$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft File: MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft (raw, json) Hash identifier: 3ry1cFzsr8l5isSGxQamu3yACD/QzuH+ekyxqDFlECw= Subject key identifier: BD:9E:92:BB:69:24:B4:77:3F:41:F1:21:F8:89:3A:EA:EE:42:0A:29 Authority key identifier: 31:6D:89:64:7F:0D:0C:B0:6B:37:32:07:8A:42:30:AF:11:56:53:34 Certificate issuer: /CN=A91E3441/serialNumber=316D89647F0D0CB06B3732078A4230AF11565334 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft Manifest number: 1D Signing time: Sun 01 Mar 2026 10:22:37 +0000 Manifest this update: Sun 01 Mar 2026 10:22:36 +0000 Manifest next update: Sun 08 Mar 2026 10:22:36 +0000 Files and hashes: 1: MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl (hash: ut5+dyADGq0WEIjdKMhFpe+WAsORRKIChZjn5u8E1P8=) 2: 3954E33CEE9E11F0B32FB2E5666F56BC.roa (hash: 91UfSDMa7uQJKbxkjWHGuOg640JuLtPHQKq29mthHYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3441, serialNumber=316D89647F0D0CB06B3732078A4230AF11565334 Validity Not Before: Mar 1 10:22:36 2026 GMT Not After : Mar 8 10:22:36 2026 GMT Subject: CN=69a4136c-14b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bd:d4:4b:29:2a:db:66:80:13:20:a3:59:2a: c6:1c:4f:00:65:ab:74:d7:1a:67:79:eb:21:42:31: 24:bf:4b:76:42:1e:fb:61:9d:28:b7:c0:c7:96:d1: 35:6f:a4:76:9b:31:e7:c4:c1:b7:a0:68:2f:ee:48: 8d:88:6e:fa:bb:1f:e4:df:44:3f:a0:50:f8:8d:76: 4e:32:6d:3b:91:ec:93:9c:1b:d6:47:94:e2:ba:c4: cf:0d:d1:d8:7f:af:26:e2:8e:b6:e2:32:18:47:fc: 58:88:dc:84:c8:39:31:bf:ad:6e:b7:ea:d1:c9:2d: bb:c5:cc:5f:17:fe:a8:94:11:ab:a5:b7:ff:8b:e2: ba:be:76:d8:fb:3f:83:8c:c3:da:8e:2e:94:12:2b: a0:5f:bd:86:a1:4f:cc:e7:04:f8:79:9c:7b:3b:ae: b2:77:03:94:07:55:94:e1:59:82:62:5c:ae:46:ff: 5e:0b:2e:f5:de:04:ab:64:33:fa:c3:8d:e7:2f:e8: 9b:79:28:8d:b6:ee:b7:9f:62:f8:67:60:66:bf:4d: 14:84:b9:52:90:10:c8:f8:a3:ee:ae:91:71:6f:7b: 3f:07:92:05:74:7d:e0:e5:1e:1b:ed:a7:7b:3d:08: 6a:9d:ea:fd:8a:9e:d5:a3:92:8a:6c:e6:98:db:38: fe:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9E:92:BB:69:24:B4:77:3F:41:F1:21:F8:89:3A:EA:EE:42:0A:29 X509v3 Authority Key Identifier: keyid:31:6D:89:64:7F:0D:0C:B0:6B:37:32:07:8A:42:30:AF:11:56:53:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:18:6d:dc:37:5d:60:17:5a:44:86:66:8c:80:cd:7e:70:7a: