$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft File: cNjYKyIacSIO_Vg9kvc2F15dAvE.mft (raw, json) Hash identifier: E2zReUoMSLatZ19iFy1ufQ8n8GQujSOMBoW3JGNoR9s= Subject key identifier: BF:56:78:08:65:3F:CF:3A:2D:A8:25:79:A6:EC:AD:A0:C3:CD:41:8C Authority key identifier: 70:D8:D8:2B:22:1A:71:22:0E:FD:58:3D:92:F7:36:17:5E:5D:02:F1 Certificate issuer: /CN=A91E9B39/serialNumber=70D8D82B221A71220EFD583D92F736175E5D02F1 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft Manifest number: 2F Signing time: Sun 01 Mar 2026 10:08:19 +0000 Manifest this update: Sun 01 Mar 2026 10:08:18 +0000 Manifest next update: Sun 08 Mar 2026 10:08:18 +0000 Files and hashes: 1: cNjYKyIacSIO_Vg9kvc2F15dAvE.crl (hash: sSpph49YwgiNXyHcORnmzgp7xoBdygyTlMkzUZ58ZUU=) 2: 98127914D29411F0BA72510FC4F9AE02.roa (hash: fcVzdG0+J4J9gwuAgPs1jVI9TN7koe+xVsb1q5pHJIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.crl rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B39, serialNumber=70D8D82B221A71220EFD583D92F736175E5D02F1 Validity Not Before: Mar 1 10:08:18 2026 GMT Not After : Mar 8 10:08:18 2026 GMT Subject: CN=69a41013-69bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9b:a4:6b:36:d8:42:8f:9b:50:2e:ee:f3:56: 68:68:56:e7:2a:39:90:13:ce:2b:cf:0b:ce:b5:8c: d6:5e:c8:4a:60:ce:c8:f3:9b:8b:56:67:8b:ee:e1: aa:ba:f8:af:d0:55:9b:2b:1e:5d:d2:c5:b7:6e:51: bb:63:de:d4:93:c4:ac:ad:ad:62:5d:76:e4:24:0d: 28:1c:ec:ca:06:ca:4b:58:c2:43:d6:b6:9d:2c:5e: af:8e:e4:b2:ce:76:fc:6e:ab:30:08:58:11:33:46: f1:06:b2:23:5f:21:59:b7:b3:cc:97:3c:28:00:62: 2c:ff:36:06:36:5b:da:68:99:08:17:33:01:26:b1: c8:68:61:de:e3:d8:7e:c4:bf:70:50:04:79:98:d7: 96:01:33:b6:36:db:47:d1:8d:57:df:59:f4:da:22: 2c:6c:75:f4:38:af:80:2f:ca:fa:1e:a0:85:30:a5: c4:14:27:8b:f1:76:23:9d:35:8e:45:61:43:cb:7b: b0:57:7a:ec:e9:27:cb:15:c2:b3:56:ee:15:47:7e: 7f:43:5b:b2:7f:62:57:d8:02:a1:90:2c:b5:70:bb: b8:6b:5a:89:99:a2:86:f9:71:3b:f3:e0:99:73:83: f3:d7:2c:4d:ff:a9:5a:ac:7b:81:6c:00:72:b3:54: f5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:56:78:08:65:3F:CF:3A:2D:A8:25:79:A6:EC:AD:A0:C3:CD:41:8C X509v3 Authority Key Identifier: keyid:70:D8:D8:2B:22:1A:71:22:0E:FD:58:3D:92:F7:36:17:5E:5D:02:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:25:25:82:5c:d2:4f:d3:0a:18:51:dc:49:95:0d:fc:e8:30: