$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft File: SokSJxJpPqAI66ehAaxiJpX67CQ.mft (raw, json) Hash identifier: eETBC0NTgBfUpzGccSxzO9S7RVEuHtCbkp1MqQJK3Is= Subject key identifier: 5F:68:1E:25:84:46:B4:7E:0A:40:8C:A7:1A:C7:F8:71:A2:D9:B2:F8 Authority key identifier: 4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 Certificate issuer: /CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Certificate serial: 0501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft Manifest number: 04F6 Signing time: Sun 01 Mar 2026 23:36:44 +0000 Manifest this update: Sun 01 Mar 2026 23:36:42 +0000 Manifest next update: Sun 08 Mar 2026 23:36:42 +0000 Files and hashes: 1: SokSJxJpPqAI66ehAaxiJpX67CQ.crl (hash: JbGdT1gWLrmoiaZBjz4sHCvFE/9PKHdKb+LiiOdqEE0=) 2: 178FCB6AE8AC11F0B6F09D7D576F56BC.roa (hash: ZzJpUKtICRqREKaG/iDLM+4AxhvNZvZ/7pGK89GC6Zw=) 3: 05F05A76D07B11F08779390AC4F9AE02.roa (hash: SKDCF5+Rd2qukuCq1g9abzS9N2w0YYh01qL+F+bWIjY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1281 (0x501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF20, serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Validity Not Before: Mar 1 23:36:42 2026 GMT Not After : Mar 8 23:36:42 2026 GMT Subject: CN=69a4cd8c-7f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:18:25:b2:f3:af:71:ab:a6:39:69:12:4f:e2: 78:1e:69:e3:ce:2d:f4:84:a7:92:4e:31:3a:cb:f8: 02:87:18:63:fb:b9:4d:44:9b:2e:73:fa:38:b3:f9: f0:b9:5d:45:8b:39:91:5f:9f:bd:80:81:cd:c7:67: 83:54:81:cc:65:37:a5:b5:cc:84:83:fc:f2:e5:9b: cf:55:52:de:2f:d2:f4:0a:de:64:d2:5c:2b:fd:7b: 30:4e:ff:5d:ff:60:c2:2c:2c:99:f5:86:b3:38:ce: 9a:18:a0:83:b6:bd:21:25:b9:fa:bc:48:78:7f:a0: 2c:1f:a2:54:b7:73:65:87:25:24:4f:2a:fb:d1:e0: a1:3f:01:5a:5e:3f:45:00:4f:2f:78:1b:66:0c:f1: 25:7d:0c:70:77:94:f1:75:39:0e:a3:7c:03:94:1d: 3f:d9:a3:68:7e:eb:55:5d:35:04:f7:8d:07:86:c3: e9:0e:fc:ae:65:ff:6c:a8:a6:74:df:d9:03:c5:73: 55:ee:e8:8f:85:83:ba:7a:da:c7:6e:bf:d4:50:5a: cb:7a:c5:66:b2:7b:19:2d:e0:02:f2:03:bd:27:6c: 35:8a:c2:6f:58:a8:40:45:fe:4d:9f:76:ca:22:28: 49:52:e3:67:4c:e1:a6:64:b4:61:18:31:f1:97:9d: ea:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:68:1E:25:84:46:B4:7E:0A:40:8C:A7:1A:C7:F8:71:A2:D9:B2:F8 X509v3 Authority Key Identifier: keyid:4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:15:49:66:01:e4:3e:12:40:2e:51:01:6b:d1:cf:2b:b2:db: 5f:6d:fa:73:67:89:08:16:96:43:55:0c:f3:7f:db:48:b2:9a: e9:ed:09:ff:90:16:60:52:d0:d5:8b:02:b5:35:7c:1d:22:e2: 69:39:ec:37:5d:10:c8:8f:12:aa:b1:1a:23:8d:51:82:3e:94: 51:59:94:1d:8a:56:21:c7:44:8c:b0:81:f8:39:46:67:c1:cb: 8f:e4:03:37:fb:07:52:f7:07:3e:64:97:3b:71:41:e5:58:62: 33:34:16:a7:a3:47:06:63:df:35:06:19:7a:5d:96:fc:c7:12: d7:c1:c4:a7:df:71:80:2d:00:0c:e2:0a:67:7f:ba:d4:ff:84: 62:40:d3:09:7c:64:15:a8:9a:0c:10:3d:a6:9f:c5:e7:83:ea: b4:fb:4e:d7:c4:a7:4e:a2:9e:ab:56:9c:df:b5:44:32:06:c0: 2e:76:76:a9:db:31:de:06:10:63:5b:bf:2a:f4:48:41:03:4e: 06:37:e5:87:68:b6:39:ba:50:85:de:55:52:98:09:19:f9:bf: 41:4f:db:4f:ba:55:88:f9:48:e6:f0:a8:5e:5f:78:18:46:1d: 5a:86:34:74:20:15:f7:59:95:09:e5:75:aa:58:12:4f:92:51: bd:87:f7:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGMjAxMTAvBgNVBAUTKDRBODkxMjI3MTI2OTNFQTAwOEVCQTdBMTAxQUM2MjI2 OTVGQUVDMjQwHhcNMjYwMzAxMjMzNjQyWhcNMjYwMzA4MjMzNjQyWjAYMRYwFAYD VQQDEw02OWE0Y2Q4Yy03ZjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxglsvOvcaumOWkST+J4Hmnjzi30hKeSTjE6y/gChxhj+7lNRJsuc/o4s/nw uV1FizmRX5+9gIHNx2eDVIHMZTeltcyEg/zy5ZvPVVLeL9L0Ct5k0lwr/XswTv9d /2DCLCyZ9YazOM6aGKCDtr0hJbn6vEh4f6AsH6JUt3NlhyUkTyr70eChPwFaXj9F AE8veBtmDPElfQxwd5TxdTkOo3wDlB0/2aNofutVXTUE940HhsPpDvyuZf9sqKZ0 39kDxXNV7uiPhYO6etrHbr/UUFrLesVmsnsZLeAC8gO9J2w1isJvWKhARf5Nn3bK IihJUuNnTOGmZLRhGDHxl53qNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF9oHiWE RrR+CkCMpxrH+HGi2bL4MB8GA1UdIwQYMBaAFEqJEicSaT6gCOunoQGsYiaV+uwk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYyMC9GMjY3MTVCMjRG NUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBxQUk2NmVoQWF4aUpwWDY3 Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nva1NKeEpwUHFBSTY2ZWhBYXhpSnBYNjdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYyMC9GMjY3MTVCMjRGNUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBx QUk2NmVoQWF4aUpwWDY3Q1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJxVJZgHkPhJALlEBa9HPK7LbX236c2eJCBaWQ1UM83/bSLKa6e0J/5AWYFLQ 1YsCtTV8HSLiaTnsN10QyI8SqrEaI41Rgj6UUVmUHYpWIcdEjLCB+DlGZ8HLj+QD N/sHUvcHPmSXO3FB5VhiMzQWp6NHBmPfNQYZel2W/McS18HEp99xgC0ADOIKZ3+6 1P+EYkDTCXxkFaiaDBA9pp/F54PqtPtO18SnTqKeq1ac37VEMgbALnZ2qdsx3gYQ Y1u/KvRIQQNOBjflh2i2ObpQhd5VUpgJGfm/QU/bT7pViPlI5vCoXl94GEYdWoY0 dCAV91mVCeV1qlgST5JRvYf3ew== -----END CERTIFICATE-----Generated at Mon Mar 2 05:52:04 2026 by rpki-client