$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft File: 9JfRcWknbUPFhSFcGYMxwzwiWnU.mft (raw, json) Hash identifier: dJjZkQTireqznrBQIOIH99XkcoNtw88LcYydnCg8QRw= Subject key identifier: 15:A5:88:E8:38:C3:CB:94:37:F3:6F:DD:EE:57:70:DA:3B:E2:79:06 Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75 Certificate serial: 0297 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft Manifest number: 0276 Signing time: Sun 01 Mar 2026 23:34:45 +0000 Manifest this update: Sun 01 Mar 2026 23:34:43 +0000 Manifest next update: Sun 08 Mar 2026 23:34:43 +0000 Files and hashes: 1: 9JfRcWknbUPFhSFcGYMxwzwiWnU.crl (hash: MD31LN//+Kuj0Cc9zdLf9zHWcB1EwECEmCOPDzi+cws=) 2: AC8A59D689D311EE81F03018C4F9AE02.roa (hash: JVxMI3BBydPHJQteEqMVI2GOfo7MKjizmO2le+yttg4=) 3: B9D8F9CE89D011EEB603FF75C4F9AE02.roa (hash: hMb2hcSIJToNCOk3fqaJJZYV+N/CGmHdt8jBqc5Ar/g=) 4: C82A0778680811EE88B5527CC4F9AE02.roa (hash: aGkSuS0d5kC8SSbfjCl/wREw36WuVh33R9qpSzjLESg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC24, serialNumber=F497D17169276D43C585215C198331C33C225A75 Validity Not Before: Mar 1 23:34:43 2026 GMT Not After : Mar 8 23:34:43 2026 GMT Subject: CN=69a4cd14-4ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f7:ce:ec:94:ac:d2:df:34:de:90:34:eb:8d: bb:98:f5:47:1c:a6:3a:19:4e:19:1d:37:0e:08:fa: b7:11:8d:09:6b:ab:7c:21:e3:9d:03:b2:e5:47:7b: 13:e0:ff:5f:b2:30:83:a4:0e:d8:81:60:51:36:f2: af:08:25:9d:6d:ac:39:e6:25:ea:b6:96:0e:76:6a: 10:9e:71:0b:81:ce:80:29:47:00:24:c2:cf:9e:11: 7c:0f:a4:0c:2a:f1:94:90:79:ca:60:5b:7e:70:87: b8:d2:b5:b7:ce:bb:c6:51:05:8a:9a:64:a3:a3:c0: 8a:53:8a:20:ae:52:b6:58:ee:6e:66:7a:83:f3:96: a7:2a:f0:c3:b4:82:ad:fa:7c:77:7a:bc:2c:8d:b6: de:24:d8:29:fa:bd:f2:14:8e:36:4c:2c:ee:49:11: 23:73:79:1f:e1:b9:07:16:1f:cd:4a:5e:dd:d0:d0: 71:69:81:9d:3f:b5:0d:d8:3d:53:ab:ee:c2:dd:ad: c2:4e:25:6e:f1:1a:45:9f:a7:2c:67:92:3e:e5:76: 8c:69:86:7f:e9:d4:ed:d9:da:33:68:73:8f:b6:6c: 14:8a:f1:52:71:60:e8:c7:17:53:61:6f:dc:ef:b4: 28:19:04:fe:c1:c0:a8:33:6c:62:1d:a9:16:5f:c0: 86:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A5:88:E8:38:C3:CB:94:37:F3:6F:DD:EE:57:70:DA:3B:E2:79:06 X509v3 Authority Key Identifier: keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:a5:a8:ba:a6:a3:42:bf:81:4f:59:60:5c:c7:06:c3:34:56: c1:55:43:e5:ba:c7:d0:b2:a0:2c:2e:4b:f9:8c:6d:f6:61:90: