$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft File: a4ZCQd8BLyOSegHA44bgeqtJxSI.mft (raw, json) Hash identifier: RCfQocfKaMUUTGCEOs/z5WUTJFjiJX9+qQ74Xxb1iKM= Subject key identifier: 19:15:BA:03:70:12:29:31:28:8E:C1:F2:66:37:F5:07:04:5A:F9:71 Authority key identifier: 6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 Certificate issuer: /CN=A91FAD6F/serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Certificate serial: 1BE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft Manifest number: 1BD1 Signing time: Mon 02 Mar 2026 01:57:43 +0000 Manifest this update: Mon 02 Mar 2026 01:57:42 +0000 Manifest next update: Mon 09 Mar 2026 01:57:42 +0000 Files and hashes: 1: a4ZCQd8BLyOSegHA44bgeqtJxSI.crl (hash: TAOjzGPSE6dpcJk5WZ89G24WBEiKKUtIbkmTlTIyyS0=) 2: 26834412EFF211E9B74F3A6AC4F9AE02.roa (hash: tA26iTcckJCEwCBsZnY5TWqIbPvv1VTq/Rbk2qWWvAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7137 (0x1be1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAD6F, serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Validity Not Before: Mar 2 01:57:42 2026 GMT Not After : Mar 9 01:57:42 2026 GMT Subject: CN=69a4ee96-43c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9b:cc:7c:fa:50:0f:ff:31:0e:b3:5c:c5:f5: 55:87:2b:23:78:08:71:da:e0:b3:df:a8:f0:e3:2c: 81:70:8f:dd:9f:3c:a9:54:cb:51:71:76:6e:5a:54: ad:c4:1f:0b:49:d7:e5:d9:43:fd:70:fb:c3:e9:f7: de:1d:0a:77:a7:48:38:ac:12:cd:84:5b:53:b6:42: 3c:ac:5f:94:98:bc:65:1b:ee:56:85:ae:35:de:c7: c1:7a:fe:f1:a7:a2:43:75:bb:33:f2:68:1d:35:dd: cd:59:f9:a4:b2:72:24:be:f7:04:13:ee:40:b2:0e: b6:e7:96:79:ae:ec:8c:97:e7:31:31:84:e6:3d:26: 7a:e4:21:e8:c0:0c:3b:4d:1b:40:67:b6:35:87:ea: 3f:cc:e0:61:61:60:48:7d:d5:b6:9c:4a:7f:32:13: 8c:c4:b7:92:f3:3c:3c:50:12:aa:3b:34:60:4b:b6: 4a:93:ef:b4:d8:c4:e8:19:85:47:a8:ce:16:63:f9: 84:f6:15:2c:63:d5:13:52:92:45:ff:f9:ac:55:54: b2:4c:b6:85:e6:6c:de:d4:63:66:88:ab:f9:38:5c: 2e:1c:c3:dd:92:18:f9:ae:73:43:9d:d2:65:ff:69: 0c:fe:a9:e1:7e:8d:da:8a:0a:78:ba:a4:e8:76:18: e1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:15:BA:03:70:12:29:31:28:8E:C1:F2:66:37:F5:07:04:5A:F9:71 X509v3 Authority Key Identifier: keyid:6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:e8:8d:34:59:5f:8b:a4:d9:c3:ab:0d:ed:03:6f:31:60:bb: 62:07:0c:93:c0:d6:5d:4d:22:e6:f3:09:f3:9e:79:17:a2:e6: bf:5f:eb:0b:63:e4:0b:2e:01:59:a2:a7:f7:3b:2d:ed:7e:af: 78:e9:3f:13:72:ca:f8:ab:b9:66:7b:3b:62:bf:e3:a9:07:ce: f2:9f:2b:db:77:fb:da:04:7d:a5:b0:94:5c:e5:12:00:01:bf: 4b:eb:f4:e4:47:2a:0a:5c:d0:d1:17:03:a6:da:52:eb:ec:ad: 2d:6c:61:87:46:a1:a6:81:c6:7e:91:b8:42:25:2e:9a:9e:38: 44:79:66:a6:f2:8a:2e:c6:05:84:be:63:d3:ce:0d:1b:d8:28: 52:df:e7:61:16:fe:78:de:73:55:ca:1b:80:db:93:30:86:ad: 3b:42:eb:3f:80:ac:dc:d5:00:62:42:c6:51:ac:d0:70:f2:f4: dd:10:85:0a:37:ca:f9:1e:c6:94:b4:6c:43:d4:3f:9b:d3:ee: 20:ae:80:ad:ed:ec:9a:9e:1f:93:8d:bf:e7:8f:1f:c7:d3:5e: 8f:65:cb:7d:cc:0a:83:86:85:34:6b:19:d3:14:3d:c5:fb:a4: 20:e7:fc:e9:b7:6d:40:e5:c7:d3:d5:39:18:ff:6b:2e:4d:7a: 3b:ef:54:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFENkYxMTAvBgNVBAUTKDZCODY0MjQxREYwMTJGMjM5MjdBMDFDMEUzODZFMDdB QUI0OUM1MjIwHhcNMjYwMzAyMDE1NzQyWhcNMjYwMzA5MDE1NzQyWjAYMRYwFAYD VQQDEw02OWE0ZWU5Ni00M2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJvMfPpQD/8xDrNcxfVVhysjeAhx2uCz36jw4yyBcI/dnzypVMtRcXZuWlSt xB8LSdfl2UP9cPvD6ffeHQp3p0g4rBLNhFtTtkI8rF+UmLxlG+5Wha413sfBev7x p6JDdbsz8mgdNd3NWfmksnIkvvcEE+5Asg6255Z5ruyMl+cxMYTmPSZ65CHowAw7 TRtAZ7Y1h+o/zOBhYWBIfdW2nEp/MhOMxLeS8zw8UBKqOzRgS7ZKk++02MToGYVH qM4WY/mE9hUsY9UTUpJF//msVVSyTLaF5mze1GNmiKv5OFwuHMPdkhj5rnNDndJl /2kM/qnhfo3aigp4uqTodhjhZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBkVugNw EikxKI7B8mY39QcEWvlxMB8GA1UdIwQYMBaAFGuGQkHfAS8jknoBwOOG4HqrScUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUQ2Ri80NkM5NDA5NDE0 NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4Qkx5T1NlZ0hBNDRiZ2VxdEp4 U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E0WkNRZDhCTHlPU2VnSEE0NGJnZXF0SnhTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUQ2Ri80NkM5NDA5NDE0NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4Qkx5 T1NlZ0hBNDRiZ2VxdEp4U0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg+iNNFlfi6TZw6sN7QNvMWC7YgcMk8DWXU0i5vMJ8555F6Lmv1/rC2PkCy4B WaKn9zst7X6veOk/E3LK+Ku5Zns7Yr/jqQfO8p8r23f72gR9pbCUXOUSAAG/S+v0 5EcqClzQ0RcDptpS6+ytLWxhh0ahpoHGfpG4QiUump44RHlmpvKKLsYFhL5j084N G9goUt/nYRb+eN5zVcobgNuTMIatO0LrP4Cs3NUAYkLGUazQcPL03RCFCjfK+R7G lLRsQ9Q/m9PuIK6Are3smp4fk42/548fx9Nej2XLfcwKg4aFNGsZ0xQ9xfukIOf8 6bdtQOXH09U5GP9rLk16O+9UEw== -----END CERTIFICATE-----Generated at Mon Mar 2 07:28:06 2026 by rpki-client