$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft File: -WS28tsd8I3d2tR5U1OdnFk9CmY.mft (raw, json) Hash identifier: tJ5nXv4SF4n/xeLWbGJLLAUEK1QcBteI6jWS+DVLaJA= Subject key identifier: C2:66:F8:55:62:92:CD:7B:C5:E0:A0:E3:E3:DD:40:B3:80:9F:78:28 Authority key identifier: F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 Certificate issuer: /CN=A91F0F53/serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft Manifest number: 0285 Signing time: Sun 01 Mar 2026 02:28:29 +0000 Manifest this update: Sun 01 Mar 2026 02:28:29 +0000 Manifest next update: Sun 08 Mar 2026 02:28:29 +0000 Files and hashes: 1: -WS28tsd8I3d2tR5U1OdnFk9CmY.crl (hash: ItlsTeVVxc6hEOh5Tkihwt/0TabbGlJ2NJeSpJRcB3U=) 2: 051D87824A9A11ED9B9F6E25C4F9AE02.roa (hash: xNOCVL67QUmTmGocS6l83l1PTGVVO5dlYlS+P9v2qqM=) 3: 50AC0FBE329011EEB46D367FC4F9AE02.roa (hash: MZHDnQTf/dFDpmRBSaKkw2lQHaXIZOFR/RasHh1wgfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 02:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0F53, serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Validity Not Before: Mar 1 02:28:29 2026 GMT Not After : Mar 8 02:28:29 2026 GMT Subject: CN=69a3a44d-cd25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1c:da:1c:57:3b:cf:dc:72:b5:ec:de:78:74: 28:6f:33:cb:fd:85:bd:1e:3f:99:32:1c:8e:af:df: 69:9a:d7:7d:c7:b4:f5:f5:59:84:13:85:f9:68:15: 63:94:9c:c4:70:d1:b8:02:36:3a:8d:ea:1a:9e:93: 38:08:56:7a:84:aa:9d:4a:f6:99:f7:3f:fb:57:12: 7e:11:cf:75:79:49:51:1a:27:3c:cf:c6:11:79:3f: c9:09:21:16:25:75:76:b1:d2:0a:c3:c5:ac:53:41: d4:4a:78:ff:c4:bd:e1:96:30:c7:74:f3:d1:9f:58: fb:b1:b0:a6:15:a1:fa:c8:f8:a6:d9:62:79:a4:91: 9f:77:85:84:22:7a:7a:28:5d:4e:68:72:28:5e:00: 58:2b:9f:22:ff:e3:41:5b:fb:a6:93:69:4d:ae:66: 3e:f0:5c:79:d8:c8:3f:f5:3e:95:ea:6c:4a:09:be: b8:52:37:24:d9:55:fa:37:ac:89:3c:53:6c:d7:a7: 52:53:a7:c8:54:71:a1:17:a7:0e:9d:4f:6d:fc:af: 26:d1:9c:fc:c0:cc:d3:da:a4:27:7a:31:7c:e9:6e: 5a:58:4e:ee:48:b5:d1:91:ff:3b:26:ed:e9:98:51: 06:3f:d8:00:3a:9a:8c:9e:19:7c:ba:64:7e:80:c4: 2d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:66:F8:55:62:92:CD:7B:C5:E0:A0:E3:E3:DD:40:B3:80:9F:78:28 X509v3 Authority Key Identifier: keyid:F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c6:f6:d0:ab:06:3c:34:4f:11:d0:7d:78:12:47:af:ed:71: 2e:f9:6d:16:1d:63:79:c2:34:13:dc:3b:45:f8:27:77:c1:42: d7:f3:ec:eb:0d:42:e8:b8:7a:3b:04:78:af:ed:9f:9e:73:ca: c9:71:de:26:f5:0f:d3:41:bd:f4:17:54:3b:36:84:07:c3:a5: bf:e8:fa:d7:3b:56:d0:e4:28:f8:6d:08:9b:5b:0d:09:b5:eb: 50:fd:d3:bc:65:4f:d7:86:17:c2:d5:5c:99:9d:eb:12:f6:43: 50:e3:cb:13:2c:83:f7:19:48:ae:c3:7d:c2:a3:26:47:54:b1: f8:e1:34:13:3a:80:3f:da:fb:2f:cf:f6:a5:ca:fc:50:17:04: aa:84:d3:d2:cd:fa:a5:2a:6d:9b:4f:30:81:17:28:38:59:42: 74:01:2b:84:72:e4:fb:46:fb:55:9b:7f:83:91:25:81:6b:d4: 10:2a:bd:b8:2c:98:39:d2:3d:a7:12:22:1a:74:30:20:b3:c3: a7:8a:d0:86:25:9a:93:34:c4:8b:fa:8e:59:25:1b:d3:c8:7d: 0b:24:8d:27:d0:3c:40:25:fb:8e:60:22:27:b5:35:c8:5e:27: ca:b5:70:bc:8c:2c:c4:57:3f:d7:1e:40:05:66:1b:97:40:3a: 27:d7:87:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGNTMxMTAvBgNVBAUTKEY5NjRCNkYyREIxREYwOERERERBRDQ3OTUzNTM5RDlD NTkzRDBBNjYwHhcNMjYwMzAxMDIyODI5WhcNMjYwMzA4MDIyODI5WjAYMRYwFAYD VQQDDA02OWEzYTQ0ZC1jZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRzaHFc7z9xytezeeHQobzPL/YW9Hj+ZMhyOr99pmtd9x7T19VmEE4X5aBVj lJzEcNG4AjY6jeoanpM4CFZ6hKqdSvaZ9z/7VxJ+Ec91eUlRGic8z8YReT/JCSEW JXV2sdIKw8WsU0HUSnj/xL3hljDHdPPRn1j7sbCmFaH6yPim2WJ5pJGfd4WEInp6 KF1OaHIoXgBYK58i/+NBW/umk2lNrmY+8Fx52Mg/9T6V6mxKCb64Ujck2VX6N6yJ PFNs16dSU6fIVHGhF6cOnU9t/K8m0Zz8wMzT2qQnejF86W5aWE7uSLXRkf87Ju3p mFEGP9gAOpqMnhl8umR+gMQtHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMJm+FVi ks17xeCg4+PdQLOAn3goMB8GA1UdIwQYMBaAFPlktvLbHfCN3drUeVNTnZxZPQpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEY1My9BMjIzNTJDMjRB OTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJM2QydFI1VTFPZG5GazlD bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1XUzI4dHNkOEkzZDJ0UjVVMU9kbkZrOUNtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEY1My9BMjIzNTJDMjRBOTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJ M2QydFI1VTFPZG5GazlDbVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS8b20KsGPDRPEdB9eBJHr+1xLvltFh1jecI0E9w7Rfgnd8FC1/Ps6w1C6Lh6 OwR4r+2fnnPKyXHeJvUP00G99BdUOzaEB8Olv+j61ztW0OQo+G0Im1sNCbXrUP3T vGVP14YXwtVcmZ3rEvZDUOPLEyyD9xlIrsN9wqMmR1Sx+OE0EzqAP9r7L8/2pcr8 UBcEqoTT0s36pSptm08wgRcoOFlCdAErhHLk+0b7VZt/g5ElgWvUECq9uCyYOdI9 pxIiGnQwILPDp4rQhiWakzTEi/qOWSUb08h9CySNJ9A8QCX7jmAiJ7U1yF4nyrVw vIwsxFc/1x5ABWYbl0A6J9eHxA== -----END CERTIFICATE-----Generated at Mon Mar 2 01:59:26 2026 by rpki-client