$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft File: CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json) Hash identifier: SBrHm7nRBR3qzVXZUl79126/zfEgBeVEgeHvBvV6d5U= Subject key identifier: F1:14:C5:BD:72:12:96:71:7E:02:9E:A7:10:F5:66:65:A0:CF:D9:35 Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 0263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft Manifest number: 021E Signing time: Sun 01 Mar 2026 04:24:01 +0000 Manifest this update: Sun 01 Mar 2026 04:24:00 +0000 Manifest next update: Sun 08 Mar 2026 04:24:00 +0000 Files and hashes: 1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: NuRix4r1WtICzWuJJPYeE5xLGERcOo+wjB6+WuSpA8U=) 2: F88F98EA55A211F0978C8774C4F9AE02.roa (hash: tUG8yJiHn55iF+p5xuktjgNqO57AMcBScipLCgmp+AU=) 3: BACC6D0A4F7411F0A8124536C4F9AE02.roa (hash: yAhldKSbT9eXvW5YXq5JzADs625rpn5nRswKYZ3uyDM=) 4: DA6883FC0F8611F0955A002EC4F9AE02.roa (hash: G2el60zyW5DLxxUiqRoxyHbxi0YhTWGIRCSb/KhXW78=) 5: 063FA6B25B2811F09B9A3A54C4F9AE02.roa (hash: KXiWnH7RLdD8k1bKnrw/NL0MoMgP+K3mZfrXszKRO+k=) 6: D0F8C1B2558E11F0AA71D85AC4F9AE02.roa (hash: HvV48I109s9+Qsv4Wno42zSr43P6rFtI4uz1VW60NvA=) 7: 94BE094C7D0B11F0BC79D46DC4F9AE02.roa (hash: 7OyWzhEYc1OoBkrdP9NnWA0PjS6KslbL/GgGS4z8wV0=) 8: 935296A6558B11F0BB2DB436C4F9AE02.roa (hash: eTquNld5nLEFKYyMHLG1VzJGsnFO7+pijIq3z1S1zVg=) 9: FBB6EA4E558B11F082FD5637C4F9AE02.roa (hash: t1t5ERQK21Czu6UgrAaBph2clA23SD9Ihs9VsoqVI8k=) 10: E07CB68455A211F0B55F5674C4F9AE02.roa (hash: edUlYrUcw9nemw/UT7S46VmgpUXLu0gAESR1RTk4AOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: Mar 1 04:24:00 2026 GMT Not After : Mar 8 04:24:00 2026 GMT Subject: CN=69a3bf60-444a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2d:a7:e0:21:3d:97:f9:c2:97:36:30:e7:cd: 7d:a1:68:6e:33:fe:4a:e4:74:51:07:15:0e:c9:1e: 36:ca:43:11:ea:c7:21:9d:d1:b1:26:83:69:61:95: e6:dc:b1:05:e9:4d:cd:90:bc:92:ab:7f:8b:70:8c: 19:83:c1:d5:3e:1f:33:0a:cc:28:c4:b3:4f:76:a5: 4e:ef:83:9f:8a:40:28:fe:49:79:85:ef:4d:c9:0b: ce:05:16:88:ea:62:06:df:cf:d7:cb:c9:36:b1:2e: a3:f1:ae:11:b9:47:52:3b:13:3b:f6:51:78:ca:79: 05:fc:d0:41:48:b8:1f:31:d2:7d:27:a3:4d:ce:63: a4:73:44:ae:28:4c:14:67:6e:86:af:28:c1:7d:e6: a8:bd:38:1d:fa:1e:8d:f2:69:96:d7:01:20:78:4f: aa:84:dd:ae:13:58:42:36:c6:df:4e:a9:27:2c:06: 64:27:29:68:40:fb:b6:8e:4a:9b:33:f7:69:ac:71: 19:7b:a1:20:28:e6:b7:38:e5:81:d8:09:ef:f7:3b: 