$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft File: spEQIVRHIYPPUNKub6MOG940K_Q.mft (raw, json) Hash identifier: 1kcEbReJAi8zuOVCQuvy3VM55X0OVxm0ooHLoxFSyTY= Subject key identifier: C1:34:33:D2:7F:22:82:44:25:90:95:8A:46:54:B8:B1:CC:E0:8E:1C Authority key identifier: B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 Certificate issuer: /CN=A91FB095/serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft Manifest number: 01FF Signing time: Mon 02 Mar 2026 02:09:16 +0000 Manifest this update: Mon 02 Mar 2026 02:09:13 +0000 Manifest next update: Mon 09 Mar 2026 02:09:13 +0000 Files and hashes: 1: spEQIVRHIYPPUNKub6MOG940K_Q.crl (hash: 5aI8BXTYggXwLg56L924q0RWvHBl0PaSorT4ERHN6uQ=) 2: 35A46D4E1A5611EE93742844C4F9AE02.roa (hash: IUOsiYzoOeJXBWGcBY3naTwC7bqfdBN0GBUnef3AOYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB095, serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Validity Not Before: Mar 2 02:09:13 2026 GMT Not After : Mar 9 02:09:13 2026 GMT Subject: CN=69a4f14c-524a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1a:e8:9f:75:0a:ef:d7:75:19:cd:ff:ad:7c: 16:21:7b:1d:a1:ec:86:a3:bd:37:c6:a8:5a:bf:c3: 3c:5d:78:7c:f3:72:5d:2a:00:93:ee:ed:4d:77:b8: 6e:4a:e2:90:ac:39:63:34:e8:c3:7c:fc:22:73:75: e8:d0:93:ba:0b:62:ca:dd:8a:a4:83:d6:4f:34:d9: 6b:2e:57:81:eb:9a:25:d0:d6:46:35:dc:d2:40:6c: f8:3e:10:12:b4:67:0a:be:6a:70:93:68:31:19:1d: 80:4c:cb:6b:14:65:e7:9a:e5:14:95:77:0e:e1:c8: a6:f1:1a:43:c5:51:cb:ec:c2:05:c6:a4:b1:94:f6: 75:cd:b7:99:22:ae:27:58:73:0f:f4:a2:7e:f0:a0: 03:46:ac:b5:70:b2:2e:18:02:44:ad:ba:64:a0:4f: 26:76:80:20:11:58:b8:07:41:c3:e2:a1:97:d1:e9: b3:90:a0:30:6f:23:09:6b:8f:64:f9:75:c6:13:9d: 12:3b:c8:33:08:fa:5b:5e:f5:1e:02:4d:40:5f:48: 83:f3:d3:ef:22:a5:e2:06:7a:39:93:98:3c:6b:b7: 07:ef:10:42:5d:2a:e8:40:4d:c8:08:cb:c5:93:d5: 1c:89:e6:d6:ae:7d:06:8d:fb:18:68:8d:89:c5:04: 6d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:34:33:D2:7F:22:82:44:25:90:95:8A:46:54:B8:B1:CC:E0:8E:1C X509v3 Authority Key Identifier: keyid:B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:bc:f2:d8:5e:38:61:1d:42:0f:dd:21:76:a5:1d:14:c1:b5: 79:af:86:fe:53:f2:67:cc:19:45:93:75:44:e6:a3:d8:04:d0: 25:4c:63:ce:88:6a:7d:e5:13:50:75:d8:bc:ab:d3:c7:87:5b: 9a:fb:a7:0d:cf:58:b0:20:d0:64:3f:46:6a:be:14:d9:09:4c: 24:00:b8:3f:cf:ae:f4:58:ae:8d:cd:55:b8:dc:83:bd:34:a3: fc:8b:90:0f:fc:2e:b8:8a:61:3a:cc:32:c0:e4:da:fe:29:94: 6b:6c:3a:b1:f7:57:33:79:6a:37:10:57:04:43:25:24:c0:59: 84:b5:1e:7c:13:d0:2d:b5:df:ec:54:42:ed:b2:f5:67:5e:d9: c9:b7:63:91:df:e9:c7:d4:fe:d3:ba:14:2d:b6:e5:08:24:02: 0a:cb:74:61:99:b8:d9:3b:13:9e:7e:85:14:c0:60:86:19:20: a6:21:fe:55:ed:09:8f:70:f9:f4:ab:d8:fe:9b:97:5b:89:ab: 29:ca:c8:37:b3:6e:61:06:57:9b:e0:ea:82:40:cc:6f:60:bb: 48:0a:2a:c1:17:0e:25:18:07:ae:2e:d0:fe:f2:7b:9e:47:ba: 77:29:2f:1e:3a:e6:d7:87:f7:e0:5b:77:4a:6b:76:da:c0:14: 87:f7:c2:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwOTUxMTAvBgNVBAUTKEIyOTExMDIxNTQ0NzIxODNDRjUwRDJBRTZGQTMwRTFC REUzNDJCRjQwHhcNMjYwMzAyMDIwOTEzWhcNMjYwMzA5MDIwOTEzWjAYMRYwFAYD VQQDEw02OWE0ZjE0Yy01MjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Bron3UK79d1Gc3/rXwWIXsdoeyGo703xqhav8M8XXh883JdKgCT7u1Nd7hu SuKQrDljNOjDfPwic3Xo0JO6C2LK3Yqkg9ZPNNlrLleB65ol0NZGNdzSQGz4PhAS tGcKvmpwk2gxGR2ATMtrFGXnmuUUlXcO4cim8RpDxVHL7MIFxqSxlPZ1zbeZIq4n WHMP9KJ+8KADRqy1cLIuGAJErbpkoE8mdoAgEVi4B0HD4qGX0emzkKAwbyMJa49k +XXGE50SO8gzCPpbXvUeAk1AX0iD89PvIqXiBno5k5g8a7cH7xBCXSroQE3ICMvF k9UciebWrn0GjfsYaI2JxQRtAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFME0M9J/ IoJEJZCVikZUuLHM4I4cMB8GA1UdIwQYMBaAFLKRECFURyGDz1DSrm+jDhveNCv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjA5NS9BQUJFQjU2QTFB NTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZUFBVTkt1YjZNT0c5NDBL X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NwRVFJVlJISVlQUFVOS3ViNk1PRzk0MEtfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjA5NS9BQUJFQjU2QTFBNTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZ UFBVTkt1YjZNT0c5NDBLX1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASbzy2F44YR1CD90hdqUdFMG1ea+G/lPyZ8wZRZN1ROaj2ATQJUxjzohqfeUT UHXYvKvTx4dbmvunDc9YsCDQZD9Gar4U2QlMJAC4P8+u9Fiujc1VuNyDvTSj/IuQ D/wuuIphOswywOTa/imUa2w6sfdXM3lqNxBXBEMlJMBZhLUefBPQLbXf7FRC7bL1 Z17Zybdjkd/px9T+07oULbblCCQCCst0YZm42TsTnn6FFMBghhkgpiH+Ve0Jj3D5 9KvY/puXW4mrKcrIN7NuYQZXm+DqgkDMb2C7SAoqwRcOJRgHri7Q/vJ7nke6dykv Hjrm14f34Ft3Smt22sAUh/fCPA== -----END CERTIFICATE-----Generated at Mon Mar 2 18:27:07 2026 by rpki-client