$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft File: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft (raw, json) Hash identifier: BkhX1PlCieIyr4r/w+27utwi2XMYM37+TX3sDhVW0K4= Subject key identifier: D2:84:5A:CB:29:E3:C2:18:9D:4E:AF:33:02:2B:FA:03:DA:97:4B:85 Authority key identifier: 13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74 Certificate issuer: /CN=A91CE9D6/serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74 Certificate serial: 0AA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft Manifest number: 0A82 Signing time: Mon 02 Mar 2026 02:04:47 +0000 Manifest this update: Mon 02 Mar 2026 02:04:47 +0000 Manifest next update: Mon 09 Mar 2026 02:04:47 +0000 Files and hashes: 1: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl (hash: 3/UPTXxqRDzPsn+ouZE47vUyiBuxB1FZpAPg9FqoYvI=) 2: 0166B48CDADF11F08398647877D3641D.roa (hash: ZJV2dmhu0JE10nRhjUYBdcTdypFTIKq4KfcDe8/doJQ=) 3: 02BA60CCDADF11F08398647877D3641D.roa (hash: 1tpNHg5V2m7AJT6KzHxfBy6gB5PqDPo6eAkyeJw5XNY=) 4: 722D43AC7A5A11EABD77E486C4F9AE02.roa (hash: 4cAcI5ocqsy1hZe8HsYZTbIwmQxRPKHWv8/zl5w8ZJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2720 (0xaa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE9D6, serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74 Validity Not Before: Mar 2 02:04:47 2026 GMT Not After : Mar 9 02:04:47 2026 GMT Subject: CN=69a4f03f-c10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1c:fd:98:e3:13:f8:5f:b0:26:c9:38:a1:ad: 7c:1e:ba:08:d9:df:1a:1c:61:74:cb:14:7b:51:33: 48:38:16:ca:4a:04:ff:ab:e5:7b:1b:8f:3e:03:58: ae:2d:a2:40:c7:4b:8b:ae:d6:9e:e6:bd:6f:8c:ab: 81:61:85:74:46:d0:17:af:ba:b9:b0:83:8b:09:aa: 9c:44:83:20:e8:66:2b:bb:fc:9e:d9:9b:29:90:a5: 8b:eb:8d:74:ef:0f:31:16:0a:5a:39:1e:36:ed:92: 34:c2:10:55:72:a0:30:5c:94:2c:32:cf:4e:d0:02: e9:c0:1f:f8:d2:47:7b:e3:e8:c1:15:a2:41:84:10: b9:de:4d:a0:52:1e:f0:81:b1:97:9e:21:4f:9c:3a: 10:dc:34:59:77:ea:c7:0f:f7:8e:53:ce:ae:b5:6c: 08:d1:61:34:d9:86:5e:74:0b:66:38:20:79:ff:88: ca:5a:d3:32:65:32:6a:0a:a8:01:8f:40:88:fa:1c: fa:82:9a:df:d1:e4:5c:e0:66:17:73:5c:05:4f:ac: 23:f9:14:09:1b:a6:0a:64:fe:8d:8e:0e:e6:19:f1: 25:b2:fc:e8:a2:82:f8:10:b4:eb:a1:ae:f2:a0:61: ee:ea:f1:79:e8:98:24:81:03:6c:e3:fd:29:32:7d: 2b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:84:5A:CB:29:E3:C2:18:9D:4E:AF:33:02:2B:FA:03:DA:97:4B:85 X509v3 Authority Key Identifier: