$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft File: _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json) Hash identifier: dCFDyFU8YOM0k4dXmAKWS0f+LLQZysqat89muE4s4D4= Subject key identifier: F9:4F:CD:A8:24:35:F4:AF:E4:A5:FF:93:D9:10:FA:A4:DD:AC:8E:16 Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 Certificate issuer: /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Certificate serial: 3552 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft Manifest number: 3535 Signing time: Mon 02 Mar 2026 01:45:21 +0000 Manifest this update: Mon 02 Mar 2026 01:45:19 +0000 Manifest next update: Mon 09 Mar 2026 01:45:19 +0000 Files and hashes: 1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: 80Qjvw5sMPpKT4kIpZBcRWQSik7Gxf8PKF7w4QwEX3c=) 2: 9954B962F02D11EFBA26B94FC4F9AE02.roa (hash: iVqpihrvbtGEhOH9xeRRmKHZKJ6A9LPs9WQo35Kevsw=) 3: BFABA2D6BECE11F0B218C045C4F9AE02.roa (hash: borgFD/G1rYLDKzDejZogK4BXyIa5F9u4Hn6UrRemA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13650 (0x3552) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Validity Not Before: Mar 2 01:45:19 2026 GMT Not After : Mar 9 01:45:19 2026 GMT Subject: CN=69a4ebb0-411c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:e4:6d:2a:4b:c6:9d:e7:f9:31:b8:f0:6e: 2e:85:de:8a:33:01:66:98:a4:00:96:90:9b:39:50: 41:59:c1:49:2b:16:e6:7d:5a:62:98:12:0d:e0:46: 7a:ee:6a:07:25:d8:d4:76:aa:14:b8:0f:c4:5d:c9: 32:8c:f4:6a:2e:8b:b0:ed:40:e6:8a:cc:6d:6e:b8: ce:d7:02:93:aa:83:9c:b2:9a:76:8c:74:69:15:e4: 94:2e:f0:01:18:a3:76:dc:1d:41:a3:c2:e5:c4:d5: f6:c6:e7:71:54:c0:ba:9e:40:89:e2:88:46:4b:eb: 9d:97:5f:68:de:c9:f2:1d:a3:fe:14:6b:9c:e1:2d: b8:50:ac:ff:31:92:4f:98:38:ef:37:62:cd:bd:9c: a8:00:93:69:cc:18:58:07:d5:1b:e9:cd:50:59:29: 5c:2d:7e:4f:3b:77:ce:d6:aa:7c:a3:1d:a1:0b:a1: a5:7c:93:09:e9:88:19:36:f7:35:27:75:b9:cd:4d: d7:35:07:4d:04:af:bb:54:ab:6e:36:a5:1a:19:e7: 67:c7:3d:9a:f2:32:59:b9:b8:4b:71:37:25:05:0f: ca:3f:45:12:51:cf:c5:bd:75:3c:a3:ce:56:71:7f: 58:9a:7a:7f:c3:4c:52:aa:7d:92:0b:5a:f4:ee:96: ac:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4F:CD:A8:24:35:F4:AF:E4:A5:FF:93:D9:10:FA:A4:DD:AC:8E:16 X509v3 Authority Key Identifier: keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b2:2f:e7:b5:8b:87:88:f8:17:a6:fe:48:5c:aa:ff:2e:d8: 24:11:11:5b:6d:ee:78:94:a9:04:bc:17:da:fe:90:fc:2f:d8: ec:f4:37:7f:c1:9f:76:2e:99:29:59:b5:cf:4d:e0:fb:f8:eb: de:25:21:f0:9a:0e:85:b4:14:fe:37:86:ab:c4:df:2b:7b:f6: 8b:74:fb:63:e6:15:66:c0:38:90:f8:2e:68:3d:50:98:d0:bc: 90:b0:eb:b2:ac:b6:13:c3:52:4b:4d:57:ba:e2:d4:cc:d2:74: 8a:d6:a7:c6:31:cd:43:f2:e4:3a:37:3f:14:e5:6f:dd:2b:52: f5:ba:f8:82:0d:f3:f1:89:98:2c:92:f3:8e:3f:50:11:d8:23: 18:dd:f2:de:85:8b:de:50:58:62:9f:d9:96:79:7d:28:e4:dd: ca:e0:60:30:97:61:a7:dd:b6:9e:a5:26:56:fe:d7:5f:48:6c: 39:ab:e3:a6:45:c5:8f:ba:0e:58:23:92:9d:3e:d2:d3:27:8b: 01:d7:e6:03:fb:6f:f7:29:13:6b:13:77:19:90:2d:aa:11:71: 13:94:7e:ae:db:5b:bb:e6:a4:b6:3c:a9:f0:77:5a:c6:d7:b5: 59:f3:9a:6f:22:ab:aa:08:9e:41:08:5b:6d:78:57:92:52:dd: e5:2d:b2:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQ0ExMTAvBgNVBAUTKEZFODI2RUU5QkMxMkRBQUQzQjE5NzQ3MUIwNDEzRjFF QjIwODI2MzUwHhcNMjYwMzAyMDE0NTE5WhcNMjYwMzA5MDE0NTE5WjAYMRYwFAYD VQQDEw02OWE0ZWJiMC00MTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubTkbSpLxp3n+TG48G4uhd6KMwFmmKQAlpCbOVBBWcFJKxbmfVpimBIN4EZ6 7moHJdjUdqoUuA/EXckyjPRqLouw7UDmisxtbrjO1wKTqoOcspp2jHRpFeSULvAB GKN23B1Bo8LlxNX2xudxVMC6nkCJ4ohGS+udl19o3snyHaP+FGuc4S24UKz/MZJP mDjvN2LNvZyoAJNpzBhYB9Ub6c1QWSlcLX5PO3fO1qp8ox2hC6GlfJMJ6YgZNvc1 J3W5zU3XNQdNBK+7VKtuNqUaGednxz2a8jJZubhLcTclBQ/KP0USUc/FvXU8o85W cX9Ymnp/w0xSqn2SC1r07pasHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPlPzagk NfSv5KX/k9kQ+qTdrI4WMB8GA1UdIwQYMBaAFP6Cbum8EtqtOxl0cbBBPx6yCCY1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQS9CNTg4QjRBNjFE ODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJxMDdHWFJ4c0VFX0hySUlK alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19vSnU2YndTMnEwN0dYUnhzRUVfSHJJSUpqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJDQS9CNTg4QjRBNjFEODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJx MDdHWFJ4c0VFX0hySUlKalUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO7Iv57WLh4j4F6b+SFyq/y7YJBERW23ueJSpBLwX2v6Q/C/Y7PQ3f8Gfdi6Z KVm1z03g+/jr3iUh8JoOhbQU/jeGq8TfK3v2i3T7Y+YVZsA4kPguaD1QmNC8kLDr sqy2E8NSS01XuuLUzNJ0itanxjHNQ/LkOjc/FOVv3StS9br4gg3z8YmYLJLzjj9Q EdgjGN3y3oWL3lBYYp/Zlnl9KOTdyuBgMJdhp922nqUmVv7XX0hsOavjpkXFj7oO WCOSnT7S0yeLAdfmA/tv9ykTaxN3GZAtqhFxE5R+rttbu+aktjyp8Hdaxte1WfOa byKrqgieQQhbbXhXklLd5S2y8g== -----END CERTIFICATE-----Generated at Mon Mar 2 07:17:07 2026 by rpki-client