$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft File: iH554lttHTfvHzG8WgIy-OdlFUU.mft (raw, json) Hash identifier: ivFlVqlaMHlaEcZjuxn29gl2xo3/p6juzWcQPe/6hMI= Subject key identifier: D2:17:0E:A9:2D:FB:13:BE:9D:1D:3D:68:F3:C7:82:05:C0:69:F2:56 Authority key identifier: 88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45 Certificate issuer: /CN=A91D9F5A/serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft Manifest number: 0889 Signing time: Sat 28 Feb 2026 21:27:06 +0000 Manifest this update: Sat 28 Feb 2026 21:27:05 +0000 Manifest next update: Sat 07 Mar 2026 21:27:05 +0000 Files and hashes: 1: iH554lttHTfvHzG8WgIy-OdlFUU.crl (hash: Cvbv8PED0C+wrzM7LKHFQdNVb2Wyqi3vPmVFwa5VxBQ=) 2: CEFEDAB26B3D11F0A0837D7FC4F9AE02.roa (hash: UedQXDqMzhnXkHxFyRy3Afeqd1BjfjsU/FT4F/0O0nk=) 3: CF6A89D86B3D11F0A0837D7FC4F9AE02.roa (hash: cZ9m/zVPUzWXCdy2KYLSPYrFB4SD6fS0YfcWwI/XsN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 21:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F5A, serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545 Validity Not Before: Feb 28 21:27:05 2026 GMT Not After : Mar 7 21:27:05 2026 GMT Subject: CN=69a35daa-76ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8d:4d:8a:55:d9:5c:70:fd:c1:06:2c:30:fd: 1b:c0:f5:14:b7:04:3a:ea:48:d8:c4:33:fc:b0:03: ef:5c:e3:5e:3c:2c:1f:a0:4f:1a:16:b8:7a:45:8c: f0:7a:68:13:61:4a:e9:c5:7d:8c:88:5c:f9:9e:3a: 1a:39:8b:e6:6e:4b:9e:4b:f4:3e:58:e2:81:34:d3: 00:d5:eb:22:ec:ce:11:e9:7d:41:a8:0b:7f:21:45: c2:21:dd:8d:a9:12:10:83:ec:23:e7:94:f7:21:64: 46:f2:e4:69:7f:a5:c7:50:04:52:bb:da:43:f9:c3: fa:85:68:8e:18:39:9d:30:f0:ad:95:7c:be:56:67: ef:49:bb:10:61:68:c4:ae:a4:20:ca:82:67:c8:06: 10:c0:5f:2b:05:c7:3f:a5:5c:f7:75:c0:6e:f7:20: 71:c5:c2:19:d6:67:fc:33:b3:a5:01:0e:ce:6f:99: d9:12:e2:22:0b:8b:b1:51:8a:7e:e6:f5:d1:f0:ad: 29:51:c1:20:45:f2:08:59:66:27:f9:52:c7:19:af: a1:b5:5c:f9:ca:39:88:a9:41:de:8a:81:24:c2:8f: c2:41:8d:a1:c0:7a:94:17:67:13:f2:0c:79:62:49: 41:54:05:53:11:17:44:6d:4c:bb:c1:66:c8:cf:d2: 70:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:17:0E:A9:2D:FB:13:BE:9D:1D:3D:68:F3:C7:82:05:C0:69:F2:56 X509v3 Authority Key Identifier: keyid:88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:83:02:39:31:da:1d:71:ac:55:7d:b5:92:39:e4:8a:e0:8f: 