$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft File: 1QwK07StgdVVlFzH8_HuHB-t5hc.mft (raw, json) Hash identifier: KsKiS06AHPbqIKY1qUsn03S3CSnu/gb+ELJ8p4F+OHY= Subject key identifier: 1A:E7:BB:94:52:4D:31:1B:8C:7B:7D:20:59:CB:2C:7D:70:C0:E0:35 Authority key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17 Certificate issuer: /CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617 Certificate serial: 0BB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft Manifest number: 0BA5 Signing time: Mon 02 Mar 2026 00:48:26 +0000 Manifest this update: Mon 02 Mar 2026 00:48:24 +0000 Manifest next update: Mon 09 Mar 2026 00:48:24 +0000 Files and hashes: 1: 1QwK07StgdVVlFzH8_HuHB-t5hc.crl (hash: FcWLJgmr8ybm9sLqqafanb/8jk0y5p7JhyzPyefi3Dk=) 2: 1E6B12EC049F11F0AD5C7C33C4F9AE02.roa (hash: 52FStysb8y6SSS0DgpkYNnuMyVWPrRkIBtAubJdaP50=) 3: 74CA44AA049F11F087661234C4F9AE02.roa (hash: wKdTkyyXqkqw4zY6Mort6rY+08KcEGgpc9UUyZvX1D8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2999 (0xbb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB475, serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617 Validity Not Before: Mar 2 00:48:24 2026 GMT Not After : Mar 9 00:48:24 2026 GMT Subject: CN=69a4de5a-cf54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:44:5d:d8:ce:0d:96:84:b1:1a:e4:40:5c:91: 8b:a0:de:fe:ff:a4:c5:4b:ba:8e:7a:8b:65:12:65: 1e:49:8f:56:3b:c7:d1:46:e3:a6:67:bb:99:eb:26: d5:45:5b:a0:b6:19:8c:d3:5b:6f:bb:d6:f8:ca:8d: cd:9f:0e:d1:01:92:a4:3f:7e:cc:b5:e7:a0:62:09: e5:cf:d3:d2:ad:29:63:c6:20:74:a1:c6:4d:de:7f: af:5e:c6:a5:87:32:93:b0:4b:d0:2a:80:49:29:05: 2a:34:e0:cc:5f:a9:1f:7b:04:c9:93:ca:6b:7a:08: b2:ec:f7:ef:a7:5f:22:af:aa:ad:db:f1:ca:ad:8a: 63:6b:0b:eb:1b:89:81:c4:f5:82:55:77:04:d1:45: 48:96:c7:53:f6:88:2e:3f:76:7b:04:28:90:01:b2: 89:25:3b:18:3b:f8:97:75:f4:50:e7:e4:dd:6f:c9: a7:64:4d:7b:d9:05:f2:9d:c5:53:37:8d:5c:67:cb: e3:e5:97:cb:d2:50:6b:3f:ec:3e:d7:c6:a0:27:2b: ca:69:54:c1:f7:b0:ea:01:e9:28:f1:ff:93:c9:e3: ea:ce:ae:2e:32:2d:65:59:59:01:08:d1:8e:90:22: 3a:f5:b6:1f:51:67:60:47:20:c0:10:34:4c:2f:34: 88:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E7:BB:94:52:4D:31:1B:8C:7B:7D:20:59:CB:2C:7D:70:C0:E0:35 X509v3 Authority Key Identifier: keyid:D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:33:71:5b:eb:f3:3e:37:ef:98:bd:b6:20:fa:a8:7a:d2:14: 