$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft File: 148wkE5135TOt1lmr4OOdj6ol2I.mft (raw, json) Hash identifier: i6obQ4qJuieuGoH1CB2H+k8RYu1wfOmmG/rbIE4Rv5A= Subject key identifier: 52:0D:7C:56:C8:FE:47:80:B5:14:31:EB:D6:3E:FE:14:57:19:25:68 Authority key identifier: D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62 Certificate issuer: /CN=A91CE403/serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft Manifest number: 0152 Signing time: Sun 01 Mar 2026 06:08:32 +0000 Manifest this update: Sun 01 Mar 2026 06:08:31 +0000 Manifest next update: Sun 08 Mar 2026 06:08:31 +0000 Files and hashes: 1: 148wkE5135TOt1lmr4OOdj6ol2I.crl (hash: 3Z76tIVwE8X2nl82djWemt8lOyh3RPe1hpFZ7Lc/jrg=) 2: B74BF7F018BF11EFB54AFB20C4F9AE02.roa (hash: PmHnCW9wuHVesyB6pjwdM0nSHd68dr8hBmAABYCg/4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE403, serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762 Validity Not Before: Mar 1 06:08:31 2026 GMT Not After : Mar 8 06:08:31 2026 GMT Subject: CN=69a3d7e0-87b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8b:ac:8d:55:77:d5:a4:7d:3f:c7:cd:29:0c: 17:c5:19:d0:c5:5f:92:52:2c:22:b5:8c:d8:94:64: d0:74:bd:96:25:a8:3e:dc:1c:81:44:3d:1a:d3:69: 1c:ce:05:ca:db:70:ad:0f:6c:25:6b:f0:da:e2:81: ed:28:76:2f:9b:b6:2c:fb:e5:1b:a7:0e:ff:ed:d1: 7a:b6:a8:95:cc:d9:e9:18:4b:b4:f9:90:e4:f2:f2: cc:ea:20:09:2a:c8:32:d8:52:99:46:c5:55:19:f8: 49:d4:a7:a1:fd:77:7f:a4:09:69:a8:24:cf:79:f7: 43:39:f7:0f:0b:24:4b:87:30:e9:7f:db:b7:4c:dc: 19:e3:bc:a1:55:c6:ff:74:60:ce:cb:5c:74:ed:6c: 37:80:4b:0b:df:8c:00:1f:4b:5b:43:3c:9a:0e:a5: 18:54:d6:e7:84:cf:1f:4c:f3:02:a8:b2:eb:f0:04: df:0a:51:bc:c3:55:27:13:58:35:ef:1e:34:93:e8: f0:27:f9:c7:b3:b6:c7:a8:39:0f:4d:05:2e:12:57: b3:dc:84:6c:dd:76:c8:5b:5c:13:49:b8:b4:dc:c8: 18:82:07:23:dd:8a:bc:cf:7e:b9:9c:48:75:b7:12: 91:0b:48:05:e6:e6:99:ea:f0:ab:4a:82:bd:3f:9e: d8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0D:7C:56:C8:FE:47:80:B5:14:31:EB:D6:3E:FE:14:57:19:25:68 X509v3 Authority Key Identifier: keyid:D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:b0:2c:bf:56:c2:65:49:71:4e:85:a4:79:67:db:3d:08:ac: a4:3b:b9:7a:ca:70:a7:92:8f:20:d3:71:96:fd:ba:65:da:19: 05:4f:38:a2:91:ff:0d:23:11:80:68:29:0d:27:97:54:8a:88: 65:c4:bb:23:4e:09:32:75:ea:fe:7e:5f:6d:e4:7c:42:0b:0a: 93:ff:96:4f:bf:1a:59:c7:25:b2:0d:73:28:d7:35:5a:d3:b0: ce:1d:c3:f7:e8:ed:54:b2:9d:7f:5a:5f:d1:4e:df:d2:5c:c0: 98:e3:d4:7c:ee:38:cc:38:0a:8a:df:da:ca:ee:cf:d0:fc:81: 2f:8b:db:8d:e1:65:67:1e:38:1b:c4:08:b4:13:70:df:76:66: df:b7:06:69:1d:d7:de:bd:00:de:96:b9:ef:d8:17:59:99:7b: 45:74:05:68:6f:c7:b1:e9:93:9b:59:e3:ab:84:12:3c:48:b5: 4c:fa:54:d3:f4:66:49:b4:3e:6d:17:b5:04:40:07:17:ea:d0: 9c:a4:52:35:dc:18:3f:49:63:0c:72:0b:e9:db:09:fa:af:d4: aa:81:5c:66:02:d2:f7:a6:c0:a9:60:9c:31:61:2b:c8:17:30: 7d:fc:5b:18:9e:70:71:0e:5a:6e:d6:4b:4e:10:4d:54:0e:3e: e8:1d:07:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0MDMxMTAvBgNVBAUTKEQ3OEYzMDkwNEU3NURGOTRDRUI3NTk2NkFGODM4RTc2 M0VBODk3NjIwHhcNMjYwMzAxMDYwODMxWhcNMjYwMzA4MDYwODMxWjAYMRYwFAYD VQQDEw02OWEzZDdlMC04N2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIusjVV31aR9P8fNKQwXxRnQxV+SUiwitYzYlGTQdL2WJag+3ByBRD0a02kc zgXK23CtD2wla/Da4oHtKHYvm7Ys++Ubpw7/7dF6tqiVzNnpGEu0+ZDk8vLM6iAJ Ksgy2FKZRsVVGfhJ1Keh/Xd/pAlpqCTPefdDOfcPCyRLhzDpf9u3TNwZ47yhVcb/ dGDOy1x07Ww3gEsL34wAH0tbQzyaDqUYVNbnhM8fTPMCqLLr8ATfClG8w1UnE1g1 7x40k+jwJ/nHs7bHqDkPTQUuElez3IRs3XbIW1wTSbi03MgYggcj3Yq8z365nEh1 txKRC0gF5uaZ6vCrSoK9P57YSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFINfFbI /keAtRQx69Y+/hRXGSVoMB8GA1UdIwQYMBaAFNePMJBOdd+UzrdZZq+DjnY+qJdi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTQwMy84MDIwNzJFODE4 QkUxMUVGQURBN0U1MURDNEY5QUUwMi8xNDh3a0U1MTM1VE90MWxtcjRPT2RqNm9s MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE0OHdrRTUxMzVUT3QxbG1yNE9PZGo2b2wySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTQwMy84MDIwNzJFODE4QkUxMUVGQURBN0U1MURDNEY5QUUwMi8xNDh3a0U1MTM1 VE90MWxtcjRPT2RqNm9sMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUrAsv1bCZUlxToWkeWfbPQispDu5espwp5KPINNxlv26ZdoZBU84opH/DSMR gGgpDSeXVIqIZcS7I04JMnXq/n5fbeR8QgsKk/+WT78aWcclsg1zKNc1WtOwzh3D 9+jtVLKdf1pf0U7f0lzAmOPUfO44zDgKit/ayu7P0PyBL4vbjeFlZx44G8QItBNw 33Zm37cGaR3X3r0A3pa579gXWZl7RXQFaG/HsemTm1njq4QSPEi1TPpU0/RmSbQ+ bRe1BEAHF+rQnKRSNdwYP0ljDHIL6dsJ+q/UqoFcZgLS96bAqWCcMWEryBcwffxb GJ5wcQ5abtZLThBNVA4+6B0HEg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:24:51 2026 by rpki-client