$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft File: NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft (raw, json) Hash identifier: sTkhPHFtdqyTOEWKYMJDgNVH+04e0OwXHJcRetvA3UA= Subject key identifier: AB:BD:22:1E:FC:A3:10:91:69:D4:68:E3:4E:7F:DC:58:A1:50:B2:2C Authority key identifier: 35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85 Certificate issuer: /CN=A91E2EFF/serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft Manifest number: 87 Signing time: Sun 01 Mar 2026 08:54:59 +0000 Manifest this update: Sun 01 Mar 2026 08:54:59 +0000 Manifest next update: Sun 08 Mar 2026 08:54:59 +0000 Files and hashes: 1: NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl (hash: h7LbIa+3Cr4k77KtIlUO9Uc435Q3f2cyWp59oVYTt7M=) 2: 370DA046484A11F0B96B9D10C4F9AE02.roa (hash: 2C2sOivYWsfKN0PHSEL43JM0n0rxZssOB/cieKzKbtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EFF, serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385 Validity Not Before: Mar 1 08:54:59 2026 GMT Not After : Mar 8 08:54:59 2026 GMT Subject: CN=69a3fee3-b8a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ff:18:1b:1a:77:e4:44:88:e3:0c:94:af:c1: 7a:09:fa:35:66:f4:fc:81:47:28:04:08:85:a6:82: 40:74:d6:54:e6:12:9b:80:0f:b5:28:1e:24:bb:96: ee:7b:1b:b4:a6:9b:48:97:1c:d1:1c:49:34:7f:09: 57:a1:a6:df:a2:bd:b7:84:5e:59:23:1d:11:e0:1b: e0:4e:96:7d:dd:98:ff:f2:64:4d:0d:de:8e:99:d2: b5:bb:44:c6:a0:d4:d5:90:f4:ed:d3:e7:93:59:68: e0:3e:e2:78:4d:a0:52:49:22:f6:7e:bd:47:20:39: 8e:b9:10:59:66:32:38:69:80:2a:e4:05:cf:55:92: 35:22:56:e6:b9:2b:7c:25:2a:bc:71:d7:fb:24:d4: e2:0f:9c:b7:91:9c:71:8a:16:a5:94:13:37:c0:18: 1f:ce:37:73:41:54:8a:f7:65:e8:23:31:fe:a4:98: 75:e4:79:6d:a5:b7:88:0b:f5:12:c9:ec:09:ab:c6: dd:6a:e0:d1:25:d0:79:cc:ce:07:18:06:24:c9:60: f9:cd:42:81:70:cd:95:f0:1a:5a:75:d6:91:fc:5c: 12:f5:4d:dc:d7:52:b5:ac:8f:92:99:d0:01:63:5c: a3:d0:86:a5:87:82:58:c0:c0:de:cd:29:8b:4a:f6: 7e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BD:22:1E:FC:A3:10:91:69:D4:68:E3:4E:7F:DC:58:A1:50:B2:2C X509v3 Authority Key Identifier: keyid:35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:4f:40:f2:3c:a7:ed:c1:c1:a1:be:a8:00:6b:43:d8:21:ef: 30:3d:c5:7f:97:dc:83:74:f3:eb:fd:4c:8f:af:60:09:f5:16: 8f:57:0f:64:0c:7b:f3:7f:32:2f:c6:0f:83:37:6a:0b:21:4e: d7:26:a2:c1:6b:29:95:41:14:22:49:2e:a1:e0:28:e1:29:40: 8e:44:17:b1:51:04:a1:40:dc:97:0e:ef:1d:df:df:cc:25:5c: 68:77:7d:1a:07:7c:07:ca:7c:0f:c4:a2:8c:cc:e1:8e:ae:d0: 33:52:2c:2d:0e:32:52:c5:5c:5d:81:64:77:6b:71:db:95:90: df:f8:81:bb:42:c6:8a:56:e9:be:f2:0a:6d:ee:46:4e:36:6a: cb:b8:21:54:52:bd:3b:ab:63:63:b7:a4:36:02:11:93:01:55: 5d:5e:39:d1:70:58:a8:c1:8b:2a:47:36:3f:01:06:1d:2b:46: a4:a3:71:5e:d3:9e:44:7d:5a:e3:30:92:95:40:db:1e:ae:af: e4:99:c9:3b:2e:79:09:cf:6b:0f:48:94:28:cf:c4:c4:d4:e0: e2:ed:c8:57:56:2c:2d:2e:35:53:27:a0:2c:c8:de:4b:d1:93: 5a:6a:5e:a9:4a:09:1a:f4:d5:17:ac:2b:3d:3e:7b:99:89:f7: ad:4a:14:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFRkYxMTAvBgNVBAUTKDM1NDMzQzlFQzQwODA5OUY3MDE4QkM1MTQ0MUQyMkM0 QzExRkMzODUwHhcNMjYwMzAxMDg1NDU5WhcNMjYwMzA4MDg1NDU5WjAYMRYwFAYD VQQDEw02OWEzZmVlMy1iOGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2P8YGxp35ESI4wyUr8F6Cfo1ZvT8gUcoBAiFpoJAdNZU5hKbgA+1KB4ku5bu exu0pptIlxzRHEk0fwlXoabfor23hF5ZIx0R4BvgTpZ93Zj/8mRNDd6OmdK1u0TG oNTVkPTt0+eTWWjgPuJ4TaBSSSL2fr1HIDmOuRBZZjI4aYAq5AXPVZI1IlbmuSt8 JSq8cdf7JNTiD5y3kZxxihallBM3wBgfzjdzQVSK92XoIzH+pJh15HltpbeIC/US yewJq8bdauDRJdB5zM4HGAYkyWD5zUKBcM2V8BpaddaR/FwS9U3c11K1rI+SmdAB Y1yj0Ialh4JYwMDezSmLSvZ+qQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKu9Ih78 oxCRadRo405/3FihULIsMB8GA1UdIwQYMBaAFDVDPJ7ECAmfcBi8UUQdIsTBH8OF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkVGRi9BQjk3NUJDRTQ4 NDkxMUYwQkYwNzAzNzBDNEY5QUUwMi9OVU04bnNRSUNaOXdHTHhSUkIwaXhNRWZ3 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05VTThuc1FJQ1o5d0dMeFJSQjBpeE1FZnc0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkVGRi9BQjk3NUJDRTQ4NDkxMUYwQkYwNzAzNzBDNEY5QUUwMi9OVU04bnNRSUNa OXdHTHhSUkIwaXhNRWZ3NFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi09A8jyn7cHBob6oAGtD2CHvMD3Ff5fcg3Tz6/1Mj69gCfUWj1cPZAx7838y L8YPgzdqCyFO1yaiwWsplUEUIkkuoeAo4SlAjkQXsVEEoUDclw7vHd/fzCVcaHd9 Ggd8B8p8D8SijMzhjq7QM1IsLQ4yUsVcXYFkd2tx25WQ3/iBu0LGilbpvvIKbe5G TjZqy7ghVFK9O6tjY7ekNgIRkwFVXV450XBYqMGLKkc2PwEGHStGpKNxXtOeRH1a 4zCSlUDbHq6v5JnJOy55Cc9rD0iUKM/ExNTg4u3IV1YsLS41UyegLMjeS9GTWmpe qUoJGvTVF6wrPT57mYn3rUoUSg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:41:47 2026 by rpki-client