$ rpki-client -vvf rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft File: rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft (raw, json) Hash identifier: PICcPjYcVeZ88pmqPCS6/YgypsuhGH3T1bzE+K+iaAw= Subject key identifier: 68:2C:EA:73:AF:D2:FF:8D:1D:56:9A:77:01:46:28:62:37:30:BD:F8 Authority key identifier: AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 Certificate issuer: /CN=A91B97DB/serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Certificate serial: 0CA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft Manifest number: 0C9D Signing time: Sat 28 Feb 2026 18:40:26 +0000 Manifest this update: Sat 28 Feb 2026 18:40:26 +0000 Manifest next update: Sat 07 Mar 2026 18:40:26 +0000 Files and hashes: 1: rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl (hash: TuZf2/npYetUMDavGtNcrXFXek20YoCuGM8S9sr6ODc=) 2: 5A0FAE220F7011EAB8E21167C4F9AE02.roa (hash: ft/ZmUMult3UW/hGoWnnHI/0VP/gMrTykIcZOvK6Eqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 18:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3239 (0xca7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B97DB, serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Validity Not Before: Feb 28 18:40:26 2026 GMT Not After : Mar 7 18:40:26 2026 GMT Subject: CN=69a3369a-df62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9e:6e:ac:b5:2f:8a:26:d4:c6:28:1c:d2:c7: b9:e8:c9:c6:25:ab:22:2a:f3:8c:5d:ea:38:c1:95: 88:26:6d:2e:33:b0:c4:e7:58:c0:3b:64:7b:7d:31: 04:75:6e:92:40:d1:56:cb:1d:1d:93:fe:ac:d3:34: aa:7f:35:77:51:41:65:f6:89:20:4b:8f:f8:38:cb: 45:9d:52:26:dd:79:54:d7:52:99:02:f0:69:29:be: e7:e0:cf:4a:f8:51:9d:13:c2:23:5f:24:9c:0c:2a: a2:13:32:cb:69:45:cb:62:c9:bf:c9:f6:cc:27:ab: 66:db:82:f1:c8:af:98:83:49:82:51:e2:cb:37:b5: df:0d:da:0e:9d:5f:1b:9e:34:3c:80:4d:c1:23:4a: 09:05:cf:7f:6c:f0:a2:ab:33:17:fe:1b:87:a7:54: f4:5b:44:3b:56:26:2f:f8:85:59:7e:2f:ef:e1:9f: 68:ca:d2:02:dd:13:34:1a:10:e1:08:80:4c:30:99: dd:f1:bf:76:73:47:2f:4a:7d:f7:12:0b:16:e7:70: 41:44:98:c3:8f:bb:1c:fe:1c:19:b4:db:c3:9b:c1: dc:df:08:07:ec:cc:d7:58:52:ac:ec:ff:9d:45:5f: 17:c7:43:67:e2:c2:58:86:fe:2d:7f:35:dd:10:c7: 4c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2C:EA:73:AF:D2:FF:8D:1D:56:9A:77:01:46:28:62:37:30:BD:F8 X509v3 Authority Key Identifier: keyid:AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:28:8f:a7:93:92:9c:44:3e:0a:e1:5a:d9:89:bb:09:30:aa: 28:b1:1d:3b:14:35:9e:6f:4c:a0:cd:73:45:cd:26:fa:80:dd: 79:67:47:6a:4c:4a:ba:72:41:2e:59:ae:c1:56:38:39:46:ad: 9e:49:8e:00:e3:c0:f6:1c:33:2a:e9:ff:fc:30:a1:1a:3d:08: 77:5d:f5:a9:eb:74:ac:9b:cb:ac:71:b1:f7:89:1d:b8:b4:f0: dd:b4:c5:78:30:76:03:5c:a4:f6:c9:9c:5c:fa:39:1a:9d:be: da:cf:0e:2d:a7:c9:0c:93:d9:51:cb:61:c9:3f:b5:b8:3d:9d: 4c:1e:e8:d4:07:0a:8e:c3:3f:ef:0e:70:87:31:52:f5:59:cc: ae:e4:4a:1e:86:d0:21:5e:96:df:b7:85:25:c4:61:0e:e1:a6: ea:40:5b:65:dc:d5:ed:51:03:89:bb:a6:e6:25:d7:a1:1e:9a: 7d:95:4d:ba:fc:43:13:7f:d6:37:44:2a:da:cc:a4:96:a6:9a: 2a:e7:59:81:2f:c9:cf:00:bb:ed:6d:7d:1c:c5:fd:d1:87:8d: 32:6e:6f:0b:1b:5f:ce:89:9f:b3:9d:92:7d:c6:e9:e6:b4:17: 55:7a:47:42:18:47:84:f6:45:19:a9:42:e8:7d:c8:95:9d:8f: 9f:87:e7:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk3REIxMTAvBgNVBAUTKEFEM0Q4NzAzODUwQjEyNzFFOEYzMUFFMDNFM0NDOUFD NDY2MEQ5NDIwHhcNMjYwMjI4MTg0MDI2WhcNMjYwMzA3MTg0MDI2WjAYMRYwFAYD VQQDDA02OWEzMzY5YS1kZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0p5urLUviibUxigc0se56MnGJasiKvOMXeo4wZWIJm0uM7DE51jAO2R7fTEE dW6SQNFWyx0dk/6s0zSqfzV3UUFl9okgS4/4OMtFnVIm3XlU11KZAvBpKb7n4M9K +FGdE8IjXyScDCqiEzLLaUXLYsm/yfbMJ6tm24LxyK+Yg0mCUeLLN7XfDdoOnV8b njQ8gE3BI0oJBc9/bPCiqzMX/huHp1T0W0Q7ViYv+IVZfi/v4Z9oytIC3RM0GhDh CIBMMJnd8b92c0cvSn33EgsW53BBRJjDj7sc/hwZtNvDm8Hc3wgH7MzXWFKs7P+d RV8Xx0Nn4sJYhv4tfzXdEMdMCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGgs6nOv 0v+NHVaadwFGKGI3ML34MB8GA1UdIwQYMBaAFK09hwOFCxJx6PMa4D48yaxGYNlC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTdEQi80RTQxMEFDRTBG NkYxMUVBQUIwQURCNjRDNEY5QUUwMi9yVDJIQTRVTEVuSG84eHJnUGp6SnJFWmcy VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUMkhBNFVMRW5Ibzh4cmdQanpKckVaZzJVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTdEQi80RTQxMEFDRTBGNkYxMUVBQUIwQURCNjRDNEY5QUUwMi9yVDJIQTRVTEVu SG84eHJnUGp6SnJFWmcyVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjiiPp5OSnEQ+CuFa2Ym7CTCqKLEdOxQ1nm9MoM1zRc0m+oDdeWdHakxKunJB LlmuwVY4OUatnkmOAOPA9hwzKun//DChGj0Id131qet0rJvLrHGx94kduLTw3bTF eDB2A1yk9smcXPo5Gp2+2s8OLafJDJPZUcthyT+1uD2dTB7o1AcKjsM/7w5whzFS 9VnMruRKHobQIV6W37eFJcRhDuGm6kBbZdzV7VEDibum5iXXoR6afZVNuvxDE3/W N0Qq2syklqaaKudZgS/JzwC77W19HMX90YeNMm5vCxtfzomfs52Sfcbp5rQXVXpH QhhHhPZFGalC6H3IlZ2Pn4fnfg== -----END CERTIFICATE-----Generated at Sun Mar 1 23:48:42 2026 by rpki-client