$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft File: fHiVltWjewRcnZ8TpCAMHodHf3Q.mft (raw, json) Hash identifier: DPV5Ep3OycKLgx2OEsZfXmOl7AHLs4HJzcO/2GiFrAo= Subject key identifier: 58:87:21:F8:5D:E3:B9:EF:8C:E4:00:7F:FF:D2:43:DD:92:64:E6:AC Authority key identifier: 7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74 Certificate issuer: /CN=A91E9CD4/serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft Manifest number: 40 Signing time: Sun 01 Mar 2026 09:51:29 +0000 Manifest this update: Sun 01 Mar 2026 09:51:29 +0000 Manifest next update: Sun 08 Mar 2026 09:51:29 +0000 Files and hashes: 1: fHiVltWjewRcnZ8TpCAMHodHf3Q.crl (hash: qPRI//dR5+muALAjoHKS7hAPI4bk3S87VvY7tgbXJao=) 2: 9402F1E2B95711F0959B8139C4F9AE02.roa (hash: 02q/fl3zFJ/KDWK7HpIR1Cl5Rby/X/6GDy/HiTRSiik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CD4, serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74 Validity Not Before: Mar 1 09:51:29 2026 GMT Not After : Mar 8 09:51:29 2026 GMT Subject: CN=69a40c21-a956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:84:f4:48:dd:7d:2b:ab:73:78:92:75:c8:2f: f0:e4:53:6f:69:46:2f:0a:71:d7:63:7f:f6:39:7b: 87:bc:59:17:ac:62:f0:30:e1:fa:df:e9:3c:24:20: a4:b7:71:56:52:e0:22:d7:61:11:1a:50:ac:20:85: 38:0a:d8:e0:14:91:9c:20:1a:3d:2f:d1:47:6b:5c: 70:70:b3:e2:39:29:9d:98:de:f8:8b:7e:94:db:17: 36:1e:67:21:6b:b6:59:e0:af:a9:57:7b:40:2e:b5: 86:df:e5:ac:81:43:04:a3:21:ce:c0:d1:48:c5:85: 4e:2d:03:4c:2a:91:dc:2b:34:df:f8:5b:66:28:97: 98:a6:0a:9b:87:86:77:6c:46:13:37:1a:01:cf:b6: 4a:12:c7:b7:37:a3:46:85:c2:88:ac:0b:9d:2d:4f: 9c:51:6d:ff:f0:dd:2a:1d:c5:08:93:79:57:cc:c1: ba:75:fb:88:c8:98:6e:b0:32:c1:a2:b7:88:20:d2: c1:36:be:d4:af:03:36:13:34:3b:a8:f1:6c:f3:94: 7d:15:c6:e7:71:9f:42:77:f3:e5:0a:b9:8f:b1:98: ba:cf:5c:8d:6e:47:50:f6:a8:59:c4:5d:58:e2:a1: f9:0a:89:5a:aa:eb:4e:73:61:af:c1:8d:02:c9:d0: cb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:87:21:F8:5D:E3:B9:EF:8C:E4:00:7F:FF:D2:43:DD:92:64:E6:AC X509v3 Authority Key Identifier: keyid:7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f7:f7:6a:ee:73:07:8d:e7:e9:08:87:7c:06:2e:df:75:3f: 45:7a:70:3d:cb:c3:42:c4:7e:df:f5:72:a5:d9:78:c7:fe:54: 9a:08:3f:4f:26:2a:3c:f1:c1:d5:76:ee:14:7d:d7:48:7a:3e: 06:45:df:01:89:a5:53:f8:37:44:08:1c:f8:bf:0e:2f:18:fb: b5:de:7b:32:73:55:de:3e:de:c1:17:b2:6f:59:58:7f:e6:3a: 8a:0e:d2:2e:20:fd:59:47:89:20:c7:7b:ef:2d:81:a6:7e:97: 5e:a2:fe:d0:01:4e:de:b7:e7:61:c1:8e:ac:fc:b3:a7:23:51: 46:d8:e5:07:61:62:c0:fa:d5:70:22:26:d8:38:ed:e3:db:da: b1:3f:f1:0b:c6:c4:38:f1:54:df:0e:38:5d:b3:13:1e:42:60: 2e:45:c6:f1:86:00:70:87:05:bc:9a:0c:4a:ee:d9:8d:41:9a: f7:cc:f5:d8:6b:7e:bc:21:6d:b2:b1:e0:e0:35:01:cc:9d:fb: 05:57:c9:0b:ae:69:47:46:d5:2b:7d:31:ab:4a:6c:3e:89:38: dc:ba:81:e3:a3:5b:42:85:77:20:62:bd:f0:12:16:08:c2:49: 23:af:9e:48:5b:ca:c3:b4:5f:0d:49:3c:1d:74:87:e3:1c:83: 2d:ec:2b:84 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUNENDExMC8GA1UEBRMoN0M3ODk1OTZENUEzN0IwNDVDOUQ5RjEzQTQyMDBDMUU4 NzQ3N0Y3NDAeFw0yNjAzMDEwOTUxMjlaFw0yNjAzMDgwOTUxMjlaMBgxFjAUBgNV BAMTDTY5YTQwYzIxLWE5NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzhPRI3X0rq3N4knXIL/DkU29pRi8Kcddjf/Y5e4e8WResYvAw4frf6TwkIKS3 cVZS4CLXYREaUKwghTgK2OAUkZwgGj0v0UdrXHBws+I5KZ2Y3viLfpTbFzYeZyFr tlngr6lXe0AutYbf5ayBQwSjIc7A0UjFhU4tA0wqkdwrNN/4W2Yol5imCpuHhnds RhM3GgHPtkoSx7c3o0aFwoisC50tT5xRbf/w3SodxQiTeVfMwbp1+4jImG6wMsGi t4gg0sE2vtSvAzYTNDuo8WzzlH0Vxudxn0J38+UKuY+xmLrPXI1uR1D2qFnEXVji ofkKiVqq605zYa/BjQLJ0MtvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWIch+F3j ue+M5AB//9JD3ZJk5qwwHwYDVR0jBBgwFoAUfHiVltWjewRcnZ8TpCAMHodHf3Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Q0Q0L0Q0N0Y0OTBDQjk1 NTExRjA5QTdGNkQ3MUM0RjlBRTAyL2ZIaVZsdFdqZXdSY25aOFRwQ0FNSG9kSGYz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZkhpVmx0V2pld1Jjblo4VHBDQU1Ib2RIZjNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 Q0Q0L0Q0N0Y0OTBDQjk1NTExRjA5QTdGNkQ3MUM0RjlBRTAyL2ZIaVZsdFdqZXdS Y25aOFRwQ0FNSG9kSGYzUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAK9/dq7nMHjefpCId8Bi7fdT9FenA9y8NCxH7f9XKl2XjH/lSaCD9PJio88cHV du4UfddIej4GRd8BiaVT+DdECBz4vw4vGPu13nsyc1XePt7BF7JvWVh/5jqKDtIu IP1ZR4kgx3vvLYGmfpdeov7QAU7et+dhwY6s/LOnI1FG2OUHYWLA+tVwIibYOO3j 29qxP/ELxsQ48VTfDjhdsxMeQmAuRcbxhgBwhwW8mgxK7tmNQZr3zPXYa368IW2y seDgNQHMnfsFV8kLrmlHRtUrfTGrSmw+iTjcuoHjo1tChXcgYr3wEhYIwkkjr55I W8rDtF8NSTwddIfjHIMt7CuE -----END CERTIFICATE-----Generated at Mon Mar 2 00:17:53 2026 by rpki-client