$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft File: 01nlbdoAA8SD861qQMCA6Qy41HI.mft (raw, json) Hash identifier: WGS4g55aOvv38CRvwVoVu4AC0euZ3GMCC0cxTJuVAk0= Subject key identifier: 34:C6:0F:96:E5:A1:A0:2E:3A:6A:99:90:FE:04:E2:51:82:1D:41:A5 Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 Certificate issuer: /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft Manifest number: 0137 Signing time: Sun 01 Mar 2026 06:27:11 +0000 Manifest this update: Sun 01 Mar 2026 06:27:10 +0000 Manifest next update: Sun 08 Mar 2026 06:27:10 +0000 Files and hashes: 1: 01nlbdoAA8SD861qQMCA6Qy41HI.crl (hash: B5R09ojd7O2AUvCqtu7D2Kdh5SgqDTD3WGtKHzNQRpE=) 2: 573BE4DE3D0811EF84157B26C4F9AE02.roa (hash: sO/FcuusJDef8Jgb3m4tmdQe6il72ChJ0DAhA0al1Bs=) 3: 97530E023D0911EFA33E4A38C4F9AE02.roa (hash: pQpO0/PUmsk8Ne8Tm6dn6viR4Yd/Q34ajbz6wbYS9Zc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B1B, serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Validity Not Before: Mar 1 06:27:10 2026 GMT Not After : Mar 8 06:27:10 2026 GMT Subject: CN=69a3dc3f-1d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:61:4c:fa:ce:54:9f:d3:a1:65:e6:36:ba:53: 25:26:f7:c6:6e:bd:e0:8d:35:af:cf:62:9e:20:4c: 59:31:ad:62:a5:e7:a7:9f:4f:81:0b:ee:ac:cf:b6: e1:80:78:78:7c:4b:5c:43:26:ed:21:09:e0:c8:c8: aa:2c:dd:3a:2f:68:2d:c1:0e:04:ad:bb:ae:fa:c3: 69:c3:18:08:c0:f7:ff:94:13:1e:3e:97:47:12:ab: 61:d8:f3:9e:9b:97:ce:7c:1d:d6:02:93:d3:a8:41: df:f4:e8:f4:cd:ac:a9:22:4b:4c:4a:30:5c:6c:02: e4:f6:b4:b7:cc:8f:ed:e7:56:93:83:b5:76:37:3c: 4d:e7:91:6b:f6:88:9f:52:c7:a3:4f:46:10:ea:79: 32:7c:54:7f:75:d0:43:8f:c4:9c:67:bb:1b:82:c4: 26:ff:f3:90:f0:2e:70:d1:b3:ec:76:da:9d:83:d8: bc:de:38:d8:41:04:66:26:8a:94:76:c4:4a:06:7e: aa:43:05:26:8d:6a:07:1d:40:23:8e:84:0b:40:08: 83:37:31:16:1e:8b:30:36:62:09:fc:d0:e1:32:11: c1:52:af:0c:db:46:81:50:64:53:40:05:c0:6e:f9: f6:70:aa:9f:4b:35:02:6f:b7:7c:59:a0:11:cf:2f: 76:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C6:0F:96:E5:A1:A0:2E:3A:6A:99:90:FE:04:E2:51:82:1D:41:A5 X509v3 Authority Key Identifier: keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:0d:30:83:37:05:34:e7:59:bb:f5:81:7d:53:c6:22:5c:d5: eb:93:ea:b6:3f:a9:8c:8e:9b:af:ca:5c:70:67:8a:ee:94:e7: 7b:af:b7:f4:1c:38:50:3e:02:00:5c:9a:2e:7c:71:e2:80:ab: df:fe:6c:6c:04:7c:0d:03:b4:dc:c7:d4:ae:d0:30:95:aa:71: 50:a3:dc:78:b2:c4:bb:6d:ee:ad:01:d4:90:4a:99:be:87:2b: fb:2a:00:3c:9e:27:c4:ad:c1:fc:8a:0e:27:32:b5:49:bc:b0: f2:1f:7d:14:02:62:14:7c:5c:98:fb:b9:da:c7:bc:d1:67:3f: cf:52:d0:e6:c8:71:ff:4e:a9:9b:f1:8d:63:af:46:fb:33:74: 88:ee:64:48:5f:58:70:bc:ba:71:b5:da:f0:04:6e:25:58:89: 9c:29:23:2d:0c:25:2a:78:0f:d4:df:6c:75:54:1b:17:9c:fd: 77:8b:c9:34:6b:5d:30:8d:5a:66:65:1f:26:d6:09:53:d9:84: 9c:b4:a2:1d:c4:30:68:64:bc:9b:ef:3c:63:ea:62:0c:da:c5: fd:6b:66:73:8c:bc:1b:8f:21:6e:2b:0b:df:8e:95:7b:56:8b: 94:36:d8:de:75:45:03:9a:f3:b1:36:bf:81:4b:35:bf:e4:f8: 69:25:52:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlCMUIxMTAvBgNVBAUTKEQzNTlFNTZEREEwMDAzQzQ4M0YzQUQ2QTQwQzA4MEU5 MENCOEQ0NzIwHhcNMjYwMzAxMDYyNzEwWhcNMjYwMzA4MDYyNzEwWjAYMRYwFAYD VQQDEw02OWEzZGMzZi0xZDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WFM+s5Un9OhZeY2ulMlJvfGbr3gjTWvz2KeIExZMa1ipeenn0+BC+6sz7bh gHh4fEtcQybtIQngyMiqLN06L2gtwQ4Erbuu+sNpwxgIwPf/lBMePpdHEqth2POe m5fOfB3WApPTqEHf9Oj0zaypIktMSjBcbALk9rS3zI/t51aTg7V2NzxN55Fr9oif UsejT0YQ6nkyfFR/ddBDj8ScZ7sbgsQm//OQ8C5w0bPsdtqdg9i83jjYQQRmJoqU dsRKBn6qQwUmjWoHHUAjjoQLQAiDNzEWHoswNmIJ/NDhMhHBUq8M20aBUGRTQAXA bvn2cKqfSzUCb7d8WaARzy92cwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDTGD5bl oaAuOmqZkP4E4lGCHUGlMB8GA1UdIwQYMBaAFNNZ5W3aAAPEg/OtakDAgOkMuNRy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUIxQi9GOUZFRTA0NjND RjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4U0Q4NjFxUU1DQTZReTQx SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAxbmxiZG9BQThTRDg2MXFRTUNBNlF5NDFISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUIxQi9GOUZFRTA0NjNDRjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4 U0Q4NjFxUU1DQTZReTQxSEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiQ0wgzcFNOdZu/WBfVPGIlzV65Pqtj+pjI6br8pccGeK7pTne6+39Bw4UD4C AFyaLnxx4oCr3/5sbAR8DQO03MfUrtAwlapxUKPceLLEu23urQHUkEqZvocr+yoA PJ4nxK3B/IoOJzK1Sbyw8h99FAJiFHxcmPu52se80Wc/z1LQ5shx/06pm/GNY69G +zN0iO5kSF9YcLy6cbXa8ARuJViJnCkjLQwlKngP1N9sdVQbF5z9d4vJNGtdMI1a ZmUfJtYJU9mEnLSiHcQwaGS8m+88Y+piDNrF/Wtmc4y8G48hbisL346Ve1aLlDbY 3nVFA5rzsTa/gUs1v+T4aSVSeQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:44:09 2026 by rpki-client