$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft File: 0WaBZz8RihAOwgFHTM-7UYeD2WA.mft (raw, json) Hash identifier: snwTcP7T3faTMsfe6Wx6FHBGlbOZtgpD2U309KoR+Wo= Subject key identifier: 82:38:56:6B:9A:3A:87:5F:98:86:3B:F7:2E:35:DA:1A:BB:B7:27:03 Authority key identifier: D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60 Certificate issuer: /CN=A91C9E82/serialNumber=D16681673F118A100EC201474CCFBB518783D960 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft Manifest number: 3C Signing time: Mon 02 Mar 2026 02:00:57 +0000 Manifest this update: Mon 02 Mar 2026 02:00:54 +0000 Manifest next update: Mon 09 Mar 2026 02:00:54 +0000 Files and hashes: 1: 0WaBZz8RihAOwgFHTM-7UYeD2WA.crl (hash: RT1uLDaAoIpVnwbqt1hT+TnwNzQnixYd2LFB9TMFwQE=) 2: D798F0A0C04B11F0A85A7449C4F9AE02.roa (hash: D1XVMH1vA5La0IfiYGXEnqhzX2rQW9q2kW1yPmg2KPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E82, serialNumber=D16681673F118A100EC201474CCFBB518783D960 Validity Not Before: Mar 2 02:00:54 2026 GMT Not After : Mar 9 02:00:54 2026 GMT Subject: CN=69a4ef59-5196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4d:ef:9b:ac:22:ba:1e:30:f5:d9:2f:ca:df: 9e:1a:01:39:da:e4:63:c5:fb:de:27:f1:c0:f8:be: 0f:84:1f:46:c2:ac:34:ac:46:01:b2:94:19:d9:84: 32:92:f2:6f:a9:cd:d9:10:75:ff:0c:9f:e6:6b:59: ed:72:30:5a:35:45:eb:08:bf:34:90:91:f6:fd:b1: ee:a6:bd:e7:94:0f:f6:4e:29:d8:06:46:d3:aa:8a: 5a:54:a5:5e:57:4f:4c:1e:e9:ea:fc:62:da:4e:83: 55:fb:01:85:5b:9b:be:cd:b2:7a:de:e5:48:62:3e: 82:8d:53:92:ba:83:d7:64:25:f7:18:36:ab:15:07: 2a:9a:5c:4f:33:ef:2d:02:79:c9:1c:c7:b6:84:f6: c0:3b:d7:81:8b:46:32:e2:47:ab:0f:ae:df:8e:ce: db:a7:a6:92:a9:b7:14:d3:bf:2c:ed:dc:9c:93:36: 53:df:05:e4:df:e7:29:ee:7a:71:11:c8:33:aa:1c: 3b:66:0c:8e:ce:d3:82:79:d8:e3:e7:fc:bb:4e:13: 14:9c:96:00:ba:57:28:e0:6f:cb:60:d1:aa:a0:1c: ff:85:a4:5e:a7:c9:15:40:64:0e:39:12:ea:e8:0d: 98:e6:23:6c:92:33:66:b1:8c:77:3d:99:73:9d:cc: 64:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:38:56:6B:9A:3A:87:5F:98:86:3B:F7:2E:35:DA:1A:BB:B7:27:03 X509v3 Authority Key Identifier: keyid:D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:04:b0:54:68:37:ae:03:0c:0b:ed:c4:2b:3a:33:3f:cd:f5: a9:dd:f9:2f:85:fa:53:b0:e2:94:57:0b:05:f1:ba:bf:c5:3c: 