$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft File: MU9VrlJExM2xD3hN_xXQItOJaEg.mft (raw, json) Hash identifier: YWI1UP/pr+31ncCGT1XTOJj71YgcW7CwwhfHCkp2znk= Subject key identifier: 6C:72:95:78:70:43:1E:E4:1B:8D:9E:9A:64:A1:D2:32:65:EE:AC:ED Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 Certificate issuer: /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Certificate serial: 1E5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft Manifest number: 1E2C Signing time: Mon 02 Mar 2026 03:11:48 +0000 Manifest this update: Mon 02 Mar 2026 03:11:47 +0000 Manifest next update: Mon 09 Mar 2026 03:11:47 +0000 Files and hashes: 1: MU9VrlJExM2xD3hN_xXQItOJaEg.crl (hash: GEzIKIkIdfUksfmbn3yjvWIZau34Mq/dkt2H/VrPU8U=) 2: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (hash: 1/N+x4tq6/c9xUAJy159IIU+1McF9uoQiXksMGt8yqs=) 3: 30C10672A27411E68C8EC670C4F9AE02.roa (hash: b5jJ0XYRIPMCiG6TS1QuIIn72XeOYM6z8qgDLi8Q27c=) 4: FC3B9966A80F11F083B2493AC4F9AE02.roa (hash: dCYCraCe4BAH3K0YJs5ny72N+4yB3GJ0WgL75Ya+JGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7770 (0x1e5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4288, serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Validity Not Before: Mar 2 03:11:47 2026 GMT Not After : Mar 9 03:11:47 2026 GMT Subject: CN=69a4fff4-5b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:27:fe:c9:6b:7e:55:6e:86:72:02:67:bd:2f: b8:c6:fb:ab:39:f9:a6:77:37:ae:c7:3c:a7:96:bd: 05:33:ae:49:87:c6:7c:b2:0a:f1:88:29:4d:8b:f2: b4:86:19:53:02:3d:94:5d:ad:a5:07:91:b2:f7:26: bd:50:b5:cf:0d:5d:b5:a0:1f:ea:ae:27:19:5b:2d: 76:41:3d:2c:e4:b7:7b:aa:98:b5:ee:42:46:2b:1c: ac:9b:26:57:13:6b:aa:f1:31:2c:f3:97:9f:35:ff: ca:5c:80:fa:33:bf:5a:1d:72:be:4d:d7:be:c5:1d: 6c:0f:54:73:38:c6:cb:6f:2a:4c:ab:57:83:23:24: 99:63:84:64:56:2c:f7:48:d8:ea:af:d3:7d:f3:d5: 09:9f:e1:50:14:92:1f:b7:3a:9d:de:3a:4d:7a:39: fc:c3:75:31:5e:35:1c:f6:10:ee:2e:83:88:9c:7c: c9:e9:3f:ae:9d:f5:50:82:13:c3:b1:cc:75:d8:f5: ec:fb:47:94:d2:46:52:d7:e7:85:8c:81:51:48:48: 9f:11:d5:5a:54:29:32:3d:24:08:b5:96:d5:5f:ec: 70:06:c3:dd:6e:37:bc:78:62:d3:d2:44:52:cb:b9: 84:a8:ce:59:56:dd:9c:8a:71:10:12:4e:f0:82:93: c7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:72:95:78:70:43:1E:E4:1B:8D:9E:9A:64:A1:D2:32:65:EE:AC:ED X509v3 Authority Key Identifier: keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:20:13:0e:de:2a:ea:1b:97:24:41:30:df:a0:0b:69:ad:94: