$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft File: o9wYjy1VW0FacV8lkDahpg_8uNk.mft (raw, json) Hash identifier: QKFes+zgLlxoxhS4mBCib4zZMyQmXXOE70ODco5BnL8= Subject key identifier: BF:DD:68:8C:0D:B2:DC:20:27:E1:3B:32:1D:FF:A0:0F:90:35:2F:82 Authority key identifier: A3:DC:18:8F:2D:55:5B:41:5A:71:5F:25:90:36:A1:A6:0F:FC:B8:D9 Certificate issuer: /CN=A91C8F68/serialNumber=A3DC188F2D555B415A715F259036A1A60FFCB8D9 Certificate serial: 029C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft Manifest number: 0295 Signing time: Sun 01 Mar 2026 23:41:34 +0000 Manifest this update: Sun 01 Mar 2026 23:41:33 +0000 Manifest next update: Sun 08 Mar 2026 23:41:33 +0000 Files and hashes: 1: o9wYjy1VW0FacV8lkDahpg_8uNk.crl (hash: yE0zG+vAIsWrNcjVVLAwTFkAFxD8C6Qf7Gj/N52jzio=) 2: 2A766EA23A3411EDA1B7D863C4F9AE02.roa (hash: 4HjNDDfKFJrgWK5K6rpjz8dvflAC5Isd+SEG9GMgXhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.crl rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8F68, serialNumber=A3DC188F2D555B415A715F259036A1A60FFCB8D9 Validity Not Before: Mar 1 23:41:33 2026 GMT Not After : Mar 8 23:41:33 2026 GMT Subject: CN=69a4ceae-c9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:80:4b:e3:fe:8b:68:c5:b4:ea:ef:d0:76:c9: a5:51:85:7c:3b:db:e8:e6:9d:46:f1:8f:e2:c8:6d: d9:83:68:b5:0b:33:d6:a5:34:36:d5:aa:6a:88:81: 91:24:12:e2:31:74:d2:98:e2:62:8f:ac:70:25:b0: 7a:48:b1:e5:00:04:28:12:86:03:13:83:d7:83:50: 64:79:ff:c5:61:2c:94:14:08:74:dc:7f:c7:fc:b2: ca:1e:6d:06:45:48:75:fc:f9:a9:71:b9:cb:5c:39: db:da:66:52:a8:41:eb:12:51:7c:e7:2b:9b:82:ae: aa:73:94:86:cb:d0:db:06:92:c8:51:f5:32:de:4b: f4:69:ef:a4:1f:e2:bf:21:3d:ac:de:da:2c:52:2a: 0f:e8:d1:54:42:9a:4c:f4:34:6f:58:e4:ca:31:b0: fa:ab:a3:56:63:1d:29:d9:1d:ec:0e:8a:86:86:33: 3f:90:95:cc:00:42:56:04:65:00:23:0f:2d:60:a3: b4:85:37:32:43:a3:e3:14:57:71:f5:c2:f1:b5:cc: 87:e9:29:cc:62:93:80:08:1a:8b:cb:38:e0:88:83: b5:30:1d:bc:b2:c4:55:b1:2a:36:2e:06:f8:c7:58: 7d:45:c0:c6:9f:54:25:29:66:ed:c5:3d:9f:9f:85: ec:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DD:68:8C:0D:B2:DC:20:27:E1:3B:32:1D:FF:A0:0F:90:35:2F:82 X509v3 Authority Key Identifier: keyid:A3:DC:18:8F:2D:55:5B:41:5A:71:5F:25:90:36:A1:A6:0F:FC:B8:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e0:e9:73:b8:73:3f:75:37:79:8e:fa:3e:0c:29:96:dd:4b: 