$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft File: sXSj1LqbR24rMeR8cqKY0ETZh4U.mft (raw, json) Hash identifier: 5iEpjRYdXP3w+PlynFr8+yT/seLRPuh1qnGLOZDGRW0= Subject key identifier: 7E:D4:EA:08:95:CB:C6:E6:DA:C2:D9:8A:4D:10:11:BB:EC:48:62:CC Authority key identifier: B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85 Certificate issuer: /CN=A91FBC89/serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft Manifest number: D3 Signing time: Sun 01 Mar 2026 08:09:43 +0000 Manifest this update: Sun 01 Mar 2026 08:09:43 +0000 Manifest next update: Sun 08 Mar 2026 08:09:43 +0000 Files and hashes: 1: sXSj1LqbR24rMeR8cqKY0ETZh4U.crl (hash: 0MawQ1QdCyRe1lT1e3tpx8DKrZYSax2Oqo6hyJcSAPY=) 2: 000A7CE25A5911F0948C6D20C4F9AE02.roa (hash: GCUFS6qlOIojf4LyhWMHeScjoCzxaabahSDQqvuP0Kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBC89, serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785 Validity Not Before: Mar 1 08:09:43 2026 GMT Not After : Mar 8 08:09:43 2026 GMT Subject: CN=69a3f447-89c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1e:51:34:9a:b1:4c:7b:d9:e6:84:df:53:55: 97:0e:67:7e:aa:9e:b7:18:c7:60:7d:3a:15:28:2d: 18:d6:bc:40:a2:a6:cc:8a:dc:81:ec:fb:64:0b:25: 44:86:3a:2c:06:c5:0e:0d:0a:c8:82:9f:cc:11:46: 77:60:b9:91:dc:fe:d3:48:58:e0:e3:7d:6e:db:06: c4:d8:51:dd:52:84:d4:84:b5:3c:81:43:b0:ee:70: 2d:e7:1a:9f:22:be:01:41:94:93:bd:68:bb:cf:3e: 29:1f:06:97:e9:d3:30:80:56:c4:b7:62:ef:87:e4: 82:a6:45:41:3f:9c:27:df:d7:10:86:2d:c5:09:72: 25:aa:70:5c:e3:d6:ed:67:4c:23:05:b9:25:e5:63: a0:bc:fe:ac:56:1d:24:43:35:b2:61:d7:04:95:2c: e0:1d:16:e7:7d:2a:fe:15:7f:dd:48:41:43:4b:27: f7:27:3e:ad:25:ec:8c:94:22:63:99:37:8d:e8:14: 53:25:7f:fe:b8:99:86:71:8e:c7:a0:02:8a:7b:75: 7e:39:06:1b:5c:1f:11:71:a1:9b:23:d9:91:45:13: 17:30:e8:9c:d2:8e:71:05:d7:8e:0d:b3:9c:d4:ad: 1a:a4:46:82:c5:75:85:64:f7:5b:d1:b8:a6:5b:14: c7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D4:EA:08:95:CB:C6:E6:DA:C2:D9:8A:4D:10:11:BB:EC:48:62:CC X509v3 Authority Key Identifier: keyid:B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:7c:35:93:5e:67:9b:21:e2:6d:2d:bb:ab:2a:97:a6:ca:1d: d1:ef:6a:cc:6c:81:7a:4d:e4:52:47:9d:ac:41:62:97:5a:35: 3b:84:48:21:38:e6:62:46:d6:7e:c7:f2:d9:83:57:c3:b9:7a: 7e:7e:ca:08:18:4a:35:7d:7b:b9:6a:1a:a6:61:73:77:e4:e8: 20:d3:3e:fc:0b:d3:bd:dd:74:3a:07:f7:7f:b2:0b:88:11:27: 61:c1:30:2d:ce:b5:9b:05:49:6f:8f:2a:2d:14:b3:65:67:c3: cd:c3:b7:dd:4c:17:d4:8e:cc:9b:c3:1d:5e:c6:61:03:28:74: 87:e9:64:dc:16:c0:2b:27:6a:93:5e:51:9d:d2:b6:6a:d0:0d: d8:73:ba:f1:51:a2:79:10:77:80:cc:cc:9a:a5:cf:c3:54:58: a6:ee:57:01:92:16:f7:fc:eb:65:49:2c:bc:f7:3a:b2:88:80: 9e:61:e9:0f:02:4f:9e:47:c3:99:0e:67:16:25:0d:d6:66:fb: f8:66:9c:8a:c9:d3:3e:9c:ac:bb:09:26:5a:b6:10:12:0d:c0: 3a:93:32:1a:3b:0d:65:09:e9:8d:e1:7f:f3:f8:57:1c:16:ed: da:1d:87:50:a9:ac:92:7e:63:fe:d1:50:f8:26:a6:3c:ec:fc: 53:3b:8a:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJDODkxMTAvBgNVBAUTKEIxNzRBM0Q0QkE5QjQ3NkUyQjMxRTQ3QzcyQTI5OEQw NDREOTg3ODUwHhcNMjYwMzAxMDgwOTQzWhcNMjYwMzA4MDgwOTQzWjAYMRYwFAYD VQQDEw02OWEzZjQ0Ny04OWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0R5RNJqxTHvZ5oTfU1WXDmd+qp63GMdgfToVKC0Y1rxAoqbMityB7PtkCyVE hjosBsUODQrIgp/MEUZ3YLmR3P7TSFjg431u2wbE2FHdUoTUhLU8gUOw7nAt5xqf Ir4BQZSTvWi7zz4pHwaX6dMwgFbEt2Lvh+SCpkVBP5wn39cQhi3FCXIlqnBc49bt Z0wjBbkl5WOgvP6sVh0kQzWyYdcElSzgHRbnfSr+FX/dSEFDSyf3Jz6tJeyMlCJj mTeN6BRTJX/+uJmGcY7HoAKKe3V+OQYbXB8RcaGbI9mRRRMXMOic0o5xBdeODbOc 1K0apEaCxXWFZPdb0bimWxTH6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH7U6giV y8bm2sLZik0QEbvsSGLMMB8GA1UdIwQYMBaAFLF0o9S6m0duKzHkfHKimNBE2YeF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkM4OS85RTcyNjJCRUVG Q0UxMUVGODkzRkY3MEVDNEY5QUUwMi9zWFNqMUxxYlIyNHJNZVI4Y3FLWTBFVFpo NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NYU2oxTHFiUjI0ck1lUjhjcUtZMEVUWmg0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkM4OS85RTcyNjJCRUVGQ0UxMUVGODkzRkY3MEVDNEY5QUUwMi9zWFNqMUxxYlIy NHJNZVI4Y3FLWTBFVFpoNFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABnw1k15nmyHibS27qyqXpsod0e9qzGyBek3kUkedrEFil1o1O4RIITjmYkbW fsfy2YNXw7l6fn7KCBhKNX17uWoapmFzd+ToINM+/AvTvd10Ogf3f7ILiBEnYcEw Lc61mwVJb48qLRSzZWfDzcO33UwX1I7Mm8MdXsZhAyh0h+lk3BbAKydqk15RndK2 atAN2HO68VGieRB3gMzMmqXPw1RYpu5XAZIW9/zrZUksvPc6soiAnmHpDwJPnkfD mQ5nFiUN1mb7+GacisnTPpysuwkmWrYQEg3AOpMyGjsNZQnpjeF/8/hXHBbt2h2H UKmskn5j/tFQ+CamPOz8UzuK0w== -----END CERTIFICATE-----Generated at Sun Mar 1 23:01:09 2026 by rpki-client