$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft File: U4XhOhtYRftEzutr7Y3rTomvOCk.mft (raw, json) Hash identifier: XT8EOke8BoxUPWVgKzeygbl/NNWhy14EKUTfcfad8PI= Subject key identifier: 0A:08:9C:3C:10:62:B1:03:15:97:03:2B:E6:37:79:3B:0A:75:7C:85 Authority key identifier: 53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 Certificate issuer: /CN=A91ACFEB/serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Certificate serial: 0A0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft Manifest number: 09FD Signing time: Sat 28 Feb 2026 20:07:40 +0000 Manifest this update: Sat 28 Feb 2026 20:07:40 +0000 Manifest next update: Sat 07 Mar 2026 20:07:40 +0000 Files and hashes: 1: U4XhOhtYRftEzutr7Y3rTomvOCk.crl (hash: YHCEe6PcG2bUwlnt8fwYw13Rdbn/C9DhNljg5sVtUOY=) 2: 3636BCD2937011EA8A795583C4F9AE02.roa (hash: N8ceN2VkS27MkISIt7fRZouPAXOPromcPpkIZGqnWrI=) 3: 35831FCE937011EA8A795583C4F9AE02.roa (hash: 3DHcqdykxpveA6BtUxrmHjjMMoGMVeRc0Hl6/VGMoXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 20:07:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2575 (0xa0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACFEB, serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Validity Not Before: Feb 28 20:07:40 2026 GMT Not After : Mar 7 20:07:40 2026 GMT Subject: CN=69a34b0c-376d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:fa:e3:9b:82:fa:2b:d0:74:36:76:27:cd:09: f6:1d:82:ae:db:e6:45:96:50:df:04:55:7e:87:ec: 36:73:2f:37:25:35:85:29:e3:42:01:43:41:d6:7c: c1:e2:af:07:7f:4e:7d:b6:11:20:56:d3:5b:b1:45: d7:fa:29:8b:48:ef:6f:b8:db:3d:4b:d2:37:54:b3: 9a:f5:fe:11:d5:a0:68:b0:6f:f1:84:50:77:a7:ab: f5:1f:fd:80:24:1b:8a:6c:9b:eb:af:ef:ac:20:ce: 40:84:62:40:ef:65:a0:59:1a:d9:85:39:ab:58:1c: a1:98:01:22:90:f5:f4:4c:39:bd:4a:cf:8c:db:3f: cd:b0:2e:c8:ad:cb:18:1b:c0:ca:26:ee:88:91:c3: 77:88:39:c6:03:f2:d3:87:f6:72:7d:5b:ee:26:9a: 61:50:19:9a:4e:ec:64:a6:29:ae:38:0c:4f:1b:91: 20:b6:d7:71:01:5b:92:96:b8:86:47:0d:c5:b3:a4: 75:a9:41:3a:88:bc:00:2a:f2:40:3c:6f:da:ca:6b: c4:d7:7b:45:ba:7f:18:d0:3c:f9:55:3c:f8:eb:f7: a4:8d:fc:fb:2a:96:40:3c:70:fd:7d:2d:73:28:2a: 7f:77:d7:df:89:e5:fa:e1:60:d3:86:1d:43:74:23: 70:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:08:9C:3C:10:62:B1:03:15:97:03:2B:E6:37:79:3B:0A:75:7C:85 X509v3 Authority Key Identifier: keyid:53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:ea:4c:0d:a6:5b:bb:4e:2a:1d:8a:5d:47:7d:1c:4a:be:ce: c6:16:f7:e0:ab:72:16:66:7f:a7:d1:06:f1:1e:73:2c:af:2e: f3:05:4d:34:e5:35:d0:66:91:7f:8c:a1:35:73:3b:60:7b:f7: 8a:0e:2d:d8:f8:4a:ef:4b:6e:ae:e8:a3:94:26:35:b7:6a:4a: 5f:9e:b1:b5:c6:5a:f7:0e:01:7e:44:19:a6:c4:ac:b4:eb:6d: 98:7a:ae:95:59:96:b7:62:86:80:7d:03:51:4a:85:d3:90:50: ba:1c:3c:c1:08:23:03:56:ed:9c:f9:b6:73:ac:7e:26:3b:e6: b5:15:fd:7e:56:ff:ea:29:27:48:96:20:d5:60:7b:77:41:b2: 6b:cb:dd:5a:46:0c:a8:3f:75:e0:d1:4b:3e:ad:37:ce:06:ca: 22:3d:5d:f8:12:1b:20:50:71:ae:c0:0e:4a:f4:f7:b2:30:18: 80:c0:87:56:13:b0:74:3e:c7:bb:c6:6c:d2:97:0b:0a:37:25: bf:55:5a:82:bb:1d:ba:08:37:3a:1d:62:1a:40:41:00:1c:84: 25:75:29:d6:7e:bd:99:b0:7a:88:60:ab:ac:ab:cd:76:20:8b: f2:f0:9f:8e:58:b3:e4:37:64:e2:6b:70:ca:f6:49:ec:38:15: 93:4f:99:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNGRUIxMTAvBgNVBAUTKDUzODVFMTNBMUI1ODQ1RkI0NENFRUI2QkVEOERFQjRF ODlBRjM4MjkwHhcNMjYwMjI4MjAwNzQwWhcNMjYwMzA3MjAwNzQwWjAYMRYwFAYD VQQDDA02OWEzNGIwYy0zNzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7vrjm4L6K9B0NnYnzQn2HYKu2+ZFllDfBFV+h+w2cy83JTWFKeNCAUNB1nzB 4q8Hf059thEgVtNbsUXX+imLSO9vuNs9S9I3VLOa9f4R1aBosG/xhFB3p6v1H/2A JBuKbJvrr++sIM5AhGJA72WgWRrZhTmrWByhmAEikPX0TDm9Ss+M2z/NsC7IrcsY G8DKJu6IkcN3iDnGA/LTh/ZyfVvuJpphUBmaTuxkpimuOAxPG5EgttdxAVuSlriG Rw3Fs6R1qUE6iLwAKvJAPG/aymvE13tFun8Y0Dz5VTz46/ekjfz7KpZAPHD9fS1z KCp/d9ffieX64WDThh1DdCNwFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAoInDwQ YrEDFZcDK+Y3eTsKdXyFMB8GA1UdIwQYMBaAFFOF4TobWEX7RM7ra+2N606Jrzgp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0ZFQi9DQjJDMzNFNjkz NkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJmdEV6dXRyN1kzclRvbXZP Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0WGhPaHRZUmZ0RXp1dHI3WTNyVG9tdk9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0ZFQi9DQjJDMzNFNjkzNkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJm dEV6dXRyN1kzclRvbXZPQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARepMDaZbu04qHYpdR30cSr7Oxhb34KtyFmZ/p9EG8R5zLK8u8wVNNOU10GaR f4yhNXM7YHv3ig4t2PhK70turuijlCY1t2pKX56xtcZa9w4BfkQZpsSstOttmHqu lVmWt2KGgH0DUUqF05BQuhw8wQgjA1btnPm2c6x+JjvmtRX9flb/6iknSJYg1WB7 d0Gya8vdWkYMqD914NFLPq03zgbKIj1d+BIbIFBxrsAOSvT3sjAYgMCHVhOwdD7H u8Zs0pcLCjclv1Vagrsdugg3Oh1iGkBBAByEJXUp1n69mbB6iGCrrKvNdiCL8vCf jliz5Ddk4mtwyvZJ7DgVk0+Zew== -----END CERTIFICATE-----Generated at Sun Mar 1 23:13:32 2026 by rpki-client