$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft File: tZ39tQipur3Pjaqv4_PeaVn7E6o.mft (raw, json) Hash identifier: E5pdT/gKW8wePuLQIUbV358Dsca529qQpJW59CZhRRI= Subject key identifier: 50:D5:F9:AB:67:CE:35:FE:11:A2:FC:CD:EF:43:6E:84:A4:F8:77:1A Authority key identifier: B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA Certificate issuer: /CN=A91D1A9C/serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft Manifest number: 0134 Signing time: Sun 01 Mar 2026 06:29:33 +0000 Manifest this update: Sun 01 Mar 2026 06:29:33 +0000 Manifest next update: Sun 08 Mar 2026 06:29:33 +0000 Files and hashes: 1: tZ39tQipur3Pjaqv4_PeaVn7E6o.crl (hash: 2XR44CYtiyJJxLZnJOV4vXKYeVdy6zYvefFPDMZ9fU8=) 2: 31A71E34407111EFAC14A640C4F9AE02.roa (hash: qvhByE3oiLELsQTu9SaN/ARZ+azzx+zT+u1j1qLqciY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1A9C, serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA Validity Not Before: Mar 1 06:29:33 2026 GMT Not After : Mar 8 06:29:33 2026 GMT Subject: CN=69a3dccd-8399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f5:a9:2e:49:02:0c:8e:77:2e:01:56:8a:df: 85:b7:e3:8a:0d:b2:0f:cb:37:24:08:a5:12:be:61: c7:0b:df:69:4f:5c:a6:89:ab:ec:e7:c6:84:1b:f1: 5a:ba:7e:d6:9b:4c:2c:23:fc:03:4e:28:7d:c6:db: 4b:c5:3c:51:bb:58:e4:81:ce:b6:24:81:71:41:03: e4:ee:1a:b1:fe:3a:bc:83:3e:18:82:65:12:0b:c3: d6:e2:8e:6f:fe:6a:58:cd:cc:f1:59:ae:fe:48:1c: f9:01:26:1e:81:65:31:c4:28:87:b4:c4:98:40:3d: 72:22:8b:53:b1:ad:d3:2a:89:27:ce:d7:b7:bd:e2: 36:2c:e2:4c:ec:27:62:cc:4e:1d:65:12:53:60:9a: b6:da:21:40:50:34:10:04:a8:87:c7:07:d2:43:c1: 43:67:7b:0d:23:6b:c0:1c:be:e1:fa:a3:b7:7d:72: b2:38:67:8d:a7:28:b5:35:03:5f:9b:f2:63:9b:71: 2f:f3:10:ef:b8:b6:3b:ee:ee:57:c2:05:4c:e3:3e: 58:ab:fa:d0:a2:1c:b0:de:3d:f5:82:09:17:5d:05: b6:d3:90:eb:4f:cd:00:49:c7:bd:0b:a0:d5:87:26: 30:8d:56:2b:01:b4:59:4d:89:8c:4e:11:79:47:68: d3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D5:F9:AB:67:CE:35:FE:11:A2:FC:CD:EF:43:6E:84:A4:F8:77:1A X509v3 Authority Key Identifier: keyid:B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:ef:fd:16:b8:b4:25:56:c2:b7:ec:52:88:25:7d:7e:00:6d: fe:26:fc:6a:11:dc:8d:4a:41:fb:19:84:32:52:58:32:95:12: 39:0f:5b:77:40:9c:b6:19:85:ce:9d:b7:f9:fa:aa:c7:72:04: 27:77:dd:a3:74:5d:00:ac:fd:d1:b7:1f:64:59:b8:b1:f8:4a: 95:c6:4c:4d:fb:3c:2f:42:63:c3:f9:d1:31:a7:98:75:5e:2c: 2b:65:58:31:ef:ba:17:68:c0:28:61:14:03:ed:41:08:5e:f5: 6f:47:23:cc:f5:9b:e2:2a:a5:d0:c3:7e:bb:65:a5:a2:83:10: c1:33:9e:b6:a4:52:2c:8e:eb:3a:5c:85:35:c6:54:82:96:80: 89:d4:d2:76:d2:dc:06:85:7b:44:d3:4e:cd:30:d5:70:90:9e: e0:4b:05:ed:20:ec:76:a5:f0:ac:8a:40:51:c0:f5:ac:66:15: 8e:73:fd:93:17:8f:a6:34:50:b3:0c:ee:49:7e:6e:d0:37:b3: a3:d2:43:ab:6e:69:47:f0:8d:a3:8e:2c:96:32:2f:8c:e3:44: 71:35:f5:06:5c:5c:db:33:66:b2:2f:a7:3b:d1:0e:51:2b:ab: 9e:a7:c3:ea:c8:e4:8b:41:ed:ef:66:c9:0a:55:2a:16:4c:5e: c6:47:94:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFBOUMxMTAvBgNVBAUTKEI1OURGREI1MDhBOUJBQkRDRjhEQUFBRkUzRjNERTY5 NTlGQjEzQUEwHhcNMjYwMzAxMDYyOTMzWhcNMjYwMzA4MDYyOTMzWjAYMRYwFAYD VQQDEw02OWEzZGNjZC04Mzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPWpLkkCDI53LgFWit+Ft+OKDbIPyzckCKUSvmHHC99pT1ymiavs58aEG/Fa un7Wm0wsI/wDTih9xttLxTxRu1jkgc62JIFxQQPk7hqx/jq8gz4YgmUSC8PW4o5v /mpYzczxWa7+SBz5ASYegWUxxCiHtMSYQD1yIotTsa3TKoknzte3veI2LOJM7Cdi zE4dZRJTYJq22iFAUDQQBKiHxwfSQ8FDZ3sNI2vAHL7h+qO3fXKyOGeNpyi1NQNf m/Jjm3Ev8xDvuLY77u5XwgVM4z5Yq/rQohyw3j31ggkXXQW205DrT80ASce9C6DV hyYwjVYrAbRZTYmMThF5R2jTLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFDV+atn zjX+EaL8ze9DboSk+HcaMB8GA1UdIwQYMBaAFLWd/bUIqbq9z42qr+Pz3mlZ+xOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUE5Qy84RThCM0U3RTQw NzAxMUVGQjRBMTgwMEFDNEY5QUUwMi90WjM5dFFpcHVyM1BqYXF2NF9QZWFWbjdF Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RaMzl0UWlwdXIzUGphcXY0X1BlYVZuN0U2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUE5Qy84RThCM0U3RTQwNzAxMUVGQjRBMTgwMEFDNEY5QUUwMi90WjM5dFFpcHVy M1BqYXF2NF9QZWFWbjdFNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWO/9Fri0JVbCt+xSiCV9fgBt/ib8ahHcjUpB+xmEMlJYMpUSOQ9bd0CcthmF zp23+fqqx3IEJ3fdo3RdAKz90bcfZFm4sfhKlcZMTfs8L0Jjw/nRMaeYdV4sK2VY Me+6F2jAKGEUA+1BCF71b0cjzPWb4iql0MN+u2WlooMQwTOetqRSLI7rOlyFNcZU gpaAidTSdtLcBoV7RNNOzTDVcJCe4EsF7SDsdqXwrIpAUcD1rGYVjnP9kxePpjRQ swzuSX5u0Dezo9JDq25pR/CNo44sljIvjONEcTX1Blxc2zNmsi+nO9EOUSurnqfD 6sjki0Ht72bJClUqFkxexkeUew== -----END CERTIFICATE-----Generated at Sun Mar 1 21:12:43 2026 by rpki-client