$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft File: SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft (raw, json) Hash identifier: suktn0JF2qJ1/QukGal/FgnqhQwBaLIckXdfmWYR06o= Subject key identifier: 59:F2:FB:B3:67:00:FA:E2:4B:C8:58:65:D5:91:B4:69:EA:CC:76:1D Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 Certificate issuer: /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Certificate serial: 08AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft Manifest number: 087A Signing time: Sat 28 Feb 2026 21:01:34 +0000 Manifest this update: Sat 28 Feb 2026 21:01:33 +0000 Manifest next update: Sat 07 Mar 2026 21:01:33 +0000 Files and hashes: 1: SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl (hash: oZB0EN98tQDAH5Im4m07dFtGXpjm9s6T/tsMVBk/iZA=) 2: 13279E2C124011ED9E430A4CC4F9AE02.roa (hash: 6ixsZ+U2NSefvVb36mPlfQcQ8GQSyjxzHzBxsc46ols=) 3: 2F220BBA95AA11ED84962E13C4F9AE02.roa (hash: tNP9+2nzm8wftPIS9csYEXaUq+mqRmQ5CYwfV6WquDE=) 4: 67FF0960076911EF8569F157C4F9AE02.roa (hash: QiY4AYjpAOfJUKdo2bWSjao/45XX+9doU5egkrwqJ78=) 5: 42CC52ECC68111EFAE49FF5FC4F9AE02.roa (hash: jw0xm0XxEdyeTKSbIjmLJq8kg/lPA+5yh93w4gEj5Qo=) 6: 68C5CFBE076911EF8569F157C4F9AE02.roa (hash: StO4PQ6ffihfvooMv19fGDjAg2vQbPTwXqeeTRzTihQ=) 7: DDBCA666F18911EAA922EB1FC4F9AE02.roa (hash: 1QBFWULUSDuABI4M5A9+pwghN2xnBCwM1ByVsOf4OoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 21:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2220 (0x8ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Validity Not Before: Feb 28 21:01:33 2026 GMT Not After : Mar 7 21:01:33 2026 GMT Subject: CN=69a357ae-f78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1f:c9:d8:59:2f:ba:e2:cf:12:af:8b:95:24: 0f:93:aa:50:9d:ef:89:9e:4c:33:f9:f7:70:52:97: 2e:36:c2:67:c1:b0:f2:1b:83:89:9a:73:00:79:d6: 7a:74:b1:7d:a8:8c:56:05:f8:53:8c:03:65:1f:d7: 48:af:d7:3f:a4:72:09:71:e5:15:59:72:92:e3:1d: c2:04:88:c1:d3:bd:0e:b9:24:89:2d:b0:f6:a4:53: 0d:dc:d7:7b:39:cb:0e:e6:6a:7b:d7:db:6a:12:76: ef:d7:8e:3e:86:29:d0:3a:78:8b:44:9e:b9:2d:e6: 9d:82:9f:65:e7:fb:47:4d:9a:af:f2:65:77:60:39: 18:5e:7d:01:aa:57:e0:7f:0d:0c:5d:79:f0:a2:b4: b8:8d:e6:47:6f:ac:18:92:6a:00:b6:b2:b4:0c:1e: 7f:11:e2:fd:c1:1a:2d:29:a6:13:48:c1:f0:35:30: 84:71:e1:a3:74:aa:1d:04:7b:09:1a:ea:40:cc:41: bd:4a:7f:19:e7:a7:d5:a9:e8:75:77:0b:32:9d:e7: 0c:01:11:45:70:b1:95:a7:b0:98:b7:90:b9:fa:d0: fb:71:5f:d3:14:ec:d1:94:64:e1:59:5c:1d:6a:be: 75:e5:89:56:13:af:ee:fc:68:f5:17:04:71:4a:75: 7d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F2:FB:B3:67:00:FA:E2:4B:C8:58:65:D5:91:B4:69:EA:CC:76:1D