$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft File: X45P1KbdY15DeC5aBVYiyrJlSjc.mft (raw, json) Hash identifier: WnVuDFYi1lLFq16y6P3CbEAlnVgS3fMsFOXE9hG3yYg= Subject key identifier: F4:8F:D7:70:2C:F2:6D:85:4C:E8:6B:24:3D:EF:35:8C:B4:52:F4:BB Authority key identifier: 5F:8E:4F:D4:A6:DD:63:5E:43:78:2E:5A:05:56:22:CA:B2:65:4A:37 Certificate issuer: /CN=A91BCF31/serialNumber=5F8E4FD4A6DD635E43782E5A055622CAB2654A37 Certificate serial: 098F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft Manifest number: 0987 Signing time: Sat 28 Feb 2026 20:18:52 +0000 Manifest this update: Sat 28 Feb 2026 20:18:51 +0000 Manifest next update: Sat 07 Mar 2026 20:18:51 +0000 Files and hashes: 1: X45P1KbdY15DeC5aBVYiyrJlSjc.crl (hash: S66eByndCtGplRZHAHwc4fuMuM6et9Fw0QygT1MjZVg=) 2: B757FF4EAB8311EA9983D717C4F9AE02.roa (hash: vF+3jtePHsbwMW7GFk7Eys2kw6qOXJ50sYtNC1K6B7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.crl rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 20:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2447 (0x98f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCF31, serialNumber=5F8E4FD4A6DD635E43782E5A055622CAB2654A37 Validity Not Before: Feb 28 20:18:51 2026 GMT Not After : Mar 7 20:18:51 2026 GMT Subject: CN=69a34dac-47d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ce:82:e1:27:44:3b:8a:01:74:4f:5a:fb:7f: aa:0a:bc:dc:66:ae:52:91:c6:0a:bc:c5:0f:4d:51: f6:91:c8:a3:57:9e:4d:1e:49:9c:84:91:ca:09:cd: 24:00:fc:2f:01:00:cf:9a:8a:eb:90:2f:cc:4a:16: c2:4d:c2:30:af:b6:21:68:69:0f:81:23:72:2b:3e: 2d:4b:cf:b7:7c:84:a4:9b:dd:97:b0:ae:be:9a:41: 93:6c:f9:34:82:52:bb:11:4c:67:47:0d:35:5b:69: 0b:08:1a:ff:8c:1f:73:d6:ce:88:90:fe:ed:16:0d: b9:66:52:c9:49:e8:10:aa:39:78:69:c7:06:c6:62: 74:4c:16:5e:7c:60:4d:0e:02:24:75:63:43:5d:5b: e5:4e:66:3e:b4:e6:68:87:d8:15:b8:e4:f3:4f:23: a1:c5:b0:a0:77:f3:be:68:26:b3:53:49:18:60:55: 80:39:c1:8a:95:62:ff:08:95:7e:fb:97:6c:8c:37: 7b:89:e1:7b:9c:22:f0:c0:3c:06:26:fd:13:12:1c: 8c:ea:54:79:ed:0f:ac:b1:1a:d9:70:2e:22:33:97: d2:ce:83:c8:d7:50:39:a4:59:40:f0:04:71:59:61: 29:da:e5:04:4f:ce:2e:e0:ab:a2:68:7d:16:31:9a: c4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8F:D7:70:2C:F2:6D:85:4C:E8:6B:24:3D:EF:35:8C:B4:52:F4:BB X509v3 Authority Key Identifier: keyid:5F:8E:4F:D4:A6:DD:63:5E:43:78:2E:5A:05:56:22:CA:B2:65:4A:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:1c:fb:da:c8:8f:f8:80:f7:2d:d5:f3:1d:eb:fb:3c:7f:82: