$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft File: 5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json) Hash identifier: 0qo6c0FOAcY+PNZrwXonCd6Lqr9sLfGk9YNrsCrnYXQ= Subject key identifier: A1:F9:44:F0:3D:EA:64:D1:BC:FB:01:A3:77:34:9B:81:86:D6:34:8E Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Certificate serial: 0509 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft Manifest number: 04EC Signing time: Sun 01 Mar 2026 00:25:23 +0000 Manifest this update: Sun 01 Mar 2026 00:25:22 +0000 Manifest next update: Sun 08 Mar 2026 00:25:22 +0000 Files and hashes: 1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: PzM9QTUEel0ViiofV6/l1+PjEc7OEOFsFOXIqdR0Pbc=) 2: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: 03xQSZXfxDyCzRtWljLHUlOT109SCX3SLMxm27msFJQ=) 3: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: OKD6dIXNlufXP/2KtQACOYy/fSTRLoZuLrkJHHyBmPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 00:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1289 (0x509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF35B, serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Validity Not Before: Mar 1 00:25:22 2026 GMT Not After : Mar 8 00:25:22 2026 GMT Subject: CN=69a38772-eb94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:19:0c:4e:bf:b6:6f:55:f8:f4:39:67:91:a7: d2:09:d4:fc:d0:a8:84:6c:04:dc:e4:ee:10:63:28: 3e:89:8a:26:27:60:71:30:c0:89:0b:c7:7c:21:2d: 22:30:1f:2a:fb:70:a0:8b:d5:93:31:9f:85:79:22: c3:ff:f1:1a:5a:6f:a2:89:1f:f2:47:88:a5:99:25: a4:05:9a:9d:0d:e7:39:d6:91:ff:29:1d:6b:8f:31: 9c:4a:fc:bc:af:83:12:86:88:be:dd:2b:23:e1:6d: 38:da:06:b7:d2:9d:7b:8a:15:fc:0f:9b:db:8a:db: 4e:97:c1:49:8c:3a:55:d6:62:37:87:35:63:04:48: 65:2b:ce:87:4a:cb:cb:47:a6:ec:79:df:99:75:9b: 6b:4d:6a:d9:04:c8:49:a1:2b:13:86:a7:9d:b3:28: 37:03:38:b1:0c:fd:3b:60:ee:6e:68:1b:cf:6a:9e: b6:14:37:77:6b:a6:3b:6c:5a:dd:85:c8:43:65:76: 62:4b:be:4c:5e:0c:47:84:99:bb:f6:38:bd:25:85: 3f:15:ce:ab:82:db:52:e7:4c:1c:37:b6:05:16:25: 22:a7:79:4a:8f:54:72:a9:3d:af:9c:b6:44:88:2e: 3d:b6:8c:df:d6:0d:02:1b:49:ce:ad:30:d8:1e:5f: fb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F9:44:F0:3D:EA:64:D1:BC:FB:01:A3:77:34:9B:81:86:D6:34:8E X509v3 Authority Key Identifier: keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:d2:d2:84:f2:60:a8:3e:bc:77:14:f9:af:f9:70:b8:f4:99: c5:2f:d5:1d:cf:cc:bb:85:58:76:c0:07:6d:0b:05:ae:ae:36: d4:f0:a4:0d:30:a8:06:c5:45:c7:46:b5:56:f4:ec:fe:22:7d: ae:20:99:7c:d5:70:1e:3a:02:47:47:35:39:4e:d7:09:22:cd: 96:84:e6:9a:df:c1:12:e0:a5:54:b9:30:57:05:82:99:c7:11: 12:b6:bc:60:f8:26:d1:b7:d1:8c:80:50:ec:62:b2:87:da:e0: 2f:0c:1a:36:97:15:c9:99:2a:fd:74:fc:f4:ce:d3:d9:79:52: 09:61:bc:a9:42:23:ae:c8:0c:f4:eb:24:86:3b:51:06:ad:e7: 5a:ca:ba:fd:41:2c:2e:85:d8:53:e2:3c:1e:21:cb:3e:67:96: 82:2b:ab:ed:30:11:7b:c4:9f:aa:03:7c:e4:6a:4f:50:12:65: 4c:21:69:dd:8b:dc:a5:05:d5:0c:03:19:84:63:05:9c:73:a7: ea:b0:0b:56:50:f0:25:f3:f5:af:b5:a1:6b:b3:b8:80:92:e1: 68:55:1e:4c:a3:e2:7c:9c:45:50:cb:42:84:f2:f3:1f:13:83: 1e:fc:34:e4:97:a6:3e:53:b4:7c:d8:ea:ef:73:6d:f5:6f:f9: 2d:4c:f3:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYzNUIxMTAvBgNVBAUTKEU0MDcyMEJBMjkzQkFGMjVCQzBBMTc3OEM2NUNGMEQy RTBGMzUxNjAwHhcNMjYwMzAxMDAyNTIyWhcNMjYwMzA4MDAyNTIyWjAYMRYwFAYD VQQDDA02OWEzODc3Mi1lYjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnRkMTr+2b1X49DlnkafSCdT80KiEbATc5O4QYyg+iYomJ2BxMMCJC8d8IS0i MB8q+3Cgi9WTMZ+FeSLD//EaWm+iiR/yR4ilmSWkBZqdDec51pH/KR1rjzGcSvy8 r4MShoi+3Ssj4W042ga30p17ihX8D5vbittOl8FJjDpV1mI3hzVjBEhlK86HSsvL R6bsed+ZdZtrTWrZBMhJoSsThqedsyg3AzixDP07YO5uaBvPap62FDd3a6Y7bFrd hchDZXZiS75MXgxHhJm79ji9JYU/Fc6rgttS50wcN7YFFiUip3lKj1RyqT2vnLZE iC49tozf1g0CG0nOrTDYHl/7iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKH5RPA9 6mTRvPsBo3c0m4GG1jSOMB8GA1UdIwQYMBaAFOQHILopO68lvAoXeMZc8NLg81Fg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjM1Qi9FMDEwMTU4QTU2 NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5VzhDaGQ0eGx6dzB1RHpV V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVBY2d1aWs3cnlXOENoZDR4bHp3MHVEelVXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjM1Qi9FMDEwMTU4QTU2NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5 VzhDaGQ0eGx6dzB1RHpVV0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJdLShPJgqD68dxT5r/lwuPSZxS/VHc/Mu4VYdsAHbQsFrq421PCkDTCoBsVF x0a1VvTs/iJ9riCZfNVwHjoCR0c1OU7XCSLNloTmmt/BEuClVLkwVwWCmccREra8 YPgm0bfRjIBQ7GKyh9rgLwwaNpcVyZkq/XT89M7T2XlSCWG8qUIjrsgM9OskhjtR Bq3nWsq6/UEsLoXYU+I8HiHLPmeWgiur7TARe8SfqgN85GpPUBJlTCFp3YvcpQXV DAMZhGMFnHOn6rALVlDwJfP1r7Wha7O4gJLhaFUeTKPifJxFUMtChPLzHxODHvw0 5JemPlO0fNjq73Nt9W/5LUzzuQ== -----END CERTIFICATE-----Generated at Sun Mar 1 21:06:42 2026 by rpki-client