$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft File: cleSPWdwxWeJGbB8vPqK-LnFBT8.mft (raw, json) Hash identifier: 3r4gHt2iHWurGeRo6TUQEbS5JQ2E5742Zy83EKWlj7A= Subject key identifier: 0E:A9:C0:62:96:6E:95:87:67:40:34:3D:89:E8:83:4E:AD:C0:53:1C Authority key identifier: 72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F Certificate issuer: /CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft Manifest number: 0120 Signing time: Sun 01 Mar 2026 06:51:32 +0000 Manifest this update: Sun 01 Mar 2026 06:51:32 +0000 Manifest next update: Sun 08 Mar 2026 06:51:32 +0000 Files and hashes: 1: cleSPWdwxWeJGbB8vPqK-LnFBT8.crl (hash: m9Ua0rGUHamFOpyYntTgJWISDYZQxu3KvqJiv0GHoNk=) 2: 65783A3A68FE11EFB904E587C4F9AE02.roa (hash: 8BNbqhDSj5zwZRpetUourvgFN3LcAIxoiLxOQgq3beM=) 3: E0FC9A944D3111F08F258733C4F9AE02.roa (hash: 2L9u9YUqO00U34mq8XNoVmN+3ZHp6ekSDH71ZMwwS68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:51:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7175, serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Validity Not Before: Mar 1 06:51:32 2026 GMT Not After : Mar 8 06:51:32 2026 GMT Subject: CN=69a3e1f4-863b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:18:fd:c2:63:d0:4d:4e:54:b6:12:48:40:6e: c9:c7:e8:53:51:0b:da:48:53:01:15:3b:b2:ec:2f: b6:25:4c:59:e4:1a:76:63:50:1b:f5:ca:53:d6:5e: f0:d1:d1:a1:51:43:f3:ed:99:f8:9c:03:a3:bb:fa: 8a:10:e3:d8:d8:8c:c2:73:60:60:c6:0b:4b:04:b0: 02:56:4d:25:eb:6f:db:10:0d:bc:55:8b:fd:c0:54: 0f:74:ac:be:9c:ae:8f:c4:17:d9:0a:3e:0e:11:ed: 36:29:fb:04:ba:b2:63:ab:f9:04:62:77:67:17:73: 5f:e9:8d:e3:b1:70:63:63:04:bf:fc:11:33:a9:b1: f9:16:60:d5:6f:3b:92:01:17:d3:64:f1:9c:e7:91: d7:c3:b3:49:3d:6a:31:e9:05:f2:0e:8f:9b:d5:81: 88:ea:86:6f:48:ba:6e:87:a1:9f:05:07:73:0b:b7: 6a:9d:48:2a:72:9e:5e:30:92:11:97:e1:d2:6b:6b: 8f:a8:d4:9f:36:30:e8:c2:18:57:eb:5e:53:aa:de: 7a:23:db:99:b3:ec:b7:4a:d7:e9:b2:03:af:15:f6: c9:f8:3b:75:2c:61:a8:d4:32:79:ca:90:87:98:f8: 2b:9e:d7:7c:f7:40:57:96:d8:c7:be:80:f2:31:a3: bd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A9:C0:62:96:6E:95:87:67:40:34:3D:89:E8:83:4E:AD:C0:53:1C X509v3 Authority Key Identifier: keyid:72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:4e:83:b5:0c:60:28:61:0b:0c:42:59:bf:74:c4:91:30:f1: 43:88:f7:2e:57:11:2d:0b:d4:21:27:0e:8f:cb:e4:db:67:af: 81:7a:a5:f3:e0:66:b1:e7:9a:5a:2e:e2:b8:2b:f4:0d:2a:72: 68:77:f8:c9:14:7b:54:7e:b0:28:94:49:c9:2a:a9:e7:f8:4e: f7:f4:b2:63:37:84:67:e6:fc:e4:56:53:ec:43:be:3b:17:ff: 78:1c:99:f0:53:8c:9c:a2:9e:b2:b5:62:dd:ca:eb:2f:c9:74: 67:dc:eb:83:54:17:38:cf:65:c1:08:db:10:13:99:ec:7c:a0: d8:32:98:a0:1e:60:45:e7:01:3e:1c:45:c3:a1:d1:d0:6d:23: 63:04:7f:f4:d8:4c:df:90:5f:1c:3e:dd:0d:88:f5:5c:4d:cf: 9e:c9:3f:09:f4:e7:4a:fe:86:fa:10:15:da:cf:d5:d5:1f:f2: 1e:c9:94:27:00:8b:6c:a0:61:42:a7:e0:8e:44:77:53:cc:16: 86:78:cd:a5:56:51:ea:7b:a6:d6:98:c1:89:63:7d:38:cc:15: bb:ce:9f:c3:78:13:7c:b7:70:23:e7:65:b1:82:99:44:b7:f9: a9:59:94:72:df:86:2d:c9:e3:1e:75:74:7a:a2:ef:dc:f5:73: 3d:f6:3e:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcxNzUxMTAvBgNVBAUTKDcyNTc5MjNENjc3MEM1Njc4OTE5QjA3Q0JDRkE4QUY4 QjlDNTA1M0YwHhcNMjYwMzAxMDY1MTMyWhcNMjYwMzA4MDY1MTMyWjAYMRYwFAYD VQQDEw02OWEzZTFmNC04NjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxj9wmPQTU5UthJIQG7Jx+hTUQvaSFMBFTuy7C+2JUxZ5Bp2Y1Ab9cpT1l7w 0dGhUUPz7Zn4nAOju/qKEOPY2IzCc2BgxgtLBLACVk0l62/bEA28VYv9wFQPdKy+ nK6PxBfZCj4OEe02KfsEurJjq/kEYndnF3Nf6Y3jsXBjYwS//BEzqbH5FmDVbzuS ARfTZPGc55HXw7NJPWox6QXyDo+b1YGI6oZvSLpuh6GfBQdzC7dqnUgqcp5eMJIR l+HSa2uPqNSfNjDowhhX615Tqt56I9uZs+y3StfpsgOvFfbJ+Dt1LGGo1DJ5ypCH mPgrntd890BXltjHvoDyMaO9bQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA6pwGKW bpWHZ0A0PYnog06twFMcMB8GA1UdIwQYMBaAFHJXkj1ncMVniRmwfLz6ivi5xQU/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzE3NS9FOUEwOTJCODY4 RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9jbGVTUFdkd3hXZUpHYkI4dlBxSy1MbkZC VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NsZVNQV2R3eFdlSkdiQjh2UHFLLUxuRkJUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzE3NS9FOUEwOTJCODY4RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9jbGVTUFdkd3hX ZUpHYkI4dlBxSy1MbkZCVDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmE6DtQxgKGELDEJZv3TEkTDxQ4j3LlcRLQvUIScOj8vk22evgXql8+Bmseea Wi7iuCv0DSpyaHf4yRR7VH6wKJRJySqp5/hO9/SyYzeEZ+b85FZT7EO+Oxf/eByZ 8FOMnKKesrVi3crrL8l0Z9zrg1QXOM9lwQjbEBOZ7Hyg2DKYoB5gRecBPhxFw6HR 0G0jYwR/9NhM35BfHD7dDYj1XE3Pnsk/CfTnSv6G+hAV2s/V1R/yHsmUJwCLbKBh QqfgjkR3U8wWhnjNpVZR6num1pjBiWN9OMwVu86fw3gTfLdwI+dlsYKZRLf5qVmU ct+GLcnjHnV0eqLv3PVzPfY+yA== -----END CERTIFICATE-----Generated at Mon Mar 2 02:27:03 2026 by rpki-client