$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft File: SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft (raw, json) Hash identifier: sCWHFEHoNIXFNkK5Kq6lx5isQrpdAHH71f/IbGtcyOA= Subject key identifier: 87:8A:CC:0E:28:F0:E3:5F:A4:3D:0E:B5:B4:E2:EC:DA:1A:55:7F:D7 Authority key identifier: 49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00 Certificate issuer: /CN=A91D2B9A/serialNumber=499D691B0F732D9006E9513C60B7366B4E690400 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft Manifest number: 1B Signing time: Sun 01 Mar 2026 10:24:46 +0000 Manifest this update: Sun 01 Mar 2026 10:24:45 +0000 Manifest next update: Sun 08 Mar 2026 10:24:45 +0000 Files and hashes: 1: SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl (hash: FIEyg5JDStLIkgX3L/5PIOXAT8UEGhiLDLQJwl5ACq0=) 2: 75BE67B2F12311F09E054F8D4F6F56BC.roa (hash: 0WZLBOrY5orE7S2WGRqVxm0407d+k7g1SOw//pvprUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2B9A, serialNumber=499D691B0F732D9006E9513C60B7366B4E690400 Validity Not Before: Mar 1 10:24:45 2026 GMT Not After : Mar 8 10:24:45 2026 GMT Subject: CN=69a413ed-b979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7a:eb:3e:6e:3c:08:9f:b9:a4:84:31:0c:fa: 30:20:a1:f9:12:e9:1c:bd:b2:a5:a2:7d:60:c5:f5: f7:66:12:f4:8e:ac:01:15:70:2a:aa:b4:a8:9d:fe: ec:42:8c:83:d1:12:28:41:4d:f1:be:63:d6:4d:4d: 80:02:47:a3:42:c0:52:ca:72:5f:39:7b:81:00:ff: d0:58:2a:60:23:71:1f:18:a1:76:49:96:cc:fb:98: bb:1b:8e:6a:04:4b:b7:98:69:aa:fe:04:90:93:97: 8f:26:c9:0d:45:49:26:5f:b9:a6:42:36:f1:89:92: bf:87:b0:6d:3c:7c:12:da:28:fc:5b:70:30:02:46: 8e:79:57:01:ce:9f:ca:98:19:38:60:c0:8a:08:50: 6e:5b:c0:85:f2:30:a3:b0:2f:c5:2c:7f:73:ee:56: 3c:8c:c1:71:37:bf:9b:ab:a5:49:46:c8:de:1c:97: 1b:27:67:3a:26:e6:b1:d7:82:38:5a:47:5c:f2:be: 40:0d:0d:ba:11:89:d1:46:de:9b:d2:1d:fd:ba:64: ee:be:5d:58:64:8a:d3:b8:38:13:2e:ca:88:8b:03: 78:42:d2:6b:1b:06:16:fc:e0:a0:e2:1c:6f:49:1c: 23:11:7a:a6:74:e8:0e:05:86:1d:0e:ff:16:f2:4f: 11:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:8A:CC:0E:28:F0:E3:5F:A4:3D:0E:B5:B4:E2:EC:DA:1A:55:7F:D7 X509v3 Authority Key Identifier: keyid:49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f7:3d:6c:1a:ce:d3:68:57:e4:1a:ac:19:1b:2b:39:1b:a7: 4f:b7:86:26:42:4e:a1:cc:09:7e:c5:79:51:3b:6a:16:52:f4: b5:b9:53:a4:f2:5e:05:66:e1:cf:67:69:51:d8:7b:4c:8f:a7: 74:87:7d:3b:c7:ae:2a:84:61:b9:a4:ab:a4:ac:f4:01:a5:d6: e3:9f:ff:70:68:93:66:9e:14:14:90:ca:ee:4f:6c:1a:a0:6e: 9a:ca:a5:a9:c5:70:31:96:f9:17:52:f8:06:c5:93:2d:42:6a: 67:ce:d0:db:02:5b:72:91:8c:25:ff:f0:ec:2e:6b:9f:2f:f1: 5e:e9:12:73:82:57:c6:e5:bd:c2:5e:83:d7:04:95:13:9d:76: 7b:7b:89:9e:e0:e9:a6:a8:93:5c:0e:aa:05:87:e7:fa:05:14: 8a:0d:8d:73:14:b0:84:31:1c:b1:33:6b:8c:f4:35:6b:d1:33: fa:b0:eb:87:4f:ce:c7:50:45:c4:78:04:80:71:3a:56:47:c7: f3:f9:ae:a9:84:88:4a:b2:c6:ac:95:9d:5d:89:59:55:b6:fb: e5:2b:28:a3:b6:0e:54:57:b6:50:f0:94:af:94:da:0d:98:1b: fe:e6:53:d2:41:1e:3b:f0:d0:16:cd:ff:2c:08:40:58:3f:cc: 5c:72:0c:9a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkI5QTExMC8GA1UEBRMoNDk5RDY5MUIwRjczMkQ5MDA2RTk1MTNDNjBCNzM2NkI0 RTY5MDQwMDAeFw0yNjAzMDExMDI0NDVaFw0yNjAzMDgxMDI0NDVaMBgxFjAUBgNV BAMTDTY5YTQxM2VkLWI5NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGeus+bjwIn7mkhDEM+jAgofkS6Ry9sqWifWDF9fdmEvSOrAEVcCqqtKid/uxC jIPREihBTfG+Y9ZNTYACR6NCwFLKcl85e4EA/9BYKmAjcR8YoXZJlsz7mLsbjmoE S7eYaar+BJCTl48myQ1FSSZfuaZCNvGJkr+HsG08fBLaKPxbcDACRo55VwHOn8qY GThgwIoIUG5bwIXyMKOwL8Usf3PuVjyMwXE3v5urpUlGyN4clxsnZzom5rHXgjha R1zyvkANDboRidFG3pvSHf26ZO6+XVhkitO4OBMuyoiLA3hC0msbBhb84KDiHG9J HCMReqZ06A4Fhh0O/xbyTxEvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUh4rMDijw 41+kPQ61tOLs2hpVf9cwHwYDVR0jBBgwFoAUSZ1pGw9zLZAG6VE8YLc2a05pBAAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQjlBLzc3OTY5QjhDRjEy MjExRjBBQzVDREE3RTRFNkY1NkJDL1NaMXBHdzl6TFpBRzZWRThZTGMyYTA1cEJB QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvU1oxcEd3OXpMWkFHNlZFOFlMYzJhMDVwQkFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QjlBLzc3OTY5QjhDRjEyMjExRjBBQzVDREE3RTRFNkY1NkJDL1NaMXBHdzl6TFpB RzZWRThZTGMyYTA1cEJBQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBd9z1sGs7TaFfkGqwZGys5G6dPt4YmQk6hzAl+xXlRO2oWUvS1uVOk8l4FZuHP Z2lR2HtMj6d0h307x64qhGG5pKukrPQBpdbjn/9waJNmnhQUkMruT2waoG6ayqWp xXAxlvkXUvgGxZMtQmpnztDbAltykYwl//DsLmufL/Fe6RJzglfG5b3CXoPXBJUT nXZ7e4me4OmmqJNcDqoFh+f6BRSKDY1zFLCEMRyxM2uM9DVr0TP6sOuHT87HUEXE eASAcTpWR8fz+a6phIhKssaslZ1diVlVtvvlKyijtg5UV7ZQ8JSvlNoNmBv+5lPS QR478NAWzf8sCEBYP8xccgya -----END CERTIFICATE-----Generated at Sun Mar 1 18:11:44 2026 by rpki-client