$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft File: 9LfQRDuM_5tAmLuM7L7Yf86putI.mft (raw, json) Hash identifier: +ckKf01pEZDoJKw6QmG4bv3phRInPtMSIgIRzJxcrZE= Subject key identifier: 4C:92:F8:7E:4C:B2:76:20:AD:6C:A6:02:F2:30:4F:24:9F:A5:FD:F1 Authority key identifier: F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2 Certificate issuer: /CN=A91E5481/serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft Manifest number: 99 Signing time: Sun 01 Mar 2026 08:40:04 +0000 Manifest this update: Sun 01 Mar 2026 08:40:04 +0000 Manifest next update: Sun 08 Mar 2026 08:40:04 +0000 Files and hashes: 1: 9LfQRDuM_5tAmLuM7L7Yf86putI.crl (hash: qx/sFa0v42nWdEDl1PRo9tRu/INLgNcDq25eHQOrmTw=) 2: 67F6AC6C2BD911F09AF6B821C4F9AE02.roa (hash: h8My7kHHxTir1n7YjOpu1k0UspYcJlhUdG9c241e5p0=) 3: 67818EF02BD911F09AF6B821C4F9AE02.roa (hash: xPUr73eaPxAllhq8tmQserAPhMGn1YX9uZTViIiEYlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5481, serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2 Validity Not Before: Mar 1 08:40:04 2026 GMT Not After : Mar 8 08:40:04 2026 GMT Subject: CN=69a3fb64-3b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a3:76:8c:26:4a:b4:95:66:91:92:23:91:1f: 54:06:e1:26:12:28:12:aa:97:b4:21:55:0f:26:7c: 8f:3e:05:1e:ee:8a:e1:ad:71:5b:68:ac:7b:1c:26: 5c:bd:28:e9:23:34:35:39:f2:3d:cc:e9:b1:76:47: 5c:e2:01:9a:fe:dd:5d:48:22:1a:b0:2b:35:50:79: 66:c3:82:6c:ba:dc:a9:48:f1:6b:93:c5:c9:5b:6c: d0:73:77:04:ef:81:74:50:14:1c:b7:bb:eb:5a:ca: 83:1f:34:12:93:75:19:56:8f:04:56:56:c0:e6:f5: 1e:5e:63:b6:91:03:86:04:d5:0e:aa:53:1d:80:3a: 46:2c:d7:9d:6e:5f:c1:76:36:21:9b:db:48:5f:be: af:e8:6b:2e:5b:9b:b6:72:76:cd:c4:c0:3a:b4:cb: 9a:bd:a8:ac:48:28:71:3f:b6:6b:51:38:07:a5:11: 3d:cf:e1:cd:81:72:82:aa:c1:d6:da:8d:43:7f:59: 4e:36:90:ba:57:46:d0:91:6a:14:fc:24:bc:6e:87: a1:aa:25:08:27:1b:9b:ec:df:3b:f0:6b:9d:9b:4f: 85:5f:30:ff:0c:fa:10:4d:98:0c:3c:fb:fe:f6:5b: 35:35:57:62:e4:e3:95:e2:57:01:14:22:06:4f:02: 17:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:92:F8:7E:4C:B2:76:20:AD:6C:A6:02:F2:30:4F:24:9F:A5:FD:F1 X509v3 Authority Key Identifier: keyid:F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:47:7c:3f:8e:c7:07:36:8c:2a:0e:18:61:d2:e5:5b:83:3f: c5:d3:eb:35:7e:e6:a2:c7:1b:37:48:89:83:48:9d:2c:ab:a4: