$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft File: _g28w89QoeDrA9MSluOfuogMGQU.mft (raw, json) Hash identifier: gjFJuAkoS7UkIiiBTkndxFJhhKoImq/lSengLvrp+JI= Subject key identifier: A5:33:32:A4:6C:71:80:6E:EC:42:9B:11:79:D3:69:B1:88:52:AF:8A Authority key identifier: FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 Certificate issuer: /CN=A91F7FEA/serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Certificate serial: 0B23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft Manifest number: 0B12 Signing time: Sun 01 Mar 2026 23:35:15 +0000 Manifest this update: Sun 01 Mar 2026 23:35:14 +0000 Manifest next update: Sun 08 Mar 2026 23:35:14 +0000 Files and hashes: 1: _g28w89QoeDrA9MSluOfuogMGQU.crl (hash: F27e8MXcpZtcaqT6xHknslaiGOXzQ27mNTBJnwmHWTA=) 2: AF5AC6B69E3F11EEA6B6CB0DC4F9AE02.roa (hash: 6y3yay/h++NSGBBxz/Y8FI7mavyuaqujeGQxUN1PwJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2851 (0xb23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7FEA, serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Validity Not Before: Mar 1 23:35:14 2026 GMT Not After : Mar 8 23:35:14 2026 GMT Subject: CN=69a4cd33-245b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1e:96:37:4d:f3:8f:57:40:60:87:73:89:f7: 3c:16:34:96:42:ab:d9:57:24:a5:06:94:77:03:40: 16:f4:61:b5:0b:d3:26:e2:3f:05:bd:8b:42:4f:55: 7b:ff:60:dd:65:48:50:2a:d4:a5:10:b6:9a:b7:0d: ec:49:5b:08:56:ba:18:a0:47:04:43:4a:d8:45:df: b5:d0:82:9a:70:d1:45:2d:e5:d3:2f:81:e9:2a:e2: 5d:f8:f8:ea:eb:72:69:3f:0f:79:eb:00:3e:fa:c9: 8f:9f:51:e3:1a:4e:82:fb:f4:ef:1c:37:f9:cc:c5: 0f:92:c0:36:6f:83:69:38:b9:40:1b:26:59:b8:82: ff:0d:db:76:54:95:7f:00:6a:6d:f4:ae:45:84:95: 8c:7e:74:76:19:72:98:1b:69:21:e3:df:db:7a:eb: c3:51:96:42:b9:f6:d6:c1:dc:77:f8:7c:73:f4:dd: 4a:e6:97:b5:65:e6:80:05:d9:6e:42:52:a0:38:f8: 01:93:88:a5:41:0d:2e:86:d7:81:f9:f6:7f:cf:57: b0:50:4a:75:25:6d:c3:43:b9:7a:55:48:99:e9:f1: 37:fb:8d:bf:7a:f6:4f:63:24:c1:92:ba:dc:98:6a: e9:58:ef:bd:a1:0a:4b:66:ae:6f:a7:a9:df:f4:38: 6d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:33:32:A4:6C:71:80:6E:EC:42:9B:11:79:D3:69:B1:88:52:AF:8A X509v3 Authority Key Identifier: keyid:FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:27:c9:52:56:f8:08:b5:e0:1a:90:00:ba:1f:aa:cd:5c:7b: 07:06:a0:19:6c:c9:0f:84:15:23:df:66:89:c5:ac:48:01:5e: 3d:6e:0e:1f:5c:f7:cc:b1:81:ac:58:d5:f4:e0:02:7b:70:f2: 68:ec:6a:29:94:a3:84:e9:4f:3d:33:8c:f6:03:f1:cc:4c:f3: 41:d9:97:80:4b:30:1e:1a:12:df:1b:97:21:cf:e3:44:46:43: 78:be:ba:b4:82:dc:d0:90:b9:a0:77:a3:a8:ad:71:1a:84:94: 8b:94:4c:b0:0a:2a:fb:09:09:59:3f:ab:9a:f2:f3:ad:a0:a4: 21:68:30:48:1a:e5:18:66:a3:ce:32:6f:93:9f:c2:f7:23:ec: 61:44:83:10:bb:90:a6:5d:13:8f:ca:93:17:a1:3f:a0:f9:2a: 68:75:62:1d:25:ad:6e:fa:32:59:92:ae:9c:c2:d2:15:c6:cc: aa:58:cf:16:f6:d4:de:5c:02:d1:8f:25:73:b0:73:14:d9:e6: 50:98:97:b4:a1:fe:b2:25:1e:ed:bd:0d:fb:46:0e:6d:52:4d: 44:02:4c:42:92:c4:79:09:9f:a5:67:c2:0b:0c:e7:eb:75:3b: e1:7f:95:f6:b5:0a:d8:07:da:9e:11:fc:01:70:d9:1f:a8:b3: d9:82:e0:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdGRUExMTAvBgNVBAUTKEZFMERCQ0MzQ0Y1MEExRTBFQjAzRDMxMjk2RTM5RkJB ODgwQzE5MDUwHhcNMjYwMzAxMjMzNTE0WhcNMjYwMzA4MjMzNTE0WjAYMRYwFAYD VQQDEw02OWE0Y2QzMy0yNDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvR6WN03zj1dAYIdzifc8FjSWQqvZVySlBpR3A0AW9GG1C9Mm4j8FvYtCT1V7 /2DdZUhQKtSlELaatw3sSVsIVroYoEcEQ0rYRd+10IKacNFFLeXTL4HpKuJd+Pjq 63JpPw956wA++smPn1HjGk6C+/TvHDf5zMUPksA2b4NpOLlAGyZZuIL/Ddt2VJV/ AGpt9K5FhJWMfnR2GXKYG2kh49/beuvDUZZCufbWwdx3+Hxz9N1K5pe1ZeaABdlu QlKgOPgBk4ilQQ0uhteB+fZ/z1ewUEp1JW3DQ7l6VUiZ6fE3+42/evZPYyTBkrrc mGrpWO+9oQpLZq5vp6nf9DhtjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKUzMqRs cYBu7EKbEXnTabGIUq+KMB8GA1UdIwQYMBaAFP4NvMPPUKHg6wPTEpbjn7qIDBkF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0ZFQS8xRUUzQUVFQzYw NDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9lRHJBOU1TbHVPZnVvZ01H UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nMjh3ODlRb2VEckE5TVNsdU9mdW9nTUdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0ZFQS8xRUUzQUVFQzYwNDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9l RHJBOU1TbHVPZnVvZ01HUVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnyfJUlb4CLXgGpAAuh+qzVx7BwagGWzJD4QVI99micWsSAFePW4OH1z3zLGB rFjV9OACe3DyaOxqKZSjhOlPPTOM9gPxzEzzQdmXgEswHhoS3xuXIc/jREZDeL66 tILc0JC5oHejqK1xGoSUi5RMsAoq+wkJWT+rmvLzraCkIWgwSBrlGGajzjJvk5/C 9yPsYUSDELuQpl0Tj8qTF6E/oPkqaHViHSWtbvoyWZKunMLSFcbMqljPFvbU3lwC 0Y8lc7BzFNnmUJiXtKH+siUe7b0N+0YObVJNRAJMQpLEeQmfpWfCCwzn63U74X+V 9rUK2AfanhH8AXDZH6iz2YLgqA== -----END CERTIFICATE-----Generated at Mon Mar 2 07:46:07 2026 by rpki-client