$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft File: ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft (raw, json) Hash identifier: dChrnvU1BeEESoclnSoDiSvyp+aHhOtYGDV0EQxMG9o= Subject key identifier: D2:3D:3B:10:B4:01:76:D6:AA:0E:8B:B2:E3:DE:A4:EF:F1:49:C0:37 Authority key identifier: 92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3 Certificate issuer: /CN=A91CB8BA/serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3 Certificate serial: 0940 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft Manifest number: 0937 Signing time: Sat 28 Feb 2026 20:29:53 +0000 Manifest this update: Sat 28 Feb 2026 20:29:52 +0000 Manifest next update: Sat 07 Mar 2026 20:29:52 +0000 Files and hashes: 1: ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl (hash: aVAECr8czgJkdiUZwrU4awtLwla2QyJvgAwPV3xMBds=) 2: 0B6B9DE6BAAE11EA8F1DA435C4F9AE02.roa (hash: 4VGSVDGkNRxbqzKhTUkYTHB/bvhkwrdrsnzSAl6YQ/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 20:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2368 (0x940) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA, serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3 Validity Not Before: Feb 28 20:29:52 2026 GMT Not After : Mar 7 20:29:52 2026 GMT Subject: CN=69a35041-c962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9d:e1:69:08:4c:5b:47:46:2d:79:bb:6f:75: b1:33:4a:33:bf:50:eb:27:7b:7f:6c:be:5a:ce:42: c9:09:29:fa:3b:8a:bb:1c:c0:be:60:65:8a:55:51: b8:48:86:b4:da:76:ef:99:17:ea:bc:52:d2:4f:93: c0:05:ac:66:d7:06:5e:4e:fb:5e:85:dd:dd:26:35: 2c:84:58:b6:85:a7:10:5f:03:d2:c5:01:a4:12:ba: 25:32:b1:db:58:d2:54:a5:12:65:7d:89:4b:dc:74: fd:4f:07:39:ea:11:3e:74:21:ad:82:c0:db:4b:4b: e3:0c:ce:3b:e6:b9:72:6d:35:17:45:51:33:f4:8b: d9:6b:ec:b1:1d:e4:c6:2a:c2:eb:8c:f2:88:b2:13: 52:6d:07:55:b8:7a:52:b4:8e:73:5a:bb:d9:bf:0b: 25:5b:cf:29:1b:3e:e7:ff:07:e7:57:15:94:e8:a7: b4:3b:54:93:41:9a:2c:6c:72:4c:3c:1d:d2:ec:14: 2c:99:3a:f0:eb:4c:38:8f:ea:5d:f6:9a:d9:b7:0e: 05:bb:3b:df:9f:da:24:fe:8b:08:5b:29:94:e1:d4: 24:2e:88:4a:71:21:d5:fb:66:94:69:75:1b:80:3a: b2:19:47:1f:3d:4a:f0:22:b2:07:21:05:e3:b6:4c: e4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3D:3B:10:B4:01:76:D6:AA:0E:8B:B2:E3:DE:A4:EF:F1:49:C0:37 X509v3 Authority Key Identifier: keyid:92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:35:78:1b:4e:af:77:6c:56:70:eb:74:f0:96:43:10:64:d4: fb:a6:49:68:2f:1a:15:22:6a:58:16:e8:8c:34:1a:af:61:e1: 6e:25:18:3f:6a:73:76:93:a4:d9:60:23:9a:d9:ba:11:fe:03: 2f:aa:f1:ab:1e:fa:97:98:51:44:3b:69:66:e3:3b:d4:c6:0b: d0:ea:ab:74:72:32:85:69:b6:b9:59:5a:43:cd:09:d6:eb:3d: 12:9e:c2:7f:ef:69:d8:34:0d:65:ab:8e:c8:c0:52:0b:d5:4d: 67:92:a0:e6:67:12:bd:9a:47:aa:f5:12:33:ec:8f:16:8e:59: d7:b0:61:57:01:96:60:31:87:ff:29:ba:50:f5:e8:42:93:46: ad:1e:61:5e:c3:3c:24:ff:ab:cd:5b:59:14:bf:d9:b0:ed:82: 3f:6d:35:81:03:b2:2e:8a:86:6b:cd:1b:75:52:63:d7:59:56: 42:66:8b:4a:64:96:60:da:a1:fd:90:1f:9f:25:47:25:25:ca: d9:18:d1:07:a0:9d:4e:35:94:de:d9:a5:92:d5:9c:e0:cf:ce: b5:c6:7d:0e:6f:06:44:2a:0e:09:d4:89:e2:73:a3:2a:4e:04: 01:fa:f6:06:a6:db:aa:9e:c8:d8:88:54:39:e7:31:fa:ee:f2: 93:0e:d3:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDkyMkQ2MEVBMTkzOTY3MTc3QkM2QzM5QTQwNjg1OThB M0I3NUE2RDMwHhcNMjYwMjI4MjAyOTUyWhcNMjYwMzA3MjAyOTUyWjAYMRYwFAYD VQQDDA02OWEzNTA0MS1jOTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz53haQhMW0dGLXm7b3WxM0ozv1DrJ3t/bL5azkLJCSn6O4q7HMC+YGWKVVG4 SIa02nbvmRfqvFLST5PABaxm1wZeTvtehd3dJjUshFi2hacQXwPSxQGkErolMrHb WNJUpRJlfYlL3HT9Twc56hE+dCGtgsDbS0vjDM475rlybTUXRVEz9IvZa+yxHeTG KsLrjPKIshNSbQdVuHpStI5zWrvZvwslW88pGz7n/wfnVxWU6Ke0O1STQZosbHJM PB3S7BQsmTrw60w4j+pd9prZtw4Fuzvfn9ok/osIWymU4dQkLohKcSHV+2aUaXUb gDqyGUcfPUrwIrIHIQXjtkzklQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNI9OxC0 AXbWqg6LsuPepO/xScA3MB8GA1UdIwQYMBaAFJItYOoZOWcXe8bDmkBoWYo7dabT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8zMjA5MDFDNEJB ODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9raTFnNmhrNVp4ZDd4c09hUUdoWmlqdDFw dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpMWc2aGs1WnhkN3hzT2FRR2haaWp0MXB0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhCQS8zMjA5MDFDNEJBODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9raTFnNmhrNVp4 ZDd4c09hUUdoWmlqdDFwdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVTV4G06vd2xWcOt08JZDEGTU+6ZJaC8aFSJqWBbojDQar2HhbiUYP2pzdpOk 2WAjmtm6Ef4DL6rxqx76l5hRRDtpZuM71MYL0OqrdHIyhWm2uVlaQ80J1us9Ep7C f+9p2DQNZauOyMBSC9VNZ5Kg5mcSvZpHqvUSM+yPFo5Z17BhVwGWYDGH/ym6UPXo QpNGrR5hXsM8JP+rzVtZFL/ZsO2CP201gQOyLoqGa80bdVJj11lWQmaLSmSWYNqh /ZAfnyVHJSXK2RjRB6CdTjWU3tmlktWc4M/OtcZ9Dm8GRCoOCdSJ4nOjKk4EAfr2 Bqbbqp7I2IhUOecx+u7ykw7TaA== -----END CERTIFICATE-----Generated at Sun Mar 1 21:11:43 2026 by rpki-client