29:08:28:e0:33:df:b3:22:f4:83:6b:61:d7:51:49:93:2b:6b: 8e:95:a3:11:d7:6a:3b:09:f0:8c:71:ac:7b:87:d8:91:fd:96: d1:f6:2d:e9:90:a0:8d:da:0f:e5:6a:f6:1b:5c:a6:bc:19:a9: 87:ef:d9:93:45:d2:ae:c5:9b:47:81:23:b7:f9:01:70:ce:bd: 5f:d0:a9:ae:58:5c:c1:8b:17:be:0a:26:49:af:d9:c3:cf:03: 29:ad:4a:6c:b9:4b:27:85:d3:9d:f5:c4:38:3e:3f:2b:d2:1b: 12:85:37:63:2a:52:73:02:9a:e7:c0:8b:2f:20:4b:09:76:18: 9b:91:4e:4a:71:84:c3:40:ab:17:2f:68:b8:b8:e3:d4:1d:54: cd:bd:d1:f3:50:3c:9b:ad:54:f6:31:bf:e8:73:c7:39:58:46: c3:3a:99:f9:6c:82:5a:94:aa:98:af:d0:7c:e4:ea:cd:d4:71: c6:cf:00:32:4d:ff:df:af:a4:33:b5:9d:c1:b1:a7:52:ad:e7: d2:0f:98:57:87:81:54:ac:f9:77:c2:1a:70:fa:00:ec:33:07: 95:ad:58:7c:1e:dd:3c:30:ab:c0:fd:94:22:ec:ec:a8:d0:f8: 7f:89:0b:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhGNjgxMTAvBgNVBAUTKEEzREMxODhGMkQ1NTVCNDE1QTcxNUYyNTkwMzZBMUE2 MEZGQ0I4RDkwHhcNMjYwMzAxMjM0MTMzWhcNMjYwMzA4MjM0MTMzWjAYMRYwFAYD VQQDEw02OWE0Y2VhZS1jOWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAloBL4/6LaMW06u/QdsmlUYV8O9vo5p1G8Y/iyG3Zg2i1CzPWpTQ21apqiIGR JBLiMXTSmOJij6xwJbB6SLHlAAQoEoYDE4PXg1Bkef/FYSyUFAh03H/H/LLKHm0G RUh1/PmpcbnLXDnb2mZSqEHrElF85yubgq6qc5SGy9DbBpLIUfUy3kv0ae+kH+K/ IT2s3tosUioP6NFUQppM9DRvWOTKMbD6q6NWYx0p2R3sDoqGhjM/kJXMAEJWBGUA Iw8tYKO0hTcyQ6PjFFdx9cLxtcyH6SnMYpOACBqLyzjgiIO1MB28ssRVsSo2Lgb4 x1h9RcDGn1QlKWbtxT2fn4XsnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL/daIwN stwgJ+E7Mh3/oA+QNS+CMB8GA1UdIwQYMBaAFKPcGI8tVVtBWnFfJZA2oaYP/LjZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEY2OC82QjYwQkZCQTNB MzExMUVEQTEwQ0E3NjFDNEY5QUUwMi9vOXdZankxVlcwRmFjVjhsa0RhaHBnXzh1 TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285d1lqeTFWVzBGYWNWOGxrRGFocGdfOHVOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEY2OC82QjYwQkZCQTNBMzExMUVEQTEwQ0E3NjFDNEY5QUUwMi9vOXdZankxVlcw RmFjVjhsa0RhaHBnXzh1TmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjODpc7hzP3U3eY76Pgwplt1LKQgo4DPfsyL0g2th11FJkytrjpWjEddqOwnw jHGse4fYkf2W0fYt6ZCgjdoP5Wr2G1ymvBmph+/Zk0XSrsWbR4Ejt/kBcM69X9Cp rlhcwYsXvgomSa/Zw88DKa1KbLlLJ4XTnfXEOD4/K9IbEoU3YypScwKa58CLLyBL CXYYm5FOSnGEw0CrFy9ouLjj1B1Uzb3R81A8m61U9jG/6HPHOVhGwzqZ+WyCWpSq mK/QfOTqzdRxxs8AMk3/36+kM7WdwbGnUq3n0g+YV4eBVKz5d8IacPoA7DMHla1Y fB7dPDCrwP2UIuzsqND4f4kLJA== -----END CERTIFICATE-----Generated at Mon Mar 2 23:25:09 2026 by rpki-client