$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft File: 5C9d7yZZtef6JwN2jpSH79xZW7A.mft (raw, json) Hash identifier: mSnb0X7JcDOgQUABp4zryYEpEJgBF0xhUuzlA8Wp4oc= Subject key identifier: 3A:CB:86:69:F8:1C:04:5C:C3:29:27:99:45:DE:AE:9C:8A:6C:D6:55 Authority key identifier: E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0 Certificate issuer: /CN=A91CC4A7/serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft Manifest number: 47 Signing time: Sun 01 Mar 2026 09:44:28 +0000 Manifest this update: Sun 01 Mar 2026 09:44:27 +0000 Manifest next update: Sun 08 Mar 2026 09:44:27 +0000 Files and hashes: 1: 5C9d7yZZtef6JwN2jpSH79xZW7A.crl (hash: XJxb5x87tGz105lAUNhILbm35G9Df77gzKFxai1FR+I=) 2: 944C9A24AB4511F09AA0C458C4F9AE02.roa (hash: 4YrP0rl3gACg5qm8ArvUCizFJDOa1cfOGVN50zaYqQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC4A7, serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0 Validity Not Before: Mar 1 09:44:27 2026 GMT Not After : Mar 8 09:44:27 2026 GMT Subject: CN=69a40a7c-3816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ce:7a:96:07:0d:eb:38:a3:ed:9e:07:7a:cb: c5:d0:89:97:65:dc:ba:1d:43:8b:3f:80:80:66:ec: 56:16:df:af:a0:a3:f6:f9:bb:b2:91:cc:c8:f8:b0: 6a:ae:f1:ff:40:21:70:b3:75:27:96:75:a9:7c:05: b5:eb:fc:07:a8:b3:54:4a:38:e5:90:bd:19:11:fd: d3:ce:27:bf:12:c1:3c:0b:c6:03:28:29:71:bf:08: d1:3c:4e:cf:2d:a4:e4:39:0a:f2:26:af:47:3e:66: 58:12:44:76:a9:1e:a8:d4:7f:a9:04:c5:07:a2:c8: be:07:c2:a9:77:3b:cb:f0:56:09:2d:11:b7:bd:50: ac:ab:13:db:1b:b6:16:f0:74:0a:0e:e9:01:9c:db: a3:84:46:d5:a5:0d:58:31:d9:c6:c7:04:4f:7c:4d: 7f:85:54:89:ff:d6:8c:d0:3d:77:1a:65:ef:ba:9c: e3:27:94:9a:87:82:6d:63:94:6b:1e:3d:a1:b0:c2: 61:7e:01:d1:32:3e:98:4f:20:b6:6a:81:6b:12:e0: bb:eb:14:f5:29:61:53:ac:de:b9:02:64:d8:1c:2d: e9:09:ce:f6:59:aa:dd:d1:91:ae:66:5d:3f:88:bb: 5c:d1:da:83:f5:85:11:de:b0:37:61:4a:e3:7d:87: 31:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CB:86:69:F8:1C:04:5C:C3:29:27:99:45:DE:AE:9C:8A:6C:D6:55 X509v3 Authority Key Identifier: keyid:E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:b2:22:da:a7:4d:ab:ca:e8:41:2f:9d:ee:00:c9:bc:95:57: d6:49:af:a2:d5:ba:17:79:dc:b7:76:c3:ca:1b:78:99:25:cd: c8:66:e2:fb:57:67:c1:d7:99:a8:d9:2f:e7:04:ba:47:51:b2: 47:e0:01:55:25:46:b5:6d:89:62:83:f5:41:e3:e0:bb:bb:3f: 8d:f7:93:0e:9b:56:af:b6:0b:46:fa:6a:c2:40:5c:9d:d9:df: 9c:16:c4:89:fc:f6:a9:19:0e:16:91:17:9e:28:e1:2b:49:70: 5b:24:b6:eb:eb:b4:05:1f:9a:f4:aa:cf:c4:de:12:f9:d0:1c: 58:84:e2:36:4b:bf:01:56:9b:c7:e7:8d:78:ac:b7:04:d2:3e: 6d:6f:0c:8f:2a:9f:ae:58:9b:fd:6f:d3:ef:c5:d3:26:2e:6e: 3d:dd:6a:73:27:73:86:2a:61:18:8d:c6:a5:3d:50:f8:bd:0c: ea:2f:9e:2b:96:0c:87:f0:11:47:31:31:01:57:be:70:8b:92: 75:d7:78:13:5e:f2:1c:06:51:81:fe:f6:24:bd:23:2f:f9:ba: cc:41:cf:a6:3a:d6:48:97:b3:12:1a:98:27:25:a0:cc:50:3d: 12:e4:d4:7b:3c:2d:51:60:70:50:0a:e1:b5:34:17:85:7b:98: cc:06:34:1e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzRBNzExMC8GA1UEBRMoRTQyRjVERUYyNjU5QjVFN0ZBMjcwMzc2OEU5NDg3RUZE QzU5NUJCMDAeFw0yNjAzMDEwOTQ0MjdaFw0yNjAzMDgwOTQ0MjdaMBgxFjAUBgNV BAMTDTY5YTQwYTdjLTM4MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxznqWBw3rOKPtngd6y8XQiZdl3LodQ4s/gIBm7FYW36+go/b5u7KRzMj4sGqu 8f9AIXCzdSeWdal8BbXr/Aeos1RKOOWQvRkR/dPOJ78SwTwLxgMoKXG/CNE8Ts8t pOQ5CvImr0c+ZlgSRHapHqjUf6kExQeiyL4Hwql3O8vwVgktEbe9UKyrE9sbthbw dAoO6QGc26OERtWlDVgx2cbHBE98TX+FVIn/1ozQPXcaZe+6nOMnlJqHgm1jlGse PaGwwmF+AdEyPphPILZqgWsS4LvrFPUpYVOs3rkCZNgcLekJzvZZqt3Rka5mXT+I u1zR2oP1hRHesDdhSuN9hzEtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOsuGafgc BFzDKSeZRd6unIps1lUwHwYDVR0jBBgwFoAU5C9d7yZZtef6JwN2jpSH79xZW7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDNEE3L0ZBOThGQjNFQUI0 NDExRjA4NDNEMDY1N0M0RjlBRTAyLzVDOWQ3eVpadGVmNkp3TjJqcFNINzl4Wlc3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNUM5ZDd5Wlp0ZWY2SndOMmpwU0g3OXhaVzdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND NEE3L0ZBOThGQjNFQUI0NDExRjA4NDNEMDY1N0M0RjlBRTAyLzVDOWQ3eVpadGVm Nkp3TjJqcFNINzl4Wlc3QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCesiLap02ryuhBL53uAMm8lVfWSa+i1boXedy3dsPKG3iZJc3IZuL7V2fB15mo 2S/nBLpHUbJH4AFVJUa1bYlig/VB4+C7uz+N95MOm1avtgtG+mrCQFyd2d+cFsSJ /PapGQ4WkReeKOErSXBbJLbr67QFH5r0qs/E3hL50BxYhOI2S78BVpvH5414rLcE 0j5tbwyPKp+uWJv9b9PvxdMmLm493WpzJ3OGKmEYjcalPVD4vQzqL54rlgyH8BFH MTEBV75wi5J113gTXvIcBlGB/vYkvSMv+brMQc+mOtZIl7MSGpgnJaDMUD0S5NR7 PC1RYHBQCuG1NBeFe5jMBjQe -----END CERTIFICATE-----Generated at Mon Mar 2 02:21:37 2026 by rpki-client