27:aa:12:7a:cc:50:eb:ac:be:19:59:b6:a5:20:50:38:54:dd: 6e:b2:da:bd:6f:b5:fb:a0:ca:53:1c:f8:21:94:41:4b:3a:4d: 46:94:7b:ee:4d:dd:81:a1:8c:a6:2e:1b:ee:b2:88:ec:e6:c0: cc:8d:e2:d0:85:d5:02:3d:0f:cd:f3:2d:8f:3f:65:47:48:e9: 42:00:bd:1a:78:79:8c:7b:96:c6:5e:79:c9:5b:87:2b:53:17: a7:23:20:00:ef:78:15:ef:b0:d6:78:44:05:54:57:43:7e:53: 9d:0a:7e:ad:f0:4f:fa:cd:e6:dd:83:76:49:75:bd:11:69:79: 49:3f:fa:42:1d:ad:f1:bc:40:84:fd:47:3e:02:e8:e5:72:5a: 3f:ad:2b:f8:d9:00:da:2c:f1:c2:70:d8:55:83:d0:b7:16:7e: 63:bd:00:38:81:57:c1:c8:5b:82:78:bc:04:06:f6:4c:08:08: 89:6a:e3:2e:07:cc:44:89:79:cc:e0:0c:b7:cd:4c:ba:0d:87: 19:a3:4e:87:dc:c8:40:ff:35:9f:37:5d:9f:d0:be:60:03:51: 3e:1e:49:bd:c0:93:99:7b:b6:46:55:44:c2:4c:f3:72:4d:a8: d4:75:cb:20 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OUY1QTExMC8GA1UEBRMoODg3RTc5RTI1QjZEMUQzN0VGMUYzMUJDNUEwMjMyRjhF NzY1MTU0NTAeFw0yNjAyMjgyMTI3MDVaFw0yNjAzMDcyMTI3MDVaMBgxFjAUBgNV BAMMDTY5YTM1ZGFhLTc2ZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmjU2KVdlccP3BBiww/RvA9RS3BDrqSNjEM/ywA+9c4148LB+gTxoWuHpFjPB6 aBNhSunFfYyIXPmeOho5i+ZuS55L9D5Y4oE00wDV6yLszhHpfUGoC38hRcIh3Y2p EhCD7CPnlPchZEby5Gl/pcdQBFK72kP5w/qFaI4YOZ0w8K2VfL5WZ+9JuxBhaMSu pCDKgmfIBhDAXysFxz+lXPd1wG73IHHFwhnWZ/wzs6UBDs5vmdkS4iILi7FRin7m 9dHwrSlRwSBF8ghZZif5UscZr6G1XPnKOYipQd6KgSTCj8JBjaHAepQXZxPyDHli SUFUBVMRF0RtTLvBZsjP0nDTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0hcOqS37 E76dHT1o88eCBcBp8lYwHwYDVR0jBBgwFoAUiH554lttHTfvHzG8WgIy+OdlFUUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5RjVBLzA4OThCMjNBMTFC QTExRUJCQzFBNTg0Q0M0RjlBRTAyL2lINTU0bHR0SFRmdkh6RzhXZ0l5LU9kbEZV VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaUg1NTRsdHRIVGZ2SHpHOFdnSXktT2RsRlVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 RjVBLzA4OThCMjNBMTFCQTExRUJCQzFBNTg0Q0M0RjlBRTAyL2lINTU0bHR0SFRm dkh6RzhXZ0l5LU9kbEZVVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAygwI5MdodcaxVfbWSOeSK4I8nqhJ6zFDrrL4ZWbalIFA4VN1ustq9b7X7oMpT HPghlEFLOk1GlHvuTd2BoYymLhvusojs5sDMjeLQhdUCPQ/N8y2PP2VHSOlCAL0a eHmMe5bGXnnJW4crUxenIyAA73gV77DWeEQFVFdDflOdCn6t8E/6zebdg3ZJdb0R aXlJP/pCHa3xvECE/Uc+Aujlclo/rSv42QDaLPHCcNhVg9C3Fn5jvQA4gVfByFuC eLwEBvZMCAiJauMuB8xEiXnM4Ay3zUy6DYcZo06H3MhA/zWfN12f0L5gA1E+Hkm9 wJOZe7ZGVUTCTPNyTajUdcsg -----END CERTIFICATE-----Generated at Sun Mar 1 20:31:02 2026 by rpki-client