$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft File: -65NuTksgZMhr1EdxrK1qomYGfo.mft (raw, json) Hash identifier: o4VpQU59DXsPnL4T73qx6VxstEuEPAn+PATWpq5aXTc= Subject key identifier: DD:C3:20:FF:9A:61:DA:CB:BD:75:7C:6C:31:34:B1:D8:12:99:90:14 Authority key identifier: FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA Certificate issuer: /CN=A91F2D93/serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft Manifest number: D8 Signing time: Mon 02 Mar 2026 01:48:52 +0000 Manifest this update: Mon 02 Mar 2026 01:48:50 +0000 Manifest next update: Mon 09 Mar 2026 01:48:50 +0000 Files and hashes: 1: -65NuTksgZMhr1EdxrK1qomYGfo.crl (hash: 7nOjfZ72+HdNErXC0nt4UlhcfsjleOxFKLFutmoE+3E=) 2: 93D86AAED76611EF9C982924C4F9AE02.roa (hash: h/SmLSS017YgGA7zYy4/07yQ0L9fFewbCCdQwU4sBFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2D93, serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA Validity Not Before: Mar 2 01:48:50 2026 GMT Not After : Mar 9 01:48:50 2026 GMT Subject: CN=69a4ec83-7b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b5:df:ad:42:0f:e0:81:17:9c:57:b6:3c:bf: 67:b8:cc:4f:53:ef:1e:a5:b1:9c:1b:c7:85:16:5b: 9c:1a:7b:69:71:22:46:8a:f1:1f:89:59:69:50:c1: 05:71:e0:7b:fe:be:3b:4b:de:67:92:75:dd:97:52: 7f:9a:cf:e5:c8:d5:9c:dc:30:99:ae:9f:6d:bd:6e: 93:ea:e2:78:8f:a4:c1:40:a3:d3:73:bb:ba:b7:ac: 95:dc:04:ae:25:ce:83:d6:09:1b:24:35:f1:b3:be: ae:27:97:51:98:1a:ce:7e:20:73:cd:06:4b:ad:64: a2:d6:1d:d0:cc:e3:85:ad:b4:8f:77:50:b5:85:ce: 43:ac:30:15:fa:14:64:29:f4:fa:ee:c5:cc:7c:a4: 37:c1:19:19:aa:b8:d9:76:42:77:d0:33:06:d7:09: 19:dc:1a:b0:21:eb:6a:12:16:e9:d1:12:75:0e:80: 19:53:2d:7c:a7:46:89:4a:6e:bb:33:96:4a:df:fc: 27:0c:44:28:ca:13:a7:bd:a5:ea:e6:d7:17:5b:89: 55:b0:68:cd:46:37:b8:d2:ec:76:eb:9b:38:50:cc: 88:c2:5f:ee:65:5b:4b:7c:29:ec:9f:94:96:0d:a1: ea:04:50:1f:a5:1d:34:98:6d:9c:d0:ef:a9:40:45: 00:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C3:20:FF:9A:61:DA:CB:BD:75:7C:6C:31:34:B1:D8:12:99:90:14 X509v3 Authority Key Identifier: keyid:FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:05:60:4f:df:c8:9b:ae:63:84:a1:9f:d1:a7:ad:f5:85:f0: 41:09:7e:69:4d:9c:b4:10:bd:6d:01:81:1c:9c:64:a4:86:ed: 1c:ed:48:fc:04:be:58:b3:b6:d6:f6:06:ed:31:5e:d5:2b:0a: ee:9e:ac:e1:3b:c3:94:28:8e:f7:c4:ba:fb:77:bd:44:1c:ea: 59:d3:30:14:3a:d5:d4:42:6d:64:c7:68:4d:92:56:80:6e:ba: de:ae:d5:d1:20:99:8f:ea:25:d0:fd:a7:dd:f9:25:28:bf:92: 13:88:df:df:83:2e:0b:bb:be:ba:4a:e9:20:e7:6d:92:7a:8a: c8:a0:ec:4b:ae:1e:fe:97:70:9e:c1:85:2c:2a:4e:12:12:99: 8c:74:a0:8e:d3:0e:3c:14:70:71:e5:c9:94:44:15:5b:fc:d2: a5:d8:62:c0:86:d9:81:e5:7d:81:c6:a3:5a:37:67:7c:2f:ca: eb:8f:91:21:02:fe:b2:a0:65:ad:56:2e:cb:90:1e:63:9d:50: bf:d7:45:2f:be:20:26:92:d3:16:94:c1:f1:0f:8c:84:f6:a9: b1:58:09:b4:38:55:46:98:4f:64:46:b9:aa:d4:0f:d2:0a:2d: 57:29:4e:e2:eb:04:cd:ed:72:ad:b4:63:7f:7b:e8:85:80:c7: 78:b0:b9:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJEOTMxMTAvBgNVBAUTKEZCQUU0REI5MzkyQzgxOTMyMUFGNTExREM2QjJCNUFB ODk5ODE5RkEwHhcNMjYwMzAyMDE0ODUwWhcNMjYwMzA5MDE0ODUwWjAYMRYwFAYD VQQDEw02OWE0ZWM4My03YjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7XfrUIP4IEXnFe2PL9nuMxPU+8epbGcG8eFFlucGntpcSJGivEfiVlpUMEF ceB7/r47S95nknXdl1J/ms/lyNWc3DCZrp9tvW6T6uJ4j6TBQKPTc7u6t6yV3ASu Jc6D1gkbJDXxs76uJ5dRmBrOfiBzzQZLrWSi1h3QzOOFrbSPd1C1hc5DrDAV+hRk KfT67sXMfKQ3wRkZqrjZdkJ30DMG1wkZ3BqwIetqEhbp0RJ1DoAZUy18p0aJSm67 M5ZK3/wnDEQoyhOnvaXq5tcXW4lVsGjNRje40ux265s4UMyIwl/uZVtLfCnsn5SW DaHqBFAfpR00mG2c0O+pQEUAnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN3DIP+a YdrLvXV8bDE0sdgSmZAUMB8GA1UdIwQYMBaAFPuuTbk5LIGTIa9RHcaytaqJmBn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkQ5My84MThGREI3OEQ0 NEQxMUVGQjE2MDBCMjhDNEY5QUUwMi8tNjVOdVRrc2daTWhyMUVkeHJLMXFvbVlH Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy02NU51VGtzZ1pNaHIxRWR4cksxcW9tWUdmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkQ5My84MThGREI3OEQ0NEQxMUVGQjE2MDBCMjhDNEY5QUUwMi8tNjVOdVRrc2da TWhyMUVkeHJLMXFvbVlHZm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARgVgT9/Im65jhKGf0aet9YXwQQl+aU2ctBC9bQGBHJxkpIbtHO1I/AS+WLO2 1vYG7TFe1SsK7p6s4TvDlCiO98S6+3e9RBzqWdMwFDrV1EJtZMdoTZJWgG663q7V 0SCZj+ol0P2n3fklKL+SE4jf34MuC7u+ukrpIOdtknqKyKDsS64e/pdwnsGFLCpO EhKZjHSgjtMOPBRwceXJlEQVW/zSpdhiwIbZgeV9gcajWjdnfC/K64+RIQL+sqBl rVYuy5AeY51Qv9dFL74gJpLTFpTB8Q+MhPapsVgJtDhVRphPZEa5qtQP0gotVylO 4usEze1yrbRjf3vohYDHeLC5Dg== -----END CERTIFICATE-----Generated at Mon Mar 2 11:47:01 2026 by rpki-client