$ rpki-client -vvf rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft File: 29rQCQF9kd-0ONcNG41NNIYvBo4.mft (raw, json) Hash identifier: s6pAaC6Incp512/EJ9JrDY7KruEzLfDKDa2I1mJqovo= Subject key identifier: BA:06:DE:28:57:CF:0E:EA:CE:F9:DA:2E:01:29:F3:8B:77:68:C6:CC Authority key identifier: DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E Certificate issuer: /CN=A91F223F/serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft Manifest number: 01AC Signing time: Sun 01 Mar 2026 04:51:40 +0000 Manifest this update: Sun 01 Mar 2026 04:51:40 +0000 Manifest next update: Sun 08 Mar 2026 04:51:40 +0000 Files and hashes: 1: 29rQCQF9kd-0ONcNG41NNIYvBo4.crl (hash: FZAs/ee4L2+1j3D/PvuGDdijVwrFuEQ2NgXSEKp79eU=) 2: 63E8E1AA8CAA11EE8B20D86EC4F9AE02.roa (hash: Ij8giMsojGjd18nsyvvGbo7KTBQMPLu9CA9WU2m1cO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:51:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F223F, serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E Validity Not Before: Mar 1 04:51:40 2026 GMT Not After : Mar 8 04:51:40 2026 GMT Subject: CN=69a3c5dc-eed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:93:b8:a6:8a:2b:19:26:42:74:7c:48:d8:e5: c1:2e:53:3b:61:23:fc:8d:82:80:f4:6b:43:d8:53: 77:ff:d6:0f:4d:c8:d1:2c:b4:1b:b7:5f:62:88:11: b5:91:c4:9a:cc:42:a5:6c:53:e0:3f:c8:bc:f2:3a: 73:df:6e:d8:26:fb:b4:47:f8:e7:18:1e:5c:5a:74: ec:30:a3:c3:c2:c2:12:d2:0a:d6:04:bb:3e:6b:fd: 7a:7c:f6:20:52:b6:41:4f:0b:2c:fd:4b:94:2d:3a: 1d:bc:95:05:23:22:9b:fa:7a:89:7a:f0:5c:a2:34: 7a:00:97:5d:8c:12:32:e1:e1:d4:26:bd:83:75:c5: 13:58:6d:eb:2b:3d:9e:ca:ab:00:30:f4:85:13:31: 33:c7:d1:ea:de:50:e0:7d:55:cf:f7:31:37:00:af: c7:03:6e:12:1b:1a:e2:43:2e:27:df:d0:66:f6:27: 8d:a7:a9:f1:d3:98:a8:ac:f5:c1:6f:be:af:a1:7b: 8a:5e:6e:8b:23:96:2c:69:4a:6c:36:26:4e:a7:55: ac:06:87:07:94:88:60:ee:28:48:39:6e:58:c1:be: 68:8e:f5:7b:2d:ed:01:db:d9:56:74:19:f1:fa:99: d8:55:26:fd:ba:ae:f1:d6:a6:78:80:e4:f3:cf:a6: c4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:06:DE:28:57:CF:0E:EA:CE:F9:DA:2E:01:29:F3:8B:77:68:C6:CC X509v3 Authority Key Identifier: keyid:DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:45:e6:9e:d1:51:4e:6c:f6:96:e8:10:be:47:fd:59:4b:48: 47:16:b2:ff:1e:27:b4:10:e7:38:59:1a:23:08:78:0b:40:00: 8d:4e:40:e8:d5:74:6f:22:a1:30:b1:97:da:3e:49:28:13:aa: 70:be:51:21:5f:b9:ba:3c:98:39:f8:b5:b5:96:fe:99:42:7a: 0c:0f:77:44:4f:11:76:9c:ce:a5:a0:ac:45:c2:04:e5:fd:e1: a9:db:1f:51:47:6d:e4:5d:aa:9b:eb:0b:a8:3b:29:be:27:59: 1f:0f:d6:c8:e3:bd:92:c4:6c:39:1d:46:92:f4:81:6d:3a:63: ef:aa:71:96:cd:76:48:7e:17:5c:a6:f2:5d:31:b0:b3:97:38: 18:6b:ae:b9:8b:22:df:1f:7e:d8:95:94:2d:e2:3c:1e:42:c1: 1c:90:87:73:b2:15:42:95:52:ff:21:96:e1:54:62:4b:ab:29: 07:9c:e7:9a:42:b9:b9:e1:9b:fc:e1:a3:0c:c3:91:2d:ae:d4: ef:65:b1:ac:1e:62:0f:a5:5e:06:e0:c5:aa:7d:2a:b5:13:66: 61:b9:77:ca:6e:39:8c:e2:dc:df:7d:4d:ce:50:e2:a4:ef:51: 12:31:e1:77:f0:75:99:c7:d6:1b:42:7b:1d:7a:19:0a:d9:95: 2e:80:cd:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIyM0YxMTAvBgNVBAUTKERCREFEMDA5MDE3RDkxREZCNDM4RDcwRDFCOEQ0RDM0 ODYyRjA2OEUwHhcNMjYwMzAxMDQ1MTQwWhcNMjYwMzA4MDQ1MTQwWjAYMRYwFAYD VQQDDA02OWEzYzVkYy1lZWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpO4poorGSZCdHxI2OXBLlM7YSP8jYKA9GtD2FN3/9YPTcjRLLQbt19iiBG1 kcSazEKlbFPgP8i88jpz327YJvu0R/jnGB5cWnTsMKPDwsIS0grWBLs+a/16fPYg UrZBTwss/UuULTodvJUFIyKb+nqJevBcojR6AJddjBIy4eHUJr2DdcUTWG3rKz2e yqsAMPSFEzEzx9Hq3lDgfVXP9zE3AK/HA24SGxriQy4n39Bm9ieNp6nx05iorPXB b76voXuKXm6LI5YsaUpsNiZOp1WsBocHlIhg7ihIOW5Ywb5ojvV7Le0B29lWdBnx +pnYVSb9uq7x1qZ4gOTzz6bEGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLoG3ihX zw7qzvnaLgEp84t3aMbMMB8GA1UdIwQYMBaAFNva0AkBfZHftDjXDRuNTTSGLwaO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjIzRi8wOTY5MTI3QzhD QUExMUVFODY0REZENkRDNEY5QUUwMi8yOXJRQ1FGOWtkLTBPTmNORzQxTk5JWXZC bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI5clFDUUY5a2QtME9OY05HNDFOTklZdkJvNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjIzRi8wOTY5MTI3QzhDQUExMUVFODY0REZENkRDNEY5QUUwMi8yOXJRQ1FGOWtk LTBPTmNORzQxTk5JWXZCbzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWkXmntFRTmz2lugQvkf9WUtIRxay/x4ntBDnOFkaIwh4C0AAjU5A6NV0byKh MLGX2j5JKBOqcL5RIV+5ujyYOfi1tZb+mUJ6DA93RE8RdpzOpaCsRcIE5f3hqdsf UUdt5F2qm+sLqDspvidZHw/WyOO9ksRsOR1GkvSBbTpj76pxls12SH4XXKbyXTGw s5c4GGuuuYsi3x9+2JWULeI8HkLBHJCHc7IVQpVS/yGW4VRiS6spB5znmkK5ueGb /OGjDMORLa7U72WxrB5iD6VeBuDFqn0qtRNmYbl3ym45jOLc331NzlDipO9REjHh d/B1mcfWG0J7HXoZCtmVLoDNzQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:39:44 2026 by rpki-client