$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft File: 1RZ7lweHQQlX4l2fh1CFYPAFd24.mft (raw, json) Hash identifier: CkXUnJ6RKlBnQ/7LXTS6FzZb234IwKp+ougLuA1V2uA= Subject key identifier: 31:25:92:D2:99:F0:7F:D4:F3:35:13:2F:C6:04:82:3C:D7:FF:7D:8A Authority key identifier: D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E Certificate issuer: /CN=A91B9011/serialNumber=D5167B970787410957E25D9F87508560F005776E Certificate serial: 0649 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft Manifest number: 0643 Signing time: Mon 02 Mar 2026 02:57:11 +0000 Manifest this update: Mon 02 Mar 2026 02:57:09 +0000 Manifest next update: Mon 09 Mar 2026 02:57:09 +0000 Files and hashes: 1: 1RZ7lweHQQlX4l2fh1CFYPAFd24.crl (hash: ggWWEQEUzzh0+6pydOMRGN3Q/cQYMnxeUcc+AfTM8+U=) 2: 438893AC55BE11EDBDE51983C4F9AE02.roa (hash: HqBvUxmcpach3LTwriJ/k5Vl/yEStvVp3DA/rRZYCEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1609 (0x649) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9011, serialNumber=D5167B970787410957E25D9F87508560F005776E Validity Not Before: Mar 2 02:57:09 2026 GMT Not After : Mar 9 02:57:09 2026 GMT Subject: CN=69a4fc86-9746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b0:55:61:08:d6:1e:f2:ab:89:94:53:fc:a8: 51:a7:59:92:e1:2f:6d:7d:9e:91:97:1c:2a:fe:5b: 13:02:46:71:c1:12:cd:30:72:0c:79:e5:df:a5:62: 5e:4c:fe:ba:b7:48:46:96:57:3e:ca:e5:e4:60:e2: be:f1:28:c4:2c:f8:8f:7c:ae:0e:c0:cc:8c:33:a6: 91:28:d9:a7:fa:1e:2f:96:5f:6d:c7:7a:76:b8:f9: 13:3b:f2:b0:d8:04:30:cf:7b:75:44:99:10:d5:12: e2:a5:e8:9a:90:f6:a8:20:26:b4:b0:d0:a9:08:32: fa:6c:8c:a2:98:3c:1d:16:04:ce:bc:3d:b2:59:e2: e7:71:6e:3a:fe:57:47:62:c4:26:b2:09:90:38:a0: 19:af:ce:7b:fe:08:86:5e:3b:af:c4:ef:f0:59:c7: 9f:b4:4e:67:58:f0:0d:61:e2:ab:69:0a:0e:aa:ad: a0:7d:9c:df:aa:da:ec:f6:87:43:ce:99:ca:b3:cc: 06:77:96:40:2d:64:79:31:80:27:7a:e2:84:bc:d2: 8c:b6:80:aa:2f:3b:24:2b:36:1f:5f:4c:53:48:36: fc:f1:b1:4d:1b:40:b8:66:8a:ec:36:68:a1:a4:48: 87:9b:ef:1e:d8:0a:89:d2:47:1b:1b:d2:aa:7b:54: 96:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:25:92:D2:99:F0:7F:D4:F3:35:13:2F:C6:04:82:3C:D7:FF:7D:8A X509v3 Authority Key Identifier: keyid:D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:e3:f1:2c:89:bd:92:fa:ee:c7:32:73:87:3e:31:d8:e1:41: 