$ rpki-client -vvf rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft File: aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft (raw, json) Hash identifier: /Y9acDukO3KRqA8La0Ti5tRx+mfG9xjL/wyRy99O8m8= Subject key identifier: 62:CB:F0:3D:9A:23:C6:71:C8:C8:89:AB:D6:AC:EB:49:9D:00:92:70 Authority key identifier: 68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56 Certificate issuer: /CN=A91F231C/serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft Manifest number: 3D Signing time: Sun 01 Mar 2026 09:56:26 +0000 Manifest this update: Sun 01 Mar 2026 09:56:25 +0000 Manifest next update: Sun 08 Mar 2026 09:56:25 +0000 Files and hashes: 1: aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl (hash: AgAJ/HN/hs4PeTGZMBaNsrbZCHMx8j1PROqEYIkpTbs=) 2: 7F29585EC43011F09039384AC4F9AE02.roa (hash: qIQBQCqvxgPDNUu8P+ClZVFaFfgG4VgrBuDir9SsXDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F231C, serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56 Validity Not Before: Mar 1 09:56:25 2026 GMT Not After : Mar 8 09:56:25 2026 GMT Subject: CN=69a40d49-a2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:08:6b:27:f9:2c:4e:a3:0a:11:ae:d7:5a:9b: ea:0a:3a:6e:77:e4:17:5c:39:0b:4a:a1:d1:b5:51: 5f:67:34:2f:c7:96:9e:a3:a7:a1:bc:cd:91:35:76: 34:48:ab:41:0e:00:08:68:7c:4f:36:ce:5a:ff:8c: f8:98:de:53:1d:3d:16:b8:7e:16:b0:28:e1:4b:ea: bd:aa:fa:14:5b:48:f8:d5:d7:5f:22:e2:c3:92:ab: 44:66:7b:57:07:ae:74:e9:ec:55:c9:98:fa:11:69: ed:51:92:75:b5:ff:a8:a0:a6:30:5e:6a:fc:89:9f: d8:1d:e7:bb:b0:19:f0:39:6a:07:39:7e:1a:f9:ef: c2:cb:b9:e5:e9:2b:18:21:0f:af:4d:68:1b:e3:8d: e8:07:5f:f0:3e:48:d0:e8:73:c9:e8:1b:af:bf:17: b3:7a:38:ac:d8:c1:e8:3c:95:93:ea:37:ae:f0:63: 3a:e4:9d:f0:61:69:37:3d:b6:db:06:e7:6b:bd:91: ff:ca:94:0f:a9:38:46:5d:15:bc:6d:ad:fd:13:ff: a2:e9:07:e4:36:ab:01:7e:fd:8c:24:a7:44:4c:76: ba:de:87:6b:ca:8b:e8:53:05:da:99:78:e1:30:a7: bc:d6:46:24:51:3d:f0:64:6f:6b:70:67:00:34:37: e7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CB:F0:3D:9A:23:C6:71:C8:C8:89:AB:D6:AC:EB:49:9D:00:92:70 X509v3 Authority Key Identifier: keyid:68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ad:18:7f:e6:2b:a8:b2:a2:96:17:f0:08:96:6c:b1:bb:00: a8:28:90:32:f3:2f:f9:9d:ec:f3:fc:bb:32:79:7b:af:a1:89: 3f:5e:f9:d1:e6:c5:ef:e9:f6:7c:8d:97:2b:23:70:13:f6:14: ec:e5:71:28:bc:43:38:88:b8:5a:5b:1a:33:1b:61:a5:c4:2a: ad:a7:30:a1:8e:d0:79:97:8e:24:21:3a:8a:1b:a5:63:fc:55: aa:53:f7:a7:60:e1:32:a0:bf:b7:34:56:c9:46:e7:62:7a:3d: e7:8a:3a:b2:70:66:70:ec:8f:96:0a:ee:f9:2c:c8:cd:eb:1f: a3:65:05:e3:83:87:d4:2d:17:70:83:79:42:fa:4f:ff:32:cc: 5d:9e:0b:1d:ab:ad:96:83:1a:1c:13:fb:b4:02:21:e2:08:33: 6f:4f:1f:06:53:d8:83:31:52:b6:a2:52:65:bd:9e:b5:b6:9b: 4b:fe:5e:da:70:d9:b7:13:ab:84:11:54:f3:d4:25:ef:5c:69: 00:46:f2:47:17:49:04:8a:3c:1a:84:98:66:df:c0:db:9f:46: 21:e5:51:7d:3d:4c:d7:2c:01:ad:6b:83:17:d8:67:b6:d0:6b: de:96:e1:de:e0:57:a0:1d:e5:af:16:0d:ca:d1:92:79:b3:d9: 7a:66:d0:bb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MjMxQzExMC8GA1UEBRMoNjhEMTQ2NjQzMzk1ODQxNkREODFBN0Q0QUJGMkIyNDNF RTdEOEI1NjAeFw0yNjAzMDEwOTU2MjVaFw0yNjAzMDgwOTU2MjVaMBgxFjAUBgNV BAMTDTY5YTQwZDQ5LWEyYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9CGsn+SxOowoRrtdam+oKOm535BdcOQtKodG1UV9nNC/Hlp6jp6G8zZE1djRI q0EOAAhofE82zlr/jPiY3lMdPRa4fhawKOFL6r2q+hRbSPjV118i4sOSq0Rme1cH rnTp7FXJmPoRae1RknW1/6igpjBeavyJn9gd57uwGfA5agc5fhr578LLueXpKxgh D69NaBvjjegHX/A+SNDoc8noG6+/F7N6OKzYweg8lZPqN67wYzrknfBhaTc9ttsG 52u9kf/KlA+pOEZdFbxtrf0T/6LpB+Q2qwF+/Ywkp0RMdrreh2vKi+hTBdqZeOEw p7zWRiRRPfBkb2twZwA0N+e1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYsvwPZoj xnHIyImr1qzrSZ0AknAwHwYDVR0jBBgwFoAUaNFGZDOVhBbdgafUq/KyQ+59i1Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyMzFDLzI4RTgzRTZBQzQz MDExRjA5NkNFOUM0OUM0RjlBRTAyL2FORkdaRE9WaEJiZGdhZlVxX0t5US01OWkx WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYU5GR1pET1ZoQmJkZ2FmVXFfS3lRLTU5aTFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy MzFDLzI4RTgzRTZBQzQzMDExRjA5NkNFOUM0OUM0RjlBRTAyL2FORkdaRE9WaEJi ZGdhZlVxX0t5US01OWkxWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBhrRh/5iuosqKWF/AIlmyxuwCoKJAy8y/5nezz/LsyeXuvoYk/XvnR5sXv6fZ8 jZcrI3AT9hTs5XEovEM4iLhaWxozG2GlxCqtpzChjtB5l44kITqKG6Vj/FWqU/en YOEyoL+3NFbJRudiej3nijqycGZw7I+WCu75LMjN6x+jZQXjg4fULRdwg3lC+k// Msxdngsdq62WgxocE/u0AiHiCDNvTx8GU9iDMVK2olJlvZ61tptL/l7acNm3E6uE EVTz1CXvXGkARvJHF0kEijwahJhm38Dbn0Yh5VF9PUzXLAGta4MX2Ge20GveluHe 4FegHeWvFg3K0ZJ5s9l6ZtC7 -----END CERTIFICATE-----Generated at Mon Mar 2 04:35:16 2026 by rpki-client