f4:32:59:66:a8:8d:97:95:35:14:e8:d3:ee:ba:80:42:2c:04: 88:82:0a:25:fa:b5:22:ab:62:41:5f:27:19:8b:e6:05:27:0c: 85:ea:aa:cb:cd:77:48:49:ba:03:25:62:2f:21:5a:12:c6:9a: c7:e5:cf:55:6e:0f:56:c8:23:30:3a:03:fd:47:ad:72:85:80: e2:63:d5:9a:52:c9:ba:34:a5:1c:52:d6:ce:40:d6:0f:0e:49: 62:95:0c:48:ef:39:d3:87:e4:88:67:8a:14:40:3f:60:4b:c5: e0:f7:87:ae:03:8e:ac:cd:8b:6f:50:34:2e:5e:70:86:2a:bd: 36:12:be:58:d8:de:95:ed:e3:e2:33:a9:02:b5:61:9c:e8:b3: 25:2c:27:af:ad:7c:98:4f:b5:42:90:fb:af:a2:32:48:99:0b: e9:de:cd:95:d9:8d:4c:cb:86:5d:bd:fd:8f:0a:a3:e7:ca:13: 44:43:c6:4d:8b:ac:f4:27:4a:43:dc:07:ab:fc:72:b6:75:4b: 9d:40:c8:ab:89:c7:ce:6e:da:73:24:a1:f2:c0:ac:cf:c6:eb: 4e:00:c2:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU0ODExMTAvBgNVBAUTKEY0QjdEMDQ0M0I4Q0ZGOUI0MDk4QkI4Q0VDQkVEODdG Q0VBOUJBRDIwHhcNMjYwMzAxMDg0MDA0WhcNMjYwMzA4MDg0MDA0WjAYMRYwFAYD VQQDEw02OWEzZmI2NC0zYjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlqN2jCZKtJVmkZIjkR9UBuEmEigSqpe0IVUPJnyPPgUe7orhrXFbaKx7HCZc vSjpIzQ1OfI9zOmxdkdc4gGa/t1dSCIasCs1UHlmw4JsutypSPFrk8XJW2zQc3cE 74F0UBQct7vrWsqDHzQSk3UZVo8EVlbA5vUeXmO2kQOGBNUOqlMdgDpGLNedbl/B djYhm9tIX76v6GsuW5u2cnbNxMA6tMuavaisSChxP7ZrUTgHpRE9z+HNgXKCqsHW 2o1Df1lONpC6V0bQkWoU/CS8boehqiUIJxub7N878Gudm0+FXzD/DPoQTZgMPPv+ 9ls1NVdi5OOV4lcBFCIGTwIX2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEyS+H5M snYgrWymAvIwTySfpf3xMB8GA1UdIwQYMBaAFPS30EQ7jP+bQJi7jOy+2H/OqbrS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTQ4MS9BMTg1NERFMDJC RDgxMUYwQUI2MTczMjBDNEY5QUUwMi85TGZRUkR1TV81dEFtTHVNN0w3WWY4NnB1 dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlMZlFSRHVNXzV0QW1MdU03TDdZZjg2cHV0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTQ4MS9BMTg1NERFMDJCRDgxMUYwQUI2MTczMjBDNEY5QUUwMi85TGZRUkR1TV81 dEFtTHVNN0w3WWY4NnB1dEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO0d8P47HBzaMKg4YYdLlW4M/xdPrNX7moscbN0iJg0idLKuk9DJZZqiNl5U1 FOjT7rqAQiwEiIIKJfq1IqtiQV8nGYvmBScMheqqy813SEm6AyViLyFaEsaax+XP VW4PVsgjMDoD/UetcoWA4mPVmlLJujSlHFLWzkDWDw5JYpUMSO8504fkiGeKFEA/ YEvF4PeHrgOOrM2Lb1A0Ll5whiq9NhK+WNjele3j4jOpArVhnOizJSwnr618mE+1 QpD7r6IySJkL6d7NldmNTMuGXb39jwqj58oTREPGTYus9CdKQ9wHq/xytnVLnUDI q4nHzm7acySh8sCsz8brTgDC6Q== -----END CERTIFICATE-----Generated at Mon Mar 2 10:00:46 2026 by rpki-client