$ rpki-client -vvf rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft File: A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft (raw, json) Hash identifier: /goI69n50SJ7MfDPlrAHrRpZYm3r3PrURKUyXrpgd6k= Subject key identifier: B3:A5:C1:96:F2:51:A6:AE:AD:D7:63:33:94:09:79:CF:0C:C1:DD:4C Authority key identifier: 03:92:84:27:D2:F5:3C:8F:BA:97:FC:FE:3F:C6:53:A5:0F:16:59:FE Certificate issuer: /CN=A91B40B2/serialNumber=03928427D2F53C8FBA97FCFE3FC653A50F1659FE Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft Manifest number: 29 Signing time: Sun 01 Mar 2026 10:12:05 +0000 Manifest this update: Sun 01 Mar 2026 10:12:05 +0000 Manifest next update: Sun 08 Mar 2026 10:12:05 +0000 Files and hashes: 1: A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.crl (hash: 9sLVXYQsTcN1FaeYg78LbU0Ec1q8O0Qp33Oi8O2Oi1o=) 2: 78A0CEEADA3811F080F82F148DD3641D.roa (hash: eOwaT1T8Z8VCMGhXjw1If947zmL/1K+4PuT9NJbQ77g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.crl rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B40B2, serialNumber=03928427D2F53C8FBA97FCFE3FC653A50F1659FE Validity Not Before: Mar 1 10:12:05 2026 GMT Not After : Mar 8 10:12:05 2026 GMT Subject: CN=69a410f5-b92c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:29:34:9d:5a:42:1c:ce:38:e8:07:25:d6:42: 2a:0a:49:57:3f:3e:68:57:4d:e9:74:5c:21:eb:f2: 91:39:a5:19:cf:a4:46:c2:99:c6:9b:d5:60:38:1b: f2:47:7a:62:21:c3:e4:94:3b:25:24:e7:c6:2f:e1: 66:47:52:40:fb:8c:27:67:aa:b7:93:f4:3b:d3:47: 60:b6:ca:4e:74:13:d2:cf:16:1d:d9:06:bf:db:1a: 8a:21:88:ef:19:bb:75:f9:61:95:5c:05:80:ea:c3: 3d:da:90:a0:28:82:83:91:ef:f1:91:8b:b5:a0:2d: 09:b5:6e:9c:45:ae:48:a8:51:bc:10:50:94:c2:9e: 1f:dc:d5:94:10:fe:fe:31:1a:12:34:1a:34:9b:9b: 46:87:91:68:28:b7:72:ef:6b:20:bf:0c:d5:5b:71: 42:c0:32:5a:8b:7c:36:ce:d7:5c:3b:10:82:1b:a8: b6:9b:47:90:2f:9a:bd:e7:17:1e:02:8c:6e:33:4d: 3d:47:0e:36:dc:80:02:85:02:d7:05:cb:c1:0f:71: 08:61:aa:30:4e:95:d2:68:0b:33:8a:a0:37:30:e4: 31:b1:9c:a8:3a:98:fd:64:01:23:cb:62:ff:d9:41: a1:14:54:9e:eb:0b:d1:ff:c9:3b:0c:e5:18:d7:6b: 45:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A5:C1:96:F2:51:A6:AE:AD:D7:63:33:94:09:79:CF:0C:C1:DD:4C X509v3 Authority Key Identifier: keyid:03:92:84:27:D2:F5:3C:8F:BA:97:FC:FE:3F:C6:53:A5:0F:16:59:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:6a:ed:33:0a:b5:a2:c8:aa:dd:a9:e6:6b:9e:a9:aa:3f:96: 