$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft File: kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft (raw, json) Hash identifier: xiFUZ3n5j1ZxXFLl5qbrRCmyjgnqQSGf25g9Uyg4fyw= Subject key identifier: D8:0D:0D:B0:47:99:63:38:29:D1:81:99:D7:80:60:59:39:AA:18:BC Authority key identifier: 91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91 Certificate issuer: /CN=A91D8157/serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft Manifest number: 08 Signing time: Sun 01 Mar 2026 10:42:43 +0000 Manifest this update: Sun 01 Mar 2026 10:42:43 +0000 Manifest next update: Sun 08 Mar 2026 10:42:43 +0000 Files and hashes: 1: kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl (hash: zyJKa15r6A4VuEsb6z3ygz9CWxlADUyoAcE5PBus/do=) 2: B0F42ADA114211F1B6291DC0213D8C67.roa (hash: 11wLuFZd8HYD0POC8srBT9Q0n7NwOxHc0gJVO4lf97k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8157, serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91 Validity Not Before: Mar 1 10:42:43 2026 GMT Not After : Mar 8 10:42:43 2026 GMT Subject: CN=69a41823-2c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:13:52:e5:da:ec:6b:b3:39:da:6f:2c:ed:87: b5:70:b4:03:3a:24:db:d1:c1:21:e2:85:3b:bb:47: d4:e9:73:82:2f:f5:d8:24:04:29:80:4d:6b:b9:f2: 8c:bd:af:20:e0:cf:a5:b2:96:93:cf:54:64:32:cc: ae:c0:a9:29:0a:61:9e:cf:e6:e7:a7:e0:fb:f5:d4: 29:0a:90:6a:2d:f0:ad:46:a6:25:f5:d3:90:ac:c0: 53:37:34:16:a7:af:15:9c:df:ce:76:be:ac:4c:2f: f6:a5:bc:bb:70:a2:2b:4f:05:67:1e:ca:42:b2:bd: 0b:57:83:1e:f4:7b:ea:24:70:39:fd:43:83:30:cc: 05:9c:7a:23:c2:76:bd:c2:6d:16:9f:e4:37:d7:8d: b3:58:06:3a:95:9d:d9:4c:9f:b5:8b:d1:f3:74:64: d8:96:ce:71:9f:9a:6b:09:67:10:c5:86:77:a8:51: 63:03:e0:c0:2b:ed:c4:86:7b:8c:0b:0b:20:42:a5: 6d:0f:c4:ac:d9:11:47:25:c9:99:ca:b3:fa:e7:ae: d1:bf:b8:5d:3d:22:9d:f6:39:16:b1:40:6c:2e:09: f8:bd:70:24:7b:90:f3:dc:a5:fd:7b:ae:28:3d:cf: 19:06:1e:0a:cc:84:d6:4f:55:4a:8e:f2:20:88:ce: 54:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0D:0D:B0:47:99:63:38:29:D1:81:99:D7:80:60:59:39:AA:18:BC X509v3 Authority Key Identifier: keyid:91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:2d:bc:dd:ea:d8:1f:b0:da:3d:f4:03:9a:11:c1:93:ae:1a: fa:e2:16:a4:7c:a7:e2:72:1b:07:e7:7e:2c:dc:0e:e8:56:bb: 5f:8a:26:73:46:11:ee:b3:8c:89:b9:7e:13:25:c9:00:12:09: d3:ec:80:6d:70:b4:81:7e:83:b3:16:d6:7e:5e:5d:15:cb:af: 19:fa:88:c6:7d:c2:c6:d7:04:ca:f1:84:f7:ba:3c:3e:a5:d9: 8f:d6:4a:ba:07:c8:02:ca:f8:65:8c:9d:a8:e6:6b:3e:31:ec: 9b:89:6d:2d:7d:43:46:ba:09:c7:72:5e:a8:2f:14:11:ea:b9: 78:6a:a0:e9:70:2f:6f:bc:bf:bf:d9:9b:3b:ca:f2:9f:5b:f3: 04:af:a0:89:59:9e:62:84:28:37:da:37:ce:ab:dc:e2:1a:07: bb:83:f2:5f:e8:a2:7b:5e:e6:4c:90:00:56:1e:90:c3:f7:c2: ac:06:7f:fd:7e:6a:8b:51:be:6c:3f:eb:e4:27:05:dc:30:82: 40:ed:b6:6a:d3:72:44:50:ae:0d:72:32:35:bb:3a:7f:2e:f9: 8b:84:87:b2:16:f3:aa:28:2d:ab:3e:38:32:fe:40:0e:25:0e: cf:00:b6:84:c5:bf:9e:77:73:d6:19:25:23:13:f8:db:a5:73: fe:15:77:4d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODE1NzExMC8GA1UEBRMoOTFEQTNBMTc2MzdDRDI5MkNFQTQ2NzBERDEzQTcyRDg2 RUFBMkQ5MTAeFw0yNjAzMDExMDQyNDNaFw0yNjAzMDgxMDQyNDNaMBgxFjAUBgNV BAMTDTY5YTQxODIzLTJjMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnE1Ll2uxrsznabyzth7VwtAM6JNvRwSHihTu7R9Tpc4Iv9dgkBCmATWu58oy9 ryDgz6WylpPPVGQyzK7AqSkKYZ7P5uen4Pv11CkKkGot8K1GpiX105CswFM3NBan rxWc3852vqxML/alvLtwoitPBWceykKyvQtXgx70e+okcDn9Q4MwzAWceiPCdr3C bRaf5DfXjbNYBjqVndlMn7WL0fN0ZNiWznGfmmsJZxDFhneoUWMD4MAr7cSGe4wL CyBCpW0PxKzZEUclyZnKs/rnrtG/uF09Ip32ORaxQGwuCfi9cCR7kPPcpf17rig9 zxkGHgrMhNZPVUqO8iCIzlR1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2A0NsEeZ Yzgp0YGZ14BgWTmqGLwwHwYDVR0jBBgwFoAUkdo6F2N80pLOpGcN0Tpy2G6qLZEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MTU3LzI1MDgzOEFFMTE0 MjExRjE5RDM3NjI4RjIxM0Q4QzY3L2tkbzZGMk44MHBMT3BHY04wVHB5Mkc2cUxa RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIva2RvNkYyTjgwcExPcEdjTjBUcHkyRzZxTFpFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MTU3LzI1MDgzOEFFMTE0MjExRjE5RDM3NjI4RjIxM0Q4QzY3L2tkbzZGMk44MHBM T3BHY04wVHB5Mkc2cUxaRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBxLbzd6tgfsNo99AOaEcGTrhr64hakfKfichsH534s3A7oVrtfiiZzRhHus4yJ uX4TJckAEgnT7IBtcLSBfoOzFtZ+Xl0Vy68Z+ojGfcLG1wTK8YT3ujw+pdmP1kq6 B8gCyvhljJ2o5ms+MeybiW0tfUNGugnHcl6oLxQR6rl4aqDpcC9vvL+/2Zs7yvKf W/MEr6CJWZ5ihCg32jfOq9ziGge7g/Jf6KJ7XuZMkABWHpDD98KsBn/9fmqLUb5s P+vkJwXcMIJA7bZq03JEUK4NcjI1uzp/LvmLhIeyFvOqKC2rPjgy/kAOJQ7PALaE xb+ed3PWGSUjE/jbpXP+FXdN -----END CERTIFICATE-----Generated at Sun Mar 1 18:11:25 2026 by rpki-client