$ rpki-client -vvf rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft File: S630I4efFU256siNFgtOEW9mzak.mft (raw, json) Hash identifier: iHjmEdauFuNXwG/gHKBxHvCn3XebakigpKH/a8ZK2vc= Subject key identifier: 46:70:71:06:3A:60:C3:09:B6:82:3D:96:37:89:CC:97:0D:CC:CF:0D Authority key identifier: 4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9 Certificate issuer: /CN=A91B30E5/serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9 Certificate serial: 0258 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft Manifest number: 0254 Signing time: Sun 01 Mar 2026 02:57:01 +0000 Manifest this update: Sun 01 Mar 2026 02:57:00 +0000 Manifest next update: Sun 08 Mar 2026 02:57:00 +0000 Files and hashes: 1: S630I4efFU256siNFgtOEW9mzak.crl (hash: Wt4/xlmISLsd0+s3Le/ugMht/pUIVeljgJ3PQgDFG9Y=) 2: 0F1061D0868911EDA888A96CC4F9AE02.roa (hash: +hRWRXQqZ3a6AmsLA7H+cbI6i/TyG1h44Dzit9hyZNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 02:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 600 (0x258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B30E5, serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9 Validity Not Before: Mar 1 02:57:00 2026 GMT Not After : Mar 8 02:57:00 2026 GMT Subject: CN=69a3aafd-9306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e1:4e:ff:ba:0e:86:cd:62:7a:2d:a8:2a:c0: e4:6b:a9:92:17:34:e5:5b:c0:07:57:6e:ef:4e:f0: 11:93:07:78:5e:78:df:97:03:b2:30:05:c2:04:8f: 8b:3a:ef:ba:be:61:d6:52:27:1f:e1:95:0e:4f:2f: dd:a5:74:a9:b3:80:56:e4:8a:46:06:7b:26:46:57: b4:c7:e9:dc:1a:10:57:f1:e7:62:d7:aa:b5:97:34: cf:bf:f8:a7:00:fc:a6:5f:96:94:75:d5:68:79:c0: 6e:68:bd:5d:e9:3d:3a:2c:9d:1e:d0:2e:ce:a3:ef: 30:64:df:f1:41:72:aa:f3:e1:d1:21:ec:a4:96:8a: f4:a5:2a:51:22:6f:ee:97:79:dd:c6:b4:a6:bc:9c: b1:35:ce:2c:93:bf:6b:8e:89:6e:d5:6c:ee:fd:f3: 6e:71:ec:bb:60:de:e4:cc:c7:44:ac:1a:9a:46:5a: 8d:7d:ec:8d:97:15:3f:37:bc:82:38:ce:77:b6:7b: c1:bd:ea:29:fa:ef:9a:cd:25:dc:ef:de:7f:40:18: c6:9e:50:ae:19:a5:44:5d:d7:2a:7b:10:8d:8f:ee: 9b:7d:c4:13:9b:7e:1b:23:2d:05:91:97:36:5f:8f: ef:7a:52:3a:0f:1b:0b:91:cc:2c:dc:23:c8:12:95: 17:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:70:71:06:3A:60:C3:09:B6:82:3D:96:37:89:CC:97:0D:CC:CF:0D X509v3 Authority Key Identifier: keyid:4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:d2:20:34:d3:ca:f0:00:90:c2:77:b9:41:fb:d3:b6:5b:19: 0d:1d:ff:83:a7:1f:1b:7e:3c:73:49:02:b7:06:6d:86:d4:f3: 71:7c:42:64:91:6f:18:e5:32:02:66:99:9b:0e:d9:f7:2f:79: 32:57:db:72:66:45:47:58:3b:13:32:b9:4f:7c:a2:c0:09:c0: 86:6d:2a:52:f9:cb:97:28:7f:24:03:87:ad:7d:3f:53:05:66: 1d:30:d6:37:52:3f:5c:a8:bf:d0:8b:bf:82:bd:3f:65:73:83: ff:a2:a6:f5:b4:c6:be:2b:f6:0d:2b:78:c9:49:be:be:f0:d5: f0:78:0c:65:b3:56:f0:e5:52:c6:1b:d6:57:9f:b3:e7:9b:b8: 86:55:ea:63:47:c9:4e:f0:66:e4:54:0a:22:2d:01:bd:67:9c: f7:7c:96:22:38:54:d6:1e:4f:f9:38:49:10:d6:2a:64:b4:67: 48:d8:fc:34:72:5a:5d:3e:38:59:bb:8a:e3:3e:af:00:44:95: 84:fe:38:c6:5e:2a:b9:a7:41:b9:06:66:e1:4e:3e:42:94:b0: b9:be:16:53:7f:78:84:8c:d3:01:e1:e6:21:b0:7a:2b:3a:b3: 24:e8:37:c3:3f:cc:f3:b1:64:7c:96:e5:b5:03:8f:bc:e7:f5: 8b:7f:e5:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMwRTUxMTAvBgNVBAUTKDRCQURGNDIzODc5RjE1NERCOUVBQzg4RDE2MEI0RTEx NkY2NkNEQTkwHhcNMjYwMzAxMDI1NzAwWhcNMjYwMzA4MDI1NzAwWjAYMRYwFAYD VQQDDA02OWEzYWFmZC05MzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOFO/7oOhs1iei2oKsDka6mSFzTlW8AHV27vTvARkwd4XnjflwOyMAXCBI+L Ou+6vmHWUicf4ZUOTy/dpXSps4BW5IpGBnsmRle0x+ncGhBX8edi16q1lzTPv/in APymX5aUddVoecBuaL1d6T06LJ0e0C7Oo+8wZN/xQXKq8+HRIeyklor0pSpRIm/u l3ndxrSmvJyxNc4sk79rjolu1Wzu/fNucey7YN7kzMdErBqaRlqNfeyNlxU/N7yC OM53tnvBveop+u+azSXc795/QBjGnlCuGaVEXdcqexCNj+6bfcQTm34bIy0FkZc2 X4/velI6DxsLkcws3CPIEpUXqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEZwcQY6 YMMJtoI9ljeJzJcNzM8NMB8GA1UdIwQYMBaAFEut9COHnxVNuerIjRYLThFvZs2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzBFNS83MjkzQzExNjg2 ODQxMUVEQjdCRkExNzFDNEY5QUUwMi9TNjMwSTRlZkZVMjU2c2lORmd0T0VXOW16 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M2MzBJNGVmRlUyNTZzaU5GZ3RPRVc5bXphay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzBFNS83MjkzQzExNjg2ODQxMUVEQjdCRkExNzFDNEY5QUUwMi9TNjMwSTRlZkZV MjU2c2lORmd0T0VXOW16YWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvdIgNNPK8ACQwne5QfvTtlsZDR3/g6cfG348c0kCtwZthtTzcXxCZJFvGOUy AmaZmw7Z9y95MlfbcmZFR1g7EzK5T3yiwAnAhm0qUvnLlyh/JAOHrX0/UwVmHTDW N1I/XKi/0Iu/gr0/ZXOD/6Km9bTGviv2DSt4yUm+vvDV8HgMZbNW8OVSxhvWV5+z 55u4hlXqY0fJTvBm5FQKIi0BvWec93yWIjhU1h5P+ThJENYqZLRnSNj8NHJaXT44 WbuK4z6vAESVhP44xl4quadBuQZm4U4+QpSwub4WU394hIzTAeHmIbB6KzqzJOg3 wz/M87FkfJbltQOPvOf1i3/lHg== -----END CERTIFICATE-----Generated at Sun Mar 1 21:02:08 2026 by rpki-client