$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft File: FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft (raw, json) Hash identifier: Z28+xPDhSL/EXoce07xOgGRxdGZ7urn3jCAO5vrXzUQ= Subject key identifier: C7:3B:0E:C1:88:EF:4B:3A:99:F7:36:2B:64:19:CB:80:EA:FE:7C:F2 Authority key identifier: 16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 Certificate issuer: /CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004 Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft Manifest number: 0A84 Signing time: Mon 02 Mar 2026 02:46:04 +0000 Manifest this update: Mon 02 Mar 2026 02:46:02 +0000 Manifest next update: Mon 09 Mar 2026 02:46:02 +0000 Files and hashes: 1: FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl (hash: OOim+1wx5Ph7ibdTr3mY+0fn5qX1XOO0uEOVuOaNJG8=) 2: C483C80CDE4011EFB4A11D5CC4F9AE02.roa (hash: 39L0tuk++HvgBqoCLQnzcqUrTZqQJu3YDe0GGFe9LNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=16C662726F4A009133D6591664239E00C681A004 Validity Not Before: Mar 2 02:46:02 2026 GMT Not After : Mar 9 02:46:02 2026 GMT Subject: CN=69a4f9ec-2216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e1:7a:0c:dd:48:16:b5:3b:1f:2f:0c:31:32: 16:7e:ae:dd:66:52:42:0d:ec:51:cc:97:fa:ba:ea: 48:50:e5:c7:32:38:2c:b3:22:11:41:40:af:15:11: cf:ef:bb:a9:ef:2a:dc:e5:53:9e:8c:89:31:37:08: a3:34:b7:4a:fc:48:74:04:d3:41:87:fe:87:cd:e6: ea:ce:1d:4f:21:15:8a:c6:07:82:06:b9:64:37:60: 29:e8:9a:0a:84:e8:08:53:82:d6:af:dd:78:7b:ca: 03:12:26:b2:4b:5b:db:0f:4e:ed:b5:a4:98:35:d6: 29:a2:73:5b:f5:14:b1:dc:92:99:a6:dd:77:07:50: 24:d1:55:4c:ac:b2:d4:dd:b8:68:b4:6f:f5:2a:83: 7a:7a:2a:42:c6:97:c1:24:f0:2e:e3:5d:01:73:f9: f2:5d:9d:34:71:6e:24:84:5c:90:db:56:7d:ef:70: e8:9d:5d:96:fe:bc:51:ea:0c:6a:ee:f0:82:94:81: 34:b5:4d:51:ad:5f:fb:98:af:5d:5e:6e:91:3a:b3: c0:7d:43:04:70:6f:8d:d1:f2:bc:5b:c2:de:cb:c9: 83:89:6c:86:12:fc:86:c4:17:d7:a7:cd:33:b6:40: 75:09:da:03:d0:49:6b:d4:5a:20:93:54:a9:41:55: bc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3B:0E:C1:88:EF:4B:3A:99:F7:36:2B:64:19:CB:80:EA:FE:7C:F2 X509v3 Authority Key Identifier: keyid:16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:f5:a3:06:47:68:41:b8:05:98:5e:24:41:dc:32:69:a7:c3: 86:2f:01:32:f1:33:76:15:13:96:a2:de:1e:f1:6b:42:bd:00: 33:c0:69:0a:84:6b:bb:52:01:a3:17:cd:25:47:f8:58:42:03: 1b:7d:0c:bc:20:cf:2e:01:48:f6:c8:69:46:12:98:92:0d:a9: f9:cb:71:92:22:d1:6c:53:32:60:09:9c:0b:ee:ec:31:99:6c: 8f:91:61:92:24:06:f5:5e:54:e7:09:4c:42:42:ef:10:92:25: c0:98:f8:53:46:1f:7e:cb:a6:d7:f1:ad:2b:dd:5b:ba:d9:5b: dc:ac:d4:e8:17:0b:e9:67:4a:2f:a9:dd:18:fd:9a:48:cc:86: b0:52:4a:c9:de:54:ef:e3:a4:a9:63:7a:b4:4f:28:78:8c:07: 92:16:a4:73:b7:05:f5:b0:e7:ee:68:82:2e:88:91:5e:59:73: 01:bd:46:46:c1:52:9c:0a:09:ca:b6:02:12:33:34:53:c0:df: c2:92:e3:59:46:21:bb:15:95:85:b9:e8:a4:b4:46:28:24:6d: a6:44:bf:4d:c0:a3:9b:19:69:bc:7c:8e:ac:92:42:af:07:f6: 34:e4:4c:75:1e:a0:db:19:ac:4a:90:bc:60:30:37:be:ea:40: 22:8c:fd:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDE2QzY2MjcyNkY0QTAwOTEzM0Q2NTkxNjY0MjM5RTAw QzY4MUEwMDQwHhcNMjYwMzAyMDI0NjAyWhcNMjYwMzA5MDI0NjAyWjAYMRYwFAYD VQQDEw02OWE0ZjllYy0yMjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOF6DN1IFrU7Hy8MMTIWfq7dZlJCDexRzJf6uupIUOXHMjgssyIRQUCvFRHP 77up7yrc5VOejIkxNwijNLdK/Eh0BNNBh/6Hzebqzh1PIRWKxgeCBrlkN2Ap6JoK hOgIU4LWr914e8oDEiayS1vbD07ttaSYNdYponNb9RSx3JKZpt13B1Ak0VVMrLLU 3bhotG/1KoN6eipCxpfBJPAu410Bc/nyXZ00cW4khFyQ21Z973DonV2W/rxR6gxq 7vCClIE0tU1RrV/7mK9dXm6ROrPAfUMEcG+N0fK8W8Ley8mDiWyGEvyGxBfXp80z tkB1CdoD0Elr1Fogk1SpQVW8EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMc7DsGI 70s6mfc2K2QZy4Dq/nzyMB8GA1UdIwQYMBaAFBbGYnJvSgCRM9ZZFmQjngDGgaAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FKRXoxbGtXWkNPZUFNYUJv QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzWmljbTlLQUpFejFsa1daQ09lQU1hQm9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FK RXoxbGtXWkNPZUFNYUJvQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI/WjBkdoQbgFmF4kQdwyaafDhi8BMvEzdhUTlqLeHvFrQr0AM8BpCoRru1IB oxfNJUf4WEIDG30MvCDPLgFI9shpRhKYkg2p+ctxkiLRbFMyYAmcC+7sMZlsj5Fh kiQG9V5U5wlMQkLvEJIlwJj4U0Yffsum1/GtK91butlb3KzU6BcL6WdKL6ndGP2a SMyGsFJKyd5U7+OkqWN6tE8oeIwHkhakc7cF9bDn7miCLoiRXllzAb1GRsFSnAoJ yrYCEjM0U8DfwpLjWUYhuxWVhbnopLRGKCRtpkS/TcCjmxlpvHyOrJJCrwf2NORM dR6g2xmsSpC8YDA3vupAIoz9Bw== -----END CERTIFICATE-----Generated at Mon Mar 2 05:44:24 2026 by rpki-client