53:39:b0:67:ed:a2:58:c4:cb:39:20:99:65:f9:67:a5:3c:e1: 19:f5:f1:33:bd:3b:64:db:bb:0d:7e:38:d3:bc:fe:0d:23:c5: 4e:03:59:43:ef:9b:b8:b2:74:be:3c:71:ba:a3:ee:d7:5c:a9: b4:cf:da:7e:8d:af:20:4a:52:1c:72:cf:3d:37:e3:9b:98:0f: 91:73:07:2f:9e:68:8a:a3:e2:d5:8b:34:13:63:a6:9c:66:8e: e1:8c:86:57:2c:71:47:14:fe:b2:31:84:f1:e8:09:50:bc:20: 7c:3c:f5:8d:ee:ad:e5:67:24:41:36:5a:78:95:9f:17:77:e0: af:52:b2:57:8f:19:bc:b1:2e:57:ed:ff:35:2e:0c:7f:f8:88: 3a:f7:3b:68:99:88:c4:17:34:4a:31:1d:4a:a3:21:6d:47:c4: 07:a9:52:97:65:e9:ac:09:d3:90:88:f1:6b:da:dc:0a:cf:86: 94:34:80:e4:dc:fd:04:71:30:50:1e:22:f0:ff:79:b9:07:e2: 3a:2d:80:5c:63:15:1e:fe:c2:97:bc:67:31:b6:86:d6:02:82: f4:36:4e:bc:5b:12:49:e0:82:08:76:99:b5:ea:0d:e4:38:18: 21:0b:09:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0NzUxMTAvBgNVBAUTKEQ1MEMwQUQzQjRBRDgxRDU1NTk0NUNDN0YzRjFFRTFD MUZBREU2MTcwHhcNMjYwMzAyMDA0ODI0WhcNMjYwMzA5MDA0ODI0WjAYMRYwFAYD VQQDEw02OWE0ZGU1YS1jZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0Rd2M4NloSxGuRAXJGLoN7+/6TFS7qOeotlEmUeSY9WO8fRRuOmZ7uZ6ybV RVugthmM01tvu9b4yo3Nnw7RAZKkP37MteegYgnlz9PSrSljxiB0ocZN3n+vXsal hzKTsEvQKoBJKQUqNODMX6kfewTJk8pregiy7Pfvp18ir6qt2/HKrYpjawvrG4mB xPWCVXcE0UVIlsdT9oguP3Z7BCiQAbKJJTsYO/iXdfRQ5+Tdb8mnZE172QXyncVT N41cZ8vj5ZfL0lBrP+w+18agJyvKaVTB97DqAeko8f+TyePqzq4uMi1lWVkBCNGO kCI69bYfUWdgRyDAEDRMLzSIgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBrnu5RS TTEbjHt9IFnLLH1wwOA1MB8GA1UdIwQYMBaAFNUMCtO0rYHVVZRcx/Px7hwfreYX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjQ3NS8yMDhGQjczMDQx NzIxMUVBOThBMzY4NkRDNEY5QUUwMi8xUXdLMDdTdGdkVlZsRnpIOF9IdUhCLXQ1 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRd0swN1N0Z2RWVmxGekg4X0h1SEItdDVoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjQ3NS8yMDhGQjczMDQxNzIxMUVBOThBMzY4NkRDNEY5QUUwMi8xUXdLMDdTdGdk VlZsRnpIOF9IdUhCLXQ1aGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgTNxW+vzPjfvmL22IPqoetIUUzmwZ+2iWMTLOSCZZflnpTzhGfXxM707ZNu7 DX4407z+DSPFTgNZQ++buLJ0vjxxuqPu11yptM/afo2vIEpSHHLPPTfjm5gPkXMH L55oiqPi1Ys0E2OmnGaO4YyGVyxxRxT+sjGE8egJULwgfDz1je6t5WckQTZaeJWf F3fgr1KyV48ZvLEuV+3/NS4Mf/iIOvc7aJmIxBc0SjEdSqMhbUfEB6lSl2XprAnT kIjxa9rcCs+GlDSA5Nz9BHEwUB4i8P95uQfiOi2AXGMVHv7Cl7xnMbaG1gKC9DZO vFsSSeCCCHaZteoN5DgYIQsJnA== -----END CERTIFICATE-----Generated at Mon Mar 2 12:43:24 2026 by rpki-client