e7:10:3a:41:30:a4:4a:67:7f:6e:10:37:69:6d:d6:e4:4b:c6: f9:7b:5c:10:b2:0d:3b:cd:81:73:09:6c:ca:50:bb:ac:03:70: 0b:b6:74:85:b5:fb:96:14:ff:56:26:51:fc:1a:25:0f:20:5a: a9:35:b0:38:79:6f:2b:55:be:4e:5c:b2:96:40:ef:47:7a:e4: a9:13:7d:b2:43:ca:c1:7d:4a:90:e4:bf:1e:a2:05:43:a4:20: 32:2a:89:3b:b6:95:b1:0c:fc:36:cf:1f:cd:74:88:fa:12:4d: c2:c7:0f:f2:8d:f5:f3:19:43:4b:2a:2b:fc:ef:df:e3:a0:b9: 3e:13:8f:61:e0:c2:7a:26:af:08:c3:47:2b:05:70:e5:46:a1: 85:55:f8:9e:ef:eb:52:bc:44:3a:d4:36:18:d8:72:0c:2f:b9: a3:85:a8:48:48:81:83:25:73:97:58:5c:eb:6e:a0:a3:5f:70: 60:c6:4d:6c:0c:be:2e:45:66:3c:c6:02:40:43:20:39:2a:8b: bd:47:3b:ec:a7:dc:bf:8c:6a:28:74:7b:e8:d3:0b:a9:b3:3d: 65:c4:61:73:c2:28:a5:76:50:7b:60:a5:51:3f:34:d2:6a:4a: 56:ba:a2:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNGMzExMTAvBgNVBAUTKDVGOEU0RkQ0QTZERDYzNUU0Mzc4MkU1QTA1NTYyMkNB QjI2NTRBMzcwHhcNMjYwMjI4MjAxODUxWhcNMjYwMzA3MjAxODUxWjAYMRYwFAYD VQQDDA02OWEzNGRhYy00N2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzc6C4SdEO4oBdE9a+3+qCrzcZq5SkcYKvMUPTVH2kcijV55NHkmchJHKCc0k APwvAQDPmorrkC/MShbCTcIwr7YhaGkPgSNyKz4tS8+3fISkm92XsK6+mkGTbPk0 glK7EUxnRw01W2kLCBr/jB9z1s6IkP7tFg25ZlLJSegQqjl4accGxmJ0TBZefGBN DgIkdWNDXVvlTmY+tOZoh9gVuOTzTyOhxbCgd/O+aCazU0kYYFWAOcGKlWL/CJV+ +5dsjDd7ieF7nCLwwDwGJv0TEhyM6lR57Q+ssRrZcC4iM5fSzoPI11A5pFlA8ARx WWEp2uUET84u4KuiaH0WMZrESwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPSP13As 8m2FTOhrJD3vNYy0UvS7MB8GA1UdIwQYMBaAFF+OT9Sm3WNeQ3guWgVWIsqyZUo3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0YzMS9BRjdGRUQ2MkFB NEUxMUVBOUQ4RUM3ODJDNEY5QUUwMi9YNDVQMUtiZFkxNURlQzVhQlZZaXlySmxT amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g0NVAxS2JkWTE1RGVDNWFCVllpeXJKbFNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0YzMS9BRjdGRUQ2MkFBNEUxMUVBOUQ4RUM3ODJDNEY5QUUwMi9YNDVQMUtiZFkx NURlQzVhQlZZaXlySmxTamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAExz72siP+ID3LdXzHev7PH+C5xA6QTCkSmd/bhA3aW3W5EvG+XtcELINO82B cwlsylC7rANwC7Z0hbX7lhT/ViZR/BolDyBaqTWwOHlvK1W+TlyylkDvR3rkqRN9 skPKwX1KkOS/HqIFQ6QgMiqJO7aVsQz8Ns8fzXSI+hJNwscP8o318xlDSyor/O/f 46C5PhOPYeDCeiavCMNHKwVw5UahhVX4nu/rUrxEOtQ2GNhyDC+5o4WoSEiBgyVz l1hc626go19wYMZNbAy+LkVmPMYCQEMgOSqLvUc77Kfcv4xqKHR76NMLqbM9ZcRh c8IopXZQe2ClUT800mpKVrqirg== -----END CERTIFICATE-----Generated at Mon Mar 2 04:59:58 2026 by rpki-client