8e:b0:f9:19:41:1f:e8:35:8f:fa:48:3e:3e:d0:aa:ea:6f:8c: 55:e2:54:4d:0a:91:b4:c5:e7:a1:57:6a:81:b8:59:7c:7d:0a: ce:07:92:22:d7:67:43:dc:67:00:a2:56:83:63:37:43:f8:0c: 82:6b:5f:0d:64:d1:64:24:4a:16:e2:01:9a:20:c5:d0:71:ae: 49:47:6d:2d:94:ba:85:8f:e5:57:f2:33:00:c3:65:1b:86:7f: 8c:ca:1c:29:8c:ff:ad:fc:da:c5:90:14:bb:29:da:28:c9:53: f2:95:55:98:1e:5f:fd:83:93:87:e9:3d:b8:0c:1c:44:73:07: 75:75:80:58:03:34:16:bf:a6:2d:32:ca:3e:56:05:09:96:c6: 64:47:f4:1d:a6:fd:12:02:93:ff:4b:cd:11:ef:20:27:5a:47: ef:2b:4d:8b:02:3c:83:74:16:eb:27:12:d7:65:0c:6f:62:c8: 10:59:a8:7a:b7:fc:da:6a:42:31:b1:91:f6:16:48:09:d0:b8: e9:02:65:31:2d:ae:15:91:75:16:2c:47:13:52:47:d1:c6:71: 10:3a:01:6b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUU4MjExMC8GA1UEBRMoRDE2NjgxNjczRjExOEExMDBFQzIwMTQ3NENDRkJCNTE4 NzgzRDk2MDAeFw0yNjAzMDIwMjAwNTRaFw0yNjAzMDkwMjAwNTRaMBgxFjAUBgNV BAMTDTY5YTRlZjU5LTUxOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzTe+brCK6HjD12S/K354aATna5GPF+94n8cD4vg+EH0bCrDSsRgGylBnZhDKS 8m+pzdkQdf8Mn+ZrWe1yMFo1ResIvzSQkfb9se6mveeUD/ZOKdgGRtOqilpUpV5X T0we6er8YtpOg1X7AYVbm77Nsnre5UhiPoKNU5K6g9dkJfcYNqsVByqaXE8z7y0C eckcx7aE9sA714GLRjLiR6sPrt+OztunppKptxTTvyzt3JyTNlPfBeTf5ynuenER yDOqHDtmDI7O04J52OPn/LtOExSclgC6Vyjgb8tg0aqgHP+FpF6nyRVAZA45Euro DZjmI2ySM2axjHc9mXOdzGRTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgjhWa5o6 h1+Yhjv3LjXaGru3JwMwHwYDVR0jBBgwFoAU0WaBZz8RihAOwgFHTM+7UYeD2WAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RTgyL0IzN0I3ODRBQkU5 RTExRjA5ODFCNEMzMkM0RjlBRTAyLzBXYUJaejhSaWhBT3dnRkhUTS03VVllRDJX QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMFdhQlp6OFJpaEFPd2dGSFRNLTdVWWVEMldBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 RTgyL0IzN0I3ODRBQkU5RTExRjA5ODFCNEMzMkM0RjlBRTAyLzBXYUJaejhSaWhB T3dnRkhUTS03VVllRDJXQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCnBLBUaDeuAwwL7cQrOjM/zfWp3fkvhfpTsOKUVwsF8bq/xTyOsPkZQR/oNY/6 SD4+0Krqb4xV4lRNCpG0xeehV2qBuFl8fQrOB5Ii12dD3GcAolaDYzdD+AyCa18N ZNFkJEoW4gGaIMXQca5JR20tlLqFj+VX8jMAw2Ubhn+MyhwpjP+t/NrFkBS7Kdoo yVPylVWYHl/9g5OH6T24DBxEcwd1dYBYAzQWv6YtMso+VgUJlsZkR/Qdpv0SApP/ S80R7yAnWkfvK02LAjyDdBbrJxLXZQxvYsgQWah6t/zaakIxsZH2FkgJ0LjpAmUx La4VkXUWLEcTUkfRxnEQOgFr -----END CERTIFICATE-----Generated at Mon Mar 2 10:17:10 2026 by rpki-client