$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft File: SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft (raw, json) Hash identifier: NW8KH1QgBqEQoV62DIxFfvPKY7CqB/tY0IhXdkyMoe4= Subject key identifier: 44:C4:7F:79:DE:9C:9D:CF:E9:B5:14:4B:88:2F:7D:9E:BC:1D:52:3D Authority key identifier: 48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60 Certificate issuer: /CN=A91D3D89/serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft Manifest number: 0148 Signing time: Sun 01 Mar 2026 06:13:02 +0000 Manifest this update: Sun 01 Mar 2026 06:13:01 +0000 Manifest next update: Sun 08 Mar 2026 06:13:01 +0000 Files and hashes: 1: SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl (hash: 7XBxQ8c9t6vLbgTi4Ed4e7EteCvq6IbjYMmFQyUXnsE=) 2: 37D4A3DE20BA11EF9B035D1FC4F9AE02.roa (hash: 97sXWjq7Fj5JCQCyo6BRYI+5mz862DUMpg5o3JeeUks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:13:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3D89, serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360 Validity Not Before: Mar 1 06:13:01 2026 GMT Not After : Mar 8 06:13:01 2026 GMT Subject: CN=69a3d8ee-f4a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:96:3d:d2:5e:5d:08:e4:42:93:f7:0d:07:3c: 10:ea:7a:d7:07:9e:0d:76:eb:bf:2a:1a:82:d4:74: 86:55:5e:59:4a:be:dd:1d:c2:75:ed:81:99:74:8b: 11:0a:5e:09:00:40:70:ad:8c:aa:ce:9c:03:47:32: c8:b1:6e:53:19:1b:e9:af:33:2e:60:80:ff:e0:e4: 3c:70:52:bd:b2:b5:9e:42:72:02:7f:fa:61:2c:a2: 47:ab:60:7d:28:07:31:4f:3d:37:43:9c:d2:db:c4: ca:8c:65:c2:49:23:5c:b5:69:24:33:9f:c2:c3:c8: 7b:4b:46:08:51:e4:dc:28:99:61:12:c4:24:b7:f6: 4d:57:b5:d0:db:04:db:3f:ba:92:00:6b:1f:f2:81: 71:5d:1a:65:ce:94:58:94:28:d4:47:6c:5e:8c:d6: fc:42:43:40:e4:52:74:f5:90:b3:39:57:2c:ab:4c: 2a:34:09:25:d2:80:00:bf:f5:5b:e7:14:42:51:23: f0:b3:4b:4f:41:26:b1:26:4a:a7:9c:e2:78:0a:c0: 73:94:7d:84:fd:5c:8d:fc:b2:09:7f:23:4f:5f:8c: 04:af:3c:f3:c5:c1:f5:43:66:0c:79:ed:2a:bb:6f: 8f:c1:bf:c4:49:6e:81:12:30:df:be:69:02:b2:ac: 24:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C4:7F:79:DE:9C:9D:CF:E9:B5:14:4B:88:2F:7D:9E:BC:1D:52:3D X509v3 Authority Key Identifier: keyid:48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:ed:da:dd:5e:29:ad:18:cc:a6:3a:c6:b5:d5:97:74:f2:e2: 9e:14:f7:3b:c1:c0:28:65:3d:5b:b7:4a:fc:45:54:6c:b8:40: b4:00:06:99:c6:a9:c9:05:19:62:b5:f3:40:76:43:62:de:32: f1:ea:de:44:05:d1:6d:1d:9c:7e:af:7b:77:1c:a4:6a:c1:a9: a0:e4:8d:47:b6:05:b2:4c:27:bb:5d:27:de:74:c2:2f:9b:64: e8:11:8c:10:7c:f3:16:8c:a2:1f:23:ce:82:0c:1e:48:56:01: 85:fc:db:9d:1b:b5:24:04:fb:aa:ee:dc:ed:05:5a:9f:08:45: 59:8b:76:45:ce:53:7c:02:ae:89:e1:56:15:88:9e:1e:b2:6b: 7e:c4:84:97:40:32:0c:70:8f:ec:64:fa:c7:b6:ef:53:9e:c5: 91:89:0c:00:b8:1a:cb:eb:33:05:fd:e8:77:9a:87:ed:4e:6f: 02:d5:fd:49:23:01:4f:5e:54:cc:88:89:75:d7:f4:ca:f2:9b: 51:5a:0b:cb:e2:ca:63:9a:29:55:b1:e1:03:63:28:ce:5e:a3: 8f:bc:67:20:40:36:94:48:f8:c2:66:4d:9b:28:90:a8:35:98: 2a:ae:79:f4:06:88:fc:fc:53:49:25:a3:6f:dd:be:17:ba:85: d9:15:d2:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEODkxMTAvBgNVBAUTKDQ4Rjk2MDA5QkNENENFMDZDRDYwRDEyNUYwQTkxQjIz RkVDMzAzNjAwHhcNMjYwMzAxMDYxMzAxWhcNMjYwMzA4MDYxMzAxWjAYMRYwFAYD VQQDEw02OWEzZDhlZS1mNGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZY90l5dCORCk/cNBzwQ6nrXB54Nduu/KhqC1HSGVV5ZSr7dHcJ17YGZdIsR Cl4JAEBwrYyqzpwDRzLIsW5TGRvprzMuYID/4OQ8cFK9srWeQnICf/phLKJHq2B9 KAcxTz03Q5zS28TKjGXCSSNctWkkM5/Cw8h7S0YIUeTcKJlhEsQkt/ZNV7XQ2wTb P7qSAGsf8oFxXRplzpRYlCjUR2xejNb8QkNA5FJ09ZCzOVcsq0wqNAkl0oAAv/Vb 5xRCUSPws0tPQSaxJkqnnOJ4CsBzlH2E/VyN/LIJfyNPX4wErzzzxcH1Q2YMee0q u2+Pwb/ESW6BEjDfvmkCsqwkZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFETEf3ne nJ3P6bUUS4gvfZ68HVI9MB8GA1UdIwQYMBaAFEj5YAm81M4GzWDRJfCpGyP+wwNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Q4OS9EM0VENTg1ODIw QjgxMUVGQkUxQzI4MTVDNEY5QUUwMi9TUGxnQ2J6VXpnYk5ZTkVsOEtrYklfN0RB MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQbGdDYnpVemdiTllORWw4S2tiSV83REEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Q4OS9EM0VENTg1ODIwQjgxMUVGQkUxQzI4MTVDNEY5QUUwMi9TUGxnQ2J6VXpn Yk5ZTkVsOEtrYklfN0RBMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh+3a3V4prRjMpjrGtdWXdPLinhT3O8HAKGU9W7dK/EVUbLhAtAAGmcapyQUZ YrXzQHZDYt4y8ereRAXRbR2cfq97dxykasGpoOSNR7YFskwnu10n3nTCL5tk6BGM EHzzFoyiHyPOggweSFYBhfzbnRu1JAT7qu7c7QVanwhFWYt2Rc5TfAKuieFWFYie HrJrfsSEl0AyDHCP7GT6x7bvU57FkYkMALgay+szBf3od5qH7U5vAtX9SSMBT15U zIiJddf0yvKbUVoLy+LKY5opVbHhA2Mozl6jj7xnIEA2lEj4wmZNmyiQqDWYKq55 9AaI/PxTSSWjb92+F7qF2RXSkA== -----END CERTIFICATE-----Generated at Sun Mar 1 21:11:41 2026 by rpki-client