$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft File: -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json) Hash identifier: i0YjhvHpuwCrGQfSkvsdyGQZArvtrlObRAYZLqzDv0U= Subject key identifier: D0:29:37:92:50:1F:D8:C9:8A:3A:BB:92:BA:BB:A4:94:76:A4:3C:CE Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Certificate serial: 0613 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft Manifest number: 0601 Signing time: Mon 02 Mar 2026 02:08:29 +0000 Manifest this update: Mon 02 Mar 2026 02:08:28 +0000 Manifest next update: Mon 09 Mar 2026 02:08:28 +0000 Files and hashes: 1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: jJ7M/CXDcwtx4z46ZUVO0s6C2NFlLKxvpJ6FwCDlZ64=) 2: ABCDCC4EE16711EEA88FAE64C4F9AE02.roa (hash: esfW9wCIFip8anOs41Rq+ZFPyJj6Borr2LXsT9A2eN4=) 3: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: KPX0rK0OaNteIMx84M4NZOMyO+pLPu817uzNmJdQ98A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1555 (0x613) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Validity Not Before: Mar 2 02:08:28 2026 GMT Not After : Mar 9 02:08:28 2026 GMT Subject: CN=69a4f11d-ab07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:48:14:93:05:52:9c:80:bf:f9:df:f4:2b:29: 56:f1:f9:c8:67:a4:f8:c7:ed:17:55:3d:1e:74:26: b9:7c:27:84:1f:a6:3b:07:df:6d:38:f7:ce:f1:61: 4b:87:32:cb:61:a6:73:c3:ca:15:8a:c8:b4:2e:17: 89:22:c0:25:85:f5:f1:0b:00:2f:ee:81:87:fe:04: 84:f5:36:44:90:54:fa:dd:a5:07:0b:5b:be:44:2f: 9d:8f:9e:52:8e:7c:16:4c:ce:52:15:95:52:79:48: 65:1a:9d:c1:15:f0:c6:9c:60:d0:f0:4e:a5:4c:49: cf:c2:61:34:ec:67:61:8a:15:eb:ec:d2:6b:5a:94: c6:b5:b9:d9:e7:38:0c:a8:24:11:61:79:a7:0f:81: 6b:95:a6:b4:ae:03:11:95:b0:66:99:2e:43:ba:5a: b4:be:88:32:b1:1a:b0:f5:cd:7e:23:1e:a7:fc:27: 46:28:5c:c3:7a:96:a4:96:94:be:33:9f:0b:4a:0b: 44:ce:b3:14:eb:4b:63:36:e3:32:97:34:f9:a4:52: 86:ae:97:0f:94:e7:df:f6:02:0b:93:f2:74:de:16: f5:bf:9a:b8:b9:91:a8:a3:5d:35:52:d2:9d:11:91: c9:a2:fd:e3:4a:5b:ef:43:da:0c:bb:45:5c:f7:8c: e8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:29:37:92:50:1F:D8:C9:8A:3A:BB:92:BA:BB:A4:94:76:A4:3C:CE X509v3 Authority Key Identifier: keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:0f:1a:43:99:77:64:71:07:d3:35:f1:1e:65:9d:39:88:11: 7e:8a:a8:00:49:86:af:95:ea:a0:5f:b7:35:c5:80:03:33:05: 4e:22:6b:e2:d8:16:b8:a6:7c:04:07:fc:1b:7b:e8:bc:23:5f: 5d:63:74:f3:aa:dd:95:85:1f:2b:31:7f:44:a5:0a:cb:3f:e0: f1:6f:26:73:70:6c:a0:35:65:67:0a:28:ec:89:b1:28:57:da: 2f:6c:a3:27:b7:33:d2:bf:97:d0:2a:b0:9d:a6:a9:64:19:2b: 9d:c8:4c:97:27:74:02:36:ff:b4:7e:d0:05:d6:c7:eb:f1:79: 9e:fd:fa:b0:2e:97:ea:6b:11:28:30:55:a9:25:1b:5e:64:81: 94:1d:64:6e:f8:40:37:57:bc:44:c5:1e:89:04:47:49:d5:a2: 8f:e3:bd:37:60:28:f3:9a:14:26:52:a1:69:96:c3:ac:69:25: 72:a8:8a:0b:d3:88:ff:38:64:91:82:62:9b:22:82:86:b3:cd: 5b:c3:4b:29:ac:64:73:99:5f:1e:6f:39:76:8a:24:fd:50:0d: 13:e2:24:b2:8a:b9:c2:1b:f6:cd:81:69:90:17:8d:6b:49:24: 8d:3b:aa:62:52:85:cc:4d:fb:7f:ae:97:d4:b1:4f:03:5c:50: 8f:a4:98:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURERDUxMTAvBgNVBAUTKEZCMTEyQ0FENTYzMTlCRkFBQ0ExQUIyOENFN0JEN0Y0 Q0IyNjhDRTkwHhcNMjYwMzAyMDIwODI4WhcNMjYwMzA5MDIwODI4WjAYMRYwFAYD VQQDEw02OWE0ZjExZC1hYjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40gUkwVSnIC/+d/0KylW8fnIZ6T4x+0XVT0edCa5fCeEH6Y7B99tOPfO8WFL hzLLYaZzw8oVisi0LheJIsAlhfXxCwAv7oGH/gSE9TZEkFT63aUHC1u+RC+dj55S jnwWTM5SFZVSeUhlGp3BFfDGnGDQ8E6lTEnPwmE07GdhihXr7NJrWpTGtbnZ5zgM qCQRYXmnD4Frlaa0rgMRlbBmmS5Dulq0vogysRqw9c1+Ix6n/CdGKFzDepaklpS+ M58LSgtEzrMU60tjNuMylzT5pFKGrpcPlOff9gILk/J03hb1v5q4uZGoo101UtKd EZHJov3jSlvvQ9oMu0Vc94zoAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNApN5JQ H9jJijq7krq7pJR2pDzOMB8GA1UdIwQYMBaAFPsRLK1WMZv6rKGrKM571/TLJozp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRERENS84QjBEMEZGMkUz RjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1fcXNvYXNvem52WDlNc21q T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14RXNyVll4bV9xc29hc296bnZYOU1zbWpPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RERENS84QjBEMEZGMkUzRjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1f cXNvYXNvem52WDlNc21qT2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwg8aQ5l3ZHEH0zXxHmWdOYgRfoqoAEmGr5XqoF+3NcWAAzMFTiJr4tgWuKZ8 BAf8G3vovCNfXWN086rdlYUfKzF/RKUKyz/g8W8mc3BsoDVlZwoo7ImxKFfaL2yj J7cz0r+X0CqwnaapZBkrnchMlyd0Ajb/tH7QBdbH6/F5nv36sC6X6msRKDBVqSUb XmSBlB1kbvhAN1e8RMUeiQRHSdWij+O9N2Ao85oUJlKhaZbDrGklcqiKC9OI/zhk kYJimyKChrPNW8NLKaxkc5lfHm85dook/VANE+Iksoq5whv2zYFpkBeNa0kkjTuq YlKFzE37f66X1LFPA1xQj6SYGw== -----END CERTIFICATE-----Generated at Mon Mar 2 16:45:54 2026 by rpki-client