$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft File: mV1wqX9WsuAAuspuykNz5iB7uY0.mft (raw, json) Hash identifier: BOa0ksjIPr0idRRr9yUGl7NkKGUFWNXAtnGV1qynOgs= Subject key identifier: 87:19:BC:85:07:6A:C0:E4:93:01:87:04:5F:5D:B1:D1:27:EC:78:E5 Authority key identifier: 99:5D:70:A9:7F:56:B2:E0:00:BA:CA:6E:CA:43:73:E6:20:7B:B9:8D Certificate issuer: /CN=A91EA850/serialNumber=995D70A97F56B2E000BACA6ECA4373E6207BB98D Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft Manifest number: 21 Signing time: Mon 02 Mar 2026 11:13:42 +0000 Manifest this update: Mon 02 Mar 2026 11:13:42 +0000 Manifest next update: Mon 09 Mar 2026 11:13:42 +0000 Files and hashes: 1: mV1wqX9WsuAAuspuykNz5iB7uY0.crl (hash: m7XngPJvnC2CGMrP2Zc3AKiR/OX35IyT5GzHdHSq5yo=) 2: CE6915C0ED3A11F0A5B7B5054B6F56BC.roa (hash: ZhcQJbrC1/0EL+xA9V5mKW9bp21ubHFqtWHWB54vKrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.crl rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA850, serialNumber=995D70A97F56B2E000BACA6ECA4373E6207BB98D Validity Not Before: Mar 2 11:13:42 2026 GMT Not After : Mar 9 11:13:42 2026 GMT Subject: CN=69a570e6-ba7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b2:a2:6e:a6:fb:62:a3:59:97:c3:de:71:74: bf:c5:df:3b:a3:06:8e:c1:eb:e5:18:28:1e:77:5c: b3:03:9c:56:44:4c:96:c2:fd:8c:4a:e5:3b:eb:dd: 7c:25:6a:ee:82:49:22:04:30:d8:05:f6:f9:96:b4: 41:db:d9:5c:68:71:5f:e0:56:3b:81:4d:c7:11:4e: c3:1f:e6:20:e6:11:04:69:5b:73:1f:ee:a0:3c:2b: 28:e8:db:b2:1f:50:c0:fd:fd:91:9d:72:47:4a:ae: 30:7b:58:82:a4:64:08:6d:5d:3a:24:6f:e6:0a:57: 6d:88:ec:cc:77:7d:78:2e:39:e4:08:03:43:6d:0e: 68:d5:4d:99:ef:6b:eb:75:07:82:8d:14:92:a5:d1: e1:32:d3:87:46:de:9a:5a:3c:8d:d4:8f:19:04:da: 65:88:f9:ea:cb:b3:73:7e:c4:df:25:7c:aa:ec:92: 87:52:6f:e2:2c:93:04:3f:7e:a8:e0:46:f6:4e:f8: 80:1f:0d:2c:12:f7:c3:7a:32:1a:88:36:95:e7:e0: c0:ef:63:55:5c:7b:52:f7:4d:a0:4e:38:b7:ef:a7: 3e:bb:55:64:6a:a3:86:f1:44:59:7c:17:6b:0a:b8: 30:81:c3:39:2b:bf:c2:25:54:b2:30:7b:95:68:cf: 25:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:19:BC:85:07:6A:C0:E4:93:01:87:04:5F:5D:B1:D1:27:EC:78:E5 X509v3 Authority Key Identifier: keyid:99:5D:70:A9:7F:56:B2:E0:00:BA:CA:6E:CA:43:73:E6:20:7B:B9:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:dc:e3:c0:21:bc:d8:ea:69:4b:cb:d3:25:43:b4:a8:3f:3c: