$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft File: 15aZWndnWcQmQxeAAofr7u-0umo.mft (raw, json) Hash identifier: jba2d6yCYbLcRjfiSPRGifIkTjHWlJX25ro4ogISiuM= Subject key identifier: 09:23:57:9B:CD:92:BE:09:4F:C6:48:CD:D5:07:9B:81:26:9F:29:0B Authority key identifier: D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A Certificate issuer: /CN=A91C022C/serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft Manifest number: D6 Signing time: Sun 01 Mar 2026 07:54:00 +0000 Manifest this update: Sun 01 Mar 2026 07:53:59 +0000 Manifest next update: Sun 08 Mar 2026 07:53:59 +0000 Files and hashes: 1: 15aZWndnWcQmQxeAAofr7u-0umo.crl (hash: fsGk6NHB8xoAUG+BQ8aIMQw/qrOPngrilcaGhPWARe4=) 2: 90405CE2D5DD11EF99075D78C4F9AE02.roa (hash: hTL1z9/ySOlu0XaviOinYnMnBTyzcwAp4EbODVpERNU=) 3: B6CFF1B2D5F911EFB9B1055CC4F9AE02.roa (hash: ZxCbb7cdq/LewtopQIPSnB7gN2Ydt1y4TyGzN7hgTr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C022C, serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A Validity Not Before: Mar 1 07:53:59 2026 GMT Not After : Mar 8 07:53:59 2026 GMT Subject: CN=69a3f097-32e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ad:cf:cc:8e:e9:1d:f4:41:35:68:12:cd:c2: 67:c3:cb:42:96:62:bf:ad:e5:91:a6:83:8a:95:91: de:e3:96:9c:df:92:47:64:11:3f:e0:78:25:31:0f: c2:e6:6f:44:9d:b9:89:c6:f9:0d:a6:97:b2:61:a4: 07:9c:98:e7:a3:81:f9:a3:6b:a6:eb:4a:f5:12:c8: a0:3d:87:bf:b1:86:16:03:2a:a3:b5:b2:0a:b7:93: 1c:0d:04:67:b4:ac:53:04:dd:80:83:f5:1f:c0:21: 29:7a:73:e4:ea:d5:7a:9b:53:7a:06:e7:6b:83:da: 77:e5:34:b6:9d:99:1f:8e:15:5d:c3:95:11:4a:d4: cc:a7:7f:8a:cc:8b:90:29:07:f4:e1:55:7b:aa:a7: 34:56:66:6e:21:48:42:88:c8:cc:07:48:a6:1b:95: f9:e4:e6:aa:c8:01:9c:3a:23:f8:2d:63:b4:e4:e7: b6:fc:71:2b:fd:8b:45:99:27:b4:16:f6:60:64:f7: 64:d3:8e:7d:3e:16:c7:83:ee:f6:41:f1:ad:4c:e0: a7:b0:c0:45:87:cf:bb:ff:5a:6d:53:17:d7:37:8a: 6e:7b:9d:51:d6:38:7d:f2:77:ac:75:e0:ed:20:41: b8:99:64:87:eb:ec:6a:81:89:68:99:70:14:35:97: 9f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:23:57:9B:CD:92:BE:09:4F:C6:48:CD:D5:07:9B:81:26:9F:29:0B X509v3 Authority Key Identifier: keyid:D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:6e:ff:63:ee:7a:5c:1c:92:c6:a1:89:01:21:00:48:93:da: 83:fa:0c:17:ef:2e:9c:71:d7:fd:5d:0b:88:25:20:44:5d:26: 