$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft File: mtiSjq8lxRyzsyEdSba6ufC59n8.mft (raw, json) Hash identifier: osREt6QmMcE5jT27dZWxs1Eev1h7AgJhynNfbjxXXeM= Subject key identifier: A0:6E:DA:A5:FF:E2:B7:CC:29:9D:5B:6D:72:40:4A:C7:69:88:6A:55 Authority key identifier: 9A:D8:92:8E:AF:25:C5:1C:B3:B3:21:1D:49:B6:BA:B9:F0:B9:F6:7F Certificate issuer: /CN=A91EBD8F/serialNumber=9AD8928EAF25C51CB3B3211D49B6BAB9F0B9F67F Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft Manifest number: 2B Signing time: Sun 01 Mar 2026 10:07:29 +0000 Manifest this update: Sun 01 Mar 2026 10:07:28 +0000 Manifest next update: Sun 08 Mar 2026 10:07:28 +0000 Files and hashes: 1: mtiSjq8lxRyzsyEdSba6ufC59n8.crl (hash: O4RddoiuPpjVboasv2xpqMFftkZEzjJ7nKEdKwJy914=) 2: 80EEB89ADF1611F0ADE7C949616F56BC.roa (hash: T0uD7GQksTME+qhX3xTaNiGDGWI7HGkb3DLPjDo3u3c=) 3: 805F9336DF1611F0ADE7C949616F56BC.roa (hash: Ifqu/imW1CpJtOK3B5gKpgSp1ZH+G/n9WtAUtx4GCTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.crl rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBD8F, serialNumber=9AD8928EAF25C51CB3B3211D49B6BAB9F0B9F67F Validity Not Before: Mar 1 10:07:28 2026 GMT Not After : Mar 8 10:07:28 2026 GMT Subject: CN=69a40fe0-85b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ae:0f:db:1d:66:f7:d2:a9:6a:5c:6c:7e:6e: 1e:24:bd:b0:c7:3a:56:c4:1e:a1:2c:85:6e:da:61: f1:70:5e:9c:d5:ae:78:68:5a:38:9c:ad:ec:10:04: 00:f0:0f:0a:2f:ec:54:b7:1d:58:d9:a2:67:8f:f0: cb:5b:bb:ca:ea:d1:35:78:34:96:27:ac:b5:00:4a: b3:b3:d3:99:50:0f:c4:73:3f:5a:52:dc:f0:11:ef: 55:a6:00:4e:31:b3:85:e7:fb:de:fd:c9:ab:a0:9f: f1:05:e0:1e:ac:1d:24:51:2f:dc:f2:86:a4:fd:67: 62:f7:d2:d3:63:3f:db:79:c0:d1:d9:ee:51:83:0d: b0:0e:df:be:84:28:ff:6e:7b:4f:04:6a:d0:eb:23: b9:fb:45:6f:ed:90:55:f6:27:35:a6:c1:c7:7e:b2: ec:87:67:49:87:53:ca:96:42:35:14:a5:9c:5b:e3: c0:88:fc:0f:6c:4d:e6:ba:fe:c7:9b:be:a7:0c:c4: b0:7f:82:dc:8a:ea:ed:59:9f:ab:3a:16:67:db:95: 33:d6:c3:35:a3:b0:44:e7:98:a9:a4:33:87:6d:77: c8:69:74:a6:92:8d:77:30:c6:18:49:c9:45:07:5d: 89:8e:85:8a:c7:67:a6:6b:25:2e:59:11:70:58:b1: 81:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6E:DA:A5:FF:E2:B7:CC:29:9D:5B:6D:72:40:4A:C7:69:88:6A:55 X509v3 Authority Key Identifier: keyid:9A:D8:92:8E:AF:25:C5:1C:B3:B3:21:1D:49:B6:BA:B9:F0:B9:F6:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:23:45:3f:e6:81:05:b4:f1:02:8c:e1:74:75:e3:6b:9c:96: 