$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft File: kBUoySF5F9lWch0caFZlNFvrVv0.mft (raw, json) Hash identifier: 1ciTWDOOcSRKQ035G+KVh2ZMNW3qamJbXvFGS127+lo= Subject key identifier: E8:B5:99:2E:FB:28:52:60:AB:D7:3B:63:58:A9:E4:8B:4B:0E:BD:6C Authority key identifier: 90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD Certificate issuer: /CN=A91CFAB9/serialNumber=901528C9217917D956721D1C685665345BEB56FD Certificate serial: 03BC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft Manifest number: 03B8 Signing time: Sun 01 Mar 2026 01:10:41 +0000 Manifest this update: Sun 01 Mar 2026 01:10:40 +0000 Manifest next update: Sun 08 Mar 2026 01:10:40 +0000 Files and hashes: 1: kBUoySF5F9lWch0caFZlNFvrVv0.crl (hash: 9QGE0Z3M0BMYx77uOnatq7LO7lnl9MJ+Ndxd7mxPndQ=) 2: 39A335D6CB3F11ECBEBC9A1DC4F9AE02.roa (hash: NmvW/sg0pEXjTHBegEg6TihBwGGc4JodMMQnzVosHvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFAB9, serialNumber=901528C9217917D956721D1C685665345BEB56FD Validity Not Before: Mar 1 01:10:40 2026 GMT Not After : Mar 8 01:10:40 2026 GMT Subject: CN=69a39211-4eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:03:f4:54:49:24:07:5a:e8:f9:b2:50:72:f6: 03:64:6e:36:98:56:ef:c7:23:bf:fc:56:86:a6:69: ad:35:c8:63:05:ae:85:83:99:84:e8:75:b4:9a:5a: 17:a0:74:40:b8:83:9c:11:ff:a6:dc:e3:2c:85:fa: a9:1d:06:93:19:4b:95:23:2b:e7:f2:c8:11:cc:49: b3:80:31:5e:b2:dd:1e:03:23:80:f6:9b:c3:f4:f0: f0:fa:8a:8f:e2:43:52:10:e1:c3:8f:ea:a2:85:2c: 24:32:d2:c4:04:6d:55:7e:f2:4d:64:91:b5:4c:19: 21:ff:a1:fc:32:94:b5:2d:97:4d:c8:27:cc:7e:ac: 42:54:30:89:4c:9d:18:15:62:aa:7a:e5:21:14:73: 15:aa:14:0b:65:ad:00:e1:68:78:7d:59:b8:a9:d6: 0f:62:24:d9:06:98:8e:3d:47:9b:4c:28:0b:28:02: 2a:74:f2:99:f4:be:4a:cd:f8:ec:c5:43:8b:e6:6a: 60:84:2d:3b:8c:07:4d:17:f7:30:ec:86:ca:35:03: be:e1:ca:52:a3:d3:16:c1:86:06:59:88:fc:85:05: 0f:91:55:91:f6:66:b2:fb:8f:61:7c:e8:b6:30:8e: 2c:95:a3:47:7c:dc:bf:a8:0f:79:ee:8e:bd:0b:e5: ce:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B5:99:2E:FB:28:52:60:AB:D7:3B:63:58:A9:E4:8B:4B:0E:BD:6C X509v3 Authority Key Identifier: keyid:90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:21:1e:29:b9:8c:db:5a:25:09:0b:dd:bf:cb:e0:ce:cc:52: c5:37:ea:bf:86:46:49:13:ef:df:77:a6:ca:ba:75:10:c8:95: 