$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft File: 9-88h0KVuB-hDxQP61W8nFzt-dk.mft (raw, json) Hash identifier: wXb6Qx+3cOwP2H0maL2W/yufw1dFPmomfqgXpUkx09U= Subject key identifier: F3:9D:31:9A:A6:CA:66:90:E5:7A:BD:75:5D:19:48:BB:DB:26:8E:B1 Authority key identifier: F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9 Certificate issuer: /CN=A91D8218/serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft Manifest number: 42 Signing time: Sun 01 Mar 2026 09:49:25 +0000 Manifest this update: Sun 01 Mar 2026 09:49:24 +0000 Manifest next update: Sun 08 Mar 2026 09:49:24 +0000 Files and hashes: 1: 9-88h0KVuB-hDxQP61W8nFzt-dk.crl (hash: k+iC1aSTfT/oEQV40joHu6IyxOz6d52zp1N+l+5LhCE=) 2: E1F27B12B4A611F0927EAF76C4F9AE02.roa (hash: KPsklehDxHE/6tXZuvBqXZaukbJh52cwiwX6QhSLfDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.crl rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8218, serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9 Validity Not Before: Mar 1 09:49:24 2026 GMT Not After : Mar 8 09:49:24 2026 GMT Subject: CN=69a40ba5-934d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:24:2a:6f:14:59:eb:b7:7f:e6:0d:92:f9:bb: 22:40:b3:1f:57:ab:30:a9:5f:7b:70:1f:e8:0f:40: 6d:a3:e2:3d:fd:70:66:a4:df:a7:b1:46:c1:4b:83: ba:2e:bf:c6:ce:02:21:7b:1f:04:3b:5d:f1:4a:59: 26:b6:44:16:46:b2:b8:dd:d5:0a:a1:14:a8:0e:22: 13:ae:3a:5a:29:fd:1e:cd:df:5f:d6:a3:15:8c:73: 5f:18:b0:ef:6f:d8:3b:5f:ba:c8:16:3d:71:99:94: 83:e8:81:d0:49:4e:5e:29:f6:0b:7c:18:14:df:08: 92:21:43:a9:b6:fe:e6:f7:4c:29:c1:0b:63:56:85: b3:e7:52:81:a8:0c:29:12:3b:d6:f9:51:cc:6f:97: 12:89:0f:2a:57:44:a0:6a:4c:28:3e:da:22:a3:da: a8:95:06:b5:27:e5:9f:ea:fb:d2:45:99:17:b3:19: 0e:c2:80:36:aa:2f:43:76:8d:56:50:ea:8e:72:36: 51:bf:9f:19:12:b6:23:5a:8b:a5:31:2d:16:d8:70: 28:ac:d2:2d:5f:01:a8:ca:67:67:99:e1:04:fe:a4: f3:23:c8:a0:87:04:02:63:34:25:bd:b9:87:60:04: 3f:f2:12:6d:35:bf:8b:13:c7:fc:92:5a:b9:4a:f4: e2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9D:31:9A:A6:CA:66:90:E5:7A:BD:75:5D:19:48:BB:DB:26:8E:B1 X509v3 Authority Key Identifier: keyid:F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:96:c9:ce:7b:6a:0e:04:e8:e0:00:31:f8:20:f7:bc:40:fe: 03:74:a3:08:3b:58:c6:2a:18:a5:12:22:95:9c:af:e7:e8:7d: 0b:d9:cb:bc:65:52:8c:9d:e1:ee:4c:c2:ec:55:67:ab:4d:10: 19:f8:1d:64:33:f5:0f:c6:51:16:f4:f3:e1:e5:cf:8e:2f:47: f0:f4:70:c1:76:58:17:3c:79:9e:6d:b5:f0:cc:b6:00:2d:df: 6e:13:a0:06:80:5a:4b:93:da:ef:14:b0:ce:ae:e9:47:ad:b7: c7:e2:05:6f:c3:6b:08:c6:50:7c:91:03:d8:6f:6e:17:0b:93: 11:14:4a:9d:c0:4a:17:4c:26:34:8a:d0:b2:da:8d:ba:aa:60: 20:06:51:98:5d:56:c1:8a:17:d2:34:41:36:10:27:ec:3b:24: 02:37:0c:7f:54:7e:60:38:ba:44:2c:64:8e:10:02:ce:a0:3f: 35:77:44:8a:ff:f9:2d:5c:1f:ab:8f:a4:49:f6:35:cf:b2:bf: 0d:b0:3c:f8:ec:46:55:a3:d5:78:44:25:61:b3:f4:b1:3d:49: 96:d6:62:30:48:f4:72:9e:de:a2:f9:a8:24:1f:10:51:68:dc: 1b:3c:57:ef:d3:ba:f0:63:65:7b:cd:e3:ca:38:b7:da:9e:dd: 5d:f4:fb:62 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODIxODExMC8GA1UEBRMoRjdFRjNDODc0Mjk1QjgxRkExMEYxNDBGRUI1NUJDOUM1 Q0VERjlEOTAeFw0yNjAzMDEwOTQ5MjRaFw0yNjAzMDgwOTQ5MjRaMBgxFjAUBgNV BAMTDTY5YTQwYmE1LTkzNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGJCpvFFnrt3/mDZL5uyJAsx9XqzCpX3twH+gPQG2j4j39cGak36exRsFLg7ou v8bOAiF7HwQ7XfFKWSa2RBZGsrjd1QqhFKgOIhOuOlop/R7N31/WoxWMc18YsO9v 2DtfusgWPXGZlIPogdBJTl4p9gt8GBTfCJIhQ6m2/ub3TCnBC2NWhbPnUoGoDCkS O9b5UcxvlxKJDypXRKBqTCg+2iKj2qiVBrUn5Z/q+9JFmRezGQ7CgDaqL0N2jVZQ 6o5yNlG/nxkStiNai6UxLRbYcCis0i1fAajKZ2eZ4QT+pPMjyKCHBAJjNCW9uYdg BD/yEm01v4sTx/ySWrlK9OKBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU850xmqbK ZpDler11XRlIu9smjrEwHwYDVR0jBBgwFoAU9+88h0KVuB+hDxQP61W8nFzt+dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MjE4LzRFMjQwRjIyQjRB NjExRjA4QUQzQjA3NUM0RjlBRTAyLzktODhoMEtWdUItaER4UVA2MVc4bkZ6dC1k ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOS04OGgwS1Z1Qi1oRHhRUDYxVzhuRnp0LWRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MjE4LzRFMjQwRjIyQjRBNjExRjA4QUQzQjA3NUM0RjlBRTAyLzktODhoMEtWdUIt aER4UVA2MVc4bkZ6dC1kay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAWlsnOe2oOBOjgADH4IPe8QP4DdKMIO1jGKhilEiKVnK/n6H0L2cu8ZVKMneHu TMLsVWerTRAZ+B1kM/UPxlEW9PPh5c+OL0fw9HDBdlgXPHmebbXwzLYALd9uE6AG gFpLk9rvFLDOrulHrbfH4gVvw2sIxlB8kQPYb24XC5MRFEqdwEoXTCY0itCy2o26 qmAgBlGYXVbBihfSNEE2ECfsOyQCNwx/VH5gOLpELGSOEALOoD81d0SK//ktXB+r j6RJ9jXPsr8NsDz47EZVo9V4RCVhs/SxPUmW1mIwSPRynt6i+agkHxBRaNwbPFfv 07rwY2V7zePKOLfant1d9Pti -----END CERTIFICATE-----Generated at Mon Mar 2 14:11:12 2026 by rpki-client