$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft File: EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft (raw, json) Hash identifier: oo9w3fAHXAlX0E1ygXZaoAX7PFfYpeb97PkmlQbCdM4= Subject key identifier: A1:3D:D5:96:9E:8A:60:F2:0B:94:F7:8A:6D:64:8D:72:DD:3C:B8:35 Authority key identifier: 11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83 Certificate issuer: /CN=A91E9888/serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83 Certificate serial: 0D0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft Manifest number: 0CF9 Signing time: Mon 02 Mar 2026 03:01:49 +0000 Manifest this update: Mon 02 Mar 2026 03:01:47 +0000 Manifest next update: Mon 09 Mar 2026 03:01:47 +0000 Files and hashes: 1: EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl (hash: IcRuD47QXpZG/bm99BUYv1nSj9uMoh/pGk058WlomIw=) 2: E8E88010F2C811EA914D710EC4F9AE02.roa (hash: J/Kqp0O4C6yL3lIuO4K9r9t6i4RJC0qvD2DF2Fp3Mt0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3340 (0xd0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9888, serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83 Validity Not Before: Mar 2 03:01:47 2026 GMT Not After : Mar 9 03:01:47 2026 GMT Subject: CN=69a4fd9d-ac3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ff:d0:26:65:2f:be:89:00:c1:40:fc:9e:3e: b3:a0:8b:33:02:15:38:cc:f4:9c:c9:3f:82:8f:d2: e3:62:5a:7e:6a:f0:42:90:86:4b:8c:5a:b0:c9:a6: ac:ee:d8:3b:85:52:90:13:a0:e9:99:f9:9a:17:a8: 20:29:ab:61:12:57:56:f8:17:08:20:df:99:c6:df: 7d:a2:fc:fa:6a:16:6d:3a:55:7e:95:0c:0b:f9:67: ba:61:2a:e1:4e:10:cc:cd:02:17:63:3d:13:03:f7: fd:24:f3:af:18:0e:b4:52:65:b9:4e:1d:cc:eb:34: a6:1f:8c:51:d8:b1:fb:98:3f:c7:39:ad:c3:03:3f: d0:dc:29:77:7a:bc:d3:fe:00:7c:8b:2a:ac:3d:59: 66:e9:3b:81:43:31:43:04:5b:3c:97:df:45:03:5c: 0d:cd:c0:b6:b6:09:d5:71:d8:4f:66:4f:10:d7:f3: 93:c9:ff:6f:fc:a9:0f:72:39:6b:b2:eb:bd:53:fe: ca:88:61:8e:45:a8:ca:98:02:1a:90:6b:d8:60:3e: b1:63:b7:6e:87:39:2e:5b:04:ab:c4:62:87:36:53: c1:fb:c8:50:6f:58:90:5e:fb:f5:d4:78:0f:85:e5: cb:77:71:6d:39:d2:1d:4d:d3:3a:f4:d7:c9:3a:78: c1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3D:D5:96:9E:8A:60:F2:0B:94:F7:8A:6D:64:8D:72:DD:3C:B8:35 X509v3 Authority Key Identifier: keyid:11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:e7:d1:86:68:e0:3a:ef:44:3b:5c:eb:8f:fc:d0:ac:81:61: 25:b2:7b:f6:12:ca:5e:0e:f3:4b:e8:df:7d:ec:95:62:41:b9: 29:ff:b5:f7:48:e3:79:67:4d:0b:72:41:db:36:d8:d5:30:67: 04:04:de:a7:5c:d1:fd:3d:ec:bc:63:29:54:91:12:53:cb:9a: 2e:32:9c:e4:70:e5:47:13:32:b8:58:90:ff:d9:53:65:57:dc: da:0f:d5:d6:5c:11:06:d3:62:d8:51:9b:e2:aa:84:e9:da:9a: fc:cb:43:82:c7:1a:8f:14:22:2f:2c:ca:b0:77:c6:ec:10:43: 22:b8:27:b3:d8:fa:17:eb:36:2e:b3:2e:dc:85:01:04:96:c6: d7:e6:be:b1:08:b2:5e:59:46:f2:21:ae:06:7d:06:0f:bd:d2: 62:3d:39:36:6a:e2:f9:ba:f1:da:2c:d3:76:d8:50:c1:4a:d4: 4d:4f:cb:b2:83:a2:57:62:4e:33:ff:ad:b9:a6:ba:ee:f4:7b: ff:bd:58:fb:44:a6:9b:f7:9d:32:64:09:bf:90:21:29:7b:b4: 82:95:64:66:f6:e9:db:e0:e1:a0:e2:75:24:b5:71:af:a8:26: 5a:4b:49:fb:b7:e1:0e:4f:d9:30:37:69:12:de:c5:d5:a1:a1: 78:d6:99:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk4ODgxMTAvBgNVBAUTKDExRjVBNzA3M0FDMjFBRkY1Q0M0RDNCQkJENjU4REVB MzkzMkNCODMwHhcNMjYwMzAyMDMwMTQ3WhcNMjYwMzA5MDMwMTQ3WjAYMRYwFAYD VQQDEw02OWE0ZmQ5ZC1hYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr//QJmUvvokAwUD8nj6zoIszAhU4zPScyT+Cj9LjYlp+avBCkIZLjFqwyaas 7tg7hVKQE6DpmfmaF6ggKathEldW+BcIIN+Zxt99ovz6ahZtOlV+lQwL+We6YSrh ThDMzQIXYz0TA/f9JPOvGA60UmW5Th3M6zSmH4xR2LH7mD/HOa3DAz/Q3Cl3erzT /gB8iyqsPVlm6TuBQzFDBFs8l99FA1wNzcC2tgnVcdhPZk8Q1/OTyf9v/KkPcjlr suu9U/7KiGGORajKmAIakGvYYD6xY7duhzkuWwSrxGKHNlPB+8hQb1iQXvv11HgP heXLd3FtOdIdTdM69NfJOnjBzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKE91Zae imDyC5T3im1kjXLdPLg1MB8GA1UdIwQYMBaAFBH1pwc6whr/XMTTu71ljeo5MsuD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTg4OC82RjU0RDEwRUZG RjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2OWN4Tk83dldXTjZqa3l5 NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VmV25CenJDR3Y5Y3hOTzd2V1dONmpreXk0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTg4OC82RjU0RDEwRUZGRjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2 OWN4Tk83dldXTjZqa3l5NE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYOfRhmjgOu9EO1zrj/zQrIFhJbJ79hLKXg7zS+jffeyVYkG5Kf+190jjeWdN C3JB2zbY1TBnBATep1zR/T3svGMpVJESU8uaLjKc5HDlRxMyuFiQ/9lTZVfc2g/V 1lwRBtNi2FGb4qqE6dqa/MtDgscajxQiLyzKsHfG7BBDIrgns9j6F+s2LrMu3IUB BJbG1+a+sQiyXllG8iGuBn0GD73SYj05Nmri+brx2izTdthQwUrUTU/LsoOiV2JO M/+tuaa67vR7/71Y+0Smm/edMmQJv5AhKXu0gpVkZvbp2+DhoOJ1JLVxr6gmWktJ +7fhDk/ZMDdpEt7F1aGheNaZXQ== -----END CERTIFICATE-----Generated at Mon Mar 2 10:42:56 2026 by rpki-client