$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft File: l0ZNOjIvAGf4rOO3dak6_rn8iew.mft (raw, json) Hash identifier: cQ792xmRlF4H73hDK8NQJz+cNrTCKFh7tKK06TGDsDA= Subject key identifier: 7F:C9:15:6E:14:C1:F5:75:EB:B3:4E:F9:60:DB:10:03:78:BB:29:09 Authority key identifier: 97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC Certificate issuer: /CN=A91A9E58/serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft Manifest number: 2A Signing time: Sun 01 Mar 2026 10:10:15 +0000 Manifest this update: Sun 01 Mar 2026 10:10:15 +0000 Manifest next update: Sun 08 Mar 2026 10:10:15 +0000 Files and hashes: 1: l0ZNOjIvAGf4rOO3dak6_rn8iew.crl (hash: OuU+Z9lON93nO1PVrfVO+iUWECinRjqIiD4Sq54hvMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.crl rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E58, serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC Validity Not Before: Mar 1 10:10:15 2026 GMT Not After : Mar 8 10:10:15 2026 GMT Subject: CN=69a41087-f7ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c9:ca:ba:a2:e8:8e:4a:5b:42:e6:79:29:31: 5c:dd:20:46:2e:c3:c9:b6:b5:1c:8a:12:7b:f3:6b: 79:b7:94:65:67:0d:19:e4:c5:45:ca:f8:2f:83:5f: c2:17:92:84:f4:bd:62:d9:d2:30:96:22:c3:c7:59: 3d:64:56:6d:35:a1:51:4e:2b:8c:1b:0a:74:d3:11: fd:06:9d:6f:f8:1b:00:4c:49:e3:5f:bf:0b:ef:97: 21:c6:b1:c4:ab:f2:45:ed:7d:8e:13:97:4b:a6:4b: ca:53:06:31:3e:f3:94:c6:41:df:32:5b:9b:a2:17: 4f:c0:a3:f7:53:4d:f8:db:b2:ba:5f:60:73:66:5f: ac:16:19:65:ca:0d:b6:5b:ab:f3:f4:a1:fd:7a:fd: f3:06:7e:2a:80:4d:0b:d8:bb:ce:86:79:51:40:71: 49:4e:74:f0:f7:f4:e7:39:03:99:3a:b4:e3:38:ec: 9e:03:be:12:b4:9b:c4:42:53:0e:c5:e7:bc:58:a8: 86:e5:a3:88:e7:aa:8a:e1:14:64:d9:e4:e2:d6:94: 7c:03:40:63:67:40:63:f3:75:5c:57:c5:12:69:33: 42:5c:19:23:33:17:31:bd:04:d2:43:0b:0a:67:85: 52:58:c8:ea:88:1c:fd:34:a2:c1:50:7a:3e:9a:07: 62:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C9:15:6E:14:C1:F5:75:EB:B3:4E:F9:60:DB:10:03:78:BB:29:09 X509v3 Authority Key Identifier: keyid:97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:19:7d:43:42:b5:ea:41:ea:b8:92:33:82:32:74:bc:45:b6: c0:4a:52:fd:5f:1f:a2:f2:1e:fc:c4:0d:93:51:82:1b:46:0a: 18:52:56:f0:4f:19:a2:31:c8:f1:91:4d:40:a3:00:f9:1b:16: 27:2d:4a:eb:87:ab:b2:13:d8:38:64:aa:d4:82:eb:1d:91:2f: 7a:e4:18:57:43:77:a7:19:a8:18:22:7e:7c:51:2d:7f:f4:66: b1:56:74:3d:f5:72:b0:c4:96:10:3e:e4:69:67:10:0b:8d:98: 6a:69:63:26:b7:ae:9e:4e:cb:99:aa:bb:52:f9:1a:f5:f2:00: 5f:98:bc:19:2a:7c:d2:1f:e1:28:6c:d5:7d:1f:6c:92:2a:7d: 51:29:35:92:5a:df:d3:fb:03:57:d4:93:fd:64:cd:1f:dd:fb: 35:a5:cb:09:00:84:e8:db:86:e1:dd:c7:73:c3:5d:5f:cb:2b: 97:ff:8a:29:26:23:a5:5f:2c:f8:fc:7b:e5:09:05:47:58:78: 68:b5:25:cc:fc:89:ce:72:fe:08:0e:6e:25:66:62:81:79:58: 6b:03:fc:da:e7:de:20:5e:46:f4:0b:6e:ae:c5:48:dc:5b:8b: b3:83:4d:5c:6a:ee:83:57:a8:19:56:9b:98:1d:69:f7:2b:fc: 95:b6:18:c7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUU1ODExMC8GA1UEBRMoOTc0NjREM0EzMjJGMDA2N0Y4QUNFM0I3NzVBOTNBRkVC OUZDODlFQzAeFw0yNjAzMDExMDEwMTVaFw0yNjAzMDgxMDEwMTVaMBgxFjAUBgNV BAMTDTY5YTQxMDg3LWY3Y2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSycq6ouiOSltC5nkpMVzdIEYuw8m2tRyKEnvza3m3lGVnDRnkxUXK+C+DX8IX koT0vWLZ0jCWIsPHWT1kVm01oVFOK4wbCnTTEf0GnW/4GwBMSeNfvwvvlyHGscSr 8kXtfY4Tl0umS8pTBjE+85TGQd8yW5uiF0/Ao/dTTfjbsrpfYHNmX6wWGWXKDbZb q/P0of16/fMGfiqATQvYu86GeVFAcUlOdPD39Oc5A5k6tOM47J4DvhK0m8RCUw7F 57xYqIblo4jnqorhFGTZ5OLWlHwDQGNnQGPzdVxXxRJpM0JcGSMzFzG9BNJDCwpn hVJYyOqIHP00osFQej6aB2IdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUf8kVbhTB 9XXrs075YNsQA3i7KQkwHwYDVR0jBBgwFoAUl0ZNOjIvAGf4rOO3dak6/rn8ieww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5RTU4L0Y0NDhDOTc0RDY4 OTExRjBCOUE4MzcwMzZDRDM2NDFEL2wwWk5Pakl2QUdmNHJPTzNkYWs2X3JuOGll dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbDBaTk9qSXZBR2Y0ck9PM2RhazZfcm44aWV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 RTU4L0Y0NDhDOTc0RDY4OTExRjBCOUE4MzcwMzZDRDM2NDFEL2wwWk5Pakl2QUdm NHJPTzNkYWs2X3JuOGlldy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCRGX1DQrXqQeq4kjOCMnS8RbbASlL9Xx+i8h78xA2TUYIbRgoYUlbwTxmiMcjx kU1AowD5GxYnLUrrh6uyE9g4ZKrUgusdkS965BhXQ3enGagYIn58US1/9GaxVnQ9 9XKwxJYQPuRpZxALjZhqaWMmt66eTsuZqrtS+Rr18gBfmLwZKnzSH+EobNV9H2yS Kn1RKTWSWt/T+wNX1JP9ZM0f3fs1pcsJAITo24bh3cdzw11fyyuX/4opJiOlXyz4 /HvlCQVHWHhotSXM/InOcv4IDm4lZmKBeVhrA/za594gXkb0C26uxUjcW4uzg01c au6DV6gZVpuYHWn3K/yVthjH -----END CERTIFICATE-----Generated at Sun Mar 1 23:01:44 2026 by rpki-client