$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft File: gHwED6kB5dhpWmU03mbD1qC_vMU.mft (raw, json) Hash identifier: SaBmPne/oI+PJdYrO7MQ3BKGYhMIyo4Lh+7xBE4ZKQU= Subject key identifier: A1:03:F9:DA:7C:F3:01:08:69:F3:D9:D7:8D:36:3B:90:64:9F:A1:F4 Authority key identifier: 80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5 Certificate issuer: /CN=A91BC3F1/serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5 Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft Manifest number: 0154 Signing time: Sun 01 Mar 2026 06:05:49 +0000 Manifest this update: Sun 01 Mar 2026 06:05:49 +0000 Manifest next update: Sun 08 Mar 2026 06:05:49 +0000 Files and hashes: 1: gHwED6kB5dhpWmU03mbD1qC_vMU.crl (hash: lAmn3NKfHSy0hjcF2+qgfRaJf8Wl7NGHSAqHxbhWwUA=) 2: 7D9F83FE10FA11EFADBBC431C4F9AE02.roa (hash: kRUKk6YhznpQLf70+sbW+4rHruxwNLVLHD+xyjgrv/8=) 3: A697738410FA11EF9A068536C4F9AE02.roa (hash: GgKSSa0DZkr/DMOZ+SWiE+267xJNKIhRXUimhakcIXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC3F1, serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5 Validity Not Before: Mar 1 06:05:49 2026 GMT Not After : Mar 8 06:05:49 2026 GMT Subject: CN=69a3d73d-a4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:90:99:04:8d:4b:4c:19:16:12:1b:87:bf:53: 03:54:c4:1a:3d:d0:d3:e1:77:a4:64:2c:58:f6:df: 04:6c:18:7c:50:f1:0b:fd:57:81:23:aa:63:5a:47: 4e:62:56:8b:e2:75:81:3f:c4:ca:f7:20:e6:87:9b: ae:24:f5:80:6e:5e:f5:df:ef:9a:30:cc:e8:38:b1: 19:f8:9f:33:67:ae:53:4a:49:b0:80:fa:3b:ae:6c: 7f:9b:c8:7a:3d:4a:43:f0:84:f9:da:5e:a7:03:a4: 4f:97:ee:c5:e6:1e:82:76:0e:c1:6e:f4:00:e0:27: f1:f5:2b:81:ce:69:06:54:a8:52:9d:75:1e:d8:4b: b5:55:dc:87:f3:a1:60:db:90:4e:6a:a6:e9:ed:d9: 75:f2:f4:39:6a:54:95:0d:f0:02:47:d8:3b:f6:5d: 4c:f8:2e:cd:b1:6c:3c:d2:08:65:44:dc:26:ea:f4: 42:47:0c:bd:38:b9:1c:4d:a3:65:26:a1:86:56:31: dc:e2:62:7c:82:f3:40:63:f6:28:0e:c8:8c:9c:db: ee:30:0f:98:17:87:e4:7c:2a:e3:93:6c:2a:6f:e8: 31:7a:37:cc:60:2e:ae:bd:f5:d9:5c:cf:b5:6a:57: d6:41:73:7d:75:39:c0:7c:2a:c0:75:2f:37:fa:be: 58:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:03:F9:DA:7C:F3:01:08:69:F3:D9:D7:8D:36:3B:90:64:9F:A1:F4 X509v3 Authority Key Identifier: keyid:80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:72:dc:2f:97:89:a7:5b:10:6b:80:28:72:fa:1b:be:69:76: 