$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft File: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft (raw, json) Hash identifier: /6zX3Fv8xiVY+HvxJz11pqWJBLFB3SdbNhkA65BPW7U= Subject key identifier: AE:D4:BB:70:C8:D3:F2:FD:B6:8A:87:B5:16:31:DD:B3:90:62:FB:7C Authority key identifier: E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74 Certificate issuer: /CN=A91E9406/serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474 Certificate serial: 02F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft Manifest number: 02ED Signing time: Mon 02 Mar 2026 00:16:45 +0000 Manifest this update: Mon 02 Mar 2026 00:16:44 +0000 Manifest next update: Mon 09 Mar 2026 00:16:44 +0000 Files and hashes: 1: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl (hash: ERLKGf5ZBAMHf+/pisy7Kt+hiZ4vAasIAMie2Kn91t4=) 2: F76D8A5C170D11EDA7EC2F87C4F9AE02.roa (hash: bTkT2MqFX/19qcSjcX3ccXtP/wVqXRGcmC6IZgoF9mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 757 (0x2f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9406, serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474 Validity Not Before: Mar 2 00:16:44 2026 GMT Not After : Mar 9 00:16:44 2026 GMT Subject: CN=69a4d6ed-4c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:05:7b:e9:d8:8e:62:b9:58:92:4c:fb:4e:c2: 5a:39:e0:be:f9:a9:3b:e1:93:33:f8:3d:b5:fc:ee: fc:8b:ae:c1:aa:d1:5e:20:c9:cf:b1:53:fa:6d:42: 02:d0:1e:48:23:0f:37:fb:11:28:84:a4:c1:49:0b: 82:37:83:7b:6c:f9:ca:5f:c5:09:66:a7:64:c3:cc: df:78:c7:c5:37:87:75:51:91:cb:f9:7c:5d:82:2e: 4a:86:13:64:08:53:47:8b:ab:79:73:fe:c2:51:b3: 3e:a8:89:2f:95:f7:b5:55:47:81:95:7f:75:77:78: 04:0f:e4:08:12:f4:52:59:93:5e:c2:dc:b6:2a:d2: bb:bb:00:e8:19:4b:99:a6:00:53:2d:ab:7e:3f:76: 5b:72:4e:d8:ac:7c:be:95:53:bd:9c:c4:55:c2:44: d2:2a:bf:7d:e7:ef:41:59:81:c8:5a:33:bc:44:96: cd:7c:9b:41:79:3b:ff:f3:33:ae:36:a4:01:01:3a: 6d:0d:ed:b3:d0:da:3a:f7:80:25:73:d9:97:9c:9e: 12:53:b4:24:ec:85:32:9d:0f:7c:f4:36:3d:09:a4: a4:91:2a:d9:6f:11:b9:06:3e:35:44:ec:31:24:ec: 13:09:f7:33:4f:c6:c7:3f:0c:ea:f6:d1:48:d9:20: 5a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D4:BB:70:C8:D3:F2:FD:B6:8A:87:B5:16:31:DD:B3:90:62:FB:7C X509v3 Authority Key Identifier: keyid:E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:79:93:a4:57:2f:a2:1d:ab:26:93:44:1b:f0:75:e6:74:46: fa:a7:bf:82:4e:a1:3b:a8:51:1f:d3:9d:f4:e4:31:93:5f:1d: ce:90:39:56:1b:41:0d:d4:4a:6c:19:d6:38:86:b3:5c:a2:eb: ef:89:a2:a3:d2:d4:d8:03:b0:8c:98:17:0c:67:10:e0:79:00: f2:d7:ed:08:62:d9:80:08:e4:0d:72:c7:31:9f:22:01:3a:c7: 75:b5:49:e9:ae:d4:4c:23:68:c6:42:7d:7e:d9:a0:8f:e6:b3: 13:8a:96:ca:42:e0:63:94:15:a0:a0:e5:f4:68:df:32:c5:a6: 6a:91:23:82:4c:c6:a1:fa:88:8d:c4:1e:ed:4d:44:48:77:1f: 4c:cd:c4:69:27:76:b2:d1:56:da:6e:ea:7d:bd:85:c9:9e:5a: fc:8a:5f:ec:b9:cf:b3:45:2e:80:b2:56:b8:ea:ad:34:40:8b: d4:90:1a:a7:ba:bb:48:ad:d3:fe:3c:24:47:87:51:79:81:14: b6:21:96:e4:d6:d0:07:d8:85:97:a8:e3:28:13:1f:4b:e2:ca: d1:c1:13:77:5b:24:0e:3e:2b:05:96:39:7b:ae:19:cf:48:6d: c3:4e:2e:29:d5:89:09:04:66:1c:f6:97:30:ba:d3:64:6d:d4: e1:3e:b3:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0MDYxMTAvBgNVBAUTKEUzNDM4NDA1NDc2NDAyQTNBQThGOTg3QzNBRkEwNjkw RDk2RUQ0NzQwHhcNMjYwMzAyMDAxNjQ0WhcNMjYwMzA5MDAxNjQ0WjAYMRYwFAYD VQQDEw02OWE0ZDZlZC00Yzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgV76diOYrlYkkz7TsJaOeC++ak74ZMz+D21/O78i67BqtFeIMnPsVP6bUIC 0B5IIw83+xEohKTBSQuCN4N7bPnKX8UJZqdkw8zfeMfFN4d1UZHL+Xxdgi5KhhNk CFNHi6t5c/7CUbM+qIkvlfe1VUeBlX91d3gED+QIEvRSWZNewty2KtK7uwDoGUuZ pgBTLat+P3Zbck7YrHy+lVO9nMRVwkTSKr995+9BWYHIWjO8RJbNfJtBeTv/8zOu NqQBATptDe2z0No694Alc9mXnJ4SU7Qk7IUynQ989DY9CaSkkSrZbxG5Bj41ROwx JOwTCfczT8bHPwzq9tFI2SBauQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK7Uu3DI 0/L9toqHtRYx3bOQYvt8MB8GA1UdIwQYMBaAFONDhAVHZAKjqo+YfDr6BpDZbtR0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQwNi85ODY4QTlGMDE3 MDkxMUVEQjZGODA4NjhDNEY5QUUwMi80ME9FQlVka0FxT3FqNWg4T3ZvR2tObHUx SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwT0VCVWRrQXFPcWo1aDhPdm9Ha05sdTFIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTQwNi85ODY4QTlGMDE3MDkxMUVEQjZGODA4NjhDNEY5QUUwMi80ME9FQlVka0Fx T3FqNWg4T3ZvR2tObHUxSFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATHmTpFcvoh2rJpNEG/B15nRG+qe/gk6hO6hRH9Od9OQxk18dzpA5VhtBDdRK bBnWOIazXKLr74mio9LU2AOwjJgXDGcQ4HkA8tftCGLZgAjkDXLHMZ8iATrHdbVJ 6a7UTCNoxkJ9ftmgj+azE4qWykLgY5QVoKDl9GjfMsWmapEjgkzGofqIjcQe7U1E SHcfTM3EaSd2stFW2m7qfb2FyZ5a/Ipf7LnPs0UugLJWuOqtNECL1JAap7q7SK3T /jwkR4dReYEUtiGW5NbQB9iFl6jjKBMfS+LK0cETd1skDj4rBZY5e64Zz0htw04u KdWJCQRmHPaXMLrTZG3U4T6zqQ== -----END CERTIFICATE-----Generated at Mon Mar 2 15:56:15 2026 by rpki-client