9c:28:38:71:8d:d5:2a:1d:ad:75:86:d9:2e:18:57:bb:96:64: 75:b6:9a:69:e1:44:66:53:1d:52:2f:d5:06:9b:07:46:9c:d1: 9a:a5:b6:a6:e1:a0:c3:4d:b5:8a:7b:89:f2:2e:b5:8f:4b:0e: fb:c5:8b:f3:38:74:79:3e:41:ea:d0:89:ac:34:d3:4b:5b:a0: 4e:b2:87:d9:2f:b3:be:5d:e7:fe:4e:7e:d0:97:08:fe:cc:53: 5a:2c:ac:4f:7a:31:ce:0f:9c:49:cf:fa:38:85:24:1d:70:77: 0f:44:5b:c7:26:41:9d:74:32:3a:8b:16:7e:aa:0d:b3:f2:f0: 95:95:8d:c0:61:03:46:32:1c:af:95:a9:db:53:a3:ff:d4:ee: 1f:01:5e:07:f9:5c:75:2c:17:c9:4f:7f:72:de:77:10:95:11: 90:9c:15:e8:19:83:3a:63:a4:a7:a9:63:96:9d:1e:be:6e:34: ea:36:df:b5:26:f3:b3:05:2b:37:de:9d:b4:98:75:f9:5a:1e: 01:de:24:df:b0:e9:d8:fc:a6:a0:62:cd:ee:c3:18:e9:7c:78: 7e:b1:6c:d6:94:1e:92:e2:a3:78:20:d6:e8:31:be:9d:1f:ff: e8:10:c4:c2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDBCMjExMC8GA1UEBRMoMDM5Mjg0MjdEMkY1M0M4RkJBOTdGQ0ZFM0ZDNjUzQTUw RjE2NTlGRTAeFw0yNjAzMDExMDEyMDVaFw0yNjAzMDgxMDEyMDVaMBgxFjAUBgNV BAMTDTY5YTQxMGY1LWI5MmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClKTSdWkIczjjoByXWQioKSVc/PmhXTel0XCHr8pE5pRnPpEbCmcab1WA4G/JH emIhw+SUOyUk58Yv4WZHUkD7jCdnqreT9DvTR2C2yk50E9LPFh3ZBr/bGoohiO8Z u3X5YZVcBYDqwz3akKAogoOR7/GRi7WgLQm1bpxFrkioUbwQUJTCnh/c1ZQQ/v4x GhI0GjSbm0aHkWgot3LvayC/DNVbcULAMlqLfDbO11w7EIIbqLabR5Avmr3nFx4C jG4zTT1HDjbcgAKFAtcFy8EPcQhhqjBOldJoCzOKoDcw5DGxnKg6mP1kASPLYv/Z QaEUVJ7rC9H/yTsM5RjXa0VZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUs6XBlvJR pq6t12MzlAl5zwzB3UwwHwYDVR0jBBgwFoAUA5KEJ9L1PI+6l/z+P8ZTpQ8WWf4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0MEIyL0RBRDAxRDM0REEz NjExRjBBOTMzRDI0QzhDRDM2NDFEL0E1S0VKOUwxUEktNmxfei1QOFpUcFE4V1dm NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTVLRUo5TDFQSS02bF96LVA4WlRwUThXV2Y0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 MEIyL0RBRDAxRDM0REEzNjExRjBBOTMzRDI0QzhDRDM2NDFEL0E1S0VKOUwxUEkt Nmxfei1QOFpUcFE4V1dmNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQApau0zCrWiyKrdqeZrnqmqP5acKDhxjdUqHa11htkuGFe7lmR1tppp4URmUx1S L9UGmwdGnNGapbam4aDDTbWKe4nyLrWPSw77xYvzOHR5PkHq0ImsNNNLW6BOsofZ L7O+Xef+Tn7Qlwj+zFNaLKxPejHOD5xJz/o4hSQdcHcPRFvHJkGddDI6ixZ+qg2z 8vCVlY3AYQNGMhyvlanbU6P/1O4fAV4H+Vx1LBfJT39y3ncQlRGQnBXoGYM6Y6Sn qWOWnR6+bjTqNt+1JvOzBSs33p20mHX5Wh4B3iTfsOnY/KagYs3uwxjpfHh+sWzW lB6S4qN4INboMb6dH//oEMTC -----END CERTIFICATE-----Generated at Sun Mar 1 22:34:22 2026 by rpki-client