$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft File: A7x0msFoLEtG2iWat-tmKqIlsO4.mft (raw, json) Hash identifier: 42HQsN9M2Rbngil7KykEXJlyAglwHUU9bNJGAbG4jvE= Subject key identifier: 37:FB:D1:85:21:4D:11:8B:37:0C:F2:47:25:BA:8E:F0:56:73:31:D7 Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE Certificate issuer: /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Certificate serial: 0341 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft Manifest number: 032A Signing time: Sun 01 Mar 2026 02:00:05 +0000 Manifest this update: Sun 01 Mar 2026 02:00:04 +0000 Manifest next update: Sun 08 Mar 2026 02:00:04 +0000 Files and hashes: 1: A7x0msFoLEtG2iWat-tmKqIlsO4.crl (hash: KWN07s9hRWqG7iiofMlwQPaAc+M/eyo9/UEzzMb9pi0=) 2: 7D4462BAC93311F0B048172CC4F9AE02.roa (hash: 3CgCTp3bzKYZXfeq4ZljTed0rolq+eWipeXPCnowOi0=) 3: 810DCA288C6511EF813EB90EC4F9AE02.roa (hash: 9vbaTvEONgGnCCzzlIBphmxj6A21NbejzXiij71gCyE=) 4: 0A9DA996655311EF8D61E41CC4F9AE02.roa (hash: YEePosDji6p318PSaVsMzMykST1cQDsNsrEk48Tp9ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 02:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 833 (0x341) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Validity Not Before: Mar 1 02:00:04 2026 GMT Not After : Mar 8 02:00:04 2026 GMT Subject: CN=69a39da5-dfc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:67:5e:ec:5b:e9:26:f0:17:1c:18:e5:fc: 6b:89:7a:e8:48:ae:86:94:de:a4:61:f5:6d:8d:88: 52:a3:65:2a:69:1a:81:e1:59:2d:e3:52:6e:fe:c7: cf:81:8b:af:c3:7e:5c:75:66:60:ac:1c:1b:86:b2: e0:f3:3f:90:81:5d:ce:4b:3a:aa:9d:ce:19:fe:eb: 80:7f:65:20:87:1f:4c:e6:56:e6:65:21:34:3a:e5: 19:f8:7f:db:61:a7:b7:1e:7a:43:28:c4:93:9f:b6: fc:09:9c:54:b4:2a:20:6d:04:34:fa:05:a7:80:68: 05:a0:93:33:e1:94:bc:31:f1:17:06:d5:0e:b6:7a: c7:a2:7d:54:c9:02:56:f2:81:e5:c5:21:6c:43:6a: 35:82:80:b7:88:a8:e2:8a:34:3d:88:8d:99:40:51: fb:ea:1c:5b:10:b8:97:0d:11:63:bf:3e:1a:63:af: 1b:ca:08:77:92:b3:8e:a3:9e:29:41:bf:f3:a8:b1: e4:90:2a:0e:18:ac:92:7d:a8:24:c0:26:51:50:28: d1:fe:0e:7a:65:8d:0f:59:4b:26:74:4e:97:ca:0c: e4:06:6f:ee:aa:33:b7:a4:54:3d:e9:d8:8f:9a:61: 64:d4:4d:94:a6:42:30:94:40:13:e8:e2:34:17:31: 5f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FB:D1:85:21:4D:11:8B:37:0C:F2:47:25:BA:8E:F0:56:73:31:D7 X509v3 Authority Key Identifier: keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:f1:f3:af:0a:bf:56:24:83:fc:e5:e6:17:dd:c8:81:63:ec: b7:cf:96:57:e9:85:35:cf:46:5a:9c:05:f5:84:4c:6d:64:78: 48:4b:45:d9:5b:72:d3:2b:46:cc:6c:d6:9e:86:5d:fe:ae:17: 30:2a:03:cf:bb:a3:34:3e:3e:45:93:f8:2f:29:30:de:84:74: 54:b9:a5:bd:f5:cd:a7:a1:35:67:f7:52:5b:b1:07:46:b9:f5: 7b:fa:6c:18:0a:74:13:df:b1:9e:66:34:c7:55:b1:9c:6f:23: 17:42:c4:44:11:26:8b:a1:a9:b0:b0:dc:0a:c6:f5:03:52:63: 32:e9:f3:1d:14:8b:c9:3f:95:58:25:ed:ef:3c:c5:f7:41:72: f6:36:cb:29:17:c2:bf:84:01:2c:e6:a1:9f:cc:66:94:38:9c: 25:b8:d3:27:3b:78:1c:2d:ac:af:f8:a8:b3:eb:85:9c:df:aa: 44:b6:bc:d9:c5:42:b5:d0:e2:d1:00:07:d1:88:a9:28:65:7b: 8d:ee:bc:94:d3:d6:b1:01:02:1a:1f:6e:26:71:e1:48:f6:80: 75:23:2f:a9:bd:8a:28:4d:97:a0:72:85:ad:26:0d:a9:db:b6: dd:22:59:16:d6:63:40:95:25:4f:d1:0e:f5:64:97:38:5e:e9: 23:c4:df:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjIxMTAvBgNVBAUTKDAzQkM3NDlBQzE2ODJDNEI0NkRBMjU5QUI3RUI2NjJB QTIyNUIwRUUwHhcNMjYwMzAxMDIwMDA0WhcNMjYwMzA4MDIwMDA0WjAYMRYwFAYD VQQDDA02OWEzOWRhNS1kZmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrdnXuxb6SbwFxwY5fxriXroSK6GlN6kYfVtjYhSo2UqaRqB4Vkt41Ju/sfP gYuvw35cdWZgrBwbhrLg8z+QgV3OSzqqnc4Z/uuAf2Ughx9M5lbmZSE0OuUZ+H/b Yae3HnpDKMSTn7b8CZxUtCogbQQ0+gWngGgFoJMz4ZS8MfEXBtUOtnrHon1UyQJW 8oHlxSFsQ2o1goC3iKjiijQ9iI2ZQFH76hxbELiXDRFjvz4aY68bygh3krOOo54p Qb/zqLHkkCoOGKySfagkwCZRUCjR/g56ZY0PWUsmdE6XygzkBm/uqjO3pFQ96diP mmFk1E2UpkIwlEAT6OI0FzFffQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDf70YUh TRGLNwzyRyW6jvBWczHXMB8GA1UdIwQYMBaAFAO8dJrBaCxLRtolmrfrZiqiJbDu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCMi81RDRDQzJGNjA4 QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xFdEcyaVdhdC10bUtxSWxz TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3eDBtc0ZvTEV0RzJpV2F0LXRtS3FJbHNPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJCMi81RDRDQzJGNjA4QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xF dEcyaVdhdC10bUtxSWxzTzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqvHzrwq/ViSD/OXmF93IgWPst8+WV+mFNc9GWpwF9YRMbWR4SEtF2Vty0ytG zGzWnoZd/q4XMCoDz7ujND4+RZP4Lykw3oR0VLmlvfXNp6E1Z/dSW7EHRrn1e/ps GAp0E9+xnmY0x1WxnG8jF0LERBEmi6GpsLDcCsb1A1JjMunzHRSLyT+VWCXt7zzF 90Fy9jbLKRfCv4QBLOahn8xmlDicJbjTJzt4HC2sr/ios+uFnN+qRLa82cVCtdDi 0QAH0YipKGV7je68lNPWsQECGh9uJnHhSPaAdSMvqb2KKE2XoHKFrSYNqdu23SJZ FtZjQJUlT9EO9WSXOF7pI8TfoA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:31:01 2026 by rpki-client