$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json) Hash identifier: F1bdJ9uUxz/dE0T7zRMI7pv7kOU534AIetyJhEyQEyo= Subject key identifier: 07:F8:F4:33:85:88:B4:EB:3B:C0:52:33:EF:E3:88:D7:CD:9C:7B:2F Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft Manifest number: 023D Signing time: Sun 01 Mar 2026 03:17:35 +0000 Manifest this update: Sun 01 Mar 2026 03:17:35 +0000 Manifest next update: Sun 08 Mar 2026 03:17:35 +0000 Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: Q3KAJHUDQs/FiBN8bGN0ioewQ5lS2KjwQlWnnMTl9NA=) 2: B780E2A097F711EF89B09770C4F9AE02.roa (hash: DB23UT2fsXrp5BzUdZvw+7TC7FTSDlXyxizqnQeaxYs=) 3: B987C6AAB7A311F095EF5E67C4F9AE02.roa (hash: o9bfnwoCTuetn0SRRGYX4ZpmTSdQG0cya1pWAww3M3c=) 4: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: KSItAPOjkLG7UWPYALBIyJeHmExySZ4KDwSB7GWXFrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Validity Not Before: Mar 1 03:17:35 2026 GMT Not After : Mar 8 03:17:35 2026 GMT Subject: CN=69a3afcf-839a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:d7:0f:dc:65:c3:c5:d2:06:26:bf:d2:18: c3:4e:81:6b:c5:f2:68:77:e8:01:d1:54:b7:61:af: dc:93:33:e4:12:c6:ae:c8:96:b7:5e:f3:2e:f4:ae: 04:58:ab:3e:21:5e:ae:71:91:3f:1b:1b:6d:31:45: b1:d8:89:11:e0:2e:94:36:bf:a5:3f:c8:ab:9a:9c: 96:26:96:f2:af:75:cf:6b:4c:4a:fa:ec:b0:8d:73: 53:d5:65:71:18:17:e7:e2:fe:56:82:32:40:6c:13: 4a:40:bc:80:57:d3:3c:b2:a6:ad:68:52:63:f3:8c: d1:f5:17:6b:44:82:b2:df:60:a0:1c:d2:d4:bc:e9: 15:c8:4a:e4:58:20:0d:c7:13:79:9a:01:f3:1d:0e: 75:f5:4b:e0:2b:31:ea:d9:30:5a:60:52:38:a2:03: 26:41:df:2e:62:68:bb:41:99:fc:9b:b3:72:97:36: b0:aa:60:93:5b:33:dd:f4:17:d2:58:56:f4:fb:01: 99:c5:a8:c5:fb:7a:4b:6a:c5:53:ff:82:67:c2:fb: 0e:a6:14:02:28:cb:41:7d:f4:74:0a:de:f1:ab:20: 5d:40:af:2e:07:fd:1a:6b:c5:57:16:9f:29:b1:8e: 53:e5:95:70:df:40:f6:ca:30:71:27:fd:08:4f:40: 05:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F8:F4:33:85:88:B4:EB:3B:C0:52:33:EF:E3:88:D7:CD:9C:7B:2F X509v3 Authority Key Identifier: keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f1:6f:55:eb:33:e2:a1:83:5d:7b:c4:4e:5b:32:60:d7:04: 34:0b:98:d4:55:34:1a:cf:f5:22:91:d0:1a:26:c7:8d:0e:e0: ce:01:75:dd:55:99:80:cd:fb:60:bf:d6:e6:6a:9e:01:4e:2a: e4:f1:11:d4:9c:92:d1:e6:3d:5a:09:3b:7f:a1:07:e8:cb:9b: d9:cd:55:9e:48:0e:61:d2:3d:35:e2:b8:29:b1:97:60:f1:8a: f2:35:77:3e:0d:20:d8:0e:25:99:b0:aa:79:2c:9f:a1:20:e9: 29:4a:48:fe:76:de:bc:da:7d:8f:d7:25:66:6c:e5:d7:22:d5: a3:6a:5e:0d:75:ab:7e:72:1e:dc:85:de:c4:d4:b3:ad:69:31: 02:19:78:a8:aa:88:cd:95:f1:c8:5f:02:de:16:2f:90:94:81: c9:8a:3f:50:4c:dd:97:12:75:a0:97:1f:3e:2a:ba:03:cb:91: 92:c3:44:cc:a8:e9:5a:1f:6e:61:0b:97:a1:3d:42:0d:7d:b5: ef:ac:2f:e6:5d:22:7b:4f:9a:32:d9:1a:2d:5c:59:05:b0:39: 53:d1:98:a0:b7:65:dc:c1:61:e9:87:4d:51:f1:1e:7e:aa:c4: 5c:25:55:f3:cc:32:d8:65:c8:a2:cb:9c:bb:aa:d8:f6:98:d7: cd:0a:13:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz NTQ5MjM3REMwHhcNMjYwMzAxMDMxNzM1WhcNMjYwMzA4MDMxNzM1WjAYMRYwFAYD VQQDDA02OWEzYWZjZi04MzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmqHXD9xlw8XSBia/0hjDToFrxfJod+gB0VS3Ya/ckzPkEsauyJa3XvMu9K4E WKs+IV6ucZE/GxttMUWx2IkR4C6UNr+lP8irmpyWJpbyr3XPa0xK+uywjXNT1WVx GBfn4v5WgjJAbBNKQLyAV9M8sqataFJj84zR9RdrRIKy32CgHNLUvOkVyErkWCAN xxN5mgHzHQ519UvgKzHq2TBaYFI4ogMmQd8uYmi7QZn8m7NylzawqmCTWzPd9BfS WFb0+wGZxajF+3pLasVT/4JnwvsOphQCKMtBffR0Ct7xqyBdQK8uB/0aa8VXFp8p sY5T5ZVw30D2yjBxJ/0IT0AF2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAf49DOF iLTrO8BSM+/jiNfNnHsvMB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjRBMS8wRjU4N0E4OEIxQ0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUt T0ZWcWM4S0J1UTQxU1NOOXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn/FvVesz4qGDXXvETlsyYNcENAuY1FU0Gs/1IpHQGibHjQ7gzgF13VWZgM37 YL/W5mqeAU4q5PER1JyS0eY9Wgk7f6EH6Mub2c1VnkgOYdI9NeK4KbGXYPGK8jV3 Pg0g2A4lmbCqeSyfoSDpKUpI/nbevNp9j9clZmzl1yLVo2peDXWrfnIe3IXexNSz rWkxAhl4qKqIzZXxyF8C3hYvkJSByYo/UEzdlxJ1oJcfPiq6A8uRksNEzKjpWh9u YQuXoT1CDX2176wv5l0ie0+aMtkaLVxZBbA5U9GYoLdl3MFh6YdNUfEefqrEXCVV 88wy2GXIosucu6rY9pjXzQoTQw== -----END CERTIFICATE-----Generated at Mon Mar 2 00:11:29 2026 by rpki-client