38:41:36:05:f7:11:da:5c:76:ce:a1:31:bf:d2:6b:8a:6e:77: 28:b2:bb:8d:b6:62:30:4d:78:bf:5c:0b:2e:28:f0:26:d1:cb: 8d:1f:aa:23:c1:0e:2f:44:73:43:8a:07:85:c4:b4:70:96:78: 56:e7:c3:1d:f4:6e:85:8d:44:d4:0f:f1:7d:54:2f:d7:00:62: 9c:26:90:af:2d:aa:9d:f7:7a:4d:bf:f2:3f:5b:91:8c:a2:8e: ac:ff:01:b8:b3:dd:a1:2c:58:cc:a9:ff:ce:ad:df:55:c7:2f: c0:5e:e6:fd:c5:85:6f:ca:93:ea:fc:f5:63:14:d7:13:80:7d: e7:17:12:6d:33:06:68:41:c3:13:ef:3b:48:e8:b7:ee:2c:a0: 79:d0:74:2d:6c:74:41:72:3c:2f:62:35:f5:0d:98:91:55:4e: bc:40:11:6b:28:0d:89:87:23:20:43:6f:d3:22:ce:1c:f7:e8: 15:45:6d:96:aa:b8:dd:30:4b:a8:1e:3a:00:14:ec:80:fa:f9: 68:ef:77:c3:10:98:36:fb:3e:d9:9c:7e:ab:09:11:65:de:f6: 77:bf:c9:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzAyMkMxMTAvBgNVBAUTKEQ3OTY5OTVBNzc2NzU5QzQyNjQzMTc4MDAyODdFQkVF RUZCNEJBNkEwHhcNMjYwMzAxMDc1MzU5WhcNMjYwMzA4MDc1MzU5WjAYMRYwFAYD VQQDEw02OWEzZjA5Ny0zMmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApK3PzI7pHfRBNWgSzcJnw8tClmK/reWRpoOKlZHe45ac35JHZBE/4HglMQ/C 5m9EnbmJxvkNppeyYaQHnJjno4H5o2um60r1EsigPYe/sYYWAyqjtbIKt5McDQRn tKxTBN2Ag/UfwCEpenPk6tV6m1N6Budrg9p35TS2nZkfjhVdw5URStTMp3+KzIuQ KQf04VV7qqc0VmZuIUhCiMjMB0imG5X55OaqyAGcOiP4LWO05Oe2/HEr/YtFmSe0 FvZgZPdk0459PhbHg+72QfGtTOCnsMBFh8+7/1ptUxfXN4pue51R1jh98nesdeDt IEG4mWSH6+xqgYlomXAUNZefKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAkjV5vN kr4JT8ZIzdUHm4EmnykLMB8GA1UdIwQYMBaAFNeWmVp3Z1nEJkMXgAKH6+7vtLpq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDIyQy9CQTBGMkRGMkQ0 QjkxMUVGOUZBOEUyNEZDNEY5QUUwMi8xNWFaV25kbldjUW1ReGVBQW9mcjd1LTB1 bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1YVpXbmRuV2NRbVF4ZUFBb2ZyN3UtMHVtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDIyQy9CQTBGMkRGMkQ0QjkxMUVGOUZBOEUyNEZDNEY5QUUwMi8xNWFaV25kbldj UW1ReGVBQW9mcjd1LTB1bW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgm7/Y+56XBySxqGJASEASJPag/oMF+8unHHX/V0LiCUgRF0mOEE2BfcR2lx2 zqExv9Jrim53KLK7jbZiME14v1wLLijwJtHLjR+qI8EOL0RzQ4oHhcS0cJZ4VufD HfRuhY1E1A/xfVQv1wBinCaQry2qnfd6Tb/yP1uRjKKOrP8BuLPdoSxYzKn/zq3f VccvwF7m/cWFb8qT6vz1YxTXE4B95xcSbTMGaEHDE+87SOi37iygedB0LWx0QXI8 L2I19Q2YkVVOvEARaygNiYcjIENv0yLOHPfoFUVtlqq43TBLqB46ABTsgPr5aO93 wxCYNvs+2Zx+qwkRZd72d7/JTQ== -----END CERTIFICATE-----Generated at Sun Mar 1 20:37:37 2026 by rpki-client