$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft File: 44pe3hloyTdeUVUfrpiIigu1RJA.mft (raw, json) Hash identifier: Y715E7M1KG6QYPvvbflRSNXGMKJBurHqwGmIKgHdj6U= Subject key identifier: 3E:58:5F:8A:68:9B:23:D6:7E:51:6B:36:94:15:AE:01:09:A7:F0:36 Authority key identifier: E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90 Certificate issuer: /CN=A91AAC4B/serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft Manifest number: D8 Signing time: Sun 01 Mar 2026 07:48:30 +0000 Manifest this update: Sun 01 Mar 2026 07:48:30 +0000 Manifest next update: Sun 08 Mar 2026 07:48:30 +0000 Files and hashes: 1: 44pe3hloyTdeUVUfrpiIigu1RJA.crl (hash: j8mVjAgknMA5iK1qJ/fH1ytZjrAmJspABHqWhgbpK6o=) 2: B6A31094CD7E11EFBBAE2137C4F9AE02.roa (hash: r7BxgdTGIWfxwDO3b24oDXrzHcLbJY+URU6Et/eEPr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.crl rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAC4B, serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490 Validity Not Before: Mar 1 07:48:30 2026 GMT Not After : Mar 8 07:48:30 2026 GMT Subject: CN=69a3ef4e-845f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2b:c9:a4:4b:16:d9:06:46:37:ad:42:30:1f: a3:45:f0:6b:b1:75:9a:28:c5:ff:dd:d3:c6:01:f5: b2:be:70:7f:b7:66:a6:22:47:2a:16:c3:04:07:cd: a7:77:09:c2:e3:18:fe:2f:f7:5c:c0:29:8b:fc:73: 8c:d1:20:ed:40:24:e2:79:16:b1:12:da:dc:c0:82: 24:c1:ef:f9:33:14:4b:72:37:b9:2e:7f:8e:2f:42: 52:6d:a4:6d:c2:67:65:ba:67:4b:b5:c7:88:6b:63: c8:58:1e:62:ee:02:ee:3f:63:c5:d2:57:79:dc:49: 65:43:de:89:8c:48:22:e7:cc:c1:d7:a5:d4:e5:80: 3d:44:87:e7:64:e5:c2:1c:62:2d:38:b9:b3:16:ad: 11:40:eb:fe:48:c3:cb:53:40:7c:b2:e4:fd:9e:d0: 76:0c:c6:90:1d:ae:67:3c:ac:8e:c0:74:6c:b4:bd: da:19:ea:1e:8a:c2:8e:48:66:c7:e4:67:d9:e0:cc: 64:a8:74:8e:e6:a9:73:fc:83:e1:c7:b1:75:78:49: fc:f0:ec:8b:b2:11:ad:49:50:df:ec:af:4b:2a:63: 60:f3:e4:16:9d:d6:42:6f:8a:a0:00:40:6d:09:28: 88:0a:21:22:8f:bd:46:23:1c:da:c4:5b:e6:6b:a0: 47:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:58:5F:8A:68:9B:23:D6:7E:51:6B:36:94:15:AE:01:09:A7:F0:36 X509v3 Authority Key Identifier: keyid:E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:9c:c5:8d:c4:7c:c9:e8:c2:51:4f:53:d4:67:f3:92:78:62: 32:69:3d:6f:ef:5b:e8:44:07:85:e2:76:0a:42:b5:40:74:92: a5:4c:93:69:74:95:f8:2e:ed:9d:f1:97:34:8f:9b:ec:8f:3b: 50:24:28:75:c4:66:6f:8e:34:c1:35:a2:37:34:04:2e:e6:72: 44:f9:bd:7f:d1:7e:cd:e7:6c:eb:64:2a:00:f1:d4:d4:20:ce: 35:97:05:ce:ca:1e:43:f4:c4:8d:b9:d5:92:fb:10:dc:16:a2: fd:db:aa:6f:3c:e1:ee:5c:b9:0b:4f:47:b0:f7:28:86:c9:71: 8f:ef:42:b3:a6:99:cf:14:9e:c3:34:1a:1f:39:e0:f0:c5:dc: a5:e2:eb:c6:aa:83:e8:3b:bd:6f:7c:4e:aa:0d:64:1e:c6:e8: f6:31:48:17:e2:5f:48:6a:a5:44:6e:4a:55:a4:b6:6a:6f:32: db:c3:8c:40:0c:2b:d4:e9:6a:fd:6f:9d:36:ac:95:e5:22:a4: 5b:c6:4e:4a:db:11:0d:c3:15:33:97:83:0d:5c:fc:20:56:47: a7:d5:b9:0c:ec:9b:b9:36:95:65:35:a8:97:b4:07:70:10:e5: ae:6e:58:1d:66:5f:61:d9:67:81:6d:1d:d6:fa:67:6b:f2:fd: c3:02:33:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFDNEIxMTAvBgNVBAUTKEUzOEE1RURFMTk2OEM5Mzc1RTUxNTUxRkFFOTg4ODhB MEJCNTQ0OTAwHhcNMjYwMzAxMDc0ODMwWhcNMjYwMzA4MDc0ODMwWjAYMRYwFAYD VQQDEw02OWEzZWY0ZS04NDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlCvJpEsW2QZGN61CMB+jRfBrsXWaKMX/3dPGAfWyvnB/t2amIkcqFsMEB82n dwnC4xj+L/dcwCmL/HOM0SDtQCTieRaxEtrcwIIkwe/5MxRLcje5Ln+OL0JSbaRt wmdlumdLtceIa2PIWB5i7gLuP2PF0ld53EllQ96JjEgi58zB16XU5YA9RIfnZOXC HGItOLmzFq0RQOv+SMPLU0B8suT9ntB2DMaQHa5nPKyOwHRstL3aGeoeisKOSGbH 5GfZ4MxkqHSO5qlz/IPhx7F1eEn88OyLshGtSVDf7K9LKmNg8+QWndZCb4qgAEBt CSiICiEij71GIxzaxFvma6BHMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD5YX4po myPWflFrNpQVrgEJp/A2MB8GA1UdIwQYMBaAFOOKXt4ZaMk3XlFVH66YiIoLtUSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUM0Qi9ERTNGODg5QUNE N0QxMUVGQUEwNzIzMEFDNEY5QUUwMi80NHBlM2hsb3lUZGVVVlVmcnBpSWlndTFS SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQ0cGUzaGxveVRkZVVWVWZycGlJaWd1MVJKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUM0Qi9ERTNGODg5QUNEN0QxMUVGQUEwNzIzMEFDNEY5QUUwMi80NHBlM2hsb3lU ZGVVVlVmcnBpSWlndTFSSkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADJzFjcR8yejCUU9T1GfzknhiMmk9b+9b6EQHheJ2CkK1QHSSpUyTaXSV+C7t nfGXNI+b7I87UCQodcRmb440wTWiNzQELuZyRPm9f9F+zeds62QqAPHU1CDONZcF zsoeQ/TEjbnVkvsQ3Bai/duqbzzh7ly5C09HsPcohslxj+9Cs6aZzxSewzQaHzng 8MXcpeLrxqqD6Du9b3xOqg1kHsbo9jFIF+JfSGqlRG5KVaS2am8y28OMQAwr1Olq /W+dNqyV5SKkW8ZOStsRDcMVM5eDDVz8IFZHp9W5DOybuTaVZTWol7QHcBDlrm5Y HWZfYdlngW0d1vpna/L9wwIzmg== -----END CERTIFICATE-----Generated at Sun Mar 1 23:56:52 2026 by rpki-client