e1:16:67:2c:21:29:8c:37:2a:99:a8:c8:34:9f:51:b7:2c:34: d5:1c:9d:83:8c:eb:a5:ae:ec:8d:46:26:e5:12:df:d4:39:14: ae:13:5e:7d:3b:cb:87:c2:37:c6:5d:5c:d5:b0:cb:99:9a:4a: a1:45:e6:97:57:be:77:06:36:62:a2:95:c3:ca:4a:a2:f5:a4: 96:37:ab:cc:3a:28:71:d8:34:c2:c9:b1:48:fd:f3:14:c7:a6: 2e:3a:3b:82:03:28:a0:69:cc:f3:d4:ce:dc:ca:ee:a5:f5:6e: a4:e8:cf:15:aa:15:cc:2f:8a:5b:c8:35:59:39:e7:a9:e9:14: 82:c0:68:ca:7b:ae:7e:bb:a5:a6:6a:d4:9b:1d:77:28:4e:92: e0:b8:bb:4e:3b:99:89:58:45:a5:fb:0f:f6:e5:c0:19:94:df: f7:ae:82:b6:35:17:bd:35:a9:ac:28:70:6c:8a:42:10:78:70: 62:b3:04:c5:e8:02:ac:92:81:51:f4:14:7a:43:eb:99:7c:0b: b0:28:62:60:77:ba:a8:88:a9:2d:3e:25:1a:ab:6a:0d:82:2d: ef:df:ad:c0:a5:a7:bc:e3:8c:6c:83:27:25:0b:18:1a:6a:4b: ab:d8:80:8c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzQ0MTExMC8GA1UEBRMoMzE2RDg5NjQ3RjBEMENCMDZCMzczMjA3OEE0MjMwQUYx MTU2NTMzNDAeFw0yNjAzMDExMDIyMzZaFw0yNjAzMDgxMDIyMzZaMBgxFjAUBgNV BAMTDTY5YTQxMzZjLTE0YjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCQvdRLKSrbZoATIKNZKsYcTwBlq3TXGmd56yFCMSS/S3ZCHvthnSi3wMeW0TVv pHabMefEwbegaC/uSI2Ibvq7H+TfRD+gUPiNdk4ybTuR7JOcG9ZHlOK6xM8N0dh/ rybijrbiMhhH/FiI3ITIOTG/rW636tHJLbvFzF8X/qiUEault/+L4rq+dtj7P4OM w9qOLpQSK6BfvYahT8znBPh5nHs7rrJ3A5QHVZThWYJiXK5G/14LLvXeBKtkM/rD jecv6Jt5KI227refYvhnYGa/TRSEuVKQEMj4o+6ukXFvez8HkgV0feDlHhvtp3s9 CGqd6v2KntWjkops5pjbOP4PAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvZ6Su2kk tHc/QfEh+Ik66u5CCikwHwYDVR0jBBgwFoAUMW2JZH8NDLBrNzIHikIwrxFWUzQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNDQxL0UwODFBNjBBRUU5 RDExRjBBQ0UyNUM5RDY2NkY1NkJDL01XMkpaSDhORExCck56SUhpa0l3cnhGV1V6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVcySlpIOE5ETEJyTnpJSGlrSXdyeEZXVXpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz NDQxL0UwODFBNjBBRUU5RDExRjBBQ0UyNUM5RDY2NkY1NkJDL01XMkpaSDhORExC ck56SUhpa0l3cnhGV1V6US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAiGG3cN11gF1pEhmaMgM1+cHrhFmcsISmMNyqZqMg0n1G3LDTVHJ2DjOulruyN RiblEt/UORSuE159O8uHwjfGXVzVsMuZmkqhReaXV753BjZiopXDykqi9aSWN6vM Oihx2DTCybFI/fMUx6YuOjuCAyigaczz1M7cyu6l9W6k6M8VqhXML4pbyDVZOeep 6RSCwGjKe65+u6WmatSbHXcoTpLguLtOO5mJWEWl+w/25cAZlN/3roK2NRe9Nams KHBsikIQeHBiswTF6AKskoFR9BR6Q+uZfAuwKGJgd7qoiKktPiUaq2oNgi3v363A pae844xsgyclCxgaakur2ICM -----END CERTIFICATE-----Generated at Mon Mar 2 13:56:32 2026 by rpki-client