$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft File: 5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json) Hash identifier: q6QTGI5jsmycPk/RnQzDojvtUW/0c+J2XTfabRg97cw= Subject key identifier: BC:87:0A:AC:43:50:C8:E2:58:86:60:1C:DA:59:7B:8C:2E:26:E2:31 Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft Manifest number: 01CF Signing time: Sun 01 Mar 2026 04:24:53 +0000 Manifest this update: Sun 01 Mar 2026 04:24:53 +0000 Manifest next update: Sun 08 Mar 2026 04:24:53 +0000 Files and hashes: 1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: jmqEVmci3kU7NV7ZwMULaD619bNq7WK5OLxCIRfPJpA=) 2: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: zJ+T1/Hkopnt885YDIhvqhmTsj2QoX1P6tQiloS39aw=) 3: 0099AE56536911EE8594503BC4F9AE02.roa (hash: ZpCx0RDhO/3a016yxSmp4qzmXeudCkZizqsM58t9iRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Validity Not Before: Mar 1 04:24:53 2026 GMT Not After : Mar 8 04:24:53 2026 GMT Subject: CN=69a3bf95-4af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:03:b6:d2:64:68:f8:63:0b:c9:72:90:59:48: e1:a0:42:95:6f:54:c8:91:b7:d1:6d:01:87:e2:53: b0:fe:d9:f2:27:aa:05:0b:7e:04:36:54:53:a9:41: ae:4f:4c:93:d5:3b:b5:e9:c7:10:c1:79:f2:82:bb: 50:fd:d2:17:37:19:44:58:ba:c9:05:9e:65:0e:99: ea:6a:4d:12:71:15:74:74:2f:36:bd:07:30:56:37: 9b:25:47:c4:f3:d9:9e:92:49:6b:07:41:2c:cc:15: ee:cc:db:74:e5:6d:83:40:f8:ff:98:c9:87:bc:c4: 6f:c2:75:83:c0:35:a7:1a:e4:44:4f:60:c7:3c:f6: 23:2c:c8:48:0f:9d:7c:e2:b8:37:fe:11:34:f9:ff: d1:42:12:40:65:3f:28:ca:37:c1:39:06:e9:8a:49: c3:b8:3c:53:32:6b:54:f6:33:48:c9:46:95:ec:29: 34:9e:47:55:37:a0:02:5b:f4:82:37:c5:21:0c:c2: a9:aa:26:3b:50:62:83:41:9e:c0:9a:23:40:be:db: 33:c6:dd:d2:a3:eb:5c:82:f9:5a:fc:a5:8d:4c:2a: 11:16:d9:67:dc:dc:4e:1f:c0:b7:f6:a9:ff:d8:e3: 34:31:84:8b:39:af:03:80:8f:e9:ea:54:60:8a:db: 09:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:87:0A:AC:43:50:C8:E2:58:86:60:1C:DA:59:7B:8C:2E:26:E2:31 X509v3 Authority Key Identifier: keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:7f:8b:9f:3b:16:aa:22:0b:69:38:a9:2c:cf:7f:53:4d:51: 5a:6b:36:58:d4:32:69:bf:22:71:2c:15:b0:8c:98:39:50:92: 08:2b:db:a9:f8:f9:34:03:fc:7e:07:51:5a:c2:ab:6a:a2:7e: d0:67:fd:cd:02:85:a5:af:6d:04:5e:aa:eb:56:30:51:b8:bb: 55:49:bf:5c:f7:21:24:4f:39:54:56:64:2b:a2:51:dc:9c:b5: ee:6a:d0:3d:d3:10:d7:f8:e7:ff:18:40:fd:1b:d4:db:d1:05: 80:21:1e:38:cd:5d:a2:9c:88:08:02:b6:b5:26:9d:ea:a3:9e: ff:c4:4f:ee:57:a1:e1:9e:60:93:aa:d5:0b:e3:dc:f0:75:14: d5:76:9e:ad:e8:09:e1:d3:b6:7d:70:21:5d:be:69:67:3e:28: de:79:41:45:71:55:88:18:ca:e7:33:89:18:64:41:b6:5f:f1: b2:ea:a7:b0:fc:5f:86:47:e6:e0:eb:f5:f6:a6:72:b3:0f:bb: 18:43:cb:60:d9:b4:61:03:ce:5f:9f:3e:af:2c:7e:cd:3b:b9: 86:f1:40:6b:d8:7a:5c:d5:ac:0b:7d:f4:42:1c:23:03:41:3e: 25:07:2f:e7:2b:78:fb:7a:e6:0c:57:7b:89:02:cf:df:70:37: 14:91:5b:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC MjdEODQ3QTQwHhcNMjYwMzAxMDQyNDUzWhcNMjYwMzA4MDQyNDUzWjAYMRYwFAYD VQQDDA02OWEzYmY5NS00YWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygO20mRo+GMLyXKQWUjhoEKVb1TIkbfRbQGH4lOw/tnyJ6oFC34ENlRTqUGu T0yT1Tu16ccQwXnygrtQ/dIXNxlEWLrJBZ5lDpnqak0ScRV0dC82vQcwVjebJUfE 89mekklrB0EszBXuzNt05W2DQPj/mMmHvMRvwnWDwDWnGuRET2DHPPYjLMhID518 4rg3/hE0+f/RQhJAZT8oyjfBOQbpiknDuDxTMmtU9jNIyUaV7Ck0nkdVN6ACW/SC N8UhDMKpqiY7UGKDQZ7AmiNAvtszxt3So+tcgvla/KWNTCoRFtln3NxOH8C39qn/ 2OM0MYSLOa8DgI/p6lRgitsJvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLyHCqxD UMjiWIZgHNpZe4wuJuIxMB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wNUVFQ0Q4NjUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJz dG9jdlpUcVZoRC15ZllSNlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ3+LnzsWqiILaTipLM9/U01RWms2WNQyab8icSwVsIyYOVCSCCvbqfj5NAP8 fgdRWsKraqJ+0Gf9zQKFpa9tBF6q61YwUbi7VUm/XPchJE85VFZkK6JR3Jy17mrQ PdMQ1/jn/xhA/RvU29EFgCEeOM1dopyICAK2tSad6qOe/8RP7leh4Z5gk6rVC+Pc 8HUU1XaeregJ4dO2fXAhXb5pZz4o3nlBRXFViBjK5zOJGGRBtl/xsuqnsPxfhkfm 4Ov19qZysw+7GEPLYNm0YQPOX58+ryx+zTu5hvFAa9h6XNWsC330QhwjA0E+JQcv 5yt4+3rmDFd7iQLP33A3FJFbvQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:42:56 2026 by rpki-client