$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft File: CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft (raw, json) Hash identifier: jlitiMIcxxB+tJO0Le/WHpkbGcexib9eNp0vbyBzWZU= Subject key identifier: AD:A2:82:86:90:2F:C5:98:1F:35:76:8B:AE:E0:C3:26:D5:50:01:B3 Authority key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F Certificate issuer: /CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft Manifest number: 01DF Signing time: Mon 02 Mar 2026 00:12:40 +0000 Manifest this update: Mon 02 Mar 2026 00:12:38 +0000 Manifest next update: Mon 09 Mar 2026 00:12:38 +0000 Files and hashes: 1: CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl (hash: ZfKOUKJ6+gW6DIgbfsHQuXYqpWV+BADj0O2yFOsxkMc=) 2: 86D7DAE6D1C211EF9AA9410EC4F9AE02.roa (hash: w4ebJqxqcYTakZgYgczYh31d+UQ4emy9J0fYQLqlsn0=) 3: E62F8796D1BD11EFBCCC0B68C4F9AE02.roa (hash: C+zKPU7xS4ZOCm7vmpXaLXUhKiAqHKCATTbpyOC3iPI=) 4: C698E13ED1BD11EF9C00D867C4F9AE02.roa (hash: gcd1uORIwB588IprBp+ptXbcFbF7rS1AehPmjHP27TY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:12:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D33, serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Validity Not Before: Mar 2 00:12:38 2026 GMT Not After : Mar 9 00:12:38 2026 GMT Subject: CN=69a4d5f8-22a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d7:98:ef:22:71:4a:5a:ed:d5:7b:c2:ce:d1: 47:a5:bc:47:14:dc:84:a7:45:4f:76:84:77:6e:ae: f7:17:45:e1:ff:c3:f4:a2:5f:dc:f1:f4:17:61:fd: 3b:d1:ce:79:32:b8:49:c3:2e:f2:9c:fd:11:66:0d: 35:a4:0f:40:58:00:40:60:6c:eb:7a:18:b2:e2:ab: eb:4d:0e:4f:3e:9d:f6:7c:1a:f5:33:f8:9c:33:fd: fc:31:91:c4:dd:57:78:fb:74:46:30:78:08:49:cd: 90:95:a1:19:cf:a5:96:17:cf:7c:45:a8:7a:3b:35: 2f:5b:a5:70:4f:91:e0:d2:6d:31:d7:0b:2b:cf:e5: cb:12:0d:b5:f2:61:c8:ee:f0:90:97:01:c7:43:33: 2b:d9:01:82:75:00:ea:b7:99:4c:0e:fc:8b:5c:1f: 0c:cf:68:f0:e6:ae:b0:a4:ed:07:21:99:02:0a:39: 5b:8f:94:23:ba:a5:b9:fe:d4:ce:e6:e5:00:df:5e: 88:c3:ee:b0:87:34:2c:fa:1f:91:d0:20:4b:03:d2: 86:98:a9:68:4f:c8:bd:b1:d6:45:4a:25:d1:61:f1: 1e:1b:7b:7b:c4:bb:d2:9b:2c:a8:24:11:7a:0b:3d: 2b:72:54:67:50:b5:8f:84:1a:d8:be:72:b8:65:c6: f4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A2:82:86:90:2F:C5:98:1F:35:76:8B:AE:E0:C3:26:D5:50:01:B3 X509v3 Authority Key Identifier: keyid:08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:8f:53:fc:da:c4:c6:20:77:d0:6c:3d:54:ad:7e:d8:5f:80: