$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft File: b70F9jC-RBCpUSzbaahco3zoxzk.mft (raw, json) Hash identifier: c9TB8tiWP/gvnoQlPAqjdQjHzyi9YRa9+adVu/DMygg= Subject key identifier: 53:33:23:F0:6C:B3:D3:F1:32:1C:50:1E:A6:61:66:83:23:76:D2:D6 Authority key identifier: 6F:BD:05:F6:30:BE:44:10:A9:51:2C:DB:69:A8:5C:A3:7C:E8:C7:39 Certificate issuer: /CN=A91DC897/serialNumber=6FBD05F630BE4410A9512CDB69A85CA37CE8C739 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft Manifest number: 13 Signing time: Sun 01 Mar 2026 10:34:39 +0000 Manifest this update: Sun 01 Mar 2026 10:34:39 +0000 Manifest next update: Sun 08 Mar 2026 10:34:39 +0000 Files and hashes: 1: b70F9jC-RBCpUSzbaahco3zoxzk.crl (hash: bKU+/2hTS4YgWHig7dMkCntZTfNzwwe5fi16m294r1w=) 2: B8EA8ABC033311F1AAD74374203D8C67.roa (hash: VGTwiIqmaXq4MsscshpbxlIvpQ6VN4x9kiDNRx4VLZE=) 3: 2764AC08003111F18836FC08486F56BC.roa (hash: yELvoRc3S+vHFcCwKMNPwYPmKbFYr2Z48ucu1l1HAEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.crl rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC897, serialNumber=6FBD05F630BE4410A9512CDB69A85CA37CE8C739 Validity Not Before: Mar 1 10:34:39 2026 GMT Not After : Mar 8 10:34:39 2026 GMT Subject: CN=69a4163f-6a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b6:c0:2a:74:b8:ce:c8:3a:ea:be:ba:a1:d5: 9a:d1:1f:a2:73:20:cf:59:8d:f8:1d:eb:39:f2:30: 8d:1d:43:ce:90:2d:46:05:07:a5:08:9a:f4:08:07: 25:b5:e3:71:1e:91:20:9b:e5:4b:ea:5e:75:dc:cc: f3:8e:8e:89:6e:cc:55:61:d8:6d:ab:33:b1:87:ed: a4:2b:5e:a0:8d:76:a3:19:88:6f:a6:06:26:4b:5a: 06:ea:9f:5d:78:f2:ee:ea:6b:46:ad:c0:5f:58:d5: f0:8f:cc:24:1c:17:3e:a2:ae:3e:dc:c1:0a:9c:35: 32:19:f7:2e:52:bf:02:74:12:7f:a0:83:07:f5:1d: 65:d7:78:b4:c7:1f:8c:c0:57:6c:86:c5:7e:e6:21: 2c:78:f3:59:5d:2e:d7:e8:e9:b0:41:62:a5:81:4d: 9c:14:ca:16:80:1a:ce:cc:93:75:41:d8:4e:f0:28: 70:cb:de:84:f8:f8:c6:a0:d3:68:24:b9:d5:13:4a: e3:1a:cb:18:d4:40:23:22:a3:eb:99:24:b2:84:00: 8b:6d:2f:d5:a3:87:b2:31:5e:d0:e9:c5:ff:bf:b1: 07:a3:0b:ea:7d:39:db:3f:96:db:dd:f6:f8:5d:34: 2b:9f:dd:fd:81:21:3f:78:3a:18:c1:b2:ff:b0:dd: 41:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:33:23:F0:6C:B3:D3:F1:32:1C:50:1E:A6:61:66:83:23:76:D2:D6 X509v3 Authority Key Identifier: keyid:6F:BD:05:F6:30:BE:44:10:A9:51:2C:DB:69:A8:5C:A3:7C:E8:C7:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:9d:4e:5a:63:15:a7:94:35:d2:f4:4a:c4:25:53:e3:c1:f3: 