$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft File: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft (raw, json) Hash identifier: GNImJD2SMh2w86rNAEZdbIb5U8uhzNmE7csRIEkmpyU= Subject key identifier: 5F:5C:0D:4D:6A:0D:43:AC:99:45:21:FC:87:87:E2:EF:1C:7C:D2:E0 Authority key identifier: 85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07 Certificate issuer: /CN=A91AAC4B/serialNumber=852046915185F855E09EB344788139430E740F07 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft Manifest number: DA Signing time: Mon 02 Mar 2026 01:54:00 +0000 Manifest this update: Mon 02 Mar 2026 01:53:58 +0000 Manifest next update: Mon 09 Mar 2026 01:53:58 +0000 Files and hashes: 1: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl (hash: epXmimRpjH7jyLpNy1t2tFm8tPQP10s4RX5kJtpCZu8=) 2: B710956ACD7E11EFBBAE2137C4F9AE02.roa (hash: xCTb7m70C8ktIRA0Y3XISp4G4lVWQ5RasqzMmTsyIbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAC4B, serialNumber=852046915185F855E09EB344788139430E740F07 Validity Not Before: Mar 2 01:53:58 2026 GMT Not After : Mar 9 01:53:58 2026 GMT Subject: CN=69a4edb7-1920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5d:ab:43:29:ea:b2:75:1a:ca:1a:ab:67:af: db:62:ba:59:38:7c:a0:80:46:70:07:72:e3:fa:35: 1e:e3:45:10:2d:03:44:38:fe:4e:ec:ec:bd:c2:98: 35:f7:20:8a:9e:69:c1:2b:af:dd:a3:25:04:7e:27: 88:93:5a:53:21:be:d6:3e:97:64:16:42:81:e6:bc: 96:fb:91:4e:0f:f5:bd:be:07:e8:3a:f2:7e:17:32: e1:6e:d7:10:c4:fc:fc:54:a1:aa:ec:89:6a:3f:30: bd:de:98:85:2d:ff:82:e0:c6:76:88:ea:5c:91:ac: 17:6a:47:eb:ee:06:94:ea:df:a3:4a:86:fd:7b:8d: bc:04:fc:f7:f5:75:06:bf:58:5f:a1:83:51:91:46: b4:aa:69:a6:fa:ef:f7:c1:a5:13:9d:8c:cc:fb:85: 44:de:e0:07:b0:87:e7:98:1e:ce:81:26:1e:43:db: fb:62:d5:64:12:72:4c:22:2b:3f:9b:6f:94:8e:16: 36:c9:03:e8:10:d0:46:3d:69:4c:43:5c:0e:4a:00: 3a:ea:27:8a:93:c2:b8:df:eb:a2:f1:d0:32:c4:b2: ae:0a:82:76:53:cb:ee:57:61:3b:2b:70:3e:ac:08: 2f:f3:c5:21:85:c9:ed:78:23:e1:c2:cf:4d:88:cb: b2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5C:0D:4D:6A:0D:43:AC:99:45:21:FC:87:87:E2:EF:1C:7C:D2:E0 X509v3 Authority Key Identifier: keyid:85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:1f:8a:fd:21:47:60:b9:f9:3e:aa:bd:bb:29:c7:1c:fb:60: b5:fb:88:e0:2b:e9:11:b1:ca:f9:27:14:62:02:21:a4:8c:bc: 50:b2:92:44:27:26:b6:82:16:9b:2b:39:0d:e6:cd:2c:ee:5e: 22:70:67:6f:d6:fb:81:1d:36:d4:59:19:3c:8b:91:32:0d:54: a7:e6:d3:8e:b4:2f:37:9a:63:6e:67:6f:1f:d7:f4:47:ed:ac: 9a:0d:45:74:2c:b4:18:f6:72:dd:c0:58:18:e9:43:70:76:99: 3d:a5:74:ff:39:26:04:1d:14:79:17:fc:bf:0d:7a:07:4e:ab: dd:b9:b2:85:ca:b4:49:ed:0a:34:3f:57:9a:16:71:f6:a3:17: 53:5f:c6:39:f8:c7:c4:57:3b:c6:27:7c:3e:93:64:48:cb:bc: 46:9d:33:cc:50:99:ab:e5:d5:a3:4d:88:f2:51:1e:d6:5c:e3: 4d:c3:14:78:b4:00:df:f6:a0:07:b8:5c:4e:65:8e:62:2f:b0: 21:88:13:ac:17:34:c8:64:d4:fb:6b:89:6c:93:e2:13:dd:fd: b4:9c:bc:88:43:d0:f9:11:c3:5c:b2:8d:b6:8a:b2:47:cc:a6: 9f:ea:fa:51:e2:a6:a7:9a:75:b9:ca:20:12:1d:c2:b5:94:36: 58:83:f4:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFDNEIxMTAvBgNVBAUTKDg1MjA0NjkxNTE4NUY4NTVFMDlFQjM0NDc4ODEzOTQz MEU3NDBGMDcwHhcNMjYwMzAyMDE1MzU4WhcNMjYwMzA5MDE1MzU4WjAYMRYwFAYD VQQDEw02OWE0ZWRiNy0xOTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAul2rQynqsnUayhqrZ6/bYrpZOHyggEZwB3Lj+jUe40UQLQNEOP5O7Oy9wpg1 9yCKnmnBK6/doyUEfieIk1pTIb7WPpdkFkKB5ryW+5FOD/W9vgfoOvJ+FzLhbtcQ xPz8VKGq7IlqPzC93piFLf+C4MZ2iOpckawXakfr7gaU6t+jSob9e428BPz39XUG v1hfoYNRkUa0qmmm+u/3waUTnYzM+4VE3uAHsIfnmB7OgSYeQ9v7YtVkEnJMIis/ m2+UjhY2yQPoENBGPWlMQ1wOSgA66ieKk8K43+ui8dAyxLKuCoJ2U8vuV2E7K3A+ rAgv88UhhcnteCPhws9NiMuybQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF9cDU1q DUOsmUUh/IeH4u8cfNLgMB8GA1UdIwQYMBaAFIUgRpFRhfhV4J6zRHiBOUMOdA8H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUM0Qi9FNjM1Rjc5NkNE N0QxMUVGQUEwNzIzMEFDNEY5QUUwMi9oU0JHa1ZHRi1GWGduck5FZUlFNVF3NTBE d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hTQkdrVkdGLUZYZ25yTkVlSUU1UXc1MER3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUM0Qi9FNjM1Rjc5NkNEN0QxMUVGQUEwNzIzMEFDNEY5QUUwMi9oU0JHa1ZHRi1G WGduck5FZUlFNVF3NTBEd2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA4R+K/SFHYLn5Pqq9uynHHPtgtfuI4CvpEbHK+ScUYgIhpIy8ULKSRCcmtoIW mys5DebNLO5eInBnb9b7gR021FkZPIuRMg1Up+bTjrQvN5pjbmdvH9f0R+2smg1F dCy0GPZy3cBYGOlDcHaZPaV0/zkmBB0UeRf8vw16B06r3bmyhcq0Se0KND9XmhZx 9qMXU1/GOfjHxFc7xid8PpNkSMu8Rp0zzFCZq+XVo02I8lEe1lzjTcMUeLQA3/ag B7hcTmWOYi+wIYgTrBc0yGTU+2uJbJPiE939tJy8iEPQ+RHDXLKNtoqyR8ymn+r6 UeKmp5p1ucogEh3CtZQ2WIP0kA== -----END CERTIFICATE-----Generated at Mon Mar 2 12:48:11 2026 by rpki-client