$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft File: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft (raw, json) Hash identifier: v0djnGeGyas+iPtfNqxtIYlpU8m3+Ft3VgEx5zopkFA= Subject key identifier: 94:FB:60:0E:69:36:AF:C0:DC:7C:FF:EA:6D:EB:3B:A7:6F:AA:50:E9 Authority key identifier: 3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7 Certificate issuer: /CN=A91C4A80/serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft Manifest number: CA Signing time: Sun 01 Mar 2026 08:02:24 +0000 Manifest this update: Sun 01 Mar 2026 08:02:24 +0000 Manifest next update: Sun 08 Mar 2026 08:02:24 +0000 Files and hashes: 1: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl (hash: pjCgXCbM2hQsbjiEKXtrqOhxIkrP0YwoQifsxPs0iKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4A80, serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7 Validity Not Before: Mar 1 08:02:24 2026 GMT Not After : Mar 8 08:02:24 2026 GMT Subject: CN=69a3f290-e719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bf:4b:76:2b:a5:bb:1c:ab:98:59:1e:5f:ff: 45:52:0b:b6:7f:35:61:32:ab:b4:0e:5c:b6:bb:65: 58:3d:58:35:e9:ab:f2:9f:3c:63:7d:9d:7a:e4:4d: db:50:d8:15:e4:db:17:c4:37:8f:5d:c5:64:fa:48: 90:af:c0:32:67:ac:bb:39:25:3a:a4:19:6f:54:47: 23:f7:b7:4e:e4:d3:2a:5e:c0:c1:a2:32:37:c3:30: 59:bd:6a:c5:9f:b3:fa:2b:0e:91:0d:ef:ab:1d:4a: 8d:34:38:cf:e2:e4:15:3a:04:b0:7b:5d:8b:59:54: 19:e1:2a:a1:a0:af:21:14:c4:c7:4a:6d:d0:41:6f: 3e:2b:45:17:30:7c:25:4b:00:47:a4:b2:8f:62:a4: bc:31:e8:7f:44:cb:7a:c2:ff:bb:e7:0f:1b:2f:46: 39:09:de:89:b9:ad:6c:7a:30:70:c7:39:c2:3f:46: 3b:dd:93:51:50:f0:0e:da:57:3f:8e:5f:61:71:bc: 03:9b:a2:9a:41:34:22:a8:6c:d5:7c:40:2a:14:cb: de:42:92:a9:b0:b5:30:ee:1b:e1:7a:d9:dc:c1:93: 5d:b9:56:f8:73:30:90:58:e1:ee:af:d1:ea:9f:36: 96:98:20:04:c3:ca:13:c4:f7:9c:e8:03:00:f3:38: 09:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FB:60:0E:69:36:AF:C0:DC:7C:FF:EA:6D:EB:3B:A7:6F:AA:50:E9 X509v3 Authority Key Identifier: keyid:3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:38:92:40:5e:af:4d:f4:64:3d:88:96:42:d3:da:80:91:bf: 2d:30:ed:6c:87:81:42:86:62:de:56:1d:9c:45:ad:b1:ae:fe: 73:d9:b8:ee:60:23:65:31:40:39:1a:9e:29:04:6a:c6:67:83: 6d:ac:b3:2e:6b:95:d3:b4:b8:05:02:db:9b:d0:56:12:4b:82: f7:8d:83:2e:d3:f5:a5:8a:c3:bf:78:63:2d:9a:f3:39:00:1a: 4d:ba:6e:d9:f7:b0:2d:b8:0d:2d:0a:ce:55:f1:b3:fe:e3:7f: b6:2b:14:0e:f2:6c:bc:f1:2f:09:32:ae:3a:d2:c2:1d:97:00: 1d:4e:59:d5:0b:58:1c:19:40:ee:0b:24:0d:fd:e5:3e:66:22: 69:88:13:fc:dd:53:f8:80:00:7a:03:65:7e:1a:33:e3:8b:62: 21:2d:da:fe:82:e9:c6:45:c1:2c:b2:87:e8:1d:38:17:4c:b8: 53:46:7b:40:22:b0:9e:f0:91:df:21:2a:c6:df:1e:1d:0f:25: 8f:ac:db:be:b6:8d:4d:e5:44:09:6f:1f:a9:30:47:df:05:96: 33:e8:1b:e5:3f:78:cd:d7:87:4d:ab:1b:4c:06:18:f7:55:f8: a6:c2:c8:a0:5c:b9:8a:0b:42:4a:87:0e:e9:27:89:89:29:09: f0:32:95:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRBODAxMTAvBgNVBAUTKDNGRDdGNTU1RkM3RDZGQzIzNTM5QTNBNjIxRUYyRDA0 OEQ0QzdDQzcwHhcNMjYwMzAxMDgwMjI0WhcNMjYwMzA4MDgwMjI0WjAYMRYwFAYD VQQDEw02OWEzZjI5MC1lNzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsr9LdiuluxyrmFkeX/9FUgu2fzVhMqu0Dly2u2VYPVg16avynzxjfZ165E3b UNgV5NsXxDePXcVk+kiQr8AyZ6y7OSU6pBlvVEcj97dO5NMqXsDBojI3wzBZvWrF n7P6Kw6RDe+rHUqNNDjP4uQVOgSwe12LWVQZ4SqhoK8hFMTHSm3QQW8+K0UXMHwl SwBHpLKPYqS8Meh/RMt6wv+75w8bL0Y5Cd6Jua1sejBwxznCP0Y73ZNRUPAO2lc/ jl9hcbwDm6KaQTQiqGzVfEAqFMveQpKpsLUw7hvhetncwZNduVb4czCQWOHur9Hq nzaWmCAEw8oTxPec6AMA8zgJLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJT7YA5p Nq/A3Hz/6m3rO6dvqlDpMB8GA1UdIwQYMBaAFD/X9VX8fW/CNTmjpiHvLQSNTHzH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEE4MC8yOUVDNzNCQUU0 RUYxMUVGQjcxNEU1NkNDNEY5QUUwMi9QOWYxVmZ4OWI4STFPYU9tSWU4dEJJMU1m TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5ZjFWZng5YjhJMU9hT21JZTh0QkkxTWZNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEE4MC8yOUVDNzNCQUU0RUYxMUVGQjcxNEU1NkNDNEY5QUUwMi9QOWYxVmZ4OWI4 STFPYU9tSWU4dEJJMU1mTWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApDiSQF6vTfRkPYiWQtPagJG/LTDtbIeBQoZi3lYdnEWtsa7+c9m47mAjZTFA ORqeKQRqxmeDbayzLmuV07S4BQLbm9BWEkuC942DLtP1pYrDv3hjLZrzOQAaTbpu 2fewLbgNLQrOVfGz/uN/tisUDvJsvPEvCTKuOtLCHZcAHU5Z1QtYHBlA7gskDf3l PmYiaYgT/N1T+IAAegNlfhoz44tiIS3a/oLpxkXBLLKH6B04F0y4U0Z7QCKwnvCR 3yEqxt8eHQ8lj6zbvraNTeVECW8fqTBH3wWWM+gb5T94zdeHTasbTAYY91X4psLI oFy5igtCSocO6SeJiSkJ8DKVsQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:39:42 2026 by rpki-client