$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft File: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft (raw, json) Hash identifier: WPNxaDswtTGHpDw5216OIM3W7GLBKB9EYR/YdUA/a30= Subject key identifier: E4:4D:22:E0:96:27:D8:C7:95:C7:73:96:F3:FE:C3:E0:B9:93:FC:A0 Authority key identifier: D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04 Certificate issuer: /CN=A91FC8B6/serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104 Certificate serial: 020E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft Manifest number: 020A Signing time: Sun 01 Mar 2026 03:45:28 +0000 Manifest this update: Sun 01 Mar 2026 03:45:28 +0000 Manifest next update: Sun 08 Mar 2026 03:45:28 +0000 Files and hashes: 1: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl (hash: 6IjOauoB/9BwKuE4s5u7PG1j8qXqipN3tHh7ejGhWWI=) 2: 37B81F7AF64511ED8C736D76C4F9AE02.roa (hash: /U2wldHiHrPFBo2wVFsGuIVi0YglDoRZcVdncnVvj2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC8B6, serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104 Validity Not Before: Mar 1 03:45:28 2026 GMT Not After : Mar 8 03:45:28 2026 GMT Subject: CN=69a3b658-cbe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ea:3f:5f:4a:90:ae:0d:5d:53:a8:e8:c0:70: 18:a2:cb:04:67:5e:9b:14:36:11:49:e0:8d:9d:7a: b6:0d:6f:77:2e:ea:b6:39:d5:7b:23:4c:1b:7a:eb: 49:1a:d9:5b:8c:ac:53:f3:7f:0d:c7:2d:cd:1a:d1: fb:91:4c:37:26:ac:1d:48:d7:94:9d:d9:ef:c3:29: d8:58:a5:e8:fe:57:0a:34:72:c9:13:5a:b5:a7:94: cf:3e:e4:75:44:ca:29:04:f8:0d:93:6c:c3:5c:6b: f9:6d:8f:71:b2:80:00:c4:c2:de:3d:72:b4:db:66: 37:d1:25:1a:48:b5:c6:f2:f6:99:da:b9:db:c7:21: 9e:84:69:6b:22:28:fb:66:ab:a1:89:d2:83:8a:da: cb:23:e3:70:ac:cf:19:80:3a:e9:9b:6d:90:9d:d9: 6d:db:8d:bf:01:63:c7:b6:85:2c:ce:67:13:b6:f4: f0:ac:45:d5:46:92:93:4c:52:b3:fa:39:a6:78:b5: f0:cc:85:80:44:fa:33:cd:e1:38:f4:8c:db:c2:57: 0b:b2:9e:6f:6a:56:80:76:b5:af:82:3f:02:e4:28: ba:dc:a6:64:49:41:31:4f:ec:72:75:2a:e1:3a:4e: cc:ee:97:a0:37:bc:75:dd:ca:d3:20:9c:fb:5c:90: e7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4D:22:E0:96:27:D8:C7:95:C7:73:96:F3:FE:C3:E0:B9:93:FC:A0 X509v3 Authority Key Identifier: keyid:D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:45:d3:a3:de:7c:d3:aa:97:11:5f:fb:dc:01:89:93:12:19: 93:12:2a:9d:25:6d:9e:a6:81:23:19:9c:8e:3d:5e:53:a9:95: 96:c5:cb:2d:8a:cd:a6:ca:25:a5:3c:17:76:b0:b9:7e:85:b3: e0:52:00:65:c5:aa:1d:aa:d9:52:9d:0e:0c:f3:a1:b1:86:03: b0:22:cb:c6:b0:05:bd:06:3d:ff:35:0f:de:b5:ba:a0:22:4c: 07:7a:7a:5b:f2:e7:79:81:5d:99:b9:18:cf:a1:f8:36:ef:18: 23:ee:f2:8a:be:d7:1d:07:cb:3b:c8:27:2b:e0:ca:9f:c6:ee: 61:ca:97:33:a7:fd:74:7d:c4:95:2c:9e:d6:02:3d:ba:c0:64: 89:24:f0:4a:d8:4f:e9:65:03:43:47:66:6c:ef:2f:3f:0a:a1: 00:2e:cf:57:2d:a2:0d:ad:35:11:69:d2:6b:07:dc:20:fb:1e: 0f:82:2e:ed:31:20:c1:d6:6d:77:a6:b4:62:d1:4f:62:2a:23: 61:d8:ea:1d:76:98:25:df:98:44:e6:03:44:29:7f:59:ac:0e: 66:9e:b0:20:a8:67:c1:74:83:21:2f:a7:47:81:93:c2:ad:ee: a2:12:fe:6d:e8:77:56:98:79:9b:b7:38:fc:58:fc:31:92:3a: 85:80:36:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM4QjYxMTAvBgNVBAUTKEQ2RjJCQUFFN0E1MjBGQUE0NjgyQ0FEQzM2OTM2NjBC OUUxRkYxMDQwHhcNMjYwMzAxMDM0NTI4WhcNMjYwMzA4MDM0NTI4WjAYMRYwFAYD VQQDDA02OWEzYjY1OC1jYmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+o/X0qQrg1dