$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft File: 88hJQLK99AJViHBvWcHm7D0hR_A.mft (raw, json) Hash identifier: U4YoakeR3nLSlu1vl4qxUF/Gz/V7VDSNIwf2NOMJGh8= Subject key identifier: 66:E2:D7:83:F3:2F:2C:BF:6B:AC:3C:1A:FB:60:38:77:FD:7D:AC:0E Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 Certificate issuer: /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft Manifest number: 01B0 Signing time: Mon 02 Mar 2026 01:20:22 +0000 Manifest this update: Mon 02 Mar 2026 01:20:20 +0000 Manifest next update: Mon 09 Mar 2026 01:20:20 +0000 Files and hashes: 1: 88hJQLK99AJViHBvWcHm7D0hR_A.crl (hash: 5cBegHuNnAZlUemvwLIaQqd0xDgzy1Tr08Z40sOmwQM=) 2: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (hash: v31XiVYGJxKH7lnLyUBdZlEf6xpoQVchSdqRGdwSNGw=) 3: D36C048A81E211EEAF423C87C4F9AE02.roa (hash: ZIzmLDCvL9144wtn/f7cPEIGwIVNysAKaWM197wzKng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Validity Not Before: Mar 2 01:20:20 2026 GMT Not After : Mar 9 01:20:20 2026 GMT Subject: CN=69a4e5d6-cb38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:72:0a:92:32:df:4a:5c:3f:d9:c0:f6:d1:c8: 2c:e6:7b:77:a2:47:06:44:ed:a3:1c:df:08:1e:e4: ca:55:82:c8:9c:61:fd:d8:4d:5e:55:c2:8a:a4:7c: 43:07:e5:18:64:34:1b:ff:cd:f0:db:ea:1f:e7:00: cb:76:1c:3f:1c:ca:3e:e7:64:92:be:9d:b8:1f:4e: 9a:66:18:64:d0:d8:04:ae:5e:76:7f:0c:50:b9:f2: 91:de:32:37:5f:3a:46:1e:ec:4a:0a:5b:74:18:99: b9:0b:0e:c8:9e:65:a3:c7:a0:c8:2c:8a:ae:87:11: 63:c2:5b:e8:67:c6:8a:d5:8f:8d:92:cb:a2:5f:48: c5:de:71:d6:e8:3a:74:13:c5:d6:e1:1b:0d:05:13: d3:0a:c1:dd:ac:8b:92:a0:1c:15:2c:64:2d:c8:30: 3b:1b:a8:09:71:34:ce:b6:3c:1a:20:ee:34:68:09: 64:21:33:53:80:f6:ea:df:10:4e:e8:97:cc:d8:f6: e6:6c:8e:46:d4:b8:6c:07:60:c6:f7:3d:38:3f:6e: 08:bd:62:54:59:cc:91:04:95:c1:88:ae:f1:13:2c: ef:70:4e:c9:62:8a:44:ca:7c:e1:9c:80:be:5f:a4: a7:cf:01:f0:a6:3e:9b:ec:b7:c6:ee:eb:74:c5:63: 30:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E2:D7:83:F3:2F:2C:BF:6B:AC:3C:1A:FB:60:38:77:FD:7D:AC:0E X509v3 Authority Key Identifier: keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:11:0a:47:11:f6:de:d4:27:bc:92:3b:b1:c8:82:fb:3f:f8: e1:c7:5e:2a:2e:5f:45:c6:f6:1d:97:68:cd:2d:18:a6:f5:f2: 97:c6:af:f8:db:24:64:c6:29:e0:31:9b:99:49:ad:a2:dd:bb: 06:0b:6e:46:ad:5b:93:00:61:4b:31:f4:7d:b9:cb:1f:ec:18: 80:b0:06:b9:9d:81:97:e2:76:c0:50:df:9f:c6:91:c3:0c:fe: c6:aa:0a:2c:0c:35:05:fb:da:02:f4:c6:9f:e8:c9:fa:af:6a: 6d:a9:59:87:64:97:5b:46:35:16:55:ca:5a:8d:4d:85:2c:6e: 3e:82:03:06:6a:35:7c:e6:fc:87:5e:68:88:c6:df:5b:af:d0: d0:74:49:67:05:d0:7a:02:8a:1f:c7:c5:eb:d9:86:ef:6f:f8: 22:1e:2e:25:9c:c2:67:7b:6e:dc:97:8a:c7:ee:e5:0a:a4:8f: bf:35:3e:4d:e4:9c:b5:b7:a6:44:87:b7:1f:6d:02:d7:d0:58: 41:bb:a5:ea:06:a5:c8:b4:ec:46:3e:39:5a:b5:b3:97:93:7b: 1a:30:a6:a9:96:b1:f2:73:9b:1b:d1:17:7a:02:55:9e:cc:c5: 45:6c:a6:a7:7b:8c:ad:8d:85:1a:01:29:4e:78:c8:33:c9:44: ad:4b:29:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDMjMxMTAvBgNVBAUTKEYzQzg0OTQwQjJCREY0MDI1NTg4NzA2RjU5QzFFNkVD M0QyMTQ3RjAwHhcNMjYwMzAyMDEyMDIwWhcNMjYwMzA5MDEyMDIwWjAYMRYwFAYD VQQDEw02OWE0ZTVkNi1jYjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnIKkjLfSlw/2cD20cgs5nt3okcGRO2jHN8IHuTKVYLInGH92E1eVcKKpHxD B+UYZDQb/83w2+of5wDLdhw/HMo+52SSvp24H06aZhhk0NgErl52fwxQufKR3jI3 XzpGHuxKClt0GJm5Cw7InmWjx6DILIquhxFjwlvoZ8aK1Y+NksuiX0jF3nHW6Dp0 E8XW4RsNBRPTCsHdrIuSoBwVLGQtyDA7G6gJcTTOtjwaIO40aAlkITNTgPbq3xBO 6JfM2PbmbI5G1LhsB2DG9z04P24IvWJUWcyRBJXBiK7xEyzvcE7JYopEynzhnIC+ X6SnzwHwpj6b7LfG7ut0xWMwsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGbi14Pz Lyy/a6w8GvtgOHf9fawOMB8GA1UdIwQYMBaAFPPISUCyvfQCVYhwb1nB5uw9IUfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0MyMy85MjVDODBDRTgx RTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlBSlZpSEJ2V2NIbTdEMGhS X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg4aEpRTEs5OUFKVmlIQnZXY0htN0QwaFJfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0MyMy85MjVDODBDRTgxRTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlB SlZpSEJ2V2NIbTdEMGhSX0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApxEKRxH23tQnvJI7sciC+z/44cdeKi5fRcb2HZdozS0YpvXyl8av+NskZMYp 4DGbmUmtot27BgtuRq1bkwBhSzH0fbnLH+wYgLAGuZ2Bl+J2wFDfn8aRwwz+xqoK LAw1BfvaAvTGn+jJ+q9qbalZh2SXW0Y1FlXKWo1NhSxuPoIDBmo1fOb8h15oiMbf W6/Q0HRJZwXQegKKH8fF69mG72/4Ih4uJZzCZ3tu3JeKx+7lCqSPvzU+TeSctbem RIe3H20C19BYQbul6galyLTsRj45WrWzl5N7GjCmqZax8nObG9EXegJVnszFRWym p3uMrY2FGgEpTnjIM8lErUspDg== -----END CERTIFICATE-----Generated at Tue Mar 3 02:11:28 2026 by rpki-client