$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft File: -9GoSKH4mo0k2wtoF6CH-y313wg.mft (raw, json) Hash identifier: AAWPnK2VWiDuzhrpWiOiNOYFk0oJrfgOmjtRhqjfz+Q= Subject key identifier: 89:9A:9E:65:C3:68:78:5A:DB:4B:EA:9B:8E:5A:3E:0D:68:3F:6C:ED Authority key identifier: FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 Certificate issuer: /CN=A91BAFCE/serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Certificate serial: 023A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft Manifest number: 0236 Signing time: Sun 01 Mar 2026 03:17:55 +0000 Manifest this update: Sun 01 Mar 2026 03:17:54 +0000 Manifest next update: Sun 08 Mar 2026 03:17:54 +0000 Files and hashes: 1: -9GoSKH4mo0k2wtoF6CH-y313wg.crl (hash: rSOIVvIytJPgXiySnx+nw0eK+fjBntgP0RfPFjw1yJ0=) 2: 37C8FE80B2A211ED9A5C4B53C4F9AE02.roa (hash: SP+/y7MArj9z/n+yWo+DHrHg0NuymW1l4/eQYnYmho8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAFCE, serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Validity Not Before: Mar 1 03:17:54 2026 GMT Not After : Mar 8 03:17:54 2026 GMT Subject: CN=69a3afe2-92b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ba:d0:be:55:85:9c:bb:0a:a9:ec:87:4e:2b: 62:73:33:b6:df:79:f1:ef:9f:4a:a3:a9:0a:56:97: cb:a1:49:7d:9d:e9:0f:76:c3:d0:b3:3d:62:9b:9b: 6a:36:05:db:da:5d:f1:67:37:38:b6:89:80:55:ba: d5:db:6d:fe:c4:de:c7:b6:cd:9f:15:80:6e:a0:89: 27:48:38:97:53:ce:85:6e:a1:87:bc:6f:bb:9a:7a: ec:7a:5e:0a:7f:7c:6b:f5:bf:63:62:10:57:4e:52: f8:19:29:19:0e:92:be:07:8f:38:92:1d:ea:90:a0: a3:c5:4e:8a:8b:ff:62:e0:aa:0a:a7:20:52:48:af: fa:ab:cb:c4:60:c4:ae:bc:7a:52:a0:71:3c:5e:b6: 60:4c:3d:ad:49:4b:2f:e2:cc:95:bf:76:16:66:54: a2:1c:94:bc:e9:24:94:c8:ae:ef:7b:04:45:77:27: ab:f8:ef:0b:a5:a7:8e:b2:9f:54:05:db:18:ab:1f: f3:61:7a:38:2e:08:e3:90:04:ff:cb:36:8e:5b:cc: b3:6c:38:10:bd:e7:2c:0b:1e:19:13:fe:e4:09:51: 10:21:42:30:c4:a6:5f:ff:72:75:92:55:d0:5c:29: ee:5b:fd:d0:56:45:1c:cc:22:6b:00:65:8b:d8:60: 11:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9A:9E:65:C3:68:78:5A:DB:4B:EA:9B:8E:5A:3E:0D:68:3F:6C:ED X509v3 Authority Key Identifier: keyid:FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:8e:2c:fe:79:ed:66:11:01:c4:87:bc:65:3b:06:81:6d:ee: 7e:64:70:95:d2:68:58:54:db:43:52:e2:a6:f3:e1:78:42:25: 1e:03:f3:6e:79:62:8d:6e:8c:de:13:24:c5:e1:9e:1c:ba:44: 48:2a:da:2f:a0:9f:c0:b3:a9:15:3c:19:cc:16:a8:2d:ae:29: 9c:6f:b1:74:15:cc:c5:87:7f:f8:78:44:fd:71:88:bb:55:f3: 60:f6:d4:91:5f:24:1d:cb:b2:e0:41:0a:8f:07:32:17:16:de: 28:6e:15:0e:dd:ba:ae:45:8b:69:6c:94:ca:c9:11:aa:00:58: 01:01:3d:17:1f:3d:61:33:88:85:55:ea:fd:14:ce:4e:16:0b: 8c:f4:91:c9:40:76:a1:5c:f1:ce:15:bb:de:3b:71:ce:79:1e: dd:e7:02:f1:14:ca:ab:28:c1:cc:0f:ef:24:20:8b:c6:9f:c6: 15:3a:1b:01:74:7b:1f:8f:25:1c:36:77:3a:27:31:e7:dd:95: 77:7f:2c:10:1b:3d:ba:f7:76:27:4f:74:96:64:63:13:5b:93: 37:2d:b3:2f:13:ce:16:d6:c7:21:f8:1f:91:86:52:c4:59:a7: a2:82:1c:19:ae:10:bd:0f:71:9a:c8:b9:fa:ed:56:16:2d:ac: 15:e2:05:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFGQ0UxMTAvBgNVBAUTKEZCRDFBODQ4QTFGODlBOEQyNERCMEI2ODE3QTA4N0ZC MkRGNURGMDgwHhcNMjYwMzAxMDMxNzU0WhcNMjYwMzA4MDMxNzU0WjAYMRYwFAYD VQQDDA02OWEzYWZlMi05MmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5LrQvlWFnLsKqeyHTiticzO233nx759Ko6kKVpfLoUl9nekPdsPQsz1im5tq NgXb2l3xZzc4tomAVbrV223+xN7Hts2fFYBuoIknSDiXU86FbqGHvG+7mnrsel4K f3xr9b9jYhBXTlL4GSkZDpK+B484kh3qkKCjxU6Ki/9i4KoKpyBSSK/6q8vEYMSu vHpSoHE8XrZgTD2tSUsv4syVv3YWZlSiHJS86SSUyK7vewRFdyer+O8LpaeOsp9U BdsYqx/zYXo4LgjjkAT/yzaOW8yzbDgQvecsCx4ZE/7kCVEQIUIwxKZf/3J1klXQ XCnuW/3QVkUczCJrAGWL2GARwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFImanmXD aHha20vqm45aPg1oP2ztMB8GA1UdIwQYMBaAFPvRqEih+JqNJNsLaBegh/st9d8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUZDRS8yRDM0QzM5MkIy OUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1vMGsyd3RvRjZDSC15MzEz d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05R29TS0g0bW8wazJ3dG9GNkNILXkzMTN3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUZDRS8yRDM0QzM5MkIyOUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1v MGsyd3RvRjZDSC15MzEzd2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfY4s/nntZhEBxIe8ZTsGgW3ufmRwldJoWFTbQ1LipvPheEIlHgPzbnlijW6M 3hMkxeGeHLpESCraL6CfwLOpFTwZzBaoLa4pnG+xdBXMxYd/+HhE/XGIu1XzYPbU kV8kHcuy4EEKjwcyFxbeKG4VDt26rkWLaWyUyskRqgBYAQE9Fx89YTOIhVXq/RTO ThYLjPSRyUB2oVzxzhW73jtxznke3ecC8RTKqyjBzA/vJCCLxp/GFTobAXR7H48l HDZ3Oicx592Vd38sEBs9uvd2J090lmRjE1uTNy2zLxPOFtbHIfgfkYZSxFmnooIc Ga4QvQ9xmsi5+u1WFi2sFeIFeg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:29:01 2026 by rpki-client