8e:4e:c7:9d:f6:52:ac:e4:2d:49:b6:bd:56:9d:14:34:71:be: 26:a9:2a:52:11:8a:da:60:a1:63:29:4f:ff:15:ff:da:94:77: ff:41:3b:30:09:c5:d9:e9:ac:bc:3e:83:73:bf:90:7c:35:f0: d8:0b:33:51:d7:ed:80:cb:4c:6e:94:b3:cc:7d:8a:f0:0d:4d: 3e:93:78:76:b3:bb:b5:d8:34:43:23:26:f2:84:36:f0:48:05: ee:ae:5d:f5:87:9e:4b:f0:aa:13:c8:bb:81:10:98:c2:36:d2: c9:6d:ac:f4:6d:d4:c6:65:e2:ea:0e:b8:a8:87:cd:30:c7:19: 9e:4e:c9:9a:92:2b:cd:f5:5d:a7:2d:66:7a:b5:ec:b8:51:aa: 9a:9d:a9:d9:c4:df:10:3e:cd:9f:f1:40:c8:a0:b7:56:7c:3c: 73:54:ba:73:ec:94:1c:ce:e7:3a:04:64:1a:8e:77:df:78:91: 03:8f:d0:49:43:e5:47:43:dc:d1:6b:12:16:e1:e0:92:3f:d8: 25:7c:c1:e0:15:b0:11:44:69:fb:22:d6:04:9b:69:00:a9:af: 83:3c:62:c2:e8:ad:13:a4:3e:6c:65:f6:6c:b7:2a:6f:d7:88: 58:d3:76:fa -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Qzg5NzExMC8GA1UEBRMoNkZCRDA1RjYzMEJFNDQxMEE5NTEyQ0RCNjlBODVDQTM3 Q0U4QzczOTAeFw0yNjAzMDExMDM0MzlaFw0yNjAzMDgxMDM0MzlaMBgxFjAUBgNV BAMTDTY5YTQxNjNmLTZhMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBtsAqdLjOyDrqvrqh1ZrRH6JzIM9Zjfgd6znyMI0dQ86QLUYFB6UImvQIByW1 43EekSCb5UvqXnXczPOOjoluzFVh2G2rM7GH7aQrXqCNdqMZiG+mBiZLWgbqn114 8u7qa0atwF9Y1fCPzCQcFz6irj7cwQqcNTIZ9y5SvwJ0En+ggwf1HWXXeLTHH4zA V2yGxX7mISx481ldLtfo6bBBYqWBTZwUyhaAGs7Mk3VB2E7wKHDL3oT4+Mag02gk udUTSuMayxjUQCMio+uZJLKEAIttL9Wjh7IxXtDpxf+/sQejC+p9Ods/ltvd9vhd NCuf3f2BIT94OhjBsv+w3UE/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUzMj8Gyz 0/EyHFAepmFmgyN20tYwHwYDVR0jBBgwFoAUb70F9jC+RBCpUSzbaahco3zoxzkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDODk3LzdGNEU2M0VDMDAz MDExRjE5NEEyNTdBQjQ3NkY1NkJDL2I3MEY5akMtUkJDcFVTemJhYWhjbzN6b3h6 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvYjcwRjlqQy1SQkNwVVN6YmFhaGNvM3pveHprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD ODk3LzdGNEU2M0VDMDAzMDExRjE5NEEyNTdBQjQ3NkY1NkJDL2I3MEY5akMtUkJD cFVTemJhYWhjbzN6b3h6ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCKnU5aYxWnlDXS9ErEJVPjwfOOTsed9lKs5C1Jtr1WnRQ0cb4mqSpSEYraYKFj KU//Ff/alHf/QTswCcXZ6ay8PoNzv5B8NfDYCzNR1+2Ay0xulLPMfYrwDU0+k3h2 s7u12DRDIybyhDbwSAXurl31h55L8KoTyLuBEJjCNtLJbaz0bdTGZeLqDrioh80w xxmeTsmakivN9V2nLWZ6tey4UaqananZxN8QPs2f8UDIoLdWfDxzVLpz7JQczuc6 BGQajnffeJEDj9BJQ+VHQ9zRaxIW4eCSP9glfMHgFbARRGn7ItYEm2kAqa+DPGLC 6K0TpD5sZfZstypv14hY03b6 -----END CERTIFICATE-----Generated at Mon Mar 2 06:24:05 2026 by rpki-client