$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft File: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft (raw, json) Hash identifier: c/1FLPOj+AaC6Lmv6DuacCI1qHwx9SQqA3Igue4BDos= Subject key identifier: 8B:79:18:EB:4A:A2:E5:EE:8C:28:04:6C:5A:FD:AE:CF:7E:12:6A:3D Authority key identifier: D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 Certificate issuer: /CN=A91B7BDC/serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Certificate serial: 04F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft Manifest number: 04E8 Signing time: Mon 02 Mar 2026 00:53:53 +0000 Manifest this update: Mon 02 Mar 2026 00:53:51 +0000 Manifest next update: Mon 09 Mar 2026 00:53:51 +0000 Files and hashes: 1: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl (hash: CiFh1qfspIrNN/a5AK5eOe5Ud5Te0WGDp4sB7Lk+e/8=) 2: D76AC8AC2EAB11EF9B369566C4F9AE02.roa (hash: 1cdwgZmzDVOm6wZ+HxKzRuAqKPuSXXkt7scv/pzixXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1273 (0x4f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC, serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Validity Not Before: Mar 2 00:53:51 2026 GMT Not After : Mar 9 00:53:51 2026 GMT Subject: CN=69a4dfa1-c5c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:cc:76:7a:33:3b:a4:5a:54:e2:2c:56:14: 79:cf:cd:22:07:2b:4c:48:7c:81:2d:47:9d:5c:bc: d3:4d:c2:98:5b:f0:df:30:20:ac:f0:fe:c9:42:c6: f4:d6:82:0a:9f:f1:2c:05:73:9b:92:3b:b0:c4:aa: d7:5c:79:83:43:17:03:d1:e7:e4:e8:73:bb:9c:57: 42:1c:5b:bf:82:28:ff:95:0a:1b:e2:c5:f4:70:e3: 08:a3:d8:90:4c:9b:fb:7e:11:cc:d4:b7:e8:ae:ba: 71:75:8c:4c:69:98:75:dd:d6:e6:c0:60:7b:aa:0e: 89:75:bd:6f:cb:f7:07:0b:bc:6d:8d:90:c9:f0:80: 61:df:70:ad:c8:bc:d9:20:92:fb:e3:2e:e5:d8:3c: e4:c8:d2:bc:e1:ea:96:a8:5f:91:e7:72:24:af:96: 7f:77:10:2a:fe:38:15:26:eb:85:3d:be:d9:66:77: 40:5d:f2:51:ea:70:ed:35:b1:57:d3:f5:0d:0d:37: 33:5f:3a:a1:b0:80:63:e5:1e:92:f7:78:3d:1d:cc: 83:18:af:7e:9b:b7:46:3c:1b:9f:96:8b:b7:ca:9b: 5b:e4:89:48:a9:42:c3:55:67:b4:c3:d5:47:8a:20: 26:a4:a0:2b:47:19:0c:1b:11:63:f0:07:ea:64:9d: 5c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:79:18:EB:4A:A2:E5:EE:8C:28:04:6C:5A:FD:AE:CF:7E:12:6A:3D X509v3 Authority Key Identifier: keyid:D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ed:1b:52:66:45:a9:5c:9d:3f:99:b7:4b:e8:ec:17:05:da: 11:e3:b5:27:4c:f1:bb:7f:0b:07:ff:5f:81:3b:8e:11:93:ac: 4d:9e:cd:7b:76:a1:18:ce:e1:fc:c8:63:15:6a:13:b8:f7:70: f4:07:9f:6d:3b:a7:d2:95:53:96:69:b9:1f:36:d7:b3:45:d8: c3:47:03:8e:5e:f1:6e:c5:f1:d9:9d:43:06:22:9c:53:82:67: 1d:62:99:c1:2f:3c:28:a2:62:fe:63:58:98:28:d5:1e:a0:0b: 1d:8d:cb:84:5a:96:6c:61:67:4d:c5:39:d3:75:68:49:ec:e7: a2:86:7a:15:7c:52:d8:93:34:2c:23:fa:43:dd:d8:38:3b:7b: 1d:ff:b8:60:8a:5e:1a:79:8a:40:b7:f2:40:1a:8d:fa:1b:1d: a2:f0:58:53:e6:a7:47:8e:10:2c:44:50:08:c8:0f:b8:76:ae: a3:fe:be:34:83:52:6f:57:1f:79:ad:23:d2:ff:9c:78:c1:d8: 6b:ed:86:cb:ea:fc:74:44:57:f3:fc:f7:6c:22:c1:18:3b:7e: f0:00:92:d5:65:6e:2e:d6:a9:44:21:ca:9b:64:53:54:99:5d: 34:b1:f2:86:89:7b:3f:96:8b:27:48:96:26:1c:fc:a5:fb:dd: c8:69:03:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEQ0M0I0NEQ1RjkzN0Y2NUU4QkFCOUI3Rjk4N0EzREM5 RDIxMDRBMzIwHhcNMjYwMzAyMDA1MzUxWhcNMjYwMzA5MDA1MzUxWjAYMRYwFAYD VQQDEw02OWE0ZGZhMS1jNWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubPMdnozO6RaVOIsVhR5z80iBytMSHyBLUedXLzTTcKYW/DfMCCs8P7JQsb0 1oIKn/EsBXObkjuwxKrXXHmDQxcD0efk6HO7nFdCHFu/gij/lQob4sX0cOMIo9iQ TJv7fhHM1LforrpxdYxMaZh13dbmwGB7qg6Jdb1vy/cHC7xtjZDJ8IBh33CtyLzZ IJL74y7l2DzkyNK84eqWqF+R53Ikr5Z/dxAq/jgVJuuFPb7ZZndAXfJR6nDtNbFX 0/UNDTczXzqhsIBj5R6S93g9HcyDGK9+m7dGPBuflou3yptb5IlIqULDVWe0w9VH iiAmpKArRxkMGxFj8AfqZJ1cRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIt5GOtK ouXujCgEbFr9rs9+Emo9MB8GA1UdIwQYMBaAFNQ7RNX5N/Zei6ubf5h6PcnSEEoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy82ODFDOEY0NjU4 QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzlsNkxxNXRfbUhvOXlkSVFT akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEdEUxZmszOWw2THE1dF9tSG85eWRJUVNqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0JEQy82ODFDOEY0NjU4QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzls NkxxNXRfbUhvOXlkSVFTakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKu0bUmZFqVydP5m3S+jsFwXaEeO1J0zxu38LB/9fgTuOEZOsTZ7Ne3ahGM7h /MhjFWoTuPdw9AefbTun0pVTlmm5HzbXs0XYw0cDjl7xbsXx2Z1DBiKcU4JnHWKZ wS88KKJi/mNYmCjVHqALHY3LhFqWbGFnTcU503VoSeznooZ6FXxS2JM0LCP6Q93Y ODt7Hf+4YIpeGnmKQLfyQBqN+hsdovBYU+anR44QLERQCMgPuHauo/6+NINSb1cf ea0j0v+ceMHYa+2Gy+r8dERX8/z3bCLBGDt+8ACS1WVuLtapRCHKm2RTVJldNLHy hol7P5aLJ0iWJhz8pfvdyGkDgw== -----END CERTIFICATE-----Generated at Mon Mar 2 11:17:45 2026 by rpki-client