$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft File: -JbMT1PCpnswRuerKQM9UPSC1Ig.mft (raw, json) Hash identifier: 3GpqHXtGHSlwBqgTxbnB+JQmiVN+7VUBnokjt8ei4do= Subject key identifier: F2:64:89:65:0B:43:25:C8:84:9E:B8:A0:8D:D8:BD:4F:A2:FF:9F:BC Authority key identifier: F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 Certificate issuer: /CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Certificate serial: 0F0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft Manifest number: 0EFC Signing time: Sat 28 Feb 2026 17:43:43 +0000 Manifest this update: Sat 28 Feb 2026 17:43:43 +0000 Manifest next update: Sat 07 Mar 2026 17:43:43 +0000 Files and hashes: 1: -JbMT1PCpnswRuerKQM9UPSC1Ig.crl (hash: rNb4RBg2htYhdkNzaqvc4lINxO1vwdHGRgxGgLI8ihc=) 2: 1D59FA3EADF311E980380735C4F9AE02.roa (hash: HpSAa7XFiaGNFG3GQ/oBDendvmphyHVtYS6J+660tyc=) 3: 1D2E7286A6B111E997D5EA57C4F9AE02.roa (hash: aQnXnhdg8oX1nnoz3IdT+IsXlHOgRbi5z4h0+f1hayI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 17:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3853 (0xf0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E, serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Validity Not Before: Feb 28 17:43:43 2026 GMT Not After : Mar 7 17:43:43 2026 GMT Subject: CN=69a3294f-8673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a8:32:78:bb:a8:b6:71:5f:3f:5e:47:7d:88: b0:da:6e:89:d5:1b:bf:f5:a5:08:5e:ea:3e:48:0b: 61:39:0e:68:a6:14:61:d6:07:e0:65:e6:d3:03:42: 2c:48:d9:5d:db:6f:db:18:e6:c0:d7:1f:5d:27:2e: de:58:3b:77:44:e5:13:8f:cc:bb:47:38:2a:be:d8: da:5e:9a:cb:2a:4a:e9:1c:2b:49:e7:7b:06:88:01: 07:04:ec:8f:67:cf:f0:ff:f1:74:3b:a3:cd:aa:0d: a7:ea:e3:86:14:48:6a:45:8b:93:db:ad:2d:42:f0: ff:1d:38:f1:48:0e:00:a8:17:52:f5:79:e0:bb:c3: c3:bc:5a:30:4c:34:d5:59:da:46:a5:17:9f:28:e4: 38:78:db:e0:a8:3e:42:82:37:ef:24:84:f4:cf:fd: 92:e0:44:21:b2:fe:70:41:f4:97:0b:1b:56:28:6c: 6e:a9:9a:0f:19:d4:37:23:83:b2:05:3a:5e:ce:fb: 01:77:0c:ea:04:66:94:38:19:44:02:d9:14:ac:2c: 8e:b2:e7:9a:02:76:31:10:3a:25:bb:48:ed:d9:f5: cf:0c:6c:ff:c2:b6:ab:2b:89:fe:a6:4c:03:0c:8e: 29:3a:a6:9a:48:ae:01:a9:f7:16:fc:0f:53:18:60: 44:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:64:89:65:0B:43:25:C8:84:9E:B8:A0:8D:D8:BD:4F:A2:FF:9F:BC X509v3 Authority Key Identifier: keyid:F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:c6:0e:ea:43:e4:9f:f4:9a:fa:47:a9:fd:5e:db:9e:ce:eb: 88:66:71:30:80:c6:be:87:8b:32:36:61:a0:e5:8e:93:70:36: 35:7b:f2:e1:f2:72:1d:78:74:aa:20:b7:db:39:8b:00:ac:ec: 91:68:7a:25:b8:41:8d:de:dc:d2:72:6e:a0:ef:86:e8:e6:17: 62:75:46:7c:21:16:a4:a3:d1:1c:bb:a2:29:cc:5d:98:8f:af: 39:de:de:76:5f:1f:8c:19:8b:74:e3:23:4d:ec:9d:2e:15:3a: e4:99:24:3c:e6:a1:bd:2d:3c:00:cb:a5:7d:e8:7f:e8:d9:01: cd:34:b7:be:aa:0f:36:13:86:63:06:1a:a0:d2:e0:4f:57:3f: cf:e4:18:0e:dc:7d:0a:4f:56:9f:38:0a:f3:60:4c:c1:fc:5f: e5:d6:5b:e2:dc:ba:96:3e:f5:8b:83:13:a8:00:76:49:ed:2f: c6:12:df:3d:4e:0c:e3:03:fe:e0:23:f3:f8:28:f2:34:24:2c: 4f:fa:b6:05:e5:5b:c4:f8:68:9a:64:22:06:9b:5b:af:a2:55: c0:fd:25:64:68:9d:6d:11:47:2a:51:50:46:52:5d:f3:2e:7c: 4e:d2:ea:8a:1c:b7:8b:c1:64:6f:bf:96:19:f6:91:5c:29:11: a1:95:f6:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKEY4OTZDQzRGNTNDMkE2N0IzMDQ2RTdBQjI5MDMzRDUw RjQ4MkQ0ODgwHhcNMjYwMjI4MTc0MzQzWhcNMjYwMzA3MTc0MzQzWjAYMRYwFAYD VQQDDA02OWEzMjk0Zi04NjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KgyeLuotnFfP15HfYiw2m6J1Ru/9aUIXuo+SAthOQ5ophRh1gfgZebTA0Is SNld22/bGObA1x9dJy7eWDt3ROUTj8y7RzgqvtjaXprLKkrpHCtJ53sGiAEHBOyP Z8/w//F0O6PNqg2n6uOGFEhqRYuT260tQvD/HTjxSA4AqBdS9Xngu8PDvFowTDTV WdpGpRefKOQ4eNvgqD5CgjfvJIT0z/2S4EQhsv5wQfSXCxtWKGxuqZoPGdQ3I4Oy BTpezvsBdwzqBGaUOBlEAtkUrCyOsueaAnYxEDolu0jt2fXPDGz/wrarK4n+pkwD DI4pOqaaSK4BqfcW/A9TGGBEJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPJkiWUL QyXIhJ64oI3YvU+i/5+8MB8GA1UdIwQYMBaAFPiWzE9TwqZ7MEbnqykDPVD0gtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9EMjU0QjVDNDk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Buc3dSdWVyS1FNOVVQU0Mx SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KYk1UMVBDcG5zd1J1ZXJLUU05VVBTQzFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9EMjU0QjVDNDk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Bu c3dSdWVyS1FNOVVQU0MxSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdMYO6kPkn/Sa+kep/V7bns7riGZxMIDGvoeLMjZhoOWOk3A2NXvy4fJyHXh0 qiC32zmLAKzskWh6JbhBjd7c0nJuoO+G6OYXYnVGfCEWpKPRHLuiKcxdmI+vOd7e dl8fjBmLdOMjTeydLhU65JkkPOahvS08AMulfeh/6NkBzTS3vqoPNhOGYwYaoNLg T1c/z+QYDtx9Ck9WnzgK82BMwfxf5dZb4ty6lj71i4MTqAB2Se0vxhLfPU4M4wP+ 4CPz+CjyNCQsT/q2BeVbxPhommQiBptbr6JVwP0lZGidbRFHKlFQRlJd8y58TtLq ihy3i8Fkb7+WGfaRXCkRoZX2cA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:25:45 2026 by rpki-client