$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft File: -a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft (raw, json) Hash identifier: DYv/TrxRZs5CsyuaMGXvFEYr3zf2KM1VZA+CdnTSkTA= Subject key identifier: 13:BB:83:00:31:F2:D4:B8:BD:B6:7A:61:3E:04:14:70:8E:CB:3A:C9 Authority key identifier: F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 Certificate issuer: /CN=A91DBAA3/serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft Manifest number: 29 Signing time: Sun 01 Mar 2026 10:10:59 +0000 Manifest this update: Sun 01 Mar 2026 10:10:58 +0000 Manifest next update: Sun 08 Mar 2026 10:10:58 +0000 Files and hashes: 1: -a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl (hash: 82VsoJ/5DjEX6GehUx+XnINhKDC2Y+YJ70Hj5acZFGE=) 2: F8846850D90D11F0AF9B1D207DD3641D.roa (hash: C8bVTV94pOOCxrg4kh5f59qcGeBnKrcTHRFtNag76kw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAA3, serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Validity Not Before: Mar 1 10:10:58 2026 GMT Not After : Mar 8 10:10:58 2026 GMT Subject: CN=69a410b3-f957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:26:de:ab:3b:96:c6:38:11:46:26:7f:0d: 8f:5b:66:8f:c3:42:3f:87:c5:49:c2:cf:02:51:89: a2:72:c4:fb:78:89:1a:37:e3:f5:2b:94:b4:c7:dd: 13:c5:0e:1f:64:c4:28:4d:e8:2a:49:a3:a8:e7:b4: 0e:77:57:b9:76:5b:c1:28:03:2d:77:e3:6d:71:03: 6a:f6:3d:da:13:28:ec:8b:c5:79:6e:32:45:0b:de: 85:dc:3d:61:a8:b2:84:38:9c:2e:ed:03:99:a3:fc: fd:85:0b:a3:70:78:06:ec:a2:ad:2c:59:a5:25:70: f8:18:7f:d8:46:5b:21:81:61:d3:d6:26:6f:0c:1c: 7f:4a:22:61:63:16:52:6e:9d:67:d2:9e:03:3c:f0: 48:bc:b9:72:38:79:8c:1e:de:8c:b6:da:df:b4:b4: 98:08:59:65:2e:38:a6:89:c4:45:c5:2e:f2:ab:2d: 5b:bf:66:c6:7f:d7:2d:a2:ad:09:3d:90:84:07:56: cb:3c:ee:53:72:ff:b2:24:8f:d1:ae:ff:3b:2f:3b: 7c:eb:94:c1:20:7c:64:1e:4e:25:29:ef:42:9c:09: 3b:0d:f9:fc:fa:4e:b1:8d:bf:e5:bc:34:d1:ea:d3: 64:a4:ea:70:9e:61:76:22:5a:65:87:86:45:55:37: e1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:BB:83:00:31:F2:D4:B8:BD:B6:7A:61:3E:04:14:70:8E:CB:3A:C9 X509v3 Authority Key Identifier: keyid:F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:f4:1d:56:c4:d9:79:d1:1e:5f:38:a0:03:ee:16:cd:78:e6: 8c:6e:0a:f1:d1:02:3e:df:56:69:47:d2:14:34:79:1e:d2:c4: 8b:de:89:aa:26:f6:1a:65:f6:d5:b1:fa:eb:b6:58:5a:1c:b0: e6:ff:2b:8f:97:ee:c1:36:b5:71:9e:b2:e9:3b:0c:00:f9:c9: 99:fa:4c:50:5e:3d:8e:2e:8b:34:57:2f:76:9a:60:e4:57:24: 19:2b:a7:1a:78:78:95:14:05:77:a7:a1:8e:7d:4a:6e:18:14: f3:12:4a:79:60:d4:06:ab:a4:77:7e:f4:0f:d8:ea:5c:82:26: e9:ff:99:3f:49:e7:40:8e:af:20:06:62:6d:06:82:c1:93:b5: b1:6b:d1:d7:8a:78:6c:6c:56:ea:95:9b:ed:aa:84:2f:11:89: 83:49:76:d2:7c:46:9f:97:60:b8:06:6c:a4:c3:68:db:98:a9: e5:cb:92:74:79:8b:27:ba:ba:04:b1:ba:d7:4f:a9:36:39:23: 89:d1:09:30:65:9e:b3:b6:37:c9:2b:a7:06:90:ab:57:2e:a1: ea:ab:03:25:3b:54:14:62:72:c9:5f:d3:a4:e6:c9:97:b3:61: eb:4e:a2:f7:bb:7c:c5:62:29:65:eb:88:17:08:2e:b2:36:eb: 6e:03:f0:9f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkFBMzExMC8GA1UEBRMoRjlBRTVFMkE5REM4MEI1MUVBQTc1NzcyNzhDM0RFMDYx QTgwQUI2MzAeFw0yNjAzMDExMDEwNThaFw0yNjAzMDgxMDEwNThaMBgxFjAUBgNV BAMTDTY5YTQxMGIzLWY5NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH6SbeqzuWxjgRRiZ/DY9bZo/DQj+HxUnCzwJRiaJyxPt4iRo34/UrlLTH3RPF Dh9kxChN6CpJo6jntA53V7l2W8EoAy13421xA2r2PdoTKOyLxXluMkUL3oXcPWGo soQ4nC7tA5mj/P2FC6NweAbsoq0sWaUlcPgYf9hGWyGBYdPWJm8MHH9KImFjFlJu nWfSngM88Ei8uXI4eYwe3oy22t+0tJgIWWUuOKaJxEXFLvKrLVu/ZsZ/1y2irQk9 kIQHVss87lNy/7Ikj9Gu/zsvO3zrlMEgfGQeTiUp70KcCTsN+fz6TrGNv+W8NNHq 02Sk6nCeYXYiWmWHhkVVN+GrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUE7uDADHy 1Li9tnphPgQUcI7LOskwHwYDVR0jBBgwFoAU+a5eKp3IC1Hqp1dyeMPeBhqAq2Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCQUEzLzFDMTc5MTNBRDkw RDExRjA4NjgwRDVGMTdDRDM2NDFELy1hNWVLcDNJQzFIcXAxZHllTVBlQmhxQXEy TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLWE1ZUtwM0lDMUhxcDFkeWVNUGVCaHFBcTJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC QUEzLzFDMTc5MTNBRDkwRDExRjA4NjgwRDVGMTdDRDM2NDFELy1hNWVLcDNJQzFI cXAxZHllTVBlQmhxQXEyTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAT9B1WxNl50R5fOKAD7hbNeOaMbgrx0QI+31ZpR9IUNHke0sSL3omqJvYaZfbV sfrrtlhaHLDm/yuPl+7BNrVxnrLpOwwA+cmZ+kxQXj2OLos0Vy92mmDkVyQZK6ca eHiVFAV3p6GOfUpuGBTzEkp5YNQGq6R3fvQP2Opcgibp/5k/SedAjq8gBmJtBoLB k7Wxa9HXinhsbFbqlZvtqoQvEYmDSXbSfEafl2C4Bmykw2jbmKnly5J0eYsnuroE sbrXT6k2OSOJ0QkwZZ6ztjfJK6cGkKtXLqHqqwMlO1QUYnLJX9Ok5smXs2HrTqL3 u3zFYill64gXCC6yNutuA/Cf -----END CERTIFICATE-----Generated at Sun Mar 1 23:13:37 2026 by rpki-client