31:d3:7a:c0:1f:8d:f8:d6:cf:eb:c1:e5:b5:4d:3c:cb:e3:1b: 21:49:ba:4a:0a:31:c2:f6:61:11:da:9c:88:4d:f6:86:ea:48: c8:0c:ce:bd:8e:b8:58:27:33:31:19:32:ec:2f:c8:7c:61:48: fb:71:98:95:e3:3e:5f:91:1a:f3:2c:67:d6:04:48:8f:08:9b: 5a:ee:51:75:2a:09:2f:d7:63:59:22:f2:e5:8f:29:df:e6:d7: 8f:27:37:ff:9a:60:5a:8c:67:e4:39:77:72:47:85:4e:a0:06: 2f:2e:c3:a3:ea:06:86:16:62:e8:bb:77:1f:88:69:13:d0:34: 90:ef:91:ee:d9:19:5c:c9:27:7f:5c:eb:de:a5:14:e3:f6:3a: 36:f4:c0:58:f7:11:c0:c4:1a:47:f6:d6:1a:74:27:8f:89:85: 17:59:16:4b:ee:a3:9b:a2:2a:ff:96:5e:30:21:01:15:98:a9: 56:38:3e:11:8a:a1:bc:53:82:fe:a2:06:cb:a1:27:5d:c4:38: f1:65:06:5f:40:29:55:d5:74:5d:03:07:4c:ea:96:50:e3:fd: 66:98:e3:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBQjkxMTAvBgNVBAUTKDkwMTUyOEM5MjE3OTE3RDk1NjcyMUQxQzY4NTY2NTM0 NUJFQjU2RkQwHhcNMjYwMzAxMDExMDQwWhcNMjYwMzA4MDExMDQwWjAYMRYwFAYD VQQDDA02OWEzOTIxMS00ZWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwP0VEkkB1ro+bJQcvYDZG42mFbvxyO//FaGpmmtNchjBa6Fg5mE6HW0mloX oHRAuIOcEf+m3OMshfqpHQaTGUuVIyvn8sgRzEmzgDFest0eAyOA9pvD9PDw+oqP 4kNSEOHDj+qihSwkMtLEBG1VfvJNZJG1TBkh/6H8MpS1LZdNyCfMfqxCVDCJTJ0Y FWKqeuUhFHMVqhQLZa0A4Wh4fVm4qdYPYiTZBpiOPUebTCgLKAIqdPKZ9L5Kzfjs xUOL5mpghC07jAdNF/cw7IbKNQO+4cpSo9MWwYYGWYj8hQUPkVWR9may+49hfOi2 MI4slaNHfNy/qA957o69C+XOGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOi1mS77 KFJgq9c7Y1ip5ItLDr1sMB8GA1UdIwQYMBaAFJAVKMkheRfZVnIdHGhWZTRb61b9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkFCOS8xQ0Q0NEY5RUM3 N0ExMUVDQjk0MzRDMkNDNEY5QUUwMi9rQlVveVNGNUY5bFdjaDBjYUZabE5GdnJW djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tCVW95U0Y1RjlsV2NoMGNhRlpsTkZ2clZ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkFCOS8xQ0Q0NEY5RUM3N0ExMUVDQjk0MzRDMkNDNEY5QUUwMi9rQlVveVNGNUY5 bFdjaDBjYUZabE5GdnJWdjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGyEeKbmM21olCQvdv8vgzsxSxTfqv4ZGSRPv33emyrp1EMiVMdN6wB+N+NbP 68HltU08y+MbIUm6SgoxwvZhEdqciE32hupIyAzOvY64WCczMRky7C/IfGFI+3GY leM+X5Ea8yxn1gRIjwibWu5RdSoJL9djWSLy5Y8p3+bXjyc3/5pgWoxn5Dl3ckeF TqAGLy7Do+oGhhZi6Lt3H4hpE9A0kO+R7tkZXMknf1zr3qUU4/Y6NvTAWPcRwMQa R/bWGnQnj4mFF1kWS+6jm6Iq/5ZeMCEBFZipVjg+EYqhvFOC/qIGy6EnXcQ48WUG X0ApVdV0XQMHTOqWUOP9Zpjjow== -----END CERTIFICATE-----Generated at Sun Mar 1 23:47:51 2026 by rpki-client