$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft File: c4TcZntNSaWs1QpYtIkWoVrCYWs.mft (raw, json) Hash identifier: VSy/WtuwblJVvRlbn1fB3+8ltfNwYn9q6uDn5G8fVQc= Subject key identifier: B1:71:DC:5A:A0:BD:5E:27:3A:81:96:AA:5C:14:7B:A8:F3:F7:A3:5B Authority key identifier: 73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B Certificate issuer: /CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft Manifest number: 01BD Signing time: Mon 02 Mar 2026 02:43:12 +0000 Manifest this update: Mon 02 Mar 2026 02:43:10 +0000 Manifest next update: Mon 09 Mar 2026 02:43:10 +0000 Files and hashes: 1: c4TcZntNSaWs1QpYtIkWoVrCYWs.crl (hash: b42wujc5L/NJxFz9MJtMKqS/8U2tQkAe97De2HYelCU=) 2: F1E9B236718E11EEAF67DB48C4F9AE02.roa (hash: CKnFh68MZ6vWZLs6HZZnzt3hxWfZ7SKFfyFAeNeD5aI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D07, serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Validity Not Before: Mar 2 02:43:10 2026 GMT Not After : Mar 9 02:43:10 2026 GMT Subject: CN=69a4f940-2db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ac:f6:99:6d:89:ed:09:36:dd:61:16:bb:f7: bc:a5:b1:b1:58:c9:ed:d4:a6:3b:6c:49:91:ba:cb: b1:fe:57:97:b7:88:cc:24:f9:26:ab:09:96:6e:e9: d7:0f:34:d6:c6:8e:e5:83:18:e5:91:e3:8e:72:7d: 5c:d1:dd:eb:cc:b8:e4:03:50:77:56:96:89:89:39: 35:c5:01:96:ae:94:42:62:3d:f3:cf:29:27:be:61: da:3e:e7:d8:c9:2c:1b:c6:c5:99:d3:5a:44:12:39: e9:06:4c:1e:53:c6:8d:59:7f:1a:8f:c6:32:83:a4: 70:2f:dc:38:a7:b0:14:c7:f3:49:f7:2d:50:3f:a3: a0:26:93:88:77:75:0f:5b:2c:6f:bf:f8:0d:32:97: e2:8a:0f:f2:ff:9b:ec:7c:09:5d:4d:f7:61:ea:7c: e4:cb:80:ef:0a:f6:c8:4e:af:09:05:83:d9:03:44: 04:01:f8:02:fb:4a:2d:b4:cd:d9:37:fa:6d:0b:12: d7:1b:7a:d5:d7:93:64:53:16:21:6e:9e:68:29:df: 80:bb:16:21:b6:2e:95:44:6b:86:a3:d7:bb:f7:b3: d4:5a:b2:b8:6a:fb:d8:33:00:a7:89:b1:1a:ba:4b: 8e:60:a5:5e:4b:cb:9d:b5:85:f8:fd:58:bf:88:a3: f9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:71:DC:5A:A0:BD:5E:27:3A:81:96:AA:5C:14:7B:A8:F3:F7:A3:5B X509v3 Authority Key Identifier: keyid:73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:fb:04:d2:58:3e:dd:22:ad:43:94:94:97:b7:79:f4:32:94: 95:82:c4:1e:4c:d0:d0:ab:dd:c1:44:cf:91:7c:25:84:29:33: c5:24:70:41:36:c9:69:43:2a:ec:9d:a5:7d:35:b5:62:46:4c: 65:59:b9:60:24:2f:ac:bc:3d:f3:68:61:31:98:b4:27:59:7f: 8f:88:f8:67:76:e6:0a:c9:f8:4f:ab:82:25:a2:7c:3f:23:b6: 82:49:7e:ca:4e:48:51:8f:4a:e9:43:f2:cf:7b:69:e6:00:04: 5b:24:6e:29:76:fb:4d:12:28:3e:06:53:bb:a8:e3:4a:cb:10: 91:7c:d6:ef:b3:e2:f8:79:20:fe:0a:4f:07:00:1f:00:57:f3: 4b:84:a0:60:04:95:01:32:c8:e3:37:f3:3e:6e:c3:0f:fe:36: 08:a5:83:d3:01:51:2f:89:1b:12:99:24:ce:12:9d:98:d1:62: 24:b6:b6:a4:bb:38:c3:58:f6:c6:44:bc:e3:35:6f:57:cf:b6: 9a:3d:b3:e9:dd:e7:6c:c0:94:65:cd:d9:b7:68:a5:a1:29:e9: 62:fb:39:f5:f1:a6:24:43:09:21:4e:48:5c:49:94:ca:17:64: de:a2:9a:15:eb:83:e1:6f:d6:85:8e:a8:55:42:cf:6c:29:38: 52:25:2d:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMDcxMTAvBgNVBAUTKDczODREQzY2N0I0RDQ5QTVBQ0Q1MEE1OEI0ODkxNkEx NUFDMjYxNkIwHhcNMjYwMzAyMDI0MzEwWhcNMjYwMzA5MDI0MzEwWjAYMRYwFAYD VQQDEw02OWE0Zjk0MC0yZGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm6z2mW2J7Qk23WEWu/e8pbGxWMnt1KY7bEmRusux/leXt4jMJPkmqwmWbunX DzTWxo7lgxjlkeOOcn1c0d3rzLjkA1B3VpaJiTk1xQGWrpRCYj3zzyknvmHaPufY ySwbxsWZ01pEEjnpBkweU8aNWX8aj8Yyg6RwL9w4p7AUx/NJ9y1QP6OgJpOId3UP Wyxvv/gNMpfiig/y/5vsfAldTfdh6nzky4DvCvbITq8JBYPZA0QEAfgC+0ottM3Z N/ptCxLXG3rV15NkUxYhbp5oKd+AuxYhti6VRGuGo9e797PUWrK4avvYMwCnibEa ukuOYKVeS8udtYX4/Vi/iKP51QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLFx3Fqg vV4nOoGWqlwUe6jz96NbMB8GA1UdIwQYMBaAFHOE3GZ7TUmlrNUKWLSJFqFawmFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQwNy81MDU1NjBCNjZF N0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNhV3MxUXBZdElrV29WckNZ V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0VGNabnROU2FXczFRcFl0SWtXb1ZyQ1lXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEQwNy81MDU1NjBCNjZFN0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNh V3MxUXBZdElrV29WckNZV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEvsE0lg+3SKtQ5SUl7d59DKUlYLEHkzQ0KvdwUTPkXwlhCkzxSRwQTbJaUMq 7J2lfTW1YkZMZVm5YCQvrLw982hhMZi0J1l/j4j4Z3bmCsn4T6uCJaJ8PyO2gkl+ yk5IUY9K6UPyz3tp5gAEWyRuKXb7TRIoPgZTu6jjSssQkXzW77Pi+Hkg/gpPBwAf AFfzS4SgYASVATLI4zfzPm7DD/42CKWD0wFRL4kbEpkkzhKdmNFiJLa2pLs4w1j2 xkS84zVvV8+2mj2z6d3nbMCUZc3Zt2iloSnpYvs59fGmJEMJIU5IXEmUyhdk3qKa FeuD4W/WhY6oVULPbCk4UiUtlQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:22:30 2026 by rpki-client