$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.mft File: q34sraVZrlbMJaH2mPiFCTmIifk.mft (raw, json) Hash identifier: Qzh8rizcowA7EC/hgdn7Kub4K/mCD31uAsQIRwONFas= Subject key identifier: 58:12:B2:8F:C9:10:87:A4:B1:BF:5D:A7:DE:DD:28:85:D6:5F:41:C0 Authority key identifier: AB:7E:2C:AD:A5:59:AE:56:CC:25:A1:F6:98:F8:85:09:39:88:89:F9 Certificate issuer: /CN=A91C3DEA/serialNumber=AB7E2CADA559AE56CC25A1F698F88509398889F9 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q34sraVZrlbMJaH2mPiFCTmIifk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.mft Manifest number: 16 Signing time: Sun 01 Mar 2026 10:30:45 +0000 Manifest this update: Sun 01 Mar 2026 10:30:45 +0000 Manifest next update: Sun 08 Mar 2026 10:30:45 +0000 Files and hashes: 1: q34sraVZrlbMJaH2mPiFCTmIifk.crl (hash: EnWM4N4z6uXhqJtQ5ZlP5VpJp44xjge4MkuBrbhGti4=) 2: 18FB6A08FC9E11F09F0AC8105E6F56BC.roa (hash: +t1U6IIjEcIREP8ILzimtngggq+V6zIVth7nVFeYBis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.crl rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q34sraVZrlbMJaH2mPiFCTmIifk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3DEA, serialNumber=AB7E2CADA559AE56CC25A1F698F88509398889F9 Validity Not Before: Mar 1 10:30:45 2026 GMT Not After : Mar 8 10:30:45 2026 GMT Subject: CN=69a41555-5808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b7:85:27:29:99:9c:80:cd:52:39:6a:63:49: 12:3f:41:89:07:29:ab:db:b6:83:05:b5:c7:f0:b5: 7a:69:7a:10:30:05:ef:de:48:54:f1:fe:4d:a9:c2: c5:2c:19:65:07:fe:17:07:e2:2d:36:d2:6e:63:1b: f2:f5:1a:da:01:89:dc:11:03:62:4b:7e:9d:3e:56: 36:d1:37:bb:c6:66:1f:08:ad:ff:f0:57:48:0b:86: 30:d9:11:0b:b1:00:c2:38:d4:2c:b1:eb:4a:54:68: af:2e:13:62:32:9a:08:51:14:0b:4c:76:18:80:3c: d2:ad:21:5f:e0:cc:66:8e:05:f9:fe:96:7d:32:e8: 1f:d9:32:6e:e9:d1:86:bf:a4:c5:68:9e:e1:b2:82: 3b:9d:ea:67:5e:96:2f:ef:08:ad:af:21:05:21:6c: ef:bd:92:c9:a9:0c:8c:c5:66:60:98:5b:6e:3f:fb: e3:44:93:94:b9:79:84:a6:a1:65:02:98:cf:65:92: 1e:2e:3c:1b:87:99:b6:fc:e5:0c:52:36:f4:28:2d: 09:75:54:ad:a1:d6:55:5e:ac:8b:1c:df:b3:56:e3: 1d:1c:5b:bc:d8:52:60:c9:7c:73:09:5f:56:51:fa: f1:91:14:45:df:1b:ad:fe:2a:1a:56:2b:31:55:fa: 48:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:12:B2:8F:C9:10:87:A4:B1:BF:5D:A7:DE:DD:28:85:D6:5F:41:C0 X509v3 Authority Key Identifier: keyid:AB:7E:2C:AD:A5:59:AE:56:CC:25:A1:F6:98:F8:85:09:39:88:89:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q34sraVZrlbMJaH2mPiFCTmIifk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:af:32:89:68:e5:ec:9e:eb:1c:c6:05:8b:a2:e9:73:97:2d: 