$ rpki-client -vvf rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft File: MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft (raw, json) Hash identifier: Nd1XERnJupgSYTqSUfFaX9LwFg3rUQQeP9ZXbyVfYEY= Subject key identifier: 90:3E:21:CF:FF:D3:0B:B0:94:AF:70:49:65:F4:49:AB:70:B7:01:CC Authority key identifier: 32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0 Certificate issuer: /CN=A91B886F/serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft Manifest number: 35 Signing time: Sun 01 Mar 2026 10:00:41 +0000 Manifest this update: Sun 01 Mar 2026 10:00:41 +0000 Manifest next update: Sun 08 Mar 2026 10:00:41 +0000 Files and hashes: 1: MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl (hash: zla9aM0QW1CCzW4nnwsEGscwgARjviXPkhraznrSI/Y=) 2: 1DB45B20C8ED11F0B740F848C4F9AE02.roa (hash: S989I0Dh1VM/GqYxyKd3cTzapisk/BuvItcPdUyWkEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B886F, serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0 Validity Not Before: Mar 1 10:00:41 2026 GMT Not After : Mar 8 10:00:41 2026 GMT Subject: CN=69a40e49-0731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ea:6a:5d:59:50:ba:5b:08:4a:2e:4c:e3:f2: df:8a:80:34:be:a7:ab:ce:76:1a:19:ef:60:b7:49: 67:ff:39:24:ce:e8:1d:6b:07:33:00:f5:5c:5b:ab: 01:aa:b6:34:e2:1f:2b:b9:54:06:f2:8e:12:fa:e0: 0c:0e:55:6b:b0:0a:38:a1:20:48:6b:f0:07:88:af: 72:7c:60:01:b4:81:03:af:96:ff:87:c2:a8:50:50: 4b:4f:7b:95:85:39:39:9d:6a:99:2d:d6:86:22:7d: ca:06:31:44:db:65:bc:4d:b4:23:48:21:eb:5a:b4: 94:6f:80:91:59:bd:e3:b4:01:2c:76:8b:77:38:7e: eb:85:f2:9a:3e:61:da:30:f2:c2:82:5b:bb:92:e9: 3f:22:c8:a3:b1:77:8c:3c:21:9b:1a:ee:5a:a8:0d: 5f:21:2a:e9:f0:fe:aa:66:4a:81:cf:9f:6a:73:7d: 06:0e:ec:21:0d:ba:0d:f4:b2:44:90:b2:8b:10:31: 63:1b:9a:5e:cc:56:09:bf:25:a4:b1:44:4e:53:85: 0c:37:25:c9:59:3b:bb:d1:b1:5f:b3:73:21:ff:c8: e3:8b:cb:de:c7:6c:5e:ff:0f:1e:4a:c5:0a:7d:e0: 46:ac:9c:09:85:03:2c:a7:15:58:95:d8:85:d5:00: 49:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3E:21:CF:FF:D3:0B:B0:94:AF:70:49:65:F4:49:AB:70:B7:01:CC X509v3 Authority Key Identifier: keyid:32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:2e:7a:21:5c:7d:ac:8e:a2:0b:a2:cd:56:46:09:b1:bf:f7: 9c:89:df:f9:08:0d:02:a6:6d:38:89:8e:18:30:4e:7c:1d:e5: 75:be:45:32:61:b8:ee:04:2b:23:fc:46:27:f3:4f:25:1f:3d: 56:ad:27:55:fd:ca:a8:86:79:ec:91:5a:83:f2:a8:6a:20:29: c9:e4:d6:57:43:5e:26:f3:a0:47:11:58:37:5f:f8:d2:f5:20: 0e:93:4d:90:48:93:48:da:59:8c:de:22:0b:e3:19:4b:39:ec: 08:2f:6a:10:ef:02:4f:02:7e:68:96:57:fb:f2:a0:01:1b:44: 9c:c5:8f:4d:10:d0:c1:3c:f1:f6:25:70:b6:05:bd:97:4f:50: e1:fc:a2:45:ac:4e:f2:6a:57:90:d7:79:5f:60:e5:7d:ec:9c: 71:fc:a7:e5:74:90:02:97:3b:21:c0:e0:bf:1b:bc:ee:92:4a: 47:d9:1a:a8:73:d5:b9:56:ff:51:bd:17:14:db:3d:8f:82:42: 63:cd:13:66:dd:4b:8d:8c:4e:09:90:cb:a6:bf:1f:04:eb:2c: 60:26:65:a8:6b:d8:62:31:9d:39:d6:15:d6:64:a5:4d:da:1d: 90:bd:f8:9e:83:36:e6:70:02:26:46:b5:29:f7:78:4f:f2:ac: 0a:ef:61:5c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODg2RjExMC8GA1UEBRMoMzI1MzIxOUNCNjBDN0Q5Q0ZBNkU2MzNEQkI0Q0E5NEQ2 ODM5OTJFMDAeFw0yNjAzMDExMDAwNDFaFw0yNjAzMDgxMDAwNDFaMBgxFjAUBgNV BAMTDTY5YTQwZTQ5LTA3MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC16mpdWVC6WwhKLkzj8t+KgDS+p6vOdhoZ72C3SWf/OSTO6B1rBzMA9VxbqwGq tjTiHyu5VAbyjhL64AwOVWuwCjihIEhr8AeIr3J8YAG0gQOvlv+HwqhQUEtPe5WF OTmdapkt1oYifcoGMUTbZbxNtCNIIetatJRvgJFZveO0ASx2i3c4fuuF8po+Ydow 8sKCW7uS6T8iyKOxd4w8IZsa7lqoDV8hKunw/qpmSoHPn2pzfQYO7CENug30skSQ sosQMWMbml7MVgm/JaSxRE5ThQw3JclZO7vRsV+zcyH/yOOLy97HbF7/Dx5KxQp9 4EasnAmFAyynFViV2IXVAEk7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkD4hz//T C7CUr3BJZfRJq3C3AcwwHwYDVR0jBBgwFoAUMlMhnLYMfZz6bmM9u0ypTWg5kuAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4ODZGL0YxRjU2N0QwQzhF ODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6NmJtTTl1MHlwVFdnNWt1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWxNaG5MWU1mWno2Ym1NOXUweXBUV2c1a3VBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 ODZGL0YxRjU2N0QwQzhFODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6 NmJtTTl1MHlwVFdnNWt1QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB2LnohXH2sjqILos1WRgmxv/ecid/5CA0Cpm04iY4YME58HeV1vkUyYbjuBCsj /EYn808lHz1WrSdV/cqohnnskVqD8qhqICnJ5NZXQ14m86BHEVg3X/jS9SAOk02Q SJNI2lmM3iIL4xlLOewIL2oQ7wJPAn5ollf78qABG0ScxY9NENDBPPH2JXC2Bb2X T1Dh/KJFrE7yaleQ13lfYOV97Jxx/KfldJAClzshwOC/G7zukkpH2Rqoc9W5Vv9R vRcU2z2PgkJjzRNm3UuNjE4JkMumvx8E6yxgJmWoa9hiMZ051hXWZKVN2h2Qvfie gzbmcAImRrUp93hP8qwK72Fc -----END CERTIFICATE-----Generated at Mon Mar 2 14:59:57 2026 by rpki-client