keyid:13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:79:c7:d0:b0:10:53:18:d0:ca:65:17:92:67:f7:6e:fe:a4: 96:46:c4:09:8f:32:82:f0:46:bc:f8:8c:73:b9:33:a3:15:38: 8f:ab:a1:1d:d5:21:ad:a7:62:19:bd:89:ac:87:49:b1:06:ce: af:07:a3:1e:30:57:d7:f5:41:b1:d7:70:34:6f:66:76:f9:ca: d2:dd:a1:1a:32:6d:fd:34:b5:a9:44:74:d2:78:f6:49:15:fd: 4a:e9:78:9b:60:52:31:52:57:4d:88:c1:23:ef:45:d9:54:83: 0f:e5:29:2f:18:4e:9b:8b:aa:80:af:30:b4:16:f9:e9:10:0b: 31:9a:30:22:6c:fc:ba:04:8c:c0:3c:a8:a8:35:b5:5e:27:b4: 9c:98:62:66:44:45:c7:01:3e:3d:43:1e:7c:2d:d8:86:90:5d: d7:83:14:32:e5:c5:da:f0:f6:b2:28:2b:98:c4:0f:69:de:04: 0d:e3:f6:3e:c5:74:82:11:e7:bc:77:16:44:95:73:f7:d3:37: 26:d9:80:ac:a2:8b:80:65:09:3c:a2:5b:ea:60:5c:14:a0:79: 6f:06:43:39:a0:06:54:33:51:6b:88:ba:33:e8:9a:56:e0:71: 5b:da:74:8f:70:8e:44:e2:75:64:d0:0d:41:a5:5e:88:76:36: e7:4d:43:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5RDYxMTAvBgNVBAUTKDEzNjc0MUJEOUU4NzBGMDZFQ0U1Q0IzNTVCOEM3NTcx Q0M5NkJBNzQwHhcNMjYwMzAyMDIwNDQ3WhcNMjYwMzA5MDIwNDQ3WjAYMRYwFAYD VQQDEw02OWE0ZjAzZi1jMTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxz9mOMT+F+wJsk4oa18HroI2d8aHGF0yxR7UTNIOBbKSgT/q+V7G48+A1iu LaJAx0uLrtae5r1vjKuBYYV0RtAXr7q5sIOLCaqcRIMg6GYru/ye2ZspkKWL6410 7w8xFgpaOR427ZI0whBVcqAwXJQsMs9O0ALpwB/40kd74+jBFaJBhBC53k2gUh7w gbGXniFPnDoQ3DRZd+rHD/eOU86utWwI0WE02YZedAtmOCB5/4jKWtMyZTJqCqgB j0CI+hz6gprf0eRc4GYXc1wFT6wj+RQJG6YKZP6Njg7mGfElsvzoooL4ELTroa7y oGHu6vF56JgkgQNs4/0pMn0ruwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNKEWssp 48IYnU6vMwIr+gPal0uFMB8GA1UdIwQYMBaAFBNnQb2ehw8G7OXLNVuMdXHMlrp0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTlENi85RTY2RjUxMjdB NTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3YnM1Y3MxVzR4MWNjeVd1 blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UyZEJ2WjZIRHdiczVjczFXNHgxY2N5V3VuUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTlENi85RTY2RjUxMjdBNTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3 YnM1Y3MxVzR4MWNjeVd1blEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl3nH0LAQUxjQymUXkmf3bv6klkbECY8ygvBGvPiMc7kzoxU4j6uhHdUhradi Gb2JrIdJsQbOrwejHjBX1/VBsddwNG9mdvnK0t2hGjJt/TS1qUR00nj2SRX9Sul4 m2BSMVJXTYjBI+9F2VSDD+UpLxhOm4uqgK8wtBb56RALMZowImz8ugSMwDyoqDW1 Xie0nJhiZkRFxwE+PUMefC3YhpBd14MUMuXF2vD2sigrmMQPad4EDeP2PsV0ghHn vHcWRJVz99M3JtmArKKLgGUJPKJb6mBcFKB5bwZDOaAGVDNRa4i6M+iaVuBxW9p0 j3COROJ1ZNANQaVeiHY2501D8w== -----END CERTIFICATE-----Generated at Mon Mar 2 07:39:27 2026 by rpki-client