92:7b:30:1a:48:f9:2b:ae:43:a9:cf:6a:21:ba:5d:6b:bf:9e: a0:fc:04:51:20:d2:a8:57:11:16:7f:14:fd:2a:00:92:e5:d9: e4:df:ca:08:df:e1:c0:4e:80:70:c5:b3:a1:16:1b:81:23:6a: d6:d3:71:0c:66:f4:7b:91:25:04:a5:ba:89:94:fe:08:5a:1a: 80:f6:57:eb:e4:10:5e:fc:01:da:b6:f8:9f:c6:1d:74:7e:8a: 47:29:43:a1:e6:82:9c:16:c7:2f:0c:f5:08:df:48:f9:0a:b2: c2:bd:b6:fe:9f:0b:c7:1b:f1:fa:74:87:7c:6d:c6:ef:1f:76: 37:ec:05:59:3e:a4:d1:b1:22:04:63:78:df:86:0d:e7:67:55: 31:5b:9f:c1:30:3b:6e:0c:0b:cb:e6:b9:97:e9:7c:f6:a4:e2: 83:b2:49:f4:00:99:be:b7:79:3a:ad:24:42:47:7f:ef:84:a0: 53:4e:86:89:18:2b:00:2b:f5:b3:8e:3a:c4:84:67:6d:39:bb: c7:98:f4:d7:8c:02:8d:fc:72:68:fe:33:44:f8:f6:91:ea:25: e9:b2:c2:39:d3:0c:2b:dd:90:4b:59:b3:6a:30:a5:dc:2f:79: 0a:90:12:52 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD M0RFQTExMC8GA1UEBRMoQUI3RTJDQURBNTU5QUU1NkNDMjVBMUY2OThGODg1MDkz OTg4ODlGOTAeFw0yNjAzMDExMDMwNDVaFw0yNjAzMDgxMDMwNDVaMBgxFjAUBgNV BAMTDTY5YTQxNTU1LTU4MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSt4UnKZmcgM1SOWpjSRI/QYkHKavbtoMFtcfwtXppehAwBe/eSFTx/k2pwsUs GWUH/hcH4i020m5jG/L1GtoBidwRA2JLfp0+VjbRN7vGZh8Irf/wV0gLhjDZEQux AMI41Cyx60pUaK8uE2IymghRFAtMdhiAPNKtIV/gzGaOBfn+ln0y6B/ZMm7p0Ya/ pMVonuGygjud6mdeli/vCK2vIQUhbO+9ksmpDIzFZmCYW24/++NEk5S5eYSmoWUC mM9lkh4uPBuHmbb85QxSNvQoLQl1VK2h1lVerIsc37NW4x0cW7zYUmDJfHMJX1ZR +vGRFEXfG63+KhpWKzFV+kh5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWBKyj8kQ h6Sxv12n3t0ohdZfQcAwHwYDVR0jBBgwFoAUq34sraVZrlbMJaH2mPiFCTmIifkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMzREVBL0ExRkZBODEwRkM5 RDExRjA5M0U2QjE2OTVENkY1NkJDL3EzNHNyYVZacmxiTUphSDJtUGlGQ1RtSWlm ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcTM0c3JhVlpybGJNSmFIMm1QaUZDVG1JaWZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMz REVBL0ExRkZBODEwRkM5RDExRjA5M0U2QjE2OTVENkY1NkJDL3EzNHNyYVZacmxi TUphSDJtUGlGQ1RtSWlmay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQByrzKJaOXsnuscxgWLoulzly2SezAaSPkrrkOpz2ohul1rv56g/ARRINKoVxEW fxT9KgCS5dnk38oI3+HAToBwxbOhFhuBI2rW03EMZvR7kSUEpbqJlP4IWhqA9lfr 5BBe/AHatvifxh10fopHKUOh5oKcFscvDPUI30j5CrLCvbb+nwvHG/H6dId8bcbv H3Y37AVZPqTRsSIEY3jfhg3nZ1UxW5/BMDtuDAvL5rmX6Xz2pOKDskn0AJm+t3k6 rSRCR3/vhKBTToaJGCsAK/WzjjrEhGdtObvHmPTXjAKN/HJo/jNE+PaR6iXpssI5 0wwr3ZBLWbNqMKXcL3kKkBJS -----END CERTIFICATE-----Generated at Mon Mar 2 10:45:42 2026 by rpki-client