$ rpki-client -vvf rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft File: bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft (raw, json) Hash identifier: r9vKAwU9h+boWgDitRqE7HA9rkOVdcpfyUZfMZa4558= Subject key identifier: C4:5F:18:B6:9C:8A:18:1D:3F:1C:61:A6:A5:05:64:03:87:22:5D:5F Authority key identifier: 6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 Certificate issuer: /CN=A91C95AA/serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Certificate serial: 02D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft Manifest number: 02CD Signing time: Sun 01 Mar 2026 23:25:57 +0000 Manifest this update: Sun 01 Mar 2026 23:25:57 +0000 Manifest next update: Sun 08 Mar 2026 23:25:57 +0000 Files and hashes: 1: bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl (hash: /t8sBIsvoHoDr1eAyWFr7/xM86hsSV3jXmuVIfDXrmQ=) 2: FB1F8158242A11ED9547B486C4F9AE02.roa (hash: /GgOSNIsN8dBbb8Vje/7amrLJkz9iVVzHHHxG8WPW68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 723 (0x2d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C95AA, serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Validity Not Before: Mar 1 23:25:57 2026 GMT Not After : Mar 8 23:25:57 2026 GMT Subject: CN=69a4cb05-1156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:82:fb:17:d7:b8:70:81:fb:01:ef:42:a7:3f: 1b:00:05:38:54:27:d1:ad:ef:24:50:db:04:9e:91: 24:a6:2f:b8:31:be:e0:00:eb:d2:0a:9a:11:4b:5a: c1:c8:e6:fa:aa:65:e9:8d:81:40:a6:5b:2d:3a:50: ab:b0:df:30:2f:a2:48:01:04:d7:63:56:55:d0:12: 40:49:55:68:d4:a3:59:74:ca:da:32:4a:4f:91:a1: 3b:18:76:e7:e0:fb:cf:1c:96:5b:11:6d:ed:a7:1a: d7:b6:bb:e0:15:a8:fb:d4:8c:b6:d4:e5:41:a3:9c: fc:bb:46:5c:b5:e8:12:e2:64:d5:c6:82:e6:a2:db: 48:98:71:4a:38:4f:2e:bb:8d:6c:f3:1e:66:e4:de: e0:b4:95:dc:38:bb:5e:35:b7:b0:00:5f:6e:59:9c: 10:73:9c:2b:73:30:24:06:e2:d4:10:f1:65:f4:54: 48:b2:c1:d4:18:0a:b1:74:7c:95:b6:eb:b7:9f:35: 5a:5b:bb:bd:9a:1d:f9:31:29:3f:3c:07:aa:5f:e7: 31:b4:60:a3:ee:88:f9:dc:ee:92:c6:52:49:fd:62: d2:35:05:a9:3d:38:0d:c7:ea:b9:cd:7d:bc:c5:6c: 5d:fe:87:e8:e4:a4:d7:63:69:44:a6:3c:bd:3d:bd: ee:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5F:18:B6:9C:8A:18:1D:3F:1C:61:A6:A5:05:64:03:87:22:5D:5F X509v3 Authority Key Identifier: keyid:6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:08:c7:56:a1:0c:c5:c2:3c:f6:3d:5a:b3:cf:20:cc:8c:c9: d4:db:19:25:d9:24:7d:3e:57:39:c7:d9:7d:2d:97:42:cb:0b: 05:53:bd:94:50:f6:17:fa:a0:48:18:d1:b9:35:16:02:26:fd: 5d:69:87:ed:82:57:fe:a4:20:68:58:a3:e3:12:ea:1c:26:e4: 90:2c:ce:e4:9f:c4:20:23:ea:a4:18:ad:c4:30:69:19:27:bc: ba:ed:9b:fa:48:7b:bb:1b:c1:a5:47:5e:2a:a8:91:29:ba:3a: 77:b5:28:4c:ab:f1:b1:99:f2:c9:6b:10:ba:5e:09:50:0c:fb: 56:7a:bc:fd:30:e7:ca:34:f7:2f:79:3e:10:10:b2:de:1c:7f: c0:32:c8:39:5a:f2:92:0b:7d:64:ea:6e:f6:7f:9c:62:76:e1: ca:62:e2:d3:9c:58:41:cf:bb:4e:67:52:89:1b:e6:f1:9a:8c: d9:62:33:b8:18:5d:76:7a:11:f7:6b:11:61:cc:ae:5a:ef:68: 38:a2:3c:8b:44:48:ed:e6:17:55:ab:ac:ed:a7:6c:75:d6:77: 09:61:2a:c9:8b:79:e5:30:3a:f6:9c:3d:17:b4:32:cf:26:5b: 3b:79:b3:4a:88:41:8d:2b:ad:96:1d:9d:1a:ae:0a:50:43:6e: aa:da:b0:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk1QUExMTAvBgNVBAUTKDZDOUI5Njg3RDA1RTJCNUJFNTM2MTA5QTZBRjlCRkZB MTk5ODczRDQwHhcNMjYwMzAxMjMyNTU3WhcNMjYwMzA4MjMyNTU3WjAYMRYwFAYD VQQDEw02OWE0Y2IwNS0xMTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7IL7F9e4cIH7Ae9Cpz8bAAU4VCfRre8kUNsEnpEkpi+4Mb7gAOvSCpoRS1rB yOb6qmXpjYFAplstOlCrsN8wL6JIAQTXY1ZV0BJASVVo1KNZdMraMkpPkaE7GHbn 4PvPHJZbEW3tpxrXtrvgFaj71Iy21OVBo5z8u0ZctegS4mTVxoLmottImHFKOE8u u41s8x5m5N7gtJXcOLteNbewAF9uWZwQc5wrczAkBuLUEPFl9FRIssHUGAqxdHyV tuu3nzVaW7u9mh35MSk/PAeqX+cxtGCj7oj53O6SxlJJ/WLSNQWpPTgNx+q5zX28 xWxd/ofo5KTXY2lEpjy9Pb3u+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMRfGLac ihgdPxxhpqUFZAOHIl1fMB8GA1UdIwQYMBaAFGyblofQXitb5TYQmmr5v/oZmHPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTVBQS8xNTZCRDg5RTI0 MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsxdmxOaENhYXZtXy1obVlj OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JKdVdoOUJlSzF2bE5oQ2Fhdm1fLWhtWWM5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTVBQS8xNTZCRDg5RTI0MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsx dmxOaENhYXZtXy1obVljOVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdgjHVqEMxcI89j1as88gzIzJ1NsZJdkkfT5XOcfZfS2XQssLBVO9lFD2F/qg SBjRuTUWAib9XWmH7YJX/qQgaFij4xLqHCbkkCzO5J/EICPqpBitxDBpGSe8uu2b +kh7uxvBpUdeKqiRKbo6d7UoTKvxsZnyyWsQul4JUAz7Vnq8/TDnyjT3L3k+EBCy 3hx/wDLIOVrykgt9ZOpu9n+cYnbhymLi05xYQc+7TmdSiRvm8ZqM2WIzuBhddnoR 92sRYcyuWu9oOKI8i0RI7eYXVaus7adsddZ3CWEqyYt55TA69pw9F7QyzyZbO3mz SohBjSutlh2dGq4KUENuqtqwuw== -----END CERTIFICATE-----Generated at Mon Mar 2 18:36:10 2026 by rpki-client