$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft File: _0Md-OE71_7FHntTUHtFOan5ZWY.mft (raw, json) Hash identifier: 5mt+UU4c1UxHwfnLMNQxrCcQyfiwmkKrkHo4onoE32E= Subject key identifier: 28:03:17:C5:A3:BE:1E:D2:EB:7C:07:9B:E2:F8:AD:71:5D:D2:C9:0E Authority key identifier: FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 Certificate issuer: /CN=A91E6C4E/serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Certificate serial: 219C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft Manifest number: 218D Signing time: Mon 02 Mar 2026 03:13:01 +0000 Manifest this update: Mon 02 Mar 2026 03:12:59 +0000 Manifest next update: Mon 09 Mar 2026 03:12:59 +0000 Files and hashes: 1: _0Md-OE71_7FHntTUHtFOan5ZWY.crl (hash: QG8okOBE8VDZ3jFWVvKGZyFxf24fjwFlihU+wkeglU0=) 2: 5F0B20081CBF11EAA5FCAC86C4F9AE02.roa (hash: h5Pjnbs6tYIgU2xEGeVFnaHiDWrTR38hutsH6p/eIKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8604 (0x219c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C4E, serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Validity Not Before: Mar 2 03:12:59 2026 GMT Not After : Mar 9 03:12:59 2026 GMT Subject: CN=69a5003c-0641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2c:e4:fd:4d:f6:62:62:b5:b6:44:16:ed:17: bb:2a:20:fc:2c:77:16:f4:b4:ed:bf:b9:59:11:36: 44:41:5b:50:5a:41:86:77:69:78:52:12:9b:ab:86: ae:6a:1f:ad:fd:51:d6:33:74:a6:37:8d:f3:86:8d: 29:0d:69:01:14:dd:ed:59:c2:27:89:18:6a:e6:06: 8b:b1:25:2c:a2:c7:2c:26:26:ca:50:f3:c2:64:d6: 78:c7:8b:79:4b:68:55:11:42:e2:17:63:f2:ba:cf: 57:1f:c6:5a:61:df:4e:38:e5:6e:b9:e7:dd:57:a5: 0e:f2:55:8e:e2:a6:de:97:03:e7:df:e6:70:90:69: bf:75:75:3d:ad:60:22:c6:7c:34:cb:5d:fc:b6:8b: d0:eb:ae:9c:44:c1:a5:07:f3:c8:1b:46:a9:7c:3f: c9:17:99:9d:f9:5b:f0:e1:e2:d4:e2:d7:45:72:79: 6b:59:cc:3f:88:b7:de:9b:a9:46:87:3c:3f:59:96: fa:bd:45:54:8e:d2:a9:2d:3a:98:bc:36:ef:fc:47: 88:5a:ec:64:36:71:b8:53:b8:57:b4:e9:45:cc:4a: 0a:8c:6c:f4:4d:36:d4:83:85:26:c5:75:3d:46:6a: 3e:8d:2e:c7:ed:d6:be:0e:dd:f4:3d:52:9d:44:a9: c5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:03:17:C5:A3:BE:1E:D2:EB:7C:07:9B:E2:F8:AD:71:5D:D2:C9:0E X509v3 Authority Key Identifier: keyid:FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:8d:67:aa:f3:e1:91:30:d5:58:d5:36:57:97:c8:82:71:a2: f0:95:e0:d3:de:88:02:e7:ba:26:9d:29:de:88:f7:f7:cd:a8: 20:39:56:07:f8:6d:13:08:85:28:a7:85:b9:bd:77:39:38:fb: c5:9c:c7:07:55:16:3a:8b:ec:10:0b:4d:ea:5d:eb:fb:7d:5e: c7:a5:3d:a4:06:6d:77:91:db:86:10:b5:21:31:ef:3b:6d:09: 5d:a0:b5:31:2f:9c:e4:90:d8:a0:f1:2b:35:d0:37:0b:7a:e8: 9e:d8:26:11:88:53:3f:89:c1:9c:25:38:0d:26:a3:18:6c:dc: fe:0a:f0:39:a3:df:1e:a5:71:c9:cb:6f:40:85:7a:34:78:f2: 39:0c:a9:4c:de:3c:cd:c8:a2:bb:70:0c:22:08:fc:be:39:6b: c5:ec:2d:61:26:29:e7:52:72:62:0b:06:35:ee:ca:b0:2a:17: 5d:79:c0:66:30:4c:cd:d9:0a:ed:27:af:24:90:c5:aa:d7:44: 67:1f:1f:fb:cc:ee:02:10:d0:ea:c6:77:78:b9:c9:34:e1:39: 23:ed:ef:99:5f:62:8a:7b:5f:ff:f4:40:87:af:9d:27:5c:14: f2:40:36:8e:ff:c4:07:66:ca:d7:63:6b:65:14:21:30:f0:1f: 3e:7d:3c:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDNEUxMTAvBgNVBAUTKEZGNDMxREY4RTEzQkQ3RkVDNTFFN0I1MzUwN0I0NTM5 QTlGOTY1NjYwHhcNMjYwMzAyMDMxMjU5WhcNMjYwMzA5MDMxMjU5WjAYMRYwFAYD VQQDEw02OWE1MDAzYy0wNjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyzk/U32YmK1tkQW7Re7KiD8LHcW9LTtv7lZETZEQVtQWkGGd2l4UhKbq4au ah+t/VHWM3SmN43zho0pDWkBFN3tWcIniRhq5gaLsSUsoscsJibKUPPCZNZ4x4t5 S2hVEULiF2Pyus9XH8ZaYd9OOOVuuefdV6UO8lWO4qbelwPn3+ZwkGm/dXU9rWAi xnw0y138tovQ666cRMGlB/PIG0apfD/JF5md+Vvw4eLU4tdFcnlrWcw/iLfem6lG hzw/WZb6vUVUjtKpLTqYvDbv/EeIWuxkNnG4U7hXtOlFzEoKjGz0TTbUg4UmxXU9 Rmo+jS7H7da+Dt30PVKdRKnFFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCgDF8Wj vh7S63wHm+L4rXFd0skOMB8GA1UdIwQYMBaAFP9DHfjhO9f+xR57U1B7RTmp+WVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkM0RS8zNDQ4NjUyQ0Yz Q0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFfN0ZIbnRUVUh0Rk9hbjVa V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wTWQtT0U3MV83RkhudFRVSHRGT2FuNVpXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkM0RS8zNDQ4NjUyQ0YzQ0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFf N0ZIbnRUVUh0Rk9hbjVaV1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYY1nqvPhkTDVWNU2V5fIgnGi8JXg096IAue6Jp0p3oj3982oIDlWB/htEwiF KKeFub13OTj7xZzHB1UWOovsEAtN6l3r+31ex6U9pAZtd5HbhhC1ITHvO20JXaC1 MS+c5JDYoPErNdA3C3rontgmEYhTP4nBnCU4DSajGGzc/grwOaPfHqVxyctvQIV6 NHjyOQypTN48zciiu3AMIgj8vjlrxewtYSYp51JyYgsGNe7KsCoXXXnAZjBMzdkK 7SevJJDFqtdEZx8f+8zuAhDQ6sZ3eLnJNOE5I+3vmV9iintf//RAh6+dJ1wU8kA2 jv/EB2bK12NrZRQhMPAfPn08mw== -----END CERTIFICATE-----Generated at Mon Mar 2 05:51:50 2026 by rpki-client