3a:63:f1:91:55: 0d:8c:44:cb:8b:08:d2:04:4a:58:5b:7d:8c:25:52: cc:27:73:d2:dc:0b:c0:05:79:11:bb:1d:91:e3:67: 2f:85:0b:4c:4e:73:1e:36:ff:cc:d6:88:77:1b:d5: 2c:12:b9:5f:5f:80:57:79:9c:08:42:a1:5b:ae:b6: 56:36:3b:4f:1d:c3:7b:21:83:fc:99:96:0c:a8:de: db:dd:03:8b:c1:a0:45:b9:b9:8f:62:9e:19:6e:92: 02:4a:d3:d5:23:27:5a:e1:9f:25:d5:8f:db:eb:e4: 95:d5:17:37:42:00:04:13:bd:72:c8:b5:72:f6:93: 63:a1:f6:31:3f:41:7b:e3:51:13:b1:7c:72:71:ab: e3:68:4d:39:ff:90:5f:06:12:20:08:3b:67:1e:4e: ba:17:2e:8c:c1:e0:e1:93:b5:47:ff:52:14:bc:96: bf:03:29:5a:90:c8:87:f5:e2:d3:c0:b3:f2:dd:cb: 91:db:24:15:8d:75:d8:54:cb:fc:3b:19:87:5e:9b: 2c:fd:91:cb:89:ec:7b:dc:a2:15:51:f9:55:3e:67: a7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9E:F2:7D:FA:19:41:D8:A6:79:B1:64:57:8D:21:2C:75:1B:10:83 X509v3 Authority Key Identifier: keyid:FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:a3:e8:21:f4:d5:88:b6:a5:b2:35:22:8c:eb:93:4d:42:5a: 33:19:7f:0c:b3:48:ab:00:1b:16:6d:94:4a:d1:ec:96:c7:4c: 7c:03:2f:2d:7f:6d:2c:a3:42:81:4d:49:73:f4:ae:72:26:87: 7e:f4:28:6b:e9:43:24:ea:fe:71:67:aa:a4:bf:f2:4b:f2:59: 34:2b:eb:76:66:7c:d7:f3:b1:98:9f:e8:96:60:2d:d4:29:a2: b8:5e:fe:9b:9e:cd:8f:29:f7:61:fb:96:6f:37:bc:66:e3:a2: a6:ca:b1:70:bc:84:84:cb:f3:b4:66:79:33:01:23:0e:11:8a: e3:2d:91:62:da:d1:12:ad:33:9a:81:9b:d7:50:42:ac:ca:d7: 14:1e:ef:61:b2:eb:67:e8:1b:d4:b1:9c:6c:8b:27:e3:73:e6: 29:68:3f:2d:95:f3:f6:f0:73:c2:69:68:f1:5b:6b:f3:db:d0: b2:dc:7d:6c:04:51:02:c9:e1:3d:12:bf:11:73:d3:99:02:23: 7d:ae:9e:b8:73:ff:b1:47:87:46:d9:ff:0c:3a:b5:80:40:45: 09:72:b5:cc:24:b7:72:8b:77:88:7f:ed:96:7e:7f:e5:51:a3: 7e:30:89:53:05:12:de:6b:8d:90:9a:a7:a5:99:64:1c:0d:11: 38:45:cb:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlDQkIxMTAvBgNVBAUTKEZDMjRGNTM5MDc0Nzg3RUNFQUIwMEMyNDI2MDZDMkJE Njg4MTlBMEQwHhcNMjYwMzAxMDgzMTMzWhcNMjYwMzA4MDgzMTMzWjAYMRYwFAYD VQQDEw02OWEzZjk2NS1iNDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ux6GAMeBzfMzgfX1xKQrI0ajb36YCplt5b5Fs2nfmKCE/qBpNmXOmPxkVUN jETLiwjSBEpYW32MJVLMJ3PS3AvABXkRux2R42cvhQtMTnMeNv/M1oh3G9UsErlf X4BXeZwIQqFbrrZWNjtPHcN7IYP8mZYMqN7b3QOLwaBFubmPYp4ZbpICStPVIyda 4Z8l1Y/b6+SV1Rc3QgAEE71yyLVy9pNjofYxP0F741ETsXxycavjaE05/5BfBhIg CDtnHk66Fy6MweDhk7VH/1IUvJa/AylakMiH9eLTwLPy3cuR2yQVjXXYVMv8OxmH Xpss/ZHLiex73KIVUflVPmen8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKGe8n36 GUHYpnmxZFeNISx1GxCDMB8GA1UdIwQYMBaAFPwk9TkHR4fs6rAMJCYGwr1ogZoN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNCQi9ENTNCRDE0NjE1 QjExMUYwQTI3NzRBMDlDNEY5QUUwMi9fQ1QxT1FkSGgtenFzQXdrSmdiQ3ZXaUJt ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19DVDFPUWRIaC16cXNBd2tKZ2JDdldpQm1nMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUNCQi9ENTNCRDE0NjE1QjExMUYwQTI3NzRBMDlDNEY5QUUwMi9fQ1QxT1FkSGgt enFzQXdrSmdiQ3ZXaUJtZzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp6PoIfTViLalsjUijOuTTUJaMxl/DLNIqwAbFm2UStHslsdMfAMvLX9tLKNC gU1Jc/SuciaHfvQoa+lDJOr+cWeqpL/yS/JZNCvrdmZ81/OxmJ/olmAt1CmiuF7+ m57Njyn3YfuWbze8ZuOipsqxcLyEhMvztGZ5MwEjDhGK4y2RYtrREq0zmoGb11BC rMrXFB7vYbLrZ+gb1LGcbIsn43PmKWg/LZXz9vBzwmlo8Vtr89vQstx9bARRAsnh PRK/EXPTmQIjfa6euHP/sUeHRtn/DDq1gEBFCXK1zCS3cot3iH/tln5/5VGjfjCJ UwUS3muNkJqnpZlkHA0ROEXL0g== -----END CERTIFICATE-----Generated at Mon Mar 2 15:55:05 2026 by rpki-client