24:ab:f0:c1:84:26:36:5f:5d:3d:49:f7:68:ad:0e:c6:a8:03: e8:a3:b9:5b:3d:e9:a2:88:2a:1e:0e:f6:83:1c:df:9a:42:d7: a3:6d:b5:31:75:6e:30:e5:15:b4:48:6d:77:c9:c1:89:2b:fa: 3d:c2:3b:f7:97:63:8c:05:5d:df:c3:56:d4:4a:33:8a:19:58: 84:cb:e8:4e:66:e0:3f:98:56:35:4b:fb:c6:1f:4f:03:59:0c: 63:62:fd:64:15:53:a2:e4:fe:8a:3e:95:6a:b3:04:d9:d4:f0: e9:a4:79:aa:09:5a:c9:7f:78:93:f0:55:62:3a:e4:a4:2c:3b: 01:a5:94:23:ca:eb:cb:9b:7f:be:a9:2b:a8:ce:68:04:ab:24: 03:9d:81:6c:85:08:65:fb:ef:b0:7f:a4:83:06:fa:f0:60:7c: 12:e4:d7:56:65:fb:33:4c:79:df:e7:ac:7c:09:ae:8d:04:54: 0e:1c:76:69:89:5b:26:7d:19:e5:07:c4:7a:4c:1e:8f:7b:c7: 45:60:1c:20:4b:ac:f0:2b:31:8d:19:11:f9:5e:36:df:68:bf: eb:c3:97:14:5e:f8:13:dc:eb:c9:a5:d5:e9:d1:8c:86:08:d2: 53:f3:28:c0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkQ4RjExMC8GA1UEBRMoOUFEODkyOEVBRjI1QzUxQ0IzQjMyMTFENDlCNkJBQjlG MEI5RjY3RjAeFw0yNjAzMDExMDA3MjhaFw0yNjAzMDgxMDA3MjhaMBgxFjAUBgNV BAMTDTY5YTQwZmUwLTg1YjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjrg/bHWb30qlqXGx+bh4kvbDHOlbEHqEshW7aYfFwXpzVrnhoWjicrewQBADw Dwov7FS3HVjZomeP8Mtbu8rq0TV4NJYnrLUASrOz05lQD8RzP1pS3PAR71WmAE4x s4Xn+979yaugn/EF4B6sHSRRL9zyhqT9Z2L30tNjP9t5wNHZ7lGDDbAO376EKP9u e08EatDrI7n7RW/tkFX2JzWmwcd+suyHZ0mHU8qWQjUUpZxb48CI/A9sTea6/seb vqcMxLB/gtyK6u1Zn6s6FmfblTPWwzWjsETnmKmkM4dtd8hpdKaSjXcwxhhJyUUH XYmOhYrHZ6ZrJS5ZEXBYsYEjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoG7apf/i t8wpnVttckBKx2mIalUwHwYDVR0jBBgwFoAUmtiSjq8lxRyzsyEdSba6ufC59n8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCRDhGLzUyRUJDOEM4RDk5 QjExRjA4NEY0MzZCMTY1RDM2NDFEL210aVNqcThseFJ5enN5RWRTYmE2dWZDNTlu OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXRpU2pxOGx4Unl6c3lFZFNiYTZ1ZkM1OW44LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC RDhGLzUyRUJDOEM4RDk5QjExRjA4NEY0MzZCMTY1RDM2NDFEL210aVNqcThseFJ5 enN5RWRTYmE2dWZDNTluOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQArI0U/5oEFtPECjOF0deNrnJYkq/DBhCY2X109SfdorQ7GqAPoo7lbPemiiCoe DvaDHN+aQtejbbUxdW4w5RW0SG13ycGJK/o9wjv3l2OMBV3fw1bUSjOKGViEy+hO ZuA/mFY1S/vGH08DWQxjYv1kFVOi5P6KPpVqswTZ1PDppHmqCVrJf3iT8FViOuSk LDsBpZQjyuvLm3++qSuozmgEqyQDnYFshQhl+++wf6SDBvrwYHwS5NdWZfszTHnf 56x8Ca6NBFQOHHZpiVsmfRnlB8R6TB6Pe8dFYBwgS6zwKzGNGRH5XjbfaL/rw5cU XvgT3OvJpdXp0YyGCNJT8yjA -----END CERTIFICATE-----Generated at Mon Mar 2 14:48:22 2026 by rpki-client