$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json) Hash identifier: f7NG9r4mnw8bMbZ+KAsiOoTA/4O2TpJYNHhIj6JdoLU= Subject key identifier: 58:F2:3A:E1:F5:BE:0C:07:B4:B4:10:A2:96:74:A4:44:BE:9A:36:22 Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Certificate serial: 0833 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft Manifest number: 0823 Signing time: Sat 28 Feb 2026 21:24:38 +0000 Manifest this update: Sat 28 Feb 2026 21:24:38 +0000 Manifest next update: Sat 07 Mar 2026 21:24:38 +0000 Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: BYqLhax05YYaphyTotSvi0LPRr0NLQe/CjwxxavLyZ4=) 2: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: 8jSRLsCTFalWuMWmzctOoaeQi0LA+9F2nrcfuS55eGE=) 3: B1B8588ADAE511F0B4F8D00379D3641D.roa (hash: jJ0R9nlsxr/hD0yE5HWBzoK4P8dusyIdKYfDRYhWQyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 21:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2099 (0x833) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E Validity Not Before: Feb 28 21:24:38 2026 GMT Not After : Mar 7 21:24:38 2026 GMT Subject: CN=69a35d16-7e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:49:e3:d7:45:64:c1:64:3a:29:31:c7:c0:99: cd:51:46:9d:46:c5:98:a8:e1:20:a2:ca:93:a8:f5: a7:7f:ed:f9:6b:c0:06:d1:bc:e5:71:b8:95:bd:fc: 62:69:3b:6d:bb:0a:b8:fa:4f:da:b2:f5:12:32:63: 8f:e6:fd:50:94:68:45:29:d9:ff:76:ce:02:81:b1: 66:1f:e9:b2:05:33:af:a3:b4:3c:02:d4:10:fa:13: 3c:71:ff:f6:f3:be:d0:a0:56:ce:c3:3c:2f:85:dd: aa:64:af:9a:c6:28:dc:ff:a0:55:9c:85:d6:15:4e: 38:6a:a0:a5:d4:af:e1:47:89:37:a7:d5:9e:30:08: e0:1a:94:06:f8:e3:84:c1:af:b5:d2:87:e5:9b:ce: 3d:b8:08:83:b5:82:61:29:0b:80:1c:74:9f:7e:80: 37:8b:af:f5:e5:c9:19:3e:ba:58:31:4e:2d:9f:2f: cf:ff:4c:27:40:1b:96:ef:a5:06:34:05:66:e6:80: b0:01:06:43:f5:2b:a2:dd:a8:ba:5c:34:72:2a:35: 1e:76:52:6c:ad:de:bd:58:fc:a4:6e:5d:f9:2b:0a: 48:a6:04:e4:5b:50:f1:34:1f:c3:29:95:b7:d5:22: 9e:bd:1c:dc:b3:ec:b9:ce:f2:26:28:c6:ae:15:f0: 94:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F2:3A:E1:F5:BE:0C:07:B4:B4:10:A2:96:74:A4:44:BE:9A:36:22 X509v3 Authority Key Identifier: keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:9f:f5:1c:6d:65:eb:6e:a6:2f:b2:bb:f6:ec:29:5c:bd:c4: 7c:96:38:0e:f2:bf:a5:7e:43:56:92:7e:fc:83:74:1e:c9:93: c8:7e:20:11:8f:f1:50:5f:05:94:c3:ba:42:9d:4e:be:20:2a: d5:4b:78:07:0a:56:1a:ba:8f:50:ac:a2:ef:2a:c0:71:51:c0: 65:d0:f5:1f:ff:c8:b7:03:13:44:35:75:94:95:8f:63:9a:dc: eb:55:d4:79:ec:26:8b:9f:e2:4a:2a:87:57:15:70:37:b5:47: 76:2d:cc:d2:c4:87:73:25:a7:31:ae:93:eb:18:81:49:9a:25: e3:c4:50:dd:4f:d3:b2:9d:ae:61:16:c7:a0:50:18:00:d5:9a: f2:a7:58:6e:ce:39:ac:45:27:0c:c4:6a:56:d4:e5:5a:f0:01: 07:33:2d:e2:ec:d2:0d:1c:ce:b3:d4:f4:52:3a:ac:1b:ff:a7: 2a:ad:15:7c:67:5c:96:f6:c4:7f:90:09:90:7f:78:c4:38:f9: 80:d8:f9:90:10:27:bb:04:23:a7:a7:34:c7:8e:b8:d2:72:f2: 63:1e:6e:84:55:1c:15:83:58:ca:8b:d4:24:90:37:25:23:38: 7c:1c:c8:4c:f3:35:d7:cb:c1:66:aa:5a:18:b0:39:68:f3:09: c5:89:5a:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw QzAxMzFFMkUwHhcNMjYwMjI4MjEyNDM4WhcNMjYwMzA3MjEyNDM4WjAYMRYwFAYD VQQDDA02OWEzNWQxNi03ZTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10nj10VkwWQ6KTHHwJnNUUadRsWYqOEgosqTqPWnf+35a8AG0bzlcbiVvfxi aTttuwq4+k/asvUSMmOP5v1QlGhFKdn/ds4CgbFmH+myBTOvo7Q8AtQQ+hM8cf/2 877QoFbOwzwvhd2qZK+axijc/6BVnIXWFU44aqCl1K/hR4k3p9WeMAjgGpQG+OOE wa+10oflm849uAiDtYJhKQuAHHSffoA3i6/15ckZPrpYMU4tny/P/0wnQBuW76UG NAVm5oCwAQZD9Sui3ai6XDRyKjUedlJsrd69WPykbl35KwpIpgTkW1DxNB/DKZW3 1SKevRzcs+y5zvImKMauFfCUVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFjyOuH1 vgwHtLQQopZ0pES+mjYiMB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZDQy8yMkNENzlERTBEQ0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVY Q1pGU1oyWnZSSkFNQVRIaTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ5/1HG1l626mL7K79uwpXL3EfJY4DvK/pX5DVpJ+/IN0HsmTyH4gEY/xUF8F lMO6Qp1OviAq1Ut4BwpWGrqPUKyi7yrAcVHAZdD1H//ItwMTRDV1lJWPY5rc61XU eewmi5/iSiqHVxVwN7VHdi3M0sSHcyWnMa6T6xiBSZol48RQ3U/Tsp2uYRbHoFAY ANWa8qdYbs45rEUnDMRqVtTlWvABBzMt4uzSDRzOs9T0UjqsG/+nKq0VfGdclvbE f5AJkH94xDj5gNj5kBAnuwQjp6c0x4640nLyYx5uhFUcFYNYyovUJJA3JSM4fBzI TPM118vBZqpaGLA5aPMJxYlaWw== -----END CERTIFICATE-----Generated at Sun Mar 1 22:13:59 2026 by rpki-client