1c:a9:8c:9e:bf:6b:fd:37:be:8c:3a:4f:a7:a8:d3: 57:fb:4e:0e:00:7d:a0:aa:0b:2c:66:b6:38:bd:27: 51:8c:39:59:a4:b8:ad:ee:90:ef:c3:69:b8:59:08: 85:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:14:C5:BD:72:12:96:71:7E:02:9E:A7:10:F5:66:65:A0:CF:D9:35 X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:74:29:f1:9c:64:0d:24:4e:61:f5:12:b6:e4:9f:1a:2f:e1: 45:0d:36:93:f5:8d:71:35:91:80:e3:6b:a1:35:bb:7a:39:98: c2:32:9c:c7:11:f9:67:40:ca:5d:ce:cd:78:89:43:ee:3d:70: 84:8d:f4:86:d4:3c:67:4e:2a:7f:35:ae:d3:16:d0:d2:76:31: 69:62:82:a9:b2:57:17:29:42:3c:17:72:00:1b:d4:ff:4c:68: 1b:10:f1:42:4a:dd:d1:57:2b:95:c5:88:ff:26:28:f8:f8:81: fd:76:48:6b:fd:4c:30:93:9b:97:dc:2b:e9:f9:0a:b5:c2:31: 45:cd:90:36:48:06:a5:0c:5e:68:6f:ca:6f:50:6f:e3:46:a4: a7:f4:af:9b:be:b9:17:0c:86:b7:f7:09:0d:2a:cb:35:67:82: 49:40:ea:b2:db:21:22:4d:ed:94:68:b2:33:92:f7:42:5c:02: 84:b0:f2:bf:41:07:11:e1:f6:c0:3d:e4:43:f1:4c:a6:0f:56: 0a:1b:b8:0a:65:92:8d:92:4b:f7:42:f3:04:ec:3c:3b:21:97: 52:dd:e3:ca:71:cb:b8:ee:be:08:36:e4:8c:82:a9:f9:cc:a1: 37:46:3f:76:64:41:68:44:69:f7:a4:c9:9b:2a:64:b6:cc:45: d5:b1:bd:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjYwMzAxMDQyNDAwWhcNMjYwMzA4MDQyNDAwWjAYMRYwFAYD VQQDDA02OWEzYmY2MC00NDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwC2n4CE9l/nClzYw5819oWhuM/5K5HRRBxUOyR42ykMR6schndGxJoNpYZXm 3LEF6U3NkLySq3+LcIwZg8HVPh8zCswoxLNPdqVO74OfikAo/kl5he9NyQvOBRaI 6mIG38/Xy8k2sS6j8a4RuUdSOxM79lF4ynkF/NBBSLgfMdJ9J6NNzmOkc0SuKEwU Z26GryjBfeaovTgd+h6N8mmW1wEgeE+qhN2uE1hCNsbfTqknLAZkJyloQPu2jkqb M/dprHEZe6EgKOa3OOWB2Anv9zscqYyev2v9N76MOk+nqNNX+04OAH2gqgssZrY4 vSdRjDlZpLit7pDvw2m4WQiFXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPEUxb1y EpZxfgKepxD1ZmWgz9k1MB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdBQS80MUYwRjk3RTUyQjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFw SVZkUXBJdkFNYTJwSnU5bTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKHQp8ZxkDSROYfUStuSfGi/hRQ02k/WNcTWRgONroTW7ejmYwjKcxxH5Z0DK Xc7NeIlD7j1whI30htQ8Z04qfzWu0xbQ0nYxaWKCqbJXFylCPBdyABvU/0xoGxDx Qkrd0VcrlcWI/yYo+PiB/XZIa/1MMJObl9wr6fkKtcIxRc2QNkgGpQxeaG/Kb1Bv 40akp/Svm765FwyGt/cJDSrLNWeCSUDqstshIk3tlGiyM5L3QlwChLDyv0EHEeH2 wD3kQ/FMpg9WChu4CmWSjZJL90LzBOw8OyGXUt3jynHLuO6+CDbkjIKp+cyhN0Y/ dmRBaERp96TJmypktsxF1bG9AQ== -----END CERTIFICATE-----Generated at Mon Mar 2 00:08:59 2026 by rpki-client