$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft File: tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json) Hash identifier: 5M1tUDSX8Vd/W5+kc16lWM9ANm1kUrEdByk9beYpxoc= Subject key identifier: A5:B3:17:9B:FC:F2:EE:33:FB:93:2F:09:40:4C:9C:B7:2F:0F:5D:DF Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Certificate serial: 03D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft Manifest number: 03C3 Signing time: Sun 01 Mar 2026 01:28:12 +0000 Manifest this update: Sun 01 Mar 2026 01:28:12 +0000 Manifest next update: Sun 08 Mar 2026 01:28:12 +0000 Files and hashes: 1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: p3hNDC8Pyo/UHIk1fiSYmfzyLBYRE7Pgvi/lF9Je5t4=) 2: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: NWdLC1okjSMZC1re8r0GPv+coLAtzqUNZd/WJqoFC0I=) 3: 69B0C410EC2411EFBE58C381C4F9AE02.roa (hash: +kwqGbWpipbMrj0CLjpjVwB+WbolyL/GD/coYdvqy5o=) 4: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (hash: A43/xgJTGYeraFwPZtUL84bZHCq+gEn3dFwYExX8W/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 982 (0x3d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Validity Not Before: Mar 1 01:28:12 2026 GMT Not After : Mar 8 01:28:12 2026 GMT Subject: CN=69a3962c-489b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3a:ff:a0:a9:40:a3:4c:e3:ef:ec:92:42:15: 9a:3e:69:8c:ba:c2:ff:5a:c4:69:00:23:01:41:41: 0e:04:3b:3c:e4:9f:6f:c1:42:8b:20:96:13:6e:59: bc:f8:2d:45:4e:4a:de:c7:ab:80:11:2f:5f:46:06: 95:f1:1b:35:f8:ad:cd:30:50:b2:e6:37:78:25:74: 21:07:75:ae:15:cb:b9:f8:1a:eb:bd:5d:b2:b7:d5: 0a:23:81:bc:d3:e5:9e:61:3f:d1:dc:31:e9:7b:1b: 6b:17:81:1c:7f:de:cf:9f:8a:48:18:dc:56:f1:f4: a2:51:13:99:e5:27:d7:9f:15:01:65:ea:52:61:3c: 19:b8:41:9f:9a:68:fc:74:9e:a9:30:e3:86:b4:89: 16:c6:d9:fd:0f:55:f5:f8:42:9a:35:ab:07:21:e9: ac:35:7f:87:b4:2c:45:49:a0:9b:88:20:0d:96:f7: c3:3d:1d:53:e9:b3:a5:84:fb:99:5e:b4:30:7a:94: 42:d1:93:94:d6:98:3a:be:d4:97:cf:b5:72:7a:9e: f1:54:69:fb:3a:55:c6:99:28:b9:47:d6:ce:fc:7e: ed:f1:7c:ce:7f:58:9d:8c:9c:f8:bd:53:48:67:ff: f3:01:b5:3d:e1:00:78:77:d9:16:3a:81:31:e1:c9: c9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B3:17:9B:FC:F2:EE:33:FB:93:2F:09:40:4C:9C:B7:2F:0F:5D:DF X509v3 Authority Key Identifier: keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:02:9a:ac:ed:0e:53:17:8b:e3:2d:e2:d7:a5:79:c4:78:06: 55:c2:e6:dc:83:3d:7e:5c:4b:2b:cb:b3:97:5b:04:18:85:2b: 77:4f:39:e6:e8:8d:a5:60:2a:49:a1:81:c0:f7:f8:a0:2a:50: 64:4d:00:59:76:98:5d:6b:12:7f:fc:b0:9c:d6:53:4a:74:ff: 0c:bf:96:63:0c:1c:a4:ff:ab:0b:61:73:80:bd:f7:fd:04:b0: 49:51:ca:ea:3e:06:f8:f7:75:ee:ea:78:5e:8d:9b:df:77:7a: 79:ab:5e:2e:0b:02:fe:21:46:d1:c2:57:e3:5e:da:12:3f:dc: 55:99:a7:9c:06:47:6e:1e:6e:75:2d:87:79:c9:44:34:e2:08: 4c:c1:38:b4:95:25:17:69:ec:21:04:52:7c:b0:5c:b8:10:d5: 78:87:7c:68:bb:8d:6d:c1:ac:6f:69:8f:0e:ac:82:e3:d6:6e: a5:85:54:8c:b6:2b:64:da:92:95:6c:e4:b7:4c:75:dc:70:b5: bd:bb:d0:7a:27:07:d6:be:01:de:0d:f9:9d:c3:c4:83:aa:ea: aa:c7:f2:9d:ea:89:b1:1a:1a:15:a4:97:b5:1a:7e:ae:96:94: 98:1e:2f:67:37:5b:b9:f8:14:f6:47:15:9b:f3:78:d0:94:62: 1e:f5:85:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw NzQ3MEEyNzYwHhcNMjYwMzAxMDEyODEyWhcNMjYwMzA4MDEyODEyWjAYMRYwFAYD VQQDDA02OWEzOTYyYy00ODliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDr/oKlAo0zj7+ySQhWaPmmMusL/WsRpACMBQUEOBDs85J9vwUKLIJYTblm8 +C1FTkrex6uAES9fRgaV8Rs1+K3NMFCy5jd4JXQhB3WuFcu5+BrrvV2yt9UKI4G8 0+WeYT/R3DHpextrF4Ecf97Pn4pIGNxW8fSiUROZ5SfXnxUBZepSYTwZuEGfmmj8 dJ6pMOOGtIkWxtn9D1X1+EKaNasHIemsNX+HtCxFSaCbiCANlvfDPR1T6bOlhPuZ XrQwepRC0ZOU1pg6vtSXz7Vyep7xVGn7OlXGmSi5R9bO/H7t8XzOf1idjJz4vVNI Z//zAbU94QB4d9kWOoEx4cnJ+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKWzF5v8 8u4z+5MvCUBMnLcvD13fMB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1 MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ0Ni8yQTFGRjU2RUM1MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbEND MHphMnNGdDVaZk1IUndvblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdwKarO0OUxeL4y3i16V5xHgGVcLm3IM9flxLK8uzl1sEGIUrd0855uiNpWAq SaGBwPf4oCpQZE0AWXaYXWsSf/ywnNZTSnT/DL+WYwwcpP+rC2FzgL33/QSwSVHK 6j4G+Pd17up4Xo2b33d6eateLgsC/iFG0cJX417aEj/cVZmnnAZHbh5udS2HeclE NOIITME4tJUlF2nsIQRSfLBcuBDVeId8aLuNbcGsb2mPDqyC49ZupYVUjLYrZNqS lWzkt0x13HC1vbvQeicH1r4B3g35ncPEg6rqqsfyneqJsRoaFaSXtRp+rpaUmB4v ZzdbufgU9kcVm/N40JRiHvWFzg== -----END CERTIFICATE-----Generated at Mon Mar 2 02:05:23 2026 by rpki-client