$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft File: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft (raw, json) Hash identifier: JxOHlR8Jh7mUPUppedjXFxfXOH6p89RtXqcy6QLBnU0= Subject key identifier: 56:29:7C:4D:78:60:80:C5:9C:30:6E:A7:7C:97:7B:D6:50:CC:C9:E9 Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft Manifest number: 01D0 Signing time: Mon 02 Mar 2026 01:06:01 +0000 Manifest this update: Mon 02 Mar 2026 01:06:00 +0000 Manifest next update: Mon 09 Mar 2026 01:06:00 +0000 Files and hashes: 1: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl (hash: 9vangBwmu0e9cp1FSqtLXykq+pe+WiDyH0WlLbvEVfU=) 2: 7E40FBBA09EF11EFAA24237EC4F9AE02.roa (hash: qiDIUEuwMcanplAnkX0trRydukOFcGtNb2ScPdRJPzg=) 3: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (hash: COaMid1PJ7sNLHUQ6+TBJQt8v3jAUBZ7JzL1Rm6+wuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAE04, serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Validity Not Before: Mar 2 01:06:00 2026 GMT Not After : Mar 9 01:06:00 2026 GMT Subject: CN=69a4e279-c306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b6:c6:05:61:ba:58:60:ca:0e:3a:64:bf:ce: 98:71:7c:51:39:2d:c0:ce:5d:e3:f5:50:b5:36:90: 62:65:82:24:b2:81:7a:d1:80:ab:65:0f:e1:09:fa: e1:06:62:aa:74:f2:60:72:cc:dd:88:96:e5:34:2d: c4:4c:f2:3e:44:a2:ae:bf:21:00:5c:25:bc:4c:2a: ed:db:99:a7:cd:af:cb:e5:df:6e:92:af:34:f3:1f: de:ec:cb:14:82:b5:e3:2c:8b:2e:40:1f:5f:32:de: 9e:1e:23:e7:e4:56:cb:6b:18:b9:ad:27:bf:c6:de: 1c:c3:1a:90:ac:ef:85:8e:fa:ba:d7:80:1e:8f:a1: 2b:8c:fa:f5:84:80:1c:fe:3a:ac:ce:0a:8b:20:86: de:27:a4:2a:9f:11:90:0e:90:da:2e:40:88:3f:ca: 19:82:67:9a:40:45:f4:06:8a:10:4f:bf:f9:50:0d: d4:5f:36:9e:86:3d:c4:d5:5d:c8:3e:a5:5a:2d:b3: 6c:78:ee:a9:80:1d:c0:76:c6:f7:05:57:28:33:2e: 40:03:2c:19:f0:ed:43:e9:72:88:62:d8:86:d9:00: bb:6f:25:ae:9a:fc:24:24:63:54:cc:db:49:76:76: 0a:b4:c2:9a:34:67:48:72:06:b3:16:10:d1:4d:e1: 06:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:29:7C:4D:78:60:80:C5:9C:30:6E:A7:7C:97:7B:D6:50:CC:C9:E9 X509v3 Authority Key Identifier: keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:78:be:d5:6f:dd:c1:f7:61:a8:b9:9e:ed:03:ff:eb:51:8d: ce:4d:a4:90:af:ba:c5:ee:81:a7:c9:77:6a:ca:b7:4a:d1:2d: f3:41:df:cf:d7:d7:c3:82:9d:b4:a2:43:74:be:d4:c2:af:2e: 54:f7:4a:c4:94:4c:30:4e:62:df:72:e7:0b:dc:59:77:c6:d4: 3c:36:fb:ba:0c:61:f1:68:85:90:29:53:3b:95:17:46:5a:3d: af:8f:c7:ac:6f:12:a6:5c:4b:e3:00:9c:f8:9f:c4:0d:72:9b: 93:be:cc:7e:c3:f7:2a:89:80:ce:36:7d:61:22:96:a7:08:64: fa:d3:dd:86:68:f3:e0:50:12:f2:68:dc:34:74:2c:49:75:5b: 27:e9:a0:d5:ca:a3:01:85:82:54:74:94:6b:7c:91:af:1c:95: 40:c6:4b:5d:24:8e:1f:b1:44:97:0f:37:1f:31:d6:10:c8:b5: 9e:0f:88:b4:a3:77:ca:bf:77:56:07:b3:2c:48:dc:be:0b:ea: 21:58:e2:65:da:3d:e3:a8:36:2d:cb:0f:88:f4:a6:b8:75:16: a1:ef:a2:e4:af:78:5c:dd:30:0c:df:11:1b:06:cc:b1:27:41: d0:e9:39:dc:2e:83:0e:f6:65:8a:91:f9:ea:d0:02:0e:92:a4: 47:04:bf:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FFMDQxMTAvBgNVBAUTKEIzNjI0MzdBQjY3RDI5MEM1Q0RGRUYyRjYyQjc3RURE OEE5RkZBNDQwHhcNMjYwMzAyMDEwNjAwWhcNMjYwMzA5MDEwNjAwWjAYMRYwFAYD VQQDEw02OWE0ZTI3OS1jMzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlrbGBWG6WGDKDjpkv86YcXxROS3Azl3j9VC1NpBiZYIksoF60YCrZQ/hCfrh BmKqdPJgcszdiJblNC3ETPI+RKKuvyEAXCW8TCrt25mnza/L5d9ukq808x/e7MsU grXjLIsuQB9fMt6eHiPn5FbLaxi5rSe/xt4cwxqQrO+Fjvq614Aej6ErjPr1hIAc /jqszgqLIIbeJ6QqnxGQDpDaLkCIP8oZgmeaQEX0BooQT7/5UA3UXzaehj3E1V3I PqVaLbNseO6pgB3Adsb3BVcoMy5AAywZ8O1D6XKIYtiG2QC7byWumvwkJGNUzNtJ dnYKtMKaNGdIcgazFhDRTeEGMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFYpfE14 YIDFnDBup3yXe9ZQzMnpMB8GA1UdIwQYMBaAFLNiQ3q2fSkMXN/vL2K3ft2Kn/pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUUwNC85RDhGNzcyQTVG OTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtReGMzLTh2WXJkLTNZcWYt a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MySkRlclo5S1F4YzMtOHZZcmQtM1lxZi1rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUUwNC85RDhGNzcyQTVGOTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtR eGMzLTh2WXJkLTNZcWYta1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWHi+1W/dwfdhqLme7QP/61GNzk2kkK+6xe6Bp8l3asq3StEt80Hfz9fXw4Kd tKJDdL7Uwq8uVPdKxJRMME5i33LnC9xZd8bUPDb7ugxh8WiFkClTO5UXRlo9r4/H rG8SplxL4wCc+J/EDXKbk77MfsP3KomAzjZ9YSKWpwhk+tPdhmjz4FAS8mjcNHQs SXVbJ+mg1cqjAYWCVHSUa3yRrxyVQMZLXSSOH7FElw83HzHWEMi1ng+ItKN3yr93 VgezLEjcvgvqIVjiZdo946g2LcsPiPSmuHUWoe+i5K94XN0wDN8RGwbMsSdB0Ok5 3C6DDvZlipH56tACDpKkRwS/Uw== -----END CERTIFICATE-----Generated at Mon Mar 2 05:51:23 2026 by rpki-client