$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft File: v3H1vxFop4QFduAAbzu8ZfxINAs.mft (raw, json) Hash identifier: Ceo3v1xa3htyUBdKBGTz5cetfkQXOQZwWPmt8CNmpfQ= Subject key identifier: 9E:77:BA:85:E8:BD:C9:21:F8:C5:EC:82:13:B8:ED:43:D7:2A:30:FA Authority key identifier: BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B Certificate issuer: /CN=A91ED596/serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft Manifest number: 0121 Signing time: Sun 01 Mar 2026 06:41:26 +0000 Manifest this update: Sun 01 Mar 2026 06:41:26 +0000 Manifest next update: Sun 08 Mar 2026 06:41:26 +0000 Files and hashes: 1: v3H1vxFop4QFduAAbzu8ZfxINAs.crl (hash: WdPopxgwzX+00jEmIkfYOy9olD195Fq71XmM8Xq8/Fk=) 2: 8580DC705AE311EF86351430C4F9AE02.roa (hash: 27On7VhpG5fhZmLnd0n/w+EKAhYgslmits5+QsN4KvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED596, serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B Validity Not Before: Mar 1 06:41:26 2026 GMT Not After : Mar 8 06:41:26 2026 GMT Subject: CN=69a3df96-0ea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5a:f8:1a:d9:88:7e:c3:43:f0:22:33:97:b1: 2f:51:2c:c8:f7:47:3c:ab:8e:0b:21:f5:7f:52:91: a3:c9:62:23:9d:24:ad:06:bc:20:23:e3:76:f5:75: 2a:3f:a5:11:21:f1:9a:d2:00:65:c6:00:3a:8b:0b: a5:4c:62:f4:9b:b6:1e:81:eb:ea:16:45:bc:9e:33: ce:ec:b8:42:45:28:11:45:5a:d7:ef:7e:8c:5e:e0: 76:e4:b4:2f:e1:0f:3d:30:05:4d:de:af:43:71:6c: ae:d6:e2:d1:24:4c:ba:e6:f7:b5:ac:c4:aa:4c:5c: 52:40:88:f2:02:46:7d:b8:df:b9:e5:23:46:0c:1d: d6:24:61:db:4f:d5:05:2e:85:6b:85:60:b6:bc:ac: 40:3d:69:42:e0:d2:eb:33:f0:29:15:88:a8:25:23: ed:0f:d2:8a:ae:c5:77:f5:5e:ae:9c:ba:c6:a9:73: ab:24:aa:cf:31:26:ad:14:1d:82:d0:7d:9e:86:ee: 62:37:fb:ef:a9:fb:70:d7:df:1e:68:30:6a:db:30: 4c:41:3a:88:4a:9a:4d:bd:4e:62:00:56:8f:67:be: f3:7e:27:1c:2b:33:d1:00:1e:eb:d6:9e:99:2a:52: 7a:c5:b2:ab:c2:bf:99:93:85:80:cb:22:bb:d6:03: e0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:77:BA:85:E8:BD:C9:21:F8:C5:EC:82:13:B8:ED:43:D7:2A:30:FA X509v3 Authority Key Identifier: keyid:BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:b0:78:ba:c2:3b:a5:c1:87:59:cc:c5:3d:74:39:d6:94:0f: ef:af:86:65:8c:89:51:d4:ff:ad:d4:0a:e6:44:01:bd:c1:e0: 7d:7c:8c:47:ae:e4:94:85:2d:cb:f7:c1:e5:4e:b5:cf:d2:25: a6:58:70:df:e9:6d:cc:98:6f:37:2f:79:dd:50:35:5e:88:c7: 54:1e:18:b9:b1:97:5a:e4:f7:ec:ab:9d:ac:0b:22:36:bf:e5: d0:89:1b:19:d4:01:31:d9:ae:63:01:0b:c6:e8:78:5d:ea:2a: b7:ab:a7:1f:6d:17:e8:8a:be:46:d1:e7:06:09:f9:e8:98:6a: dc:2e:e3:e2:a3:ca:44:38:9b:24:b0:4b:4a:67:97:f1:35:f8: 6f:3b:ed:08:f2:af:49:3f:67:1a:d8:19:1e:64:5e:d7:96:98: 6e:4c:a8:e7:7d:9b:2b:d3:15:43:fc:ce:35:a8:01:a6:66:65: ed:50:90:1d:0c:c4:82:c1:f9:1d:41:7d:3f:83:0a:18:76:36: 87:7e:f8:d1:7d:57:e8:07:d2:cd:f3:cc:76:90:61:ec:c5:46: 5b:bb:12:0b:ca:a0:34:22:f4:f0:98:27:77:97:df:fd:db:bd: c2:1b:3d:4c:c7:d6:0f:58:7b:04:e3:82:38:3b:27:ff:d5:20: e7:37:8e:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1OTYxMTAvBgNVBAUTKEJGNzFGNUJGMTE2OEE3ODQwNTc2RTAwMDZGM0JCQzY1 RkM0ODM0MEIwHhcNMjYwMzAxMDY0MTI2WhcNMjYwMzA4MDY0MTI2WjAYMRYwFAYD VQQDEw02OWEzZGY5Ni0wZWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhVr4GtmIfsND8CIzl7EvUSzI90c8q44LIfV/UpGjyWIjnSStBrwgI+N29XUq P6URIfGa0gBlxgA6iwulTGL0m7YegevqFkW8njPO7LhCRSgRRVrX736MXuB25LQv 4Q89MAVN3q9DcWyu1uLRJEy65ve1rMSqTFxSQIjyAkZ9uN+55SNGDB3WJGHbT9UF LoVrhWC2vKxAPWlC4NLrM/ApFYioJSPtD9KKrsV39V6unLrGqXOrJKrPMSatFB2C 0H2ehu5iN/vvqftw198eaDBq2zBMQTqISppNvU5iAFaPZ77zficcKzPRAB7r1p6Z KlJ6xbKrwr+Zk4WAyyK71gPgFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ53uoXo vckh+MXsghO47UPXKjD6MB8GA1UdIwQYMBaAFL9x9b8RaKeEBXbgAG87vGX8SDQL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU5Ni8wNTcyREQ4QTVB RTMxMUVGOTMyQzIzMkZDNEY5QUUwMi92M0gxdnhGb3A0UUZkdUFBYnp1OFpmeElO QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3YzSDF2eEZvcDRRRmR1QUFienU4WmZ4SU5Bcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU5Ni8wNTcyREQ4QTVBRTMxMUVGOTMyQzIzMkZDNEY5QUUwMi92M0gxdnhGb3A0 UUZkdUFBYnp1OFpmeElOQXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA7B4usI7pcGHWczFPXQ51pQP76+GZYyJUdT/rdQK5kQBvcHgfXyMR67klIUt y/fB5U61z9Ilplhw3+ltzJhvNy953VA1XojHVB4YubGXWuT37KudrAsiNr/l0Ikb GdQBMdmuYwELxuh4Xeoqt6unH20X6Iq+RtHnBgn56Jhq3C7j4qPKRDibJLBLSmeX 8TX4bzvtCPKvST9nGtgZHmRe15aYbkyo532bK9MVQ/zONagBpmZl7VCQHQzEgsH5 HUF9P4MKGHY2h3740X1X6AfSzfPMdpBh7MVGW7sSC8qgNCL08Jgnd5ff/du9whs9 TMfWD1h7BOOCODsn/9Ug5zeOhw== -----END CERTIFICATE-----Generated at Mon Mar 2 03:43:49 2026 by rpki-client