$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft File: caPb4vD_0LEHymtXE7Fcl6jj4dE.mft (raw, json) Hash identifier: UNvuaDMSRqBsL9jYMRk8/+lPxdWbUqSjkWe1C5r3MkQ= Subject key identifier: E6:48:6A:FB:D3:FE:09:0D:7D:F8:D0:C6:3E:1B:FF:81:E2:65:BB:CF Authority key identifier: 71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1 Certificate issuer: /CN=A91EEE79/serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 09:56:46 +0000 Manifest this update: Sun 01 Mar 2026 09:56:45 +0000 Manifest next update: Sun 08 Mar 2026 09:56:45 +0000 Files and hashes: 1: caPb4vD_0LEHymtXE7Fcl6jj4dE.crl (hash: SO6rtz16lRY3WmYXhedcaZ/lGcpOCeCwdYWcEun0BHU=) 2: 078123C8C45711F09E1B7D38C4F9AE02.roa (hash: 77Ti4coJG6upOfWGSXiHZBgxkM1mBFKcvk6A/BW0GOQ=) 3: 0853E998C45711F080167D38C4F9AE02.roa (hash: q06BkXWxrAKL8dfnFJAQ0hKBleWRtfFz0FU/k9ATOTo=) 4: 07EF6C98C45711F0A1027D38C4F9AE02.roa (hash: MKqJq2FumoKTrTwmyrH8ChMilgYTt/EL/h7r2rH2ApY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE79, serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1 Validity Not Before: Mar 1 09:56:45 2026 GMT Not After : Mar 8 09:56:45 2026 GMT Subject: CN=69a40d5e-f432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c8:69:7b:08:98:90:59:b1:dd:25:7e:1e:02: 95:21:e5:33:fe:31:8e:f8:a1:36:a8:3f:8a:07:23: 1e:c9:fd:d5:49:cd:08:9b:0b:0a:09:82:59:9b:dc: ad:44:0b:06:c7:38:d8:e2:f2:6a:0a:f2:f4:88:79: 2e:f7:1b:98:28:4f:88:7c:72:c8:d5:d4:16:35:03: 24:f1:d3:f1:1e:23:86:32:00:7a:31:06:23:f0:36: d9:a1:25:a1:ca:7d:9e:53:6d:60:23:53:ee:3d:c5: 76:8e:aa:6e:bb:de:2e:79:06:5e:2d:82:61:d8:b8: 4c:d7:02:73:76:5c:97:2e:76:c5:f4:12:49:95:5f: 68:e3:59:3f:1e:12:bb:58:d1:b0:10:95:30:20:8d: 7c:cd:c9:09:91:c7:63:16:cb:92:0c:60:a3:e6:1b: 1c:18:5a:d1:d2:49:7c:be:27:1a:59:90:33:a9:d8: 46:4b:75:35:3b:2d:79:8e:d0:cc:0b:a9:85:3c:b5: a1:67:af:91:24:ff:6c:84:4f:e4:5f:fe:0a:4f:02: 93:b5:8f:80:e4:9c:b9:09:fa:b4:1e:86:41:11:7e: 12:c4:d6:a6:08:44:eb:28:73:0c:98:c9:36:9a:e5: ba:90:cd:b2:74:39:0f:12:a8:e1:29:e3:5f:ec:14: ec:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:48:6A:FB:D3:FE:09:0D:7D:F8:D0:C6:3E:1B:FF:81:E2:65:BB:CF X509v3 Authority Key Identifier: keyid:71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:52:7f:87:eb:b9:bc:a8:f9:56:c5:d5:b1:9b:83:d3:13:68: 45:6a:2d:66:e1:e7:ae:6c:4e:cd:65:f2:20:d6:ed:dd:b1:8c: 