fa:51:5e:d5:73:bb:b4:71:29:0a:4f:4d:6e:f7:6d:12:6b:41: 26:65:49:93:c8:1a:b0:11:a1:d1:ac:5c:00:81:be:d4:b1:80: 0b:44:7d:a7:84:d3:d3:9e:ef:d5:c7:03:ff:d9:8a:5e:3f:d3: 2d:d4:e9:8c:e9:cd:82:20:c0:ba:fd:89:88:80:25:7c:f0:54: 5c:03:12:f2:04:ce:dd:39:d5:f8:80:80:4e:f0:c3:b0:6b:0e: d5:1f:18:4c:de:ab:01:f9:92:b7:4c:93:ae:5e:b6:76:cc:0f: 78:05:fc:cf:eb:c5:e9:3f:1b:c8:c4:80:7d:39:f0:d1:44:20: 8f:2a:19:76:a8:a6:63:63:e4:47:9b:c5:a8:d7:29:ac:c4:7c: 47:de:6e:e4:d9:bf:6d:9e:be:9e:40:d7:ca:5a:57:fa:00:b8: 3d:bc:fd:ef:1c:75:6a:00:e5:0e:6b:56:57:89:7f:d1:96:28: 5a:cb:8e:ee:87:dc:14:87:68:f6:5a:6d:1c:31:e8:e9:36:cb: 00:a6:36:bb:51:51:d4:07:a6:3a:46:36:64:58:01:43:a1:ff: 3d:c8:2c:68:22:34:55:5c:30:ad:a6:25:9a:f0:66:af:e5:47: 1e:5f:a6:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyODgxMTAvBgNVBAUTKDMxNEY1NUFFNTI0NEM0Q0RCMTBGNzg0REZGMTVEMDIy RDM4OTY4NDgwHhcNMjYwMzAyMDMxMTQ3WhcNMjYwMzA5MDMxMTQ3WjAYMRYwFAYD VQQDEw02OWE0ZmZmNC01YjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlCf+yWt+VW6GcgJnvS+4xvurOfmmdzeuxzynlr0FM65Jh8Z8sgrxiClNi/K0 hhlTAj2UXa2lB5Gy9ya9ULXPDV21oB/qricZWy12QT0s5Ld7qpi17kJGKxysmyZX E2uq8TEs85efNf/KXID6M79aHXK+Tde+xR1sD1RzOMbLbypMq1eDIySZY4RkViz3 SNjqr9N989UJn+FQFJIftzqd3jpNejn8w3UxXjUc9hDuLoOInHzJ6T+unfVQghPD scx12PXs+0eU0kZS1+eFjIFRSEifEdVaVCkyPSQItZbVX+xwBsPdbje8eGLT0kRS y7mEqM5ZVt2cinEQEk7wgpPHrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGxylXhw Qx7kG42emmSh0jJl7qztMB8GA1UdIwQYMBaAFDFPVa5SRMTNsQ94Tf8V0CLTiWhI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4OC9BOTNBQTg4MEEy NzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhNMnhEM2hOX3hYUUl0T0ph RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01VOVZybEpFeE0yeEQzaE5feFhRSXRPSmFFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4OC9BOTNBQTg4MEEyNzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhN MnhEM2hOX3hYUUl0T0phRWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQSATDt4q6huXJEEw36ALaa2U+lFe1XO7tHEpCk9NbvdtEmtBJmVJk8gasBGh 0axcAIG+1LGAC0R9p4TT057v1ccD/9mKXj/TLdTpjOnNgiDAuv2JiIAlfPBUXAMS 8gTO3TnV+ICATvDDsGsO1R8YTN6rAfmSt0yTrl62dswPeAX8z+vF6T8byMSAfTnw 0UQgjyoZdqimY2PkR5vFqNcprMR8R95u5Nm/bZ6+nkDXylpX+gC4Pbz97xx1agDl DmtWV4l/0ZYoWsuO7ofcFIdo9lptHDHo6TbLAKY2u1FR1AemOkY2ZFgBQ6H/Pcgs aCI0VVwwraYlmvBmr+VHHl+mkA== -----END CERTIFICATE-----Generated at Mon Mar 2 10:57:38 2026 by rpki-client