a4:fd:b0:54:29:9e:82:16:57:62:fe:c7:61:15:49:67:40:76: 05:7a:d2:62:08:34:05:39:6d:07:7f:a5:1c:bc:b4:50:5e:db: 77:30:5a:3e:8c:64:a5:e0:0b:9e:1e:d4:8c:d1:52:10:da:b0: ce:b6:c0:b2:92:28:de:08:02:9f:f8:97:53:39:ca:0b:11:60: 66:09:1e:7f:96:b0:91:57:63:f7:2e:93:b9:78:d7:d7:46:3b: 6f:1f:66:4f:57:a4:67:1d:15:67:f1:87:7d:73:48:19:29:d0: 40:c4:d4:25:b4:c0:86:0d:76:22:39:4c:5a:7d:91:fc:0e:3a: 36:0f:23:55:6e:ec:db:85:82:5d:93:c9:0e:78:bf:e6:4d:fe: 41:42:79:06:39:6d:36:d8:82:ca:3c:c3:be:ec:c1:2e:8d:76: 93:d2:45:87:6c:9a:0f:14:e1:02:29:ee:ff:36:7b:53:8e:d7: c6:e2:e6:84:dd:5a:fb:0a:83:5f:df:cd:4f:96:97:8b:30:19: 36:b5:75:49:21:7c:4c:d9:0e:5d:5c:8c:3a:bc:4d:db:d3:63: b8:7c:db:45:b0:96:1b:7a:d8:be:19:a4:03:97:75:1f:4d:e2: af:fb:c9:f3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTg1MDExMC8GA1UEBRMoOTk1RDcwQTk3RjU2QjJFMDAwQkFDQTZFQ0E0MzczRTYy MDdCQjk4RDAeFw0yNjAzMDIxMTEzNDJaFw0yNjAzMDkxMTEzNDJaMBgxFjAUBgNV BAMTDTY5YTU3MGU2LWJhN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmsqJupvtio1mXw95xdL/F3zujBo7B6+UYKB53XLMDnFZETJbC/YxK5Tvr3Xwl au6CSSIEMNgF9vmWtEHb2VxocV/gVjuBTccRTsMf5iDmEQRpW3Mf7qA8Kyjo27If UMD9/ZGdckdKrjB7WIKkZAhtXTokb+YKV22I7Mx3fXguOeQIA0NtDmjVTZnva+t1 B4KNFJKl0eEy04dG3ppaPI3UjxkE2mWI+erLs3N+xN8lfKrskodSb+IskwQ/fqjg RvZO+IAfDSwS98N6MhqINpXn4MDvY1Vce1L3TaBOOLfvpz67VWRqo4bxRFl8F2sK uDCBwzkrv8IlVLIwe5VozyWxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhxm8hQdq wOSTAYcEX12x0SfseOUwHwYDVR0jBBgwFoAUmV1wqX9WsuAAuspuykNz5iB7uY0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBODUwLzJEQkM0OTQ4RUQy NzExRjBCMzk3RDM3OTQ0NkY1NkJDL21WMXdxWDlXc3VBQXVzcHV5a056NWlCN3VZ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbVYxd3FYOVdzdUFBdXNwdXlrTno1aUI3dVkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB ODUwLzJEQkM0OTQ4RUQyNzExRjBCMzk3RDM3OTQ0NkY1NkJDL21WMXdxWDlXc3VB QXVzcHV5a056NWlCN3VZMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB23OPAIbzY6mlLy9MlQ7SoPzyk/bBUKZ6CFldi/sdhFUlnQHYFetJiCDQFOW0H f6UcvLRQXtt3MFo+jGSl4AueHtSM0VIQ2rDOtsCykijeCAKf+JdTOcoLEWBmCR5/ lrCRV2P3LpO5eNfXRjtvH2ZPV6RnHRVn8Yd9c0gZKdBAxNQltMCGDXYiOUxafZH8 Djo2DyNVbuzbhYJdk8kOeL/mTf5BQnkGOW022ILKPMO+7MEujXaT0kWHbJoPFOEC Ke7/NntTjtfG4uaE3Vr7CoNf381PlpeLMBk2tXVJIXxM2Q5dXIw6vE3b02O4fNtF sJYbeti+GaQDl3UfTeKv+8nz -----END CERTIFICATE-----Generated at Mon Mar 2 15:12:22 2026 by rpki-client