$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft File: IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json) Hash identifier: q7f82TZIRTTbs5cwk6vMVYIhM/CIU7T53Ma3Gr02A/4= Subject key identifier: 29:27:0A:3A:CC:2F:65:88:5F:AF:0F:65:0D:07:39:8A:1F:85:C1:7F Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Certificate serial: 08F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft Manifest number: 08B5 Signing time: Sat 28 Feb 2026 20:55:25 +0000 Manifest this update: Sat 28 Feb 2026 20:55:24 +0000 Manifest next update: Sat 07 Mar 2026 20:55:24 +0000 Files and hashes: 1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: XWNNDPdeFM5CmVPItkTMUYK3+HceIUhLLAf1oCCrabg=) 2: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: DYR7hTrI+N8bTdN4wmisSUlD2zvzUkj32q6n8M3PxAo=) 3: 02BCB71ABF0411F097C9AB09C4F9AE02.roa (hash: d+m4wtrot8DpRxhdQ6Ribq/qs/RNt/ooPnFIs7N6xZg=) 4: 94EC9E22BEF311F0A6F14E84C4F9AE02.roa (hash: YVtST4vMUYXukdvRwVNc/YgxZwNEf2C/1tkRXtme8vo=) 5: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: 4dlrQ4m4GuqrlwQC8/clahOIGGqO7yOvH8v7wChtYp8=) 6: 46D8E036BED211F093382E71C4F9AE02.roa (hash: eINr8bBJLexDH0uRI9+njk6x3SxCqw4nJv16fxVj6+4=) 7: F8E5E56ABA3311F097F3633AC4F9AE02.roa (hash: NIZyKmCCRM9ECKj6ukBywbK33SdgVkLHapOUhLqLTmM=) 8: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: ifnttSikDir1yImvAFVipioa7skYYnhRDTcV+wTBhrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 20:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2292 (0x8f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Validity Not Before: Feb 28 20:55:24 2026 GMT Not After : Mar 7 20:55:24 2026 GMT Subject: CN=69a3563c-0e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d3:71:a4:65:2f:35:4c:7f:39:78:e6:ae:f6: 83:40:10:fc:db:c5:8c:8a:64:fc:93:59:c4:7c:64: b3:21:1f:5d:40:93:64:f0:24:03:b3:dc:e0:ea:8a: 15:2e:6e:ea:d2:2b:1a:f1:2d:d6:7e:21:6c:d0:96: a4:e5:09:09:d5:c5:90:9f:0a:88:2a:95:69:13:2a: 3c:54:ef:4b:7e:fb:f0:98:8b:fe:40:00:0e:7a:bd: f6:57:1b:86:de:01:5c:53:73:59:45:23:ab:d7:41: d2:51:76:3b:af:73:76:75:6e:3f:f6:d7:e8:f7:47: c4:d6:97:bc:4d:aa:11:b7:b9:b4:fe:a5:1a:25:cf: 3b:5d:7c:b6:ec:97:43:a3:32:2f:5c:11:13:e7:18: a6:2b:92:ed:37:c7:16:a3:b6:97:ee:19:55:7f:6b: 41:08:ea:e9:fc:33:37:88:d4:f9:10:16:bc:1a:c3: ae:43:82:66:7e:e9:2d:3a:be:58:6b:82:ff:77:3d: cc:49:dc:7e:82:8c:24:cc:a3:4a:4f:c4:00:56:bc: a8:21:84:6d:82:ff:f0:d6:93:ef:ee:a5:08:e0:a9: 00:3d:e6:29:97:f4:75:66:94:2b:f2:45:a5:9b:3c: 7a:47:60:ea:3a:7a:45:b7:00:57:95:45:62:77:c7: 50:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:27:0A:3A:CC:2F:65:88:5F:AF:0F:65:0D:07:39:8A:1F:85:C1:7F X509v3 Authority Key Identifier: keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:fa:ea:7d:15:1c:b5:10:2d:5c:46:57:6f:a2:34:1d:fd:62: 97:cc:57:8e:b7:d0:7d:37:9e:a5:36:6d:2e:09:73:9f:1c:5b: 1c:55:3b:3c:11:f0:33:ed:05:da:b5:b4:4a:4e:af:4f:a0:8b: f4:b9:e1:1a:70:b9:fe:3e:12:28:34:ee:bf:d3:a6:ec:89:0e: d0:9d:78:24:0d:38:a1:69:0b:d3:be:88:d3:77:c2:7c:d2:ef: e3:03:f6:a5:cb:51:e0:9b:cc:97:d2:a2:25:47:09:a9:6a:2b: 17:dd:e7:ca:a7:3e:ea:1f:bf:ed:05:a8:09:69:0a:a7:62:bf: 32:85:38:dd:e4:51:ba:ef:e3:eb:85:d7:64:30:7f:7e:93:f3: 21:c6:f4:16:26:83:59:26:41:5d:94:5b:d7:9e:19:91:fe:ec: 88:3f:30:41:20:54:a8:da:4d:c3:d4:e7:d8:5c:3a:2c:6f:a0: bc:f0:61:a9:f8:4b:f6:99:7a:51:9d:b6:0f:3f:f3:df:5d:33: 0c:f1:86:a8:f2:e5:22:0e:83:d4:d6:f7:47:cb:26:4a:d2:f2: 10:8c:05:22:51:32:28:c7:21:ec:59:5a:38:4c:09:37:94:fb: 96:a9:bf:a1:92:a1:70:3a:eb:97:73:bc:1b:f4:9f:82:b4:07: d2:45:c5:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB MTRERjUxMkIwHhcNMjYwMjI4MjA1NTI0WhcNMjYwMzA3MjA1NTI0WjAYMRYwFAYD VQQDDA02OWEzNTYzYy0wZTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtNxpGUvNUx/OXjmrvaDQBD828WMimT8k1nEfGSzIR9dQJNk8CQDs9zg6ooV Lm7q0isa8S3WfiFs0Jak5QkJ1cWQnwqIKpVpEyo8VO9LfvvwmIv+QAAOer32VxuG 3gFcU3NZRSOr10HSUXY7r3N2dW4/9tfo90fE1pe8TaoRt7m0/qUaJc87XXy27JdD ozIvXBET5ximK5LtN8cWo7aX7hlVf2tBCOrp/DM3iNT5EBa8GsOuQ4JmfuktOr5Y a4L/dz3MSdx+gowkzKNKT8QAVryoIYRtgv/w1pPv7qUI4KkAPeYpl/R1ZpQr8kWl mzx6R2DqOnpFtwBXlUVid8dQ5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCknCjrM L2WIX68PZQ0HOYofhcF/MB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1 REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTZEOS84MERGREVDMEU1REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0 MnloWWhyMXhISGloVGZVU3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmvrqfRUctRAtXEZXb6I0Hf1il8xXjrfQfTeepTZtLglznxxbHFU7PBHwM+0F 2rW0Sk6vT6CL9LnhGnC5/j4SKDTuv9Om7IkO0J14JA04oWkL076I03fCfNLv4wP2 pctR4JvMl9KiJUcJqWorF93nyqc+6h+/7QWoCWkKp2K/MoU43eRRuu/j64XXZDB/ fpPzIcb0FiaDWSZBXZRb154Zkf7siD8wQSBUqNpNw9Tn2Fw6LG+gvPBhqfhL9pl6 UZ22Dz/z310zDPGGqPLlIg6D1Nb3R8smStLyEIwFIlEyKMch7FlaOEwJN5T7lqm/ oZKhcDrrl3O8G/SfgrQH0kXFDg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:49:01 2026 by rpki-client