$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft File: F_M9uCahQtM3xeuZhL4txPm8ZCk.mft (raw, json) Hash identifier: pfVT2EK7b04govOVA78R2Qanp3WvnlikIw31DjzY5J4= Subject key identifier: C6:7D:EB:93:CB:79:83:C7:04:9F:50:27:7C:F4:B5:A9:CE:AC:32:BA Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 Certificate issuer: /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Certificate serial: 3536 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft Manifest number: 3521 Signing time: Sat 28 Feb 2026 15:17:11 +0000 Manifest this update: Sat 28 Feb 2026 15:17:11 +0000 Manifest next update: Sat 07 Mar 2026 15:17:11 +0000 Files and hashes: 1: F_M9uCahQtM3xeuZhL4txPm8ZCk.crl (hash: DVlG/IiL7TQ8D3w/gwEe0R3sAV+607jXPjkyOHvvLqk=) 2: 3A42DAB8DE6311E8BFB1BF16C4F9AE02.roa (hash: diz+Mu2U4uCFECF4R8aohazh+vKfN3ig2+OPcHe2dC8=) 3: 91268A4A06F311F09EDDC851C4F9AE02.roa (hash: 7uOB6N38ardleWnTuq1RJZwPlZnlnhINCIW0PLcMR9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 15:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13622 (0x3536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFA29, serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Validity Not Before: Feb 28 15:17:11 2026 GMT Not After : Mar 7 15:17:11 2026 GMT Subject: CN=69a306f7-9fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5f:fb:cf:f3:9d:23:47:d2:a9:30:64:c0:da: ff:5b:29:1c:6d:7e:16:6d:9a:30:2d:54:25:49:c0: 42:bd:b5:d0:e2:da:91:e6:b0:78:4c:1a:a2:0a:e9: 1c:3d:3a:00:1e:4a:0f:f6:67:a2:ba:85:bb:c4:64: d4:34:f0:6a:83:dc:98:c4:e1:b0:b6:b7:46:e2:82: e2:67:56:aa:67:ca:84:9e:3e:f8:fd:d2:bc:e0:01: 70:c6:4b:25:63:70:08:c3:36:64:62:8e:e3:78:ec: 7a:25:cb:8f:cc:9c:61:e2:f0:1d:39:28:2b:7a:0a: 00:26:ef:1d:3f:98:3c:16:9b:06:5b:b9:24:4e:08: bf:fe:8d:c2:d5:84:5a:52:66:71:48:e3:2c:30:14: bf:ab:f0:47:60:cf:20:ff:16:07:af:db:25:9d:2e: 21:3d:fc:0a:68:59:ef:d3:a1:0d:b3:de:03:c7:e0: e2:9e:81:5e:39:35:92:d7:bb:5c:4a:18:84:f5:39: ef:e4:4e:2c:eb:d7:fe:58:d5:dc:a0:2e:d0:40:db: 96:29:47:49:33:b5:18:c6:28:ab:43:a0:c9:49:c0: 1c:20:a7:4e:73:d5:99:1f:54:2e:b2:2f:b8:9e:a7: 27:e9:e8:37:28:f2:3b:33:c2:07:c9:0b:8c:ab:27: ee:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7D:EB:93:CB:79:83:C7:04:9F:50:27:7C:F4:B5:A9:CE:AC:32:BA X509v3 Authority Key Identifier: keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a8:ac:5c:ad:b8:a9:e7:bd:a1:0f:88:45:5d:88:bb:59:aa: ca:88:94:9e:85:25:a7:8e:9d:66:43:52:04:86:7a:4a:3d:62: b0:30:d6:8d:b2:a2:6f:f5:ca:f0:35:29:55:39:89:59:cd:96: c8:1c:92:aa:43:d0:de:e8:23:71:f5:e4:17:ab:1a:5b:50:c2: 79:55:6a:9d:45:2a:92:1d:b1:35:66:93:12:d9:2d:80:f8:32: 7e:3c:bc:d5:4f:b3:20:d7:83:d7:06:fd:db:e2:c1:89:8f:eb: 2c:0b:e7:2b:7d:15:c9:24:f4:64:c7:6b:50:ff:80:63:1a:96: dd:57:31:fd:c7:42:d0:01:4b:d5:42:90:7a:d9:b4:2f:18:da: a3:8d:78:78:10:01:ce:2a:6d:97:4b:ff:4b:36:db:14:57:fa: 71:2a:bc:ee:9a:bb:17:f4:a2:09:43:28:81:cc:f2:dc:55:dd: b0:80:9a:fc:2a:01:57:68:92:6a:ad:9f:e6:23:0e:2a:f5:d0: 0d:31:df:6a:75:b8:a2:cb:20:5a:cd:b9:20:da:cb:9d:3e:25: 8c:fc:ad:20:72:3c:ca:9a:e5:fe:0d:86:3f:28:10:34:fd:56: b1:df:8d:21:40:15:cd:ed:01:92:eb:11:3d:09:2e:0f:5c:bf: eb:8a:8a:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZBMjkxMTAvBgNVBAUTKDE3RjMzREI4MjZBMTQyRDMzN0M1RUI5OTg0QkUyREM0 RjlCQzY0MjkwHhcNMjYwMjI4MTUxNzExWhcNMjYwMzA3MTUxNzExWjAYMRYwFAYD VQQDDA02OWEzMDZmNy05ZmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1/7z/OdI0fSqTBkwNr/WykcbX4WbZowLVQlScBCvbXQ4tqR5rB4TBqiCukc PToAHkoP9meiuoW7xGTUNPBqg9yYxOGwtrdG4oLiZ1aqZ8qEnj74/dK84AFwxksl Y3AIwzZkYo7jeOx6JcuPzJxh4vAdOSgregoAJu8dP5g8FpsGW7kkTgi//o3C1YRa UmZxSOMsMBS/q/BHYM8g/xYHr9slnS4hPfwKaFnv06ENs94Dx+DinoFeOTWS17tc ShiE9Tnv5E4s69f+WNXcoC7QQNuWKUdJM7UYxiirQ6DJScAcIKdOc9WZH1Qusi+4 nqcn6eg3KPI7M8IHyQuMqyfuRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMZ965PL eYPHBJ9QJ3z0tanOrDK6MB8GA1UdIwQYMBaAFBfzPbgmoULTN8XrmYS+LcT5vGQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkEyOS8wRjFBNEU2NDFE QUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0TTN4ZXVaaEw0dHhQbTha Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfTTl1Q2FoUXRNM3hldVpoTDR0eFBtOFpDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkEyOS8wRjFBNEU2NDFEQUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0 TTN4ZXVaaEw0dHhQbThaQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS6isXK24qee9oQ+IRV2Iu1mqyoiUnoUlp46dZkNSBIZ6Sj1isDDWjbKib/XK 8DUpVTmJWc2WyBySqkPQ3ugjcfXkF6saW1DCeVVqnUUqkh2xNWaTEtktgPgyfjy8 1U+zINeD1wb92+LBiY/rLAvnK30VyST0ZMdrUP+AYxqW3Vcx/cdC0AFL1UKQetm0 Lxjao414eBABziptl0v/SzbbFFf6cSq87pq7F/SiCUMogczy3FXdsICa/CoBV2iS aq2f5iMOKvXQDTHfanW4ossgWs25INrLnT4ljPytIHI8yprl/g2GPygQNP1Wsd+N IUAVze0BkusRPQkuD1y/64qKXw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:35:22 2026 by rpki-client