$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft File: bRscXsmpziDouF2j9sHjzdQu-Dk.mft (raw, json) Hash identifier: y+U8aJvu9/9ML9wLgawG5eVx53EhXd32jVkOMDyNXl4= Subject key identifier: FB:82:FF:F3:46:0F:EF:6F:68:2E:A3:FE:A4:44:FF:6F:F6:A0:63:8E Authority key identifier: 6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39 Certificate issuer: /CN=A91B4378/serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft Manifest number: 29 Signing time: Sun 01 Mar 2026 10:11:43 +0000 Manifest this update: Sun 01 Mar 2026 10:11:43 +0000 Manifest next update: Sun 08 Mar 2026 10:11:43 +0000 Files and hashes: 1: bRscXsmpziDouF2j9sHjzdQu-Dk.crl (hash: RAtrN2c+D/zQJHmhsPqp/HfcyQMXNNIBbtmoEcxTuV4=) 2: 21656302D9A211F09604B56168D3641D.roa (hash: J7YgpNqOcaYjOCo1OiB0WdtVs6cboNKClgYeNKdHnYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4378, serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839 Validity Not Before: Mar 1 10:11:43 2026 GMT Not After : Mar 8 10:11:43 2026 GMT Subject: CN=69a410df-7711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:21:76:63:32:4f:63:d0:44:37:48:64:8f:4e: 48:78:f1:05:37:c3:79:8b:89:f4:78:1e:ee:20:07: 94:7b:cf:fc:e3:a2:44:b8:1b:38:6a:2c:ec:ce:c4: 7c:75:df:93:9d:b4:ff:49:39:d9:5f:58:14:4e:17: fd:b6:26:3d:64:f5:b3:49:b1:8e:58:b6:c1:3d:8d: fb:9d:9e:e6:5a:2b:7e:d3:5a:9e:64:90:a2:4d:e2: 72:75:a6:ef:b0:d6:ca:8a:cb:4d:37:fd:01:b2:58: 86:e6:df:cd:60:b6:63:36:c7:a8:84:47:e3:b7:2f: 77:07:c3:50:bf:05:0f:9a:e1:62:8a:3a:8c:ce:9b: d5:e9:5f:75:20:87:f1:97:67:87:45:16:98:4d:7f: 5a:84:c7:13:f2:bc:56:71:58:b2:f7:0d:cd:49:97: e1:13:5e:03:a7:8c:2f:59:aa:21:1a:8f:3a:08:87: 2b:a5:38:db:f4:96:2e:c3:58:da:be:9b:c2:58:20: 7d:45:61:cc:ac:09:42:5c:d5:a0:24:d3:48:4d:c0: 49:78:99:6d:a8:7a:53:ea:2a:c3:26:7e:09:94:64: 5c:e1:07:ac:62:62:b4:ec:bd:eb:66:f0:6f:8f:b0: ac:1a:bb:36:52:8a:6f:f8:74:04:6a:91:14:ae:16: 79:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:82:FF:F3:46:0F:EF:6F:68:2E:A3:FE:A4:44:FF:6F:F6:A0:63:8E X509v3 Authority Key Identifier: keyid:6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:8d:f6:03:fc:59:b7:3c:48:e8:49:ee:31:69:63:cc:3c:fb: f4:6b:03:db:7b:f1:67:3b:23:39:36:7b:26:7f:c4:7c:65:b5: 28:8b:36:d4:4c:07:ec:02:04:69:ca:29:73:30:e8:f2:23:d6: ff:81:6b:b5:bf:17:35:36:ea:ba:08:a2:3a:50:85:69:83:38: cd:e6:7d:44:db:36:04:bc:36:3a:80:5b:9d:e5:fe:17:fd:23: 54:ef:e5:25:50:51:13:81:e9:0a:a0:58:0e:8e:6a:4c:dd:ad: 8b:3e:e6:00:55:9e:90:fa:cb:36:d6:51:87:e0:83:15:17:ff: f1:ae:34:28:c1:ba:7c:cb:81:19:b8:6b:d2:32:25:88:bb:f4: 34:42:ef:21:11:ab:0f:a8:4f:ab:84:46:b6:63:fb:b6:0b:a4: ca:17:65:93:9f:d3:13:d5:9d:0b:f4:1a:40:bb:aa:37:42:e4: 49:66:1e:66:0a:94:7e:6b:64:76:bc:47:55:7b:96:66:ae:40: a2:4e:23:f7:19:1f:41:f5:ee:3c:24:52:6d:06:e2:ac:4d:38: 3f:8f:ea:7a:e8:37:c3:8d:b1:a2:8f:e9:4d:8c:ef:63:eb:cb: f2:e8:73:1d:98:57:0e:6f:80:e6:00:2b:06:4e:2b:6a:13:b9: 0e:1f:f7:5d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDM3ODExMC8GA1UEBRMoNkQxQjFDNUVDOUE5Q0UyMEU4Qjg1REEzRjZDMUUzQ0RE NDJFRjgzOTAeFw0yNjAzMDExMDExNDNaFw0yNjAzMDgxMDExNDNaMBgxFjAUBgNV BAMTDTY5YTQxMGRmLTc3MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8IXZjMk9j0EQ3SGSPTkh48QU3w3mLifR4Hu4gB5R7z/zjokS4GzhqLOzOxHx1 35OdtP9JOdlfWBROF/22Jj1k9bNJsY5YtsE9jfudnuZaK37TWp5kkKJN4nJ1pu+w 1sqKy003/QGyWIbm381gtmM2x6iER+O3L3cHw1C/BQ+a4WKKOozOm9XpX3Ugh/GX Z4dFFphNf1qExxPyvFZxWLL3Dc1Jl+ETXgOnjC9ZqiEajzoIhyulONv0li7DWNq+ m8JYIH1FYcysCUJc1aAk00hNwEl4mW2oelPqKsMmfgmUZFzhB6xiYrTsvetm8G+P sKwauzZSim/4dARqkRSuFnmXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+4L/80YP 729oLqP+pET/b/agY44wHwYDVR0jBBgwFoAUbRscXsmpziDouF2j9sHjzdQu+Dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0Mzc4L0Y2MjkxNDhDRDlB MDExRjA5QTBGQjAxNzY4RDM2NDFEL2JSc2NYc21wemlEb3VGMmo5c0hqemRRdS1E ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYlJzY1hzbXB6aURvdUYyajlzSGp6ZFF1LURrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 Mzc4L0Y2MjkxNDhDRDlBMDExRjA5QTBGQjAxNzY4RDM2NDFEL2JSc2NYc21wemlE b3VGMmo5c0hqemRRdS1Eay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCJjfYD/Fm3PEjoSe4xaWPMPPv0awPbe/FnOyM5Nnsmf8R8ZbUoizbUTAfsAgRp yilzMOjyI9b/gWu1vxc1Nuq6CKI6UIVpgzjN5n1E2zYEvDY6gFud5f4X/SNU7+Ul UFETgekKoFgOjmpM3a2LPuYAVZ6Q+ss21lGH4IMVF//xrjQowbp8y4EZuGvSMiWI u/Q0Qu8hEasPqE+rhEa2Y/u2C6TKF2WTn9MT1Z0L9BpAu6o3QuRJZh5mCpR+a2R2 vEdVe5ZmrkCiTiP3GR9B9e48JFJtBuKsTTg/j+p66DfDjbGij+lNjO9j68vy6HMd mFcOb4DmACsGTitqE7kOH/dd -----END CERTIFICATE-----Generated at Sun Mar 1 22:47:52 2026 by rpki-client