$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft File: 30fOzFfqiK65ajhlVgufImC6mQ4.mft (raw, json) Hash identifier: oNTPt0vtSr0RA94G326g8iHdkEr/1P+QOI3MWBNzqu8= Subject key identifier: B8:3C:A9:A0:6A:86:0B:59:D1:D7:1E:71:88:4B:5D:09:72:9E:90:36 Authority key identifier: DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E Certificate issuer: /CN=A91DBA5B/serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft Manifest number: 0115 Signing time: Sun 01 Mar 2026 06:56:41 +0000 Manifest this update: Sun 01 Mar 2026 06:56:40 +0000 Manifest next update: Sun 08 Mar 2026 06:56:40 +0000 Files and hashes: 1: 30fOzFfqiK65ajhlVgufImC6mQ4.crl (hash: /YuC1wo3NTEX280UXpBRpKKvQuSI8NKFMRLU9b8uAcI=) 2: 02389B7670E811EFA8DBE571C4F9AE02.roa (hash: VymoAbVW0Xjer0qffAdo09mun74sopBFqTSpIfpfxa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBA5B, serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E Validity Not Before: Mar 1 06:56:40 2026 GMT Not After : Mar 8 06:56:40 2026 GMT Subject: CN=69a3e328-09d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:33:61:08:32:09:e5:28:55:8a:93:1b:22:ec: 25:71:e2:52:55:e4:fd:0f:c0:f8:db:0b:2d:07:07: f5:74:9e:2d:1a:d6:af:7d:2d:e4:96:4c:9f:5c:12: 5a:0e:7c:29:7a:37:2f:74:2d:ae:cf:d6:63:0d:b8: b9:78:4d:33:e5:b5:c0:68:a0:31:27:1f:ac:1e:6d: 7b:9f:73:58:5a:18:99:61:79:76:a4:03:3f:69:e2: 51:b3:7c:6e:cd:98:86:13:1a:4c:5b:8f:ba:91:86: 4a:d0:a3:40:34:25:2f:0b:e7:0d:8e:67:70:bf:ea: a4:c0:ad:5d:6f:94:c2:7f:41:2d:6e:aa:e0:4e:c3: a2:de:9e:57:8c:7a:93:34:f8:e3:65:9d:14:f2:25: 40:fb:7e:27:2b:89:73:ec:a6:2a:2e:08:56:9c:f8: ff:03:4c:14:f7:b8:d5:e9:ca:e4:fb:3c:f9:44:c6: 68:06:67:7a:b8:6f:74:39:bf:fb:c9:e2:a5:5b:83: ce:5a:91:a0:5e:ba:aa:2f:de:12:a3:2b:33:71:85: 46:68:72:7e:cc:a0:30:3d:67:1a:4c:80:fb:87:6c: ae:f3:8a:83:55:d9:06:08:c3:dd:88:58:a9:4f:8d: 89:cc:10:33:a8:a5:9c:9b:53:6c:20:29:a8:0b:4e: ab:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3C:A9:A0:6A:86:0B:59:D1:D7:1E:71:88:4B:5D:09:72:9E:90:36 X509v3 Authority Key Identifier: keyid:DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0b:35:a3:fc:38:52:57:70:0b:2a:ec:fc:49:58:f5:d0:2d: b4:4a:7b:4a:5f:4b:cb:52:5b:bd:45:62:6f:5a:f1:0c:b8:8b: b7:35:ef:41:17:44:9e:5a:2d:98:b5:8d:bc:a9:a6:97:ca:61: 1e:5e:ad:dc:25:ac:96:69:b1:af:aa:66:c5:71:b0:dc:9c:25: 59:b3:00:d9:cb:e7:90:f8:17:59:63:b1:de:62:d4:8a:54:90: cc:12:a8:af:03:8f:ab:84:2d:a3:df:d1:99:86:7e:da:b5:bc: 16:9a:ef:a8:4e:c0:ba:80:e3:ca:9f:e4:a6:66:65:af:27:79: 1b:03:c9:03:55:74:e0:a5:e3:49:9a:d7:6e:29:74:c4:8f:96: da:2a:d0:3a:2c:16:97:00:52:c4:fe:6e:db:ef:b9:c8:57:2f: db:00:42:f2:62:4e:12:36:d8:0b:ec:a3:b8:0a:a1:4a:d2:91: 59:d2:cd:79:47:f0:b4:61:33:6e:45:2f:1e:d2:a1:4f:54:5f: 11:0a:08:24:a4:a0:ff:17:5d:07:be:ef:6b:44:f9:67:87:83: 0e:8a:73:90:e7:b8:cd:ee:75:a7:19:f7:b1:9b:23:4f:a5:b8: ca:3a:cb:bf:6d:18:35:01:d0:98:c5:5c:78:99:05:cc:36:aa: ff:a3:58:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBNUIxMTAvBgNVBAUTKERGNDdDRUNDNTdFQTg4QUVCOTZBMzg2NTU2MEI5RjIy NjBCQTk5MEUwHhcNMjYwMzAxMDY1NjQwWhcNMjYwMzA4MDY1NjQwWjAYMRYwFAYD VQQDEw02OWEzZTMyOC0wOWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5DNhCDIJ5ShVipMbIuwlceJSVeT9D8D42wstBwf1dJ4tGtavfS3klkyfXBJa DnwpejcvdC2uz9ZjDbi5eE0z5bXAaKAxJx+sHm17n3NYWhiZYXl2pAM/aeJRs3xu zZiGExpMW4+6kYZK0KNANCUvC+cNjmdwv+qkwK1db5TCf0EtbqrgTsOi3p5XjHqT NPjjZZ0U8iVA+34nK4lz7KYqLghWnPj/A0wU97jV6crk+zz5RMZoBmd6uG90Ob/7 yeKlW4POWpGgXrqqL94SoyszcYVGaHJ+zKAwPWcaTID7h2yu84qDVdkGCMPdiFip T42JzBAzqKWcm1NsICmoC06rJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLg8qaBq hgtZ0dcecYhLXQlynpA2MB8GA1UdIwQYMBaAFN9HzsxX6oiuuWo4ZVYLnyJgupkO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkE1Qi81ODAwNEFBQTcw RTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi8zMGZPekZmcWlLNjVhamhsVmd1ZkltQzZt UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMwZk96RmZxaUs2NWFqaGxWZ3VmSW1DNm1RNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkE1Qi81ODAwNEFBQTcwRTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi8zMGZPekZmcWlL NjVhamhsVmd1ZkltQzZtUTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALgs1o/w4UldwCyrs/ElY9dAttEp7Sl9Ly1JbvUVib1rxDLiLtzXvQRdEnlot mLWNvKmml8phHl6t3CWslmmxr6pmxXGw3JwlWbMA2cvnkPgXWWOx3mLUilSQzBKo rwOPq4Qto9/RmYZ+2rW8FprvqE7AuoDjyp/kpmZlryd5GwPJA1V04KXjSZrXbil0 xI+W2irQOiwWlwBSxP5u2++5yFcv2wBC8mJOEjbYC+yjuAqhStKRWdLNeUfwtGEz bkUvHtKhT1RfEQoIJKSg/xddB77va0T5Z4eDDopzkOe4ze51pxn3sZsjT6W4yjrL v20YNQHQmMVceJkFzDaq/6NYRA== -----END CERTIFICATE-----Generated at Mon Mar 2 00:28:10 2026 by rpki-client