$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft File: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft (raw, json) Hash identifier: jd1ow1XOn197unUOSO7GH0BsuUqVeq8MG7CCyBwIkLs= Subject key identifier: 2B:B7:AE:49:39:78:1E:FE:D2:1E:CE:EF:22:34:97:06:0C:86:05:9F Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB Certificate issuer: /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Certificate serial: 0273 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft Manifest number: 025A Signing time: Mon 02 Mar 2026 00:56:06 +0000 Manifest this update: Mon 02 Mar 2026 00:56:05 +0000 Manifest next update: Mon 09 Mar 2026 00:56:05 +0000 Files and hashes: 1: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl (hash: gCQOxF5xVVIevo43Dqen3jGj/iBH+tJsQfyg4tencPQ=) 2: C0C268B8441C11EF9E110F1EC4F9AE02.roa (hash: BGZ/L+eylo480mcZ7HtgDtqGQJY6fpOnqOG9oduD88w=) 3: 08A1C0B8DC5011EF9C212C5CC4F9AE02.roa (hash: 4eriJ+anZ8scJn8XHXKnKYPlWoQjR5KP9FszJSNrcus=) 4: 1B8DE01C641911EF83FFBF3CC4F9AE02.roa (hash: 5SoS9wM/g+HshG7EbVwFWNY7qgmWv+2rIEwCE8gvraE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 627 (0x273) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC017, serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Validity Not Before: Mar 2 00:56:05 2026 GMT Not After : Mar 9 00:56:05 2026 GMT Subject: CN=69a4e026-3048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6a:db:ab:95:82:b1:d6:3d:08:37:ac:c6:06: 19:b5:db:55:b3:77:ce:43:5a:62:6a:c3:75:5c:97: 5f:ae:1e:98:37:13:82:95:d2:c0:a9:01:4f:af:76: 6e:f5:42:f7:58:07:d2:80:35:fd:10:fb:25:9f:6f: 54:0a:6c:f9:f5:0e:1f:4d:e9:d0:81:6c:8e:18:45: 83:ea:e8:a2:da:c3:e9:ff:07:46:e7:1b:29:b6:7f: 28:9f:14:ff:42:19:36:92:25:ef:b3:79:ee:35:47: 85:a7:37:b4:80:ba:85:db:26:57:fd:d2:d3:6f:a4: 65:21:01:ad:4e:8f:5c:8a:ef:65:a9:8a:24:a7:44: ca:5e:16:f5:ad:82:3b:ea:35:ec:3f:cd:b6:56:cb: c1:9c:63:07:4b:e2:7c:2d:63:c1:9b:a8:d2:3d:fc: 84:fc:1e:2a:ff:a1:41:70:a6:67:39:37:37:2b:90: 9f:22:48:2a:ff:03:44:0e:2e:2e:41:2d:b6:91:b7: cf:67:3b:61:d8:1e:2e:65:28:e2:99:92:3f:f5:65: 5a:e4:a7:38:e2:66:d8:29:6d:a6:3d:bc:56:2a:fc: 94:59:21:9f:93:5b:87:16:8e:fc:78:db:2f:0b:c2: 70:0b:1f:88:dc:63:aa:c6:d0:6d:4b:b2:45:20:14: 42:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B7:AE:49:39:78:1E:FE:D2:1E:CE:EF:22:34:97:06:0C:86:05:9F X509v3 Authority Key Identifier: keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:e5:8d:86:23:b2:9a:4c:e8:b7:3a:8d:de:7c:09:bd:2b:56: 34:fd:c2:66:83:c0:a2:64:18:a0:85:78:24:83:69:8d:e6:07: dd:9b:da:20:24:2c:0e:02:c8:16:f9:31:67:e4:17:39:cd:69: 55:4e:b8:7b:8a:98:51:e5:31:f3:4a:8c:93:05:b0:51:ef:67: 78:55:11:1d:fc:1b:5e:b4:2f:89:ed:dd:b8:fc:bf:72:57:f9: cd:34:0f:e5:1b:a9:9c:03:a5:47:42:1a:cb:6d:ca:88:56:ec: 21:2a:2a:bf:eb:f4:2c:91:1b:69:52:e4:3b:66:c8:06:a0:5b: 65:55:d2:24:3b:7a:07:5e:28:86:72:80:11:1c:88:4b:5d:76: da:30:10:40:19:42:f4:a7:13:cc:3b:21:44:7b:08:73:8e:f5: 92:41:25:8c:1b:48:8e:c2:9a:dd:01:3a:35:81:b6:28:57:37: 97:4c:f0:a2:14:19:87:51:2d:fe:0e:87:9e:94:1e:77:7c:a0: e6:5d:64:1a:17:9c:5d:8f:cd:14:44:eb:bd:03:e4:63:ef:a7: b5:66:9f:6c:55:00:95:64:3f:e6:f2:6a:8a:a5:4c:96:45:ac: c9:37:18:b3:6f:0e:2e:c0:59:60:3b:ec:c6:fd:95:82:f6:2f: 00:36:14:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwMTcxMTAvBgNVBAUTKDBBQTVERTI5MjY1QTA4RTI3QTU4MUQ4OTQ0NjVCRENE QjczNzA5QkIwHhcNMjYwMzAyMDA1NjA1WhcNMjYwMzA5MDA1NjA1WjAYMRYwFAYD VQQDEw02OWE0ZTAyNi0zMDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2rbq5WCsdY9CDesxgYZtdtVs3fOQ1piasN1XJdfrh6YNxOCldLAqQFPr3Zu 9UL3WAfSgDX9EPsln29UCmz59Q4fTenQgWyOGEWD6uii2sPp/wdG5xsptn8onxT/ Qhk2kiXvs3nuNUeFpze0gLqF2yZX/dLTb6RlIQGtTo9ciu9lqYokp0TKXhb1rYI7 6jXsP822VsvBnGMHS+J8LWPBm6jSPfyE/B4q/6FBcKZnOTc3K5CfIkgq/wNEDi4u QS22kbfPZzth2B4uZSjimZI/9WVa5Kc44mbYKW2mPbxWKvyUWSGfk1uHFo78eNsv C8JwCx+I3GOqxtBtS7JFIBRCpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCu3rkk5 eB7+0h7O7yI0lwYMhgWfMB8GA1UdIwQYMBaAFAql3ikmWgjielgdiURlvc23Nwm7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzAxNy8xMDVBQzhGQzkw QzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNPSjZXQjJKUkdXOXpiYzND YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxWGVLU1phQ09KNldCMkpSR1c5emJjM0Nicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzAxNy8xMDVBQzhGQzkwQzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNP SjZXQjJKUkdXOXpiYzNDYnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqOWNhiOymkzotzqN3nwJvStWNP3CZoPAomQYoIV4JINpjeYH3ZvaICQsDgLI FvkxZ+QXOc1pVU64e4qYUeUx80qMkwWwUe9neFURHfwbXrQvie3duPy/clf5zTQP 5RupnAOlR0Iay23KiFbsISoqv+v0LJEbaVLkO2bIBqBbZVXSJDt6B14ohnKAERyI S1122jAQQBlC9KcTzDshRHsIc471kkEljBtIjsKa3QE6NYG2KFc3l0zwohQZh1Et /g6HnpQed3yg5l1kGhecXY/NFETrvQPkY++ntWafbFUAlWQ/5vJqiqVMlkWsyTcY s28OLsBZYDvsxv2VgvYvADYUAw== -----END CERTIFICATE-----Generated at Mon Mar 2 05:45:09 2026 by rpki-client