99:cd:10:92:34:27:7f:4a:7a:bd:d9:14:84:9b:e3:42:24:b6: b0:a2:f8:c0:ce:76:c0:7f:c2:92:89:21:b9:4e:ac:e9:c6:f6: b9:47:c3:8c:e0:69:61:29:ae:e4:14:eb:55:93:cd:40:00:70: 1b:fb:d8:75:20:7f:df:f3:03:54:30:89:2c:4b:fc:62:ac:40: 9f:3c:50:f6:2b:02:d1:1f:74:11:b8:42:95:bf:ae:b3:50:e8: 08:6e:b0:01:5e:88:a5:fc:d3:9c:ab:45:45:c4:a9:d6:cd:58: de:f8:14:b5:7f:c4:64:f3:23:d9:d1:cd:6c:12:fd:55:21:c2: 3d:d6:bb:71:cd:6e:81:f1:2f:aa:36:2f:08:d6:bb:40:77:bb: 32:02:9f:44:d6:0b:b7:c8:6a:4d:a6:f5:c6:9d:9d:2c:e4:81: 7b:95:39:f0:31:13:93:d3:9d:49:3f:9e:94:72:7e:3e:0d:68: 58:a1:6b:8c:3d:52:05:f3:a8:ac:4f:79:a3:d7:1f:9d:80:bb: e9:d3:8b:4b:c0:f3:88:90:2c:dd:64:d1:59:29:c7:3b:9f:77: 84:be:96:53:d5:05:87:d1:5a:c8:33:66:7c:54:71:3f:56:a1: 26:f5:c1:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMzRjExMTAvBgNVBAUTKDgwN0MwNDBGQTkwMUU1RDg2OTVBNjUzNERFNjZDM0Q2 QTBCRkJDQzUwHhcNMjYwMzAxMDYwNTQ5WhcNMjYwMzA4MDYwNTQ5WjAYMRYwFAYD VQQDEw02OWEzZDczZC1hNGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpCZBI1LTBkWEhuHv1MDVMQaPdDT4XekZCxY9t8EbBh8UPEL/VeBI6pjWkdO YlaL4nWBP8TK9yDmh5uuJPWAbl713++aMMzoOLEZ+J8zZ65TSkmwgPo7rmx/m8h6 PUpD8IT52l6nA6RPl+7F5h6Cdg7BbvQA4Cfx9SuBzmkGVKhSnXUe2Eu1VdyH86Fg 25BOaqbp7dl18vQ5alSVDfACR9g79l1M+C7NsWw80ghlRNwm6vRCRwy9OLkcTaNl JqGGVjHc4mJ8gvNAY/YoDsiMnNvuMA+YF4fkfCrjk2wqb+gxejfMYC6uvfXZXM+1 alfWQXN9dTnAfCrAdS83+r5YCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKED+dp8 8wEIafPZ1402O5Bkn6H0MB8GA1UdIwQYMBaAFIB8BA+pAeXYaVplNN5mw9agv7zF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzNGMS85NUI3MTFDNDEw RjkxMUVGODg4QzUyMkZDNEY5QUUwMi9nSHdFRDZrQjVkaHBXbVUwM21iRDFxQ192 TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dId0VENmtCNWRocFdtVTAzbWJEMXFDX3ZNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzNGMS85NUI3MTFDNDEwRjkxMUVGODg4QzUyMkZDNEY5QUUwMi9nSHdFRDZrQjVk aHBXbVUwM21iRDFxQ192TVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALHLcL5eJp1sQa4Aocvobvml2mc0QkjQnf0p6vdkUhJvjQiS2sKL4wM52wH/C kokhuU6s6cb2uUfDjOBpYSmu5BTrVZPNQABwG/vYdSB/3/MDVDCJLEv8YqxAnzxQ 9isC0R90EbhClb+us1DoCG6wAV6IpfzTnKtFRcSp1s1Y3vgUtX/EZPMj2dHNbBL9 VSHCPda7cc1ugfEvqjYvCNa7QHe7MgKfRNYLt8hqTab1xp2dLOSBe5U58DETk9Od ST+elHJ+Pg1oWKFrjD1SBfOorE95o9cfnYC76dOLS8DziJAs3WTRWSnHO593hL6W U9UFh9FayDNmfFRxP1ahJvXB1w== -----END CERTIFICATE-----Generated at Mon Mar 2 05:02:05 2026 by rpki-client