$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft File: 05fnjG3TxpaFEzQVMschiNd1Z68.mft (raw, json) Hash identifier: z/P1uioesf0KXgowfKUvs00MhtNjLxg7hhcbXoW+T/0= Subject key identifier: A4:95:F0:BC:DA:46:21:9C:1D:5F:FC:F6:61:F5:AC:96:E2:78:FD:6B Authority key identifier: D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF Certificate issuer: /CN=A91D3CA7/serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Certificate serial: 034A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft Manifest number: 0345 Signing time: Sun 01 Mar 2026 01:49:15 +0000 Manifest this update: Sun 01 Mar 2026 01:49:15 +0000 Manifest next update: Sun 08 Mar 2026 01:49:15 +0000 Files and hashes: 1: 05fnjG3TxpaFEzQVMschiNd1Z68.crl (hash: gtbCS1giMiqocc9ZnbYItefim78g4D4pRJkNCikizc0=) 2: DE183F1CF46611EC815F7283C4F9AE02.roa (hash: 9MdpJxrwdV0aU1f/zX8n/hykvTdPQn1kKe0kWScV57Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 842 (0x34a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3CA7, serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Validity Not Before: Mar 1 01:49:15 2026 GMT Not After : Mar 8 01:49:15 2026 GMT Subject: CN=69a39b1b-3b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e3:b0:3e:28:84:56:db:1e:bb:2f:4d:6a:b1: b7:a2:aa:f8:f3:19:40:60:09:c5:1d:c0:bb:9f:af: f3:3f:c0:f7:6c:cc:8b:ad:2a:f2:dc:11:a7:4e:d7: e4:53:dc:31:e1:d1:b7:1a:89:94:7d:57:7b:10:e0: 0f:ce:3e:ac:fa:b5:59:fc:98:5f:ee:b8:67:90:c7: 1c:55:e0:2d:b1:60:5f:ad:5d:2a:aa:b8:26:21:44: 8a:8f:ac:2b:3c:40:c9:d0:6b:42:e7:45:91:13:69: 9f:48:e5:f2:5b:24:19:00:63:54:16:7c:f5:38:74: b7:ae:08:b4:f4:df:eb:3e:24:69:d5:a4:fe:7e:ae: eb:17:ea:99:c6:aa:53:c1:25:35:ca:f7:6a:74:eb: d3:17:c9:4e:e5:6d:4b:5c:b5:75:4b:2c:11:1c:c7: 7b:12:57:c4:de:bc:e7:a0:b6:50:7e:6a:9b:4a:74: 68:13:0d:90:18:eb:c1:e6:1f:7d:ae:41:8e:fa:70: b1:52:31:8b:45:c2:86:30:a9:15:f8:ca:ea:ad:27: 5c:66:3b:a8:e9:b0:37:8d:67:20:73:7d:ac:9e:91: 2d:ec:ea:e8:b5:68:a4:da:c0:f0:ed:08:ec:c2:a8: d5:78:27:51:7a:28:f8:bf:96:6e:cc:1f:a8:95:c5: f4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:95:F0:BC:DA:46:21:9C:1D:5F:FC:F6:61:F5:AC:96:E2:78:FD:6B X509v3 Authority Key Identifier: keyid:D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:f3:1f:d2:a1:a3:4b:a7:16:53:3f:0f:ee:bd:b1:2f:c9:2e: 31:86:db:a9:7f:91:ee:e4:bc:e3:3b:6a:99:a2:67:4c:e3:ab: 1e:74:73:4f:14:e9:58:72:39:cb:6c:b8:7a:6c:83:1a:81:c8: f3:f6:d3:d2:93:25:78:86:de:43:06:88:de:a0:fa:ba:70:9b: 2e:39:3a:0d:a2:a5:bb:a0:e0:7c:35:82:05:c8:59:5f:c9:0e: 13:71:3a:d2:32:1c:d4:73:db:03:4a:f5:dc:01:c0:75:30:d5: 98:12:aa:f7:c4:eb:d3:cd:39:04:bc:56:31:7a:f1:ad:93:d3: 61:0f:52:fa:c9:6d:79:fe:41:b0:48:7b:5b:6a:87:76:2b:ad: 4c:42:0d:9a:aa:68:e9:36:97:33:b3:ef:a8:e7:8b:8f:35:95: d3:98:fe:ad:ed:84:05:77:eb:b6:35:94:80:a3:5c:b1:65:8a: 47:93:97:62:8a:32:d3:0d:0e:1d:d3:ee:68:1a:04:f8:56:23: 79:a1:22:7a:39:36:40:fc:8d:d4:45:73:44:70:8b:85:c8:78: 56:50:3f:89:f3:22:db:d1:83:d1:3a:ad:16:45:b5:9e:4c:f4: b6:27:2c:d5:0e:25:eb:ab:e5:f5:4a:66:18:94:70:38:b1:0a: 1c:a7:8a:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNDQTcxMTAvBgNVBAUTKEQzOTdFNzhDNkREM0M2OTY4NTEzMzQxNTMyQzcyMTg4 RDc3NTY3QUYwHhcNMjYwMzAxMDE0OTE1WhcNMjYwMzA4MDE0OTE1WjAYMRYwFAYD VQQDDA02OWEzOWIxYi0zYjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruOwPiiEVtseuy9NarG3oqr48xlAYAnFHcC7n6/zP8D3bMyLrSry3BGnTtfk U9wx4dG3GomUfVd7EOAPzj6s+rVZ/Jhf7rhnkMccVeAtsWBfrV0qqrgmIUSKj6wr PEDJ0GtC50WRE2mfSOXyWyQZAGNUFnz1OHS3rgi09N/rPiRp1aT+fq7rF+qZxqpT wSU1yvdqdOvTF8lO5W1LXLV1SywRHMd7ElfE3rznoLZQfmqbSnRoEw2QGOvB5h99 rkGO+nCxUjGLRcKGMKkV+MrqrSdcZjuo6bA3jWcgc32snpEt7OrotWik2sDw7Qjs wqjVeCdReij4v5ZuzB+olcX07QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKSV8Lza RiGcHV/89mH1rJbieP1rMB8GA1UdIwQYMBaAFNOX54xt08aWhRM0FTLHIYjXdWev MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0NBNy8zRjBFMEUwNkY0 NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhwYUZFelFWTXNjaGlOZDFa NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA1Zm5qRzNUeHBhRkV6UVZNc2NoaU5kMVo2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0NBNy8zRjBFMEUwNkY0NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhw YUZFelFWTXNjaGlOZDFaNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFPMf0qGjS6cWUz8P7r2xL8kuMYbbqX+R7uS84ztqmaJnTOOrHnRzTxTpWHI5 y2y4emyDGoHI8/bT0pMleIbeQwaI3qD6unCbLjk6DaKlu6DgfDWCBchZX8kOE3E6 0jIc1HPbA0r13AHAdTDVmBKq98Tr0805BLxWMXrxrZPTYQ9S+sltef5BsEh7W2qH diutTEINmqpo6TaXM7PvqOeLjzWV05j+re2EBXfrtjWUgKNcsWWKR5OXYooy0w0O HdPuaBoE+FYjeaEiejk2QPyN1EVzRHCLhch4VlA/ifMi29GD0TqtFkW1nkz0tics 1Q4l66vl9UpmGJRwOLEKHKeKzg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:40:21 2026 by rpki-client