3a:11:a3:cc:e9:e6:3d:a5:9b:15:09:c5:63:cf:1a:11:8d:8f: 8f:ff:75:d5:c7:79:87:96:b3:6d:bd:3e:44:6a:02:fe:f5:ee: 85:2f:77:f5:54:2f:82:1a:f3:47:1e:77:67:7b:6a:db:fb:4d: 47:e1:21:e4:f9:d9:c8:e2:c0:d8:a8:8f:bb:43:7f:5e:36:ab: ca:fc:22:59:9f:94:79:20:06:c8:97:7d:e4:29:8b:20:18:46: 9c:a2:5b:fc:4e:ed:eb:92:de:87:18:28:5c:d7:82:1a:4c:86: 6b:a4:ce:56:74:93:b1:ab:aa:8d:60:9f:d8:d6:15:72:b3:15: 7a:f5:e7:18:79:66:ac:81:39:ac:e5:ce:a0:7f:40:dc:91:67: 3f:48:99:06:ad:72:1d:7e:59:27:93:96:38:ae:8d:ad:5a:03: 16:5c:e0:57:3a:07:88:96:9e:45:0c:bd:cd:cc:06:a3:b2:28: f3:4a:d4:a9:de:3f:ef:c5:d1:57:1b:07:7d:75:2a:77:84:3c: 18:8e:d5:81:b2:96:fb:1f:b0:a1:3b:9a:9b:7a:ae:3b:81:f1: 24:5b:ff:81 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RUU3OTExMC8GA1UEBRMoNzFBM0RCRTJGMEZGRDBCMTA3Q0E2QjU3MTNCMTVDOTdB OEUzRTFEMTAeFw0yNjAzMDEwOTU2NDVaFw0yNjAzMDgwOTU2NDVaMBgxFjAUBgNV BAMTDTY5YTQwZDVlLWY0MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJyGl7CJiQWbHdJX4eApUh5TP+MY74oTaoP4oHIx7J/dVJzQibCwoJglmb3K1E CwbHONji8moK8vSIeS73G5goT4h8csjV1BY1AyTx0/EeI4YyAHoxBiPwNtmhJaHK fZ5TbWAjU+49xXaOqm673i55Bl4tgmHYuEzXAnN2XJcudsX0EkmVX2jjWT8eErtY 0bAQlTAgjXzNyQmRx2MWy5IMYKPmGxwYWtHSSXy+JxpZkDOp2EZLdTU7LXmO0MwL qYU8taFnr5Ek/2yET+Rf/gpPApO1j4DknLkJ+rQehkERfhLE1qYIROsocwyYyTaa 5bqQzbJ0OQ8SqOEp41/sFOy9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5khq+9P+ CQ19+NDGPhv/geJlu88wHwYDVR0jBBgwFoAUcaPb4vD/0LEHymtXE7Fcl6jj4dEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFRTc5Lzk1MUUyOEY4QzQ1 NjExRjA4RTUzOTIwQkM0RjlBRTAyL2NhUGI0dkRfMExFSHltdFhFN0ZjbDZqajRk RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY2FQYjR2RF8wTEVIeW10WEU3RmNsNmpqNGRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF RTc5Lzk1MUUyOEY4QzQ1NjExRjA4RTUzOTIwQkM0RjlBRTAyL2NhUGI0dkRfMExF SHltdFhFN0ZjbDZqajRkRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCdUn+H67m8qPlWxdWxm4PTE2hFai1m4eeubE7NZfIg1u3dsYw6EaPM6eY9pZsV CcVjzxoRjY+P/3XVx3mHlrNtvT5EagL+9e6FL3f1VC+CGvNHHndne2rb+01H4SHk +dnI4sDYqI+7Q39eNqvK/CJZn5R5IAbIl33kKYsgGEacolv8Tu3rkt6HGChc14Ia TIZrpM5WdJOxq6qNYJ/Y1hVysxV69ecYeWasgTms5c6gf0DckWc/SJkGrXIdflkn k5Y4ro2tWgMWXOBXOgeIlp5FDL3NzAajsijzStSp3j/vxdFXGwd9dSp3hDwYjtWB spb7H7ChO5qbeq47gfEkW/+B -----END CERTIFICATE-----Generated at Mon Mar 2 01:59:47 2026 by rpki-client