$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft File: RziIJrgc68tdWOukEDkWDSR7wX8.mft (raw, json) Hash identifier: gkt67gSxdabn7pQ0Odd87Tu4NKkYNLSqZqBpDd5D0fc= Subject key identifier: A5:CF:F0:86:97:B6:45:38:90:20:70:A1:E5:7F:B2:73:23:C3:49:DF Authority key identifier: 47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F Certificate issuer: /CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Certificate serial: 0509 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft Manifest number: 04FE Signing time: Sun 01 Mar 2026 23:48:56 +0000 Manifest this update: Sun 01 Mar 2026 23:48:56 +0000 Manifest next update: Sun 08 Mar 2026 23:48:55 +0000 Files and hashes: 1: RziIJrgc68tdWOukEDkWDSR7wX8.crl (hash: J4BkQKo32kGeKRYXurKvc1bJ8XYXXM506Yq1MWYfqHc=) 2: 9F0BF8AE48C711ECAA1A222EC4F9AE02.roa (hash: k7pNWs8rxOIJwQwNSf++pyf5UhHis3rC6IchuHrW/pQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1289 (0x509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9B37, serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Validity Not Before: Mar 1 23:48:56 2026 GMT Not After : Mar 8 23:48:55 2026 GMT Subject: CN=69a4d068-5c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:40:d5:f9:30:c8:07:7a:f8:04:a5:00:27:99: f0:78:ad:dd:e5:dd:dc:94:31:53:b3:ae:86:40:da: dd:03:39:08:e5:59:b7:04:cf:76:b1:c8:70:ad:2a: aa:d0:aa:3f:b5:12:6b:01:48:8b:cd:19:36:1c:9e: 71:d4:a1:48:60:09:a2:50:6a:16:ab:1e:db:6c:71: 83:7a:96:39:bc:10:f4:8b:8d:10:8c:62:0b:c3:42: 73:68:b7:df:87:e8:11:3e:be:9d:7e:03:6c:ae:29: d4:a8:5f:02:e3:0a:2d:17:27:71:e2:c1:69:a2:6a: ac:7c:c0:c0:95:44:5a:71:96:4a:42:1b:b7:45:68: 86:57:c6:29:22:6c:02:62:85:85:0b:31:8e:d1:8d: 04:4d:e1:fa:18:88:c5:43:54:7d:52:49:63:20:0f: 7d:a4:4f:92:2e:1a:e4:fd:50:a5:d4:c7:5e:46:0a: 22:db:95:23:51:f3:7e:76:bf:b1:82:f1:c2:a9:ea: 9e:d1:ab:be:14:65:06:61:c6:14:37:ec:fa:14:11: 29:4a:9a:f1:bd:33:d9:cd:ed:fa:75:64:b1:ed:b4: 53:19:28:a4:67:17:41:6d:11:7d:db:25:72:f0:ac: 7a:90:3d:a9:e9:ae:1f:91:1c:02:69:55:bb:e4:c6: 5c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CF:F0:86:97:B6:45:38:90:20:70:A1:E5:7F:B2:73:23:C3:49:DF X509v3 Authority Key Identifier: keyid:47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:49:ee:29:b6:94:1b:58:c0:2e:cc:ad:d3:f3:78:eb:b6:ee: 8f:58:bb:b0:ee:a3:6c:36:74:6a:ee:37:1e:f1:9a:f6:fc:a1: 97:9d:3f:86:53:45:e5:38:72:63:87:cd:ed:df:01:8b:50:ad: 54:13:9a:60:b3:ec:1f:b9:81:59:02:3e:b7:c0:a6:63:6a:78: ca:a8:eb:b9:b0:4b:f3:e9:45:17:b3:1b:f4:04:b9:6e:4e:f2: 59:7a:b9:02:bd:e6:42:73:e1:81:ed:2a:7e:7a:15:58:c6:15: 21:ba:1e:cf:a1:34:62:6c:9f:01:10:55:45:f6:ee:9f:21:c4: f1:4b:9d:16:57:fe:53:5f:11:95:41:fd:70:ff:bd:66:4e:a4: 47:a1:93:35:ea:ab:7f:db:7b:7d:fc:48:80:89:39:83:18:6b: 56:77:b2:fe:9d:2c:ab:a4:16:f4:d8:4a:00:e2:4a:8b:1a:fb: 6d:91:68:f8:56:a8:f6:69:48:cd:2a:59:6a:10:b6:2f:03:dd: ee:a9:97:47:11:e9:43:d9:5b:9c:c2:63:25:24:a6:54:ea:11: ad:a9:6b:d6:71:64:6e:7d:46:a5:0e:ee:2e:81:09:bf:30:6d: 31:7f:2e:43:db:12:16:5c:2c:10:2a:1d:7f:dc:fc:3a:f3:0f: fd:ec:18:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlCMzcxMTAvBgNVBAUTKDQ3Mzg4ODI2QjgxQ0VCQ0I1RDU4RUJBNDEwMzkxNjBE MjQ3QkMxN0YwHhcNMjYwMzAxMjM0ODU2WhcNMjYwMzA4MjM0ODU1WjAYMRYwFAYD VQQDEw02OWE0ZDA2OC01YzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4EDV+TDIB3r4BKUAJ5nweK3d5d3clDFTs66GQNrdAzkI5Vm3BM92schwrSqq 0Ko/tRJrAUiLzRk2HJ5x1KFIYAmiUGoWqx7bbHGDepY5vBD0i40QjGILw0JzaLff h+gRPr6dfgNsrinUqF8C4wotFydx4sFpomqsfMDAlURacZZKQhu3RWiGV8YpImwC YoWFCzGO0Y0ETeH6GIjFQ1R9UkljIA99pE+SLhrk/VCl1MdeRgoi25UjUfN+dr+x gvHCqeqe0au+FGUGYcYUN+z6FBEpSprxvTPZze36dWSx7bRTGSikZxdBbRF92yVy 8Kx6kD2p6a4fkRwCaVW75MZcIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKXP8IaX tkU4kCBwoeV/snMjw0nfMB8GA1UdIwQYMBaAFEc4iCa4HOvLXVjrpBA5Fg0ke8F/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUIzNy85QzM5QkUxNjQ4 QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4dGRXT3VrRURrV0RTUjd3 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J6aUlKcmdjNjh0ZFdPdWtFRGtXRFNSN3dYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUIzNy85QzM5QkUxNjQ4QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4 dGRXT3VrRURrV0RTUjd3WDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQEnuKbaUG1jALsyt0/N467buj1i7sO6jbDZ0au43HvGa9vyhl50/hlNF5Thy Y4fN7d8Bi1CtVBOaYLPsH7mBWQI+t8CmY2p4yqjrubBL8+lFF7Mb9AS5bk7yWXq5 Ar3mQnPhge0qfnoVWMYVIboez6E0YmyfARBVRfbunyHE8UudFlf+U18RlUH9cP+9 Zk6kR6GTNeqrf9t7ffxIgIk5gxhrVney/p0sq6QW9NhKAOJKixr7bZFo+Fao9mlI zSpZahC2LwPd7qmXRxHpQ9lbnMJjJSSmVOoRralr1nFkbn1GpQ7uLoEJvzBtMX8u Q9sSFlwsECodf9z8OvMP/ewYTg== -----END CERTIFICATE-----Generated at Mon Mar 2 10:44:23 2026 by rpki-client