$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft File: azpu8rvlhOJwDYYifvSaOc24Hc4.mft (raw, json) Hash identifier: s571PtFm+OXsf9nZmajAwgjgZknt+ETMdXvr2mtuvIs= Subject key identifier: 44:69:E3:72:D8:AA:8E:AD:4B:E5:B2:8B:C0:F9:DE:77:9B:09:E1:6B Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE Certificate issuer: /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Certificate serial: 035B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft Manifest number: 0347 Signing time: Mon 02 Mar 2026 02:45:45 +0000 Manifest this update: Mon 02 Mar 2026 02:45:41 +0000 Manifest next update: Mon 09 Mar 2026 02:45:41 +0000 Files and hashes: 1: azpu8rvlhOJwDYYifvSaOc24Hc4.crl (hash: w/Kry03X8fIOsKPwCjS4l0PUGxawfny+ydYlsmseQ3I=) 2: E7D03568F89011ECB5F98148C4F9AE02.roa (hash: /GgklwwSBikULn43rGtHG5wL0AHIDwWQqbAtpZ3bJj4=) 3: 937AFB607E3611EEAD05495AC4F9AE02.roa (hash: jw62AuKYcLU+o7CElN93+zYrOGkOkAOws+22gA0aEog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 859 (0x35b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA00A, serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Validity Not Before: Mar 2 02:45:41 2026 GMT Not After : Mar 9 02:45:41 2026 GMT Subject: CN=69a4f9d8-93ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1c:e6:c0:f3:7d:b7:05:ec:86:21:fe:ae:ba: 30:56:1e:5e:5e:b0:0b:7c:4a:f8:63:21:1b:7a:e6: fe:3d:ec:ba:27:a4:62:1c:1e:ca:1c:30:57:17:37: 99:ac:45:e5:56:6e:25:fe:00:c5:f6:92:73:b0:2a: 2f:23:09:2c:10:ee:e9:86:24:3c:d2:9c:d8:fb:ec: 4d:7a:12:bb:bf:3e:1e:70:a0:02:d5:34:bf:69:d9: f0:d3:c9:e9:f8:df:03:61:30:39:b9:4c:70:92:17: 02:e1:1a:79:c8:aa:af:5d:cb:bc:fb:a2:6b:92:55: 05:65:19:4f:9f:77:7e:aa:63:92:05:a4:b2:da:a7: e4:df:a9:34:69:ce:c0:23:f6:46:90:c6:44:bc:0f: 95:21:5b:5f:0f:54:98:39:5f:02:c4:a1:d0:d7:e2: f6:b3:9d:f8:c6:19:68:76:5d:a4:84:e6:ea:98:6d: 69:44:34:c1:63:61:b4:f5:4d:6d:08:d0:77:3b:30: 57:31:30:bf:e7:87:ad:a3:a4:76:36:42:01:3d:e2: 82:80:53:b6:eb:ea:9d:3f:aa:7a:1b:f5:13:ab:dc: fb:f5:bf:68:36:c2:9c:78:24:e0:e2:73:6c:c9:22: b8:9c:75:50:af:0e:7a:3d:dd:30:80:77:9a:c9:44: 97:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:69:E3:72:D8:AA:8E:AD:4B:E5:B2:8B:C0:F9:DE:77:9B:09:E1:6B X509v3 Authority Key Identifier: keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f6:63:79:57:d0:99:b0:52:c1:f1:40:a1:8d:ff:89:e3:e7: af:1d:ad:a6:d9:fe:01:71:d4:54:9c:12:7f:80:c5:d3:58:6b: eb:9d:6e:4b:95:32:ef:42:15:e0:aa:f7:c0:09:f2:26:cc:02: f9:ab:8e:cb:f0:d3:ba:85:b7:40:82:a6:ba:4c:5f:0d:fe:e8: f8:c7:6f:f4:ff:a3:1c:b3:9e:e4:3b:d9:3b:48:d7:d2:b2:b7: c2:c7:ec:bb:fe:54:26:d1:c0:1b:d7:34:6a:a4:28:2b:d1:c6: 74:c7:83:4c:42:d3:3e:4e:82:3e:2a:7e:f6:02:e8:73:f5:51: fd:62:54:16:12:10:9e:ec:8b:56:35:3a:c7:07:8b:df:36:a7: a1:e8:94:a2:13:be:24:7e:88:7d:c9:fa:68:15:d4:b4:89:49: a1:ff:98:b0:c2:08:d7:b6:92:dd:6d:fe:f7:bb:97:ec:a9:0f: 3c:75:c6:ab:00:94:cd:cf:67:f6:0f:55:e1:ed:5e:fc:69:ad: 98:4c:49:c3:81:35:7c:23:4a:bc:07:9e:7a:f3:aa:09:cd:c5: 00:71:6a:5e:52:15:d3:b5:8c:08:e4:b3:11:7a:35:0a:c7:a9: 50:80:d6:80:ff:4a:fc:1f:3f:67:0f:3e:7e:6f:00:5d:48:c5: f2:7c:cc:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkEwMEExMTAvBgNVBAUTKDZCM0E2RUYyQkJFNTg0RTI3MDBEODYyMjdFRjQ5QTM5 Q0RCODFEQ0UwHhcNMjYwMzAyMDI0NTQxWhcNMjYwMzA5MDI0NTQxWjAYMRYwFAYD VQQDEw02OWE0ZjlkOC05M2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRzmwPN9twXshiH+rrowVh5eXrALfEr4YyEbeub+Pey6J6RiHB7KHDBXFzeZ rEXlVm4l/gDF9pJzsCovIwksEO7phiQ80pzY++xNehK7vz4ecKAC1TS/adnw08np +N8DYTA5uUxwkhcC4Rp5yKqvXcu8+6JrklUFZRlPn3d+qmOSBaSy2qfk36k0ac7A I/ZGkMZEvA+VIVtfD1SYOV8CxKHQ1+L2s534xhlodl2khObqmG1pRDTBY2G09U1t CNB3OzBXMTC/54eto6R2NkIBPeKCgFO26+qdP6p6G/UTq9z79b9oNsKceCTg4nNs ySK4nHVQrw56Pd0wgHeayUSXNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFERp43LY qo6tS+Wyi8D53nebCeFrMB8GA1UdIwQYMBaAFGs6bvK75YTicA2GIn70mjnNuB3O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAwQS8zQUE5NEIzNkY4 OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhPSndEWVlpZnZTYU9jMjRI YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F6cHU4cnZsaE9Kd0RZWWlmdlNhT2MyNEhjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTAwQS8zQUE5NEIzNkY4OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhP SndEWVlpZnZTYU9jMjRIYzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH/ZjeVfQmbBSwfFAoY3/iePnrx2tptn+AXHUVJwSf4DF01hr651uS5Uy70IV 4Kr3wAnyJswC+auOy/DTuoW3QIKmukxfDf7o+Mdv9P+jHLOe5DvZO0jX0rK3wsfs u/5UJtHAG9c0aqQoK9HGdMeDTELTPk6CPip+9gLoc/VR/WJUFhIQnuyLVjU6xweL 3zanoeiUohO+JH6Ifcn6aBXUtIlJof+YsMII17aS3W3+97uX7KkPPHXGqwCUzc9n 9g9V4e1e/GmtmExJw4E1fCNKvAeeevOqCc3FAHFqXlIV07WMCOSzEXo1CsepUIDW gP9K/B8/Zw8+fm8AXUjF8nzM+A== -----END CERTIFICATE-----Generated at Mon Mar 2 07:34:03 2026 by rpki-client