15:7f:9c:6a:92:d6:0d:84:90:af:84:8e:80:91:12:6b:bd:51: 0d:7f:3a:48:2a:0a:9a:27:14:5a:8c:ca:ca:d3:54:0b:03:8b: 2f:e9:e1:c3:91:d9:07:de:2a:99:1b:da:3c:c1:5e:43:68:dc: 17:3d:fd:8c:d1:c7:88:f2:87:cf:29:1e:6c:3c:8d:b8:61:4e: 9e:3e:f0:a9:e5:e9:2f:a2:69:8c:ee:08:e2:26:9b:a3:ae:5f: 51:4e:b9:e6:73:9f:0a:7d:9f:0c:2f:6c:24:70:e8:59:de:06: 8c:1c:0c:62:92:e7:b9:fa:f9:48:21:cf:58:ab:43:50:79:7d: fb:1c:12:d3:8a:ea:73:93:fb:eb:dd:13:2e:7d:5d:40:2c:8d: 4d:d2:93:87:ed:d3:ef:c8:1e:17:e0:63:48:3b:9f:0a:30:de: 4a:e3:a7:3a:b9:d8:8d:f9:ad:27:c5:ba:ce:97:15:b1:a8:b3: 1a:08:ec:a6:9a:72:31:36:3e:01:b9:8f:a9:d4:53:90:b5:07: 6d:54:18:22:f5:64:2d:d6:1e:b9:7a:18:f5:96:d7:9b:e4:62: 46:85:12:f5:06:b2:ec:6b:68:80:97:2d:a3:67:97:3d:2c:54: 6b:32:da:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkwMTExMTAvBgNVBAUTKEQ1MTY3Qjk3MDc4NzQxMDk1N0UyNUQ5Rjg3NTA4NTYw RjAwNTc3NkUwHhcNMjYwMzAyMDI1NzA5WhcNMjYwMzA5MDI1NzA5WjAYMRYwFAYD VQQDEw02OWE0ZmM4Ni05NzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrBVYQjWHvKriZRT/KhRp1mS4S9tfZ6Rlxwq/lsTAkZxwRLNMHIMeeXfpWJe TP66t0hGllc+yuXkYOK+8SjELPiPfK4OwMyMM6aRKNmn+h4vll9tx3p2uPkTO/Kw 2AQwz3t1RJkQ1RLipeiakPaoICa0sNCpCDL6bIyimDwdFgTOvD2yWeLncW46/ldH YsQmsgmQOKAZr857/giGXjuvxO/wWceftE5nWPANYeKraQoOqq2gfZzfqtrs9odD zpnKs8wGd5ZALWR5MYAneuKEvNKMtoCqLzskKzYfX0xTSDb88bFNG0C4ZorsNmih pEiHm+8e2AqJ0kcbG9Kqe1SWzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDElktKZ 8H/U8zUTL8YEgjzX/32KMB8GA1UdIwQYMBaAFNUWe5cHh0EJV+Jdn4dQhWDwBXdu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAxMS8zODg4RTBDNEM3 M0ExMUVCOTAwNzU1MTBDNEY5QUUwMi8xUlo3bHdlSFFRbFg0bDJmaDFDRllQQUZk MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFSWjdsd2VIUVFsWDRsMmZoMUNGWVBBRmQyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTAxMS8zODg4RTBDNEM3M0ExMUVCOTAwNzU1MTBDNEY5QUUwMi8xUlo3bHdlSFFR bFg0bDJmaDFDRllQQUZkMjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0ePxLIm9kvruxzJzhz4x2OFBFX+capLWDYSQr4SOgJESa71RDX86SCoKmicU WozKytNUCwOLL+nhw5HZB94qmRvaPMFeQ2jcFz39jNHHiPKHzykebDyNuGFOnj7w qeXpL6JpjO4I4iabo65fUU655nOfCn2fDC9sJHDoWd4GjBwMYpLnufr5SCHPWKtD UHl9+xwS04rqc5P7690TLn1dQCyNTdKTh+3T78geF+BjSDufCjDeSuOnOrnYjfmt J8W6zpcVsaizGgjspppyMTY+AbmPqdRTkLUHbVQYIvVkLdYeuXoY9ZbXm+RiRoUS 9Qay7GtogJcto2eXPSxUazLa6g== -----END CERTIFICATE-----Generated at Mon Mar 2 14:13:29 2026 by rpki-client