f7:38:21:d2:fc:59:70:62:4d:7f:a0:25:60:04:69:a3:86:fe: 95:15:23:a6:60:c7:2d:71:35:3a:35:e5:e3:88:24:00:a5:10: c2:15:b6:a2:33:9e:b7:0c:41:83:d8:87:76:3b:7b:79:08:ea: 63:1a:62:d5:21:6f:27:cc:d8:37:35:dc:a4:6a:eb:64:e9:b3: 69:77:48:a0:c3:aa:28:6c:b1:a6:a0:22:5a:46:79:72:22:0e: 8f:ed:06:3f:f1:e6:5e:91:f1:26:86:ac:f8:19:dc:f5:25:9b: 77:34:7e:be:a4:f5:34:bb:4b:8c:9c:29:b4:06:10:79:98:07: 16:5d:0f:f5:b3:6f:68:a7:03:96:14:c9:26:26:43:b5:14:3b: 8c:2a:2c:74:26:53:b6:d1:df:5c:f2:cb:50:e8:7b:ae:ee:06: 6c:ac:87:04:77:62:00:28:34:72:9b:5e:12:95:5e:e1:47:fc: 5d:2a:a8:62:6e:af:e7:00:6f:c9:b1:10:c1:95:f1:63:39:7a: 71:a0:d2:24:f6:09:8f:3e:43:c4:42:23:28:2f:d7:eb:c1:5e: 54:bd:9f:ec:23:49:2d:c6:d1:0a:ed:ea:01:a6:99:1a:d9:3e: d7:ea:d4:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhEMzMxMTAvBgNVBAUTKDA4RDY4Q0Y0NTAwNzQ1Mzc1RkYyQ0M1ODRCQTVGQkU1 NzdCRUUzM0YwHhcNMjYwMzAyMDAxMjM4WhcNMjYwMzA5MDAxMjM4WjAYMRYwFAYD VQQDEw02OWE0ZDVmOC0yMmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0teY7yJxSlrt1XvCztFHpbxHFNyEp0VPdoR3bq73F0Xh/8P0ol/c8fQXYf07 0c55MrhJwy7ynP0RZg01pA9AWABAYGzrehiy4qvrTQ5PPp32fBr1M/icM/38MZHE 3Vd4+3RGMHgISc2QlaEZz6WWF898Rah6OzUvW6VwT5Hg0m0x1wsrz+XLEg218mHI 7vCQlwHHQzMr2QGCdQDqt5lMDvyLXB8Mz2jw5q6wpO0HIZkCCjlbj5QjuqW5/tTO 5uUA316Iw+6whzQs+h+R0CBLA9KGmKloT8i9sdZFSiXRYfEeG3t7xLvSmyyoJBF6 Cz0rclRnULWPhBrYvnK4Zcb0WwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK2igoaQ L8WYHzV2i67gwybVUAGzMB8GA1UdIwQYMBaAFAjWjPRQB0U3X/LMWEul++V3vuM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQzMy81OTYyNjcxMDQ3 NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJUZGY4c3hZUzZYNzVYZS00 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOYU05RkFIUlRkZjhzeFlTNlg3NVhlLTR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEQzMy81OTYyNjcxMDQ3NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJU ZGY4c3hZUzZYNzVYZS00ejgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaI9T/NrExiB30Gw9VK1+2F+A9zgh0vxZcGJNf6AlYARpo4b+lRUjpmDHLXE1 OjXl44gkAKUQwhW2ojOetwxBg9iHdjt7eQjqYxpi1SFvJ8zYNzXcpGrrZOmzaXdI oMOqKGyxpqAiWkZ5ciIOj+0GP/HmXpHxJoas+Bnc9SWbdzR+vqT1NLtLjJwptAYQ eZgHFl0P9bNvaKcDlhTJJiZDtRQ7jCosdCZTttHfXPLLUOh7ru4GbKyHBHdiACg0 cpteEpVe4Uf8XSqoYm6v5wBvybEQwZXxYzl6caDSJPYJjz5DxEIjKC/X68FeVL2f 7CNJLcbRCu3qAaaZGtk+1+rUaA== -----END CERTIFICATE-----Generated at Mon Mar 2 04:37:17 2026 by rpki-client