$ rpki-client -vvf rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft File: PurfFFrim0gkCj-6OvvZSajxU10.mft (raw, json) Hash identifier: 5RRD9Yh5ASKU1N+hCe6YDGfsWxm93n89jb3rH0BN4XE= Subject key identifier: C5:A7:EE:10:EA:89:32:34:AF:B8:BB:CC:A8:25:EF:BA:E9:DB:BE:A5 Authority key identifier: 3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D Certificate issuer: /CN=A91F823E/serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D Certificate serial: 039C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft Manifest number: 0395 Signing time: Mon 02 Mar 2026 02:40:19 +0000 Manifest this update: Mon 02 Mar 2026 02:40:16 +0000 Manifest next update: Mon 09 Mar 2026 02:40:16 +0000 Files and hashes: 1: PurfFFrim0gkCj-6OvvZSajxU10.crl (hash: DCSnIfXhV4k7TpN3dYdntbBUIscX0H3Fel5koJGGsoo=) 2: B3481ED4D5B611ECA61EEC28C4F9AE02.roa (hash: SFrPVIEcm3Sob1UjztJCMJRsgyH7hMthtgc0D0N7bCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 924 (0x39c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F823E, serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D Validity Not Before: Mar 2 02:40:16 2026 GMT Not After : Mar 9 02:40:16 2026 GMT Subject: CN=69a4f893-1caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b4:02:9f:b1:6a:98:4e:04:12:41:d8:f9:15: cf:80:01:6c:fa:06:26:d6:f2:8c:05:cd:f1:fc:cf: 0a:9d:33:66:ca:74:c7:c9:81:ba:be:9b:78:b7:ad: 7c:2e:08:d1:a3:d3:6b:63:89:32:60:d2:bd:1b:ed: e7:75:72:dc:a9:33:ba:52:9e:56:1d:8c:0c:f2:5c: a4:79:93:3c:c9:9f:4c:31:c7:ac:18:2a:bd:84:5c: 31:16:ec:d6:e5:fb:b5:a6:e0:3a:57:68:bc:44:d8: f3:f3:7f:ba:ac:1f:75:3c:08:b6:d9:7b:f3:47:6f: f4:87:12:af:ae:a3:84:95:64:28:f7:03:02:1d:6e: 75:ae:db:b2:bd:c7:dd:a1:2d:9b:d2:6e:6c:65:2a: 33:c0:b4:55:e1:cb:70:6c:85:4e:33:33:98:81:13: f4:57:9a:53:73:51:fc:1f:68:71:bc:33:28:99:b3: 37:b8:48:9a:0d:73:6a:11:59:e5:c6:b3:b5:42:3c: 12:78:ab:7b:90:05:55:43:4b:b1:85:1d:41:1a:fc: ed:7c:f6:e7:ae:46:1a:08:7b:8b:2a:8a:01:c6:e5: f0:29:1e:5a:75:1d:cd:66:64:b4:40:62:db:88:21: 2a:07:0e:55:65:db:13:9e:53:ab:8b:a5:f0:90:fc: 79:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A7:EE:10:EA:89:32:34:AF:B8:BB:CC:A8:25:EF:BA:E9:DB:BE:A5 X509v3 Authority Key Identifier: keyid:3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:93:52:d6:d4:fe:90:4f:28:51:09:5f:7a:7c:f4:f2:5f:53: 68:d1:b4:d1:17:1a:2c:be:90:6c:77:ca:8b:b0:fa:cc:39:b3: 8e:e2:40:75:69:5b:ac:2a:4f:64:ee:e6:b9:76:5b:2b:86:bc: 86:71:e6:47:03:8a:54:e6:fb:1f:e9:f6:0e:68:18:cf:40:f3: 5f:78:de:9f:9d:e2:9e:3a:dd:b2:f7:1e:0d:b0:be:81:22:0f: 1a:54:e5:0c:f0:aa:b8:13:cc:ae:c2:f8:1e:52:9b:89:b8:98: 52:b7:8e:60:e3:27:8b:2c:3f:11:e5:ea:3d:21:64:d8:37:e4: 7e:c0:93:3a:b2:a0:2b:cd:6b:df:bc:de:8b:b4:6b:6f:91:57: f6:23:28:6d:ca:44:10:26:18:96:b7:eb:17:b9:dc:24:9d:65: 95:75:40:a3:25:a7:1a:38:69:bc:ac:84:ce:06:3d:4f:58:7c: b3:6d:a2:a8:2b:28:b1:a8:aa:76:10:1b:57:a6:91:94:bb:64: 49:67:94:65:a5:0e:b6:e1:6e:b9:a6:fa:72:4f:f3:f3:d9:4c: 13:08:9b:04:f4:a9:c7:2d:bf:bc:c8:e2:65:fd:64:93:c4:45: 1a:de:6a:37:25:1a:aa:15:5a:79:8f:82:50:df:eb:c7:f2:57: 69:36:09:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgyM0UxMTAvBgNVBAUTKDNFRUFERjE0NUFFMjlCNDgyNDBBM0ZCQTNBRkJEOTQ5 QThGMTUzNUQwHhcNMjYwMzAyMDI0MDE2WhcNMjYwMzA5MDI0MDE2WjAYMRYwFAYD VQQDEw02OWE0Zjg5My0xY2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rQCn7FqmE4EEkHY+RXPgAFs+gYm1vKMBc3x/M8KnTNmynTHyYG6vpt4t618 LgjRo9NrY4kyYNK9G+3ndXLcqTO6Up5WHYwM8lykeZM8yZ9MMcesGCq9hFwxFuzW 5fu1puA6V2i8RNjz83+6rB91PAi22XvzR2/0hxKvrqOElWQo9wMCHW51rtuyvcfd oS2b0m5sZSozwLRV4ctwbIVOMzOYgRP0V5pTc1H8H2hxvDMombM3uEiaDXNqEVnl xrO1QjwSeKt7kAVVQ0uxhR1BGvztfPbnrkYaCHuLKooBxuXwKR5adR3NZmS0QGLb iCEqBw5VZdsTnlOri6XwkPx54QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMWn7hDq iTI0r7i7zKgl77rp276lMB8GA1UdIwQYMBaAFD7q3xRa4ptIJAo/ujr72Umo8VNd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODIzRS83RDY5QTgzQ0Q1 QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0wZ2tDai02T3Z2WlNhanhV MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1cmZGRnJpbTBna0NqLTZPdnZaU2FqeFUxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODIzRS83RDY5QTgzQ0Q1QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0w Z2tDai02T3Z2WlNhanhVMTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJZNS1tT+kE8oUQlfenz08l9TaNG00RcaLL6QbHfKi7D6zDmzjuJAdWlbrCpP ZO7muXZbK4a8hnHmRwOKVOb7H+n2DmgYz0DzX3jen53injrdsvceDbC+gSIPGlTl DPCquBPMrsL4HlKbibiYUreOYOMniyw/EeXqPSFk2DfkfsCTOrKgK81r37zei7Rr b5FX9iMobcpEECYYlrfrF7ncJJ1llXVAoyWnGjhpvKyEzgY9T1h8s22iqCsosaiq dhAbV6aRlLtkSWeUZaUOtuFuuab6ck/z89lMEwibBPSpxy2/vMjiZf1kk8RFGt5q NyUaqhVaeY+CUN/rx/JXaTYJqA== -----END CERTIFICATE-----Generated at Mon Mar 2 10:24:58 2026 by rpki-client