X509v3 Authority Key Identifier: keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:a5:72:2f:cc:18:27:b4:27:5e:da:87:2b:e7:8d:5f:b9:dc: 14:f8:7e:46:6c:7b:1e:4e:89:6f:70:d0:8f:af:6b:20:c9:a9: 38:d6:4c:47:3e:29:50:04:7a:38:3a:18:1c:dd:29:36:ab:2b: d0:e1:cb:77:81:07:7e:cc:e7:a8:26:d8:70:a8:53:69:79:b1: f6:98:84:7f:4f:76:cb:ae:2c:ae:b5:a6:01:12:4a:d5:dd:5c: df:6f:6c:aa:51:c9:76:b8:20:7c:f8:bb:49:0a:f9:76:35:69: 67:5d:ba:d7:0b:b1:8d:e1:1d:21:b8:bf:65:ae:4d:90:f6:81: ae:07:a2:60:70:2f:62:17:5f:5d:80:fa:b9:87:84:07:53:cf: 54:55:8c:cd:2f:e4:f0:db:08:7b:a8:17:14:7e:f8:10:ae:f0: 1f:5e:81:ec:62:62:82:56:79:8c:c5:de:3b:77:67:69:c3:dc: a2:72:f3:2a:95:6a:05:94:bf:26:1f:38:d2:cc:27:2f:ee:ed: 1c:75:33:eb:d5:a8:1d:cb:a5:42:58:02:d2:7d:ec:51:ef:22: ca:c1:6e:1f:85:09:a7:6d:ac:07:f6:70:b9:c2:3b:93:9d:d8: 35:b1:a5:2e:2c:00:cc:13:ab:f7:05:db:31:f6:c3:ce:d6:48: ce:46:38:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExMEExMTAvBgNVBAUTKDQ5QjVBNDY0NjNFM0EyQjcwQTMzNDQ2MDE0RUJGNDBF NUM5RUZFNzQwHhcNMjYwMjI4MjEwMTMzWhcNMjYwMzA3MjEwMTMzWjAYMRYwFAYD VQQDDA02OWEzNTdhZS1mNzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArR/J2FkvuuLPEq+LlSQPk6pQne+Jnkwz+fdwUpcuNsJnwbDyG4OJmnMAedZ6 dLF9qIxWBfhTjANlH9dIr9c/pHIJceUVWXKS4x3CBIjB070OuSSJLbD2pFMN3Nd7 OcsO5mp719tqEnbv144+hinQOniLRJ65Leadgp9l5/tHTZqv8mV3YDkYXn0Bqlfg fw0MXXnworS4jeZHb6wYkmoAtrK0DB5/EeL9wRotKaYTSMHwNTCEceGjdKodBHsJ GupAzEG9Sn8Z56fVqeh1dwsynecMARFFcLGVp7CYt5C5+tD7cV/TFOzRlGThWVwd ar515YlWE6/u/Gj1FwRxSnV9jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFny+7Nn APriS8hYZdWRtGnqzHYdMB8GA1UdIwQYMBaAFEm1pGRj46K3CjNEYBTr9A5cnv50 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEwQS9FMzQwMjA0Q0Yx ODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9yY0tNMFJnRk92MERseWVf blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NiV2taR1Bqb3JjS00wUmdGT3YwRGx5ZV9uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEwQS9FMzQwMjA0Q0YxODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9y Y0tNMFJnRk92MERseWVfblEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADKVyL8wYJ7QnXtqHK+eNX7ncFPh+Rmx7Hk6Jb3DQj69rIMmpONZMRz4pUAR6 ODoYHN0pNqsr0OHLd4EHfsznqCbYcKhTaXmx9piEf092y64srrWmARJK1d1c329s qlHJdrggfPi7SQr5djVpZ1261wuxjeEdIbi/Za5NkPaBrgeiYHAvYhdfXYD6uYeE B1PPVFWMzS/k8NsIe6gXFH74EK7wH16B7GJiglZ5jMXeO3dnacPconLzKpVqBZS/ Jh840swnL+7tHHUz69WoHculQlgC0n3sUe8iysFuH4UJp22sB/ZwucI7k53YNbGl LiwAzBOr9wXbMfbDztZIzkY4Dg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:56:04 2026 by rpki-client