c5:f8:ee:c0:a2:40:22:ef:04:51:a9:72:1e:bc:4a:b6:14:87: c7:f5:81:88:8c:83:97:45:2a:90:58:0d:8d:82:19:87:ff:c5: 2f:1c:10:0d:cd:41:7a:8d:cd:07:c0:d3:51:e8:90:4f:a6:2f: a6:db:3c:4a:4c:f7:66:a8:fa:5a:3d:50:6e:7e:83:78:a7:1d: b6:a4:dd:ba:b1:2b:ac:62:53:dc:5f:74:7a:d3:c6:e1:44:9e: ac:17:8a:97:f7:7d:18:b1:a5:82:7c:21:11:bb:6b:1c:71:3f: fa:d2:36:6c:68:7a:e5:d4:28:5e:d1:7d:2d:ba:fd:1b:2a:33: 01:a3:82:46:ee:a7:45:ee:6a:93:bc:c5:cd:0c:53:6e:6b:ae: 6a:52:da:05:f6:0f:a1:ca:d9:00:1f:4a:bc:c3:ab:c7:eb:9e: ca:bd:b7:f1:32:71:2d:69:af:d4:3d:ab:70:5a:3c:50:69:a9: 42:0e:0f:66:5a:26:8b:05:19:c2:04:cc:89:b6:8d:15:56:cc: 4b:e1:a0:82:80:2a:69:7e:cd:19:79:fb:7e:52:c8:df:64:2d: ff:01:ef:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDMjQxMTAvBgNVBAUTKEY0OTdEMTcxNjkyNzZENDNDNTg1MjE1QzE5ODMzMUMz M0MyMjVBNzUwHhcNMjYwMzAxMjMzNDQzWhcNMjYwMzA4MjMzNDQzWjAYMRYwFAYD VQQDEw02OWE0Y2QxNC00YWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/fO7JSs0t803pA06427mPVHHKY6GU4ZHTcOCPq3EY0Ja6t8IeOdA7LlR3sT 4P9fsjCDpA7YgWBRNvKvCCWdbaw55iXqtpYOdmoQnnELgc6AKUcAJMLPnhF8D6QM KvGUkHnKYFt+cIe40rW3zrvGUQWKmmSjo8CKU4ogrlK2WO5uZnqD85anKvDDtIKt +nx3erwsjbbeJNgp+r3yFI42TCzuSREjc3kf4bkHFh/NSl7d0NBxaYGdP7UN2D1T q+7C3a3CTiVu8RpFn6csZ5I+5XaMaYZ/6dTt2dozaHOPtmwUivFScWDoxxdTYW/c 77QoGQT+wcCoM2xiHakWX8CGTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBWliOg4 w8uUN/Nv3e5XcNo74nkGMB8GA1UdIwQYMBaAFPSX0XFpJ21DxYUhXBmDMcM8Ilp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0MyNC8xNkM2MTMxNjZB RkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJVUEZoU0ZjR1lNeHd6d2lX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKZlJjV2tuYlVQRmhTRmNHWU14d3p3aVduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0MyNC8xNkM2MTMxNjZBRkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJV UEZoU0ZjR1lNeHd6d2lXblUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA6WouqajQr+BT1lgXMcGwzRWwVVD5brH0LKgLC5L+Yxt9mGQxfjuwKJAIu8E UalyHrxKthSHx/WBiIyDl0UqkFgNjYIZh//FLxwQDc1Beo3NB8DTUeiQT6Yvpts8 Skz3Zqj6Wj1Qbn6DeKcdtqTdurErrGJT3F90etPG4USerBeKl/d9GLGlgnwhEbtr HHE/+tI2bGh65dQoXtF9Lbr9GyozAaOCRu6nRe5qk7zFzQxTbmuualLaBfYPocrZ AB9KvMOrx+ueyr238TJxLWmv1D2rcFo8UGmpQg4PZlomiwUZwgTMibaNFVbMS+Gg goAqaX7NGXn7flLI32Qt/wHvoQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:44:40 2026 by rpki-client