$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft File: rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft (raw, json) Hash identifier: fLx0caqZ3vfyWQWDXF5Xb2CDU8WYrT/o6vND+5QnpYI= Subject key identifier: 8A:C9:D9:92:C3:8B:BC:98:97:66:02:9D:CB:97:55:C2:45:36:3E:92 Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft Manifest number: 0179 Signing time: Mon 02 Mar 2026 11:54:14 +0000 Manifest this update: Mon 02 Mar 2026 11:54:14 +0000 Manifest next update: Mon 09 Mar 2026 11:54:14 +0000 Files and hashes: 1: rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl (hash: w27s46cCAC4o/LbcDhHTz08CkMLyyOzvVwbsGDrHhPA=) 2: 3285ADDAA9D911EF9F30DA47C4F9AE02.roa (hash: vWSMncIbSdA4KIGZrugD99DnKmAynQ5wQcd5AMkh+3k=) 3: 7B21EBD2B6FB11F0AFDD6239C4F9AE02.roa (hash: bKR+/9hF1Mbqq8jhYcz+VpME4jxBkcq5w4O21jzKfnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 11:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Validity Not Before: Mar 2 11:54:14 2026 GMT Not After : Mar 9 11:54:14 2026 GMT Subject: CN=69a57a66-d3ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:aa:c6:d5:97:f0:bf:26:8d:0a:38:45:3a:97: 9b:02:01:e6:23:eb:af:d6:b2:7a:b4:79:a7:19:30: ad:2d:ed:3c:f8:6b:e8:3f:1c:83:43:a2:90:ea:68: 92:e4:11:52:66:ea:ff:c8:9a:a0:54:75:1d:9b:70: 7c:7d:fa:75:73:31:0d:e8:27:03:da:98:56:a9:fc: a4:8f:7d:cb:88:bd:ce:bc:57:b3:16:b0:55:1d:7e: b0:cb:de:29:3c:df:31:7e:1f:95:f8:56:c2:c3:47: 9a:12:20:a4:a6:04:46:d9:c0:fc:2c:16:b4:c4:5d: 1f:71:56:d7:cd:ae:81:43:2a:5e:fb:97:8a:0c:bb: e8:47:6b:e1:62:7a:fb:db:90:86:20:f0:de:0f:e3: da:fe:9c:61:c6:8e:76:ab:e3:ee:99:54:f6:58:1e: 8d:c4:30:6b:71:02:e0:75:4f:20:8a:e7:bb:b6:b0: 1c:e4:ff:0e:cf:a5:7d:a5:38:05:1e:f0:64:d6:40: f7:f0:1d:42:f8:7b:9f:de:cd:a7:b7:ab:f9:b5:fa: 12:23:d4:56:e7:6b:48:7e:78:8e:99:51:ed:56:2b: 3e:88:4f:7e:24:b8:49:3c:7e:35:fe:fb:4b:0a:fc: 77:da:55:e2:e4:c9:48:d3:f1:18:ba:b2:5d:f2:9f: 0a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C9:D9:92:C3:8B:BC:98:97:66:02:9D:CB:97:55:C2:45:36:3E:92 X509v3 Authority Key Identifier: keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:be:44:f0:cb:e5:2b:c6:f9:d1:a4:76:fa:a1:77:90:73:23: a7:01:d2:4a:62:b6:d0:06:61:bf:65:86:97:d7:3c:4f:41:b8: 35:c0:bb:a4:f3:01:ec:48:a0:81:4d:b2:5d:0a:66:58:3b:ea: 56:42:f3:10:2f:b1:fe:e9:f3:d4:ac:a5:f1:fc:51:f7:55:a0: 4f:81:a4:87:8e:8b:39:68:fc:c4:98:14:d5:a5:d8:88:d1:93: b6:bc:f5:0a:d3:e3:29:a1:cd:9d:09:bc:2c:31:2f:66:83:a7: 0a:2b:5a:47:5c:f9:e8:8a:3e:71:e2:94:ca:e2:ce:90:dc:79: 2e:8b:a5:7a:83:91:03:b3:93:60:30:17:f8:98:30:81:da:8d: 87:a8:cb:1a:89:f1:7a:75:46:f0:b7:b6:32:b1:81:c4:aa:21: 9e:5e:9f:75:15:0e:6d:f8:6b:93:a7:bb:53:27:d4:43:64:42: e1:9c:97:7d:77:30:0d:5a:00:6c:fa:47:2b:d7:ff:7d:c7:95: 25:0b:fc:98:ab:66:3a:ae:27:d0:2a:2e:5e:1b:0c:dc:05:2d: ad:a9:c3:3b:0e:9a:80:34:24:23:11:39:35:cf:b4:d5:61:84: a8:bc:7d:31:0e:5b:63:29:5f:59:2d:08:79:3d:0d:a6:e4:90: c5:ae:a0:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkzNTMxMTAvBgNVBAUTKEFDRDA0N0QwRDg4RTI2NTdFMTJDRjkxMzAxQzE2MEYx RDNDRDJGMzMwHhcNMjYwMzAyMTE1NDE0WhcNMjYwMzA5MTE1NDE0WjAYMRYwFAYD VQQDEw02OWE1N2E2Ni1kM2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16rG1ZfwvyaNCjhFOpebAgHmI+uv1rJ6tHmnGTCtLe08+GvoPxyDQ6KQ6miS 5BFSZur/yJqgVHUdm3B8ffp1czEN6CcD2phWqfykj33LiL3OvFezFrBVHX6wy94p PN8xfh+V+FbCw0eaEiCkpgRG2cD8LBa0xF0fcVbXza6BQype+5eKDLvoR2vhYnr7 25CGIPDeD+Pa/pxhxo52q+PumVT2WB6NxDBrcQLgdU8giue7trAc5P8Oz6V9pTgF HvBk1kD38B1C+Huf3s2nt6v5tfoSI9RW52tIfniOmVHtVis+iE9+JLhJPH41/vtL Cvx32lXi5MlI0/EYurJd8p8KRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIrJ2ZLD i7yYl2YCncuXVcJFNj6SMB8GA1UdIwQYMBaAFKzQR9DYjiZX4Sz5EwHBYPHTzS8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTM1My8wODc1RTY0ODA1 QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0psZmhMUGtUQWNGZzhkUE5M ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQkgwTmlPSmxmaExQa1RBY0ZnOGRQTkx6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTM1My8wODc1RTY0ODA1QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0ps ZmhMUGtUQWNGZzhkUE5Mek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXr5E8MvlK8b50aR2+qF3kHMjpwHSSmK20AZhv2WGl9c8T0G4NcC7pPMB7Eig gU2yXQpmWDvqVkLzEC+x/unz1Kyl8fxR91WgT4Gkh46LOWj8xJgU1aXYiNGTtrz1 CtPjKaHNnQm8LDEvZoOnCitaR1z56Io+ceKUyuLOkNx5LouleoORA7OTYDAX+Jgw gdqNh6jLGonxenVG8Le2MrGBxKohnl6fdRUObfhrk6e7UyfUQ2RC4ZyXfXcwDVoA bPpHK9f/fceVJQv8mKtmOq4n0CouXhsM3AUtranDOw6agDQkIxE5Nc+01WGEqLx9 MQ5bYylfWS0IeT0NpuSQxa6g/A== -----END CERTIFICATE-----Generated at Mon Mar 2 18:12:25 2026 by rpki-client