$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft File: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft (raw, json) Hash identifier: 9eDT/fkOGCYMC971yb6G0zpA/PVFNkFp3YejkfxIMB8= Subject key identifier: 7E:C4:CF:2A:46:16:63:BC:A4:D1:32:94:45:A4:9F:D7:79:25:05:A9 Authority key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 Certificate issuer: /CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Certificate serial: 091D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft Manifest number: 08F1 Signing time: Mon 02 Mar 2026 00:36:52 +0000 Manifest this update: Mon 02 Mar 2026 00:36:50 +0000 Manifest next update: Mon 09 Mar 2026 00:36:50 +0000 Files and hashes: 1: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl (hash: cAZMPqVBm4+fHo6yCd8qeTOqfzb1p2b4RkwMimbNnn4=) 2: 19B0BAAE1CE611EBB543881CC4F9AE02.roa (hash: x1jD2hg6E8urDPutIfNWsExPrrmq8yEETqPUKu1cNM8=) 3: 18B1B5361CE611EBB543881CC4F9AE02.roa (hash: BoTL56JNkoT8zZTebPvc7QbRsS4FGOp32MGJ/vJjCqw=) 4: D385E420314711EBA579873DC4F9AE02.roa (hash: OXpsFXQnHysc6JgYoLG/ywf9w/jV3FpEntMMj1+ecpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 14:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2333 (0x91d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6, serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Validity Not Before: Mar 2 00:36:50 2026 GMT Not After : Mar 9 00:36:50 2026 GMT Subject: CN=69a4dba4-813f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fd:3a:78:a9:81:8c:3b:61:54:62:76:39:92: 38:fc:61:9b:02:48:38:9f:d0:ef:22:9d:b0:dd:cd: 50:62:3b:51:af:ac:d3:05:86:2b:64:ed:40:65:c9: fa:a8:5c:65:c9:fe:fb:4d:12:38:60:60:39:bf:16: 9e:23:87:65:e6:eb:b6:72:25:5d:6b:5e:a8:72:ba: 41:9f:1a:79:90:51:c2:44:7a:fa:51:8f:ed:be:41: d7:92:c2:fa:40:c5:9b:ab:24:ef:70:e9:db:76:18: 59:2f:f9:36:db:44:a6:02:a4:ae:99:ce:16:68:7c: 81:7e:e0:11:4d:e3:27:84:6b:cc:df:9a:c0:57:64: ec:b8:96:ef:b2:15:dd:12:6f:d2:27:4d:e8:a7:8d: aa:cb:52:4a:fc:1c:bb:8e:f0:04:66:89:c4:ff:8f: 7e:b6:10:c5:36:3c:b0:d1:e2:15:8d:5c:9c:c0:b7: 2d:ee:35:07:23:d7:94:a3:07:55:eb:9a:a5:8d:a2: ed:1e:81:03:bb:99:79:38:a2:b5:d4:d4:6a:b7:d2: 99:00:31:81:f3:11:a9:6f:d9:30:a2:2e:e2:e3:ea: 65:2c:37:cb:cf:cf:a0:ac:f0:37:45:a7:fe:c9:60: 54:a3:c9:86:e7:9c:00:f0:60:01:b5:0a:0d:cc:89: 1b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C4:CF:2A:46:16:63:BC:A4:D1:32:94:45:A4:9F:D7:79:25:05:A9 X509v3 Authority Key Identifier: keyid:E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:71:7a:96:0d:01:65:84:23:97:06:46:42:64:40:ea:75:be: 51:33:8a:30:54:56:68:f0:11:f2:0f:73:e3:85:e4:15:05:09: 93:38:01:d0:80:de:ce:6d:fc:b5:c2:29:cb:6f:9e:2a:28:9e: c0:df:d3:26:b5:50:1a:43:0b:a5:87:f1:aa:eb:88:d4:28:65: 90:bd:6d:fe:82:58:85:07:c1:45:5e:81:ba:d0:68:b8:7b:4d: 0d:b2:e0:3a:8d:f8:bc:3d:b5:73:d9:06:3b:20:b0:99:67:fe: 29:c0:4d:c9:fb:ff:63:5a:32:4a:cb:36:df:a6:04:da:21:62: 0c:b4:ef:1e:ab:d3:be:79:c5:ce:33:84:d1:9c:90:7d:93:c9: 18:54:3d:1a:3d:34:66:b0:b9:d9:e6:e5:9a:9c:8b:31:77:ae: 92:d9:1c:39:9f:38:cf:2c:5b:08:99:19:82:2a:df:d4:a7:5b: f6:ab:df:77:14:03:d3:68:b5:84:59:94:8d:83:c8:31:ee:e2: 42:39:57:ed:54:6d:0c:60:66:dd:06:a8:cc:9a:7b:48:66:4d: 05:47:6a:bd:d8:7f:8d:59:57:cb:60:0b:36:91:90:6d:95:da: b1:81:3f:ec:b0:1c:e2:a9:1a:0a:38:3c:86:7e:de:15:a7:e2: 69:73:2d:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKEUyNUZDRDlCNzcyNTg1Mzk0Mjc5MUE2MkQ0NzVFQ0ZF RDdDMDNGNjQwHhcNMjYwMzAyMDAzNjUwWhcNMjYwMzA5MDAzNjUwWjAYMRYwFAYD VQQDEw02OWE0ZGJhNC04MTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/06eKmBjDthVGJ2OZI4/GGbAkg4n9DvIp2w3c1QYjtRr6zTBYYrZO1AZcn6 qFxlyf77TRI4YGA5vxaeI4dl5uu2ciVda16ocrpBnxp5kFHCRHr6UY/tvkHXksL6 QMWbqyTvcOnbdhhZL/k220SmAqSumc4WaHyBfuARTeMnhGvM35rAV2TsuJbvshXd Em/SJ03op42qy1JK/By7jvAEZonE/49+thDFNjyw0eIVjVycwLct7jUHI9eUowdV 65qljaLtHoEDu5l5OKK11NRqt9KZADGB8xGpb9kwoi7i4+plLDfLz8+grPA3Raf+ yWBUo8mG55wA8GABtQoNzIkbfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH7EzypG FmO8pNEylEWkn9d5JQWpMB8GA1UdIwQYMBaAFOJfzZt3JYU5QnkaYtR17P7XwD9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi9FNEVEQUMxOENC MUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhUbENlUnBpMUhYc190ZkFQ MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRsX05tM2NsaFRsQ2VScGkxSFhzX3RmQVAyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlBNi9FNEVEQUMxOENCMUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhU bENlUnBpMUhYc190ZkFQMlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR3F6lg0BZYQjlwZGQmRA6nW+UTOKMFRWaPAR8g9z44XkFQUJkzgB0IDezm38 tcIpy2+eKiiewN/TJrVQGkMLpYfxquuI1ChlkL1t/oJYhQfBRV6ButBouHtNDbLg Oo34vD21c9kGOyCwmWf+KcBNyfv/Y1oySss236YE2iFiDLTvHqvTvnnFzjOE0ZyQ fZPJGFQ9Gj00ZrC52eblmpyLMXeuktkcOZ84zyxbCJkZgirf1Kdb9qvfdxQD02i1 hFmUjYPIMe7iQjlX7VRtDGBm3QaozJp7SGZNBUdqvdh/jVlXy2ALNpGQbZXasYE/ 7LAc4qkaCjg8hn7eFafiaXMtTA== -----END CERTIFICATE-----Generated at Mon Mar 2 03:58:52 2026 by rpki-client