aa:91:dd:31:2b:06:2e:c0:f7:70:71:b4:3a:eb:3d:53:a9:39: a6:38:9b:d5:95:32:1a:07:51:73:90:58:1b:70:82:ec:76:81: 2a:bf:8a:1f:1e:ba:80:7b:45:1a:a4:1a:19:ed:3c:16:bc:5c: 34:72:b5:51:91:f1:2b:e4:05:52:9f:6b:75:47:95:cb:30:cd: e7:80:f6:9e:fa:1e:c5:29:93:74:e1:54:ca:a1:83:43:49:ca: 23:7f:4f:bb:14:60:c6:60:ec:63:95:0f:aa:f9:f3:b4:04:2d: c4:49:d7:02:28:c5:24:bb:c1:0c:d4:ed:67:b1:25:a2:32:6f: bd:37:53:06:a9:b8:4e:38:49:b8:7c:49:c4:9b:37:6b:45:b9: ff:46:c1:d3:b3:6e:36:3a:59:55:26:aa:b4:28:4a:ca:c5:75: 86:f7:1c:19:4e:95:12:37:3b:87:de:34:71:38:af:39:c4:3d: 30:1a:37:6f:e3:11:56:3c:21:94:6b:83:e0:de:50:ab:24:01: 25:10:64:e5:78:42:5a:4e:18:66:74:35:76:b9:0e:69:5e:e9: 79:a6:c9:01:7a:bf:7c:c7:07:11:f1:06:11:74:da:e9:4e:98: 6f:98:c9:10 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUIzOTExMC8GA1UEBRMoNzBEOEQ4MkIyMjFBNzEyMjBFRkQ1ODNEOTJGNzM2MTc1 RTVEMDJGMTAeFw0yNjAzMDExMDA4MThaFw0yNjAzMDgxMDA4MThaMBgxFjAUBgNV BAMTDTY5YTQxMDEzLTY5YmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhm6RrNthCj5tQLu7zVmhoVucqOZATzivPC861jNZeyEpgzsjzm4tWZ4vu4aq6 +K/QVZsrHl3SxbduUbtj3tSTxKytrWJdduQkDSgc7MoGyktYwkPWtp0sXq+O5LLO dvxuqzAIWBEzRvEGsiNfIVm3s8yXPCgAYiz/NgY2W9pomQgXMwEmschoYd7j2H7E v3BQBHmY15YBM7Y220fRjVffWfTaIixsdfQ4r4AvyvoeoIUwpcQUJ4vxdiOdNY5F YUPLe7BXeuzpJ8sVwrNW7hVHfn9DW7J/YlfYAqGQLLVwu7hrWomZoob5cTvz4Jlz g/PXLE3/qVqse4FsAHKzVPVBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUv1Z4CGU/ zzotqCV5puytoMPNQYwwHwYDVR0jBBgwFoAUcNjYKyIacSIO/Vg9kvc2F15dAvEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5QjM5LzVBRUYyMjJDRDI5 MzExRjA4Q0E2NUQ3N0M0RjlBRTAyL2NOallLeUlhY1NJT19WZzlrdmMyRjE1ZEF2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY05qWUt5SWFjU0lPX1ZnOWt2YzJGMTVkQXZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 QjM5LzVBRUYyMjJDRDI5MzExRjA4Q0E2NUQ3N0M0RjlBRTAyL2NOallLeUlhY1NJ T19WZzlrdmMyRjE1ZEF2RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBSJSWCXNJP0woYUdxJlQ386DCqkd0xKwYuwPdwcbQ66z1TqTmmOJvVlTIaB1Fz kFgbcILsdoEqv4ofHrqAe0UapBoZ7TwWvFw0crVRkfEr5AVSn2t1R5XLMM3ngPae +h7FKZN04VTKoYNDScojf0+7FGDGYOxjlQ+q+fO0BC3ESdcCKMUku8EM1O1nsSWi Mm+9N1MGqbhOOEm4fEnEmzdrRbn/RsHTs242OllVJqq0KErKxXWG9xwZTpUSNzuH 3jRxOK85xD0wGjdv4xFWPCGUa4Pg3lCrJAElEGTleEJaThhmdDV2uQ5pXul5pskB er98xwcR8QYRdNrpTphvmMkQ -----END CERTIFICATE-----Generated at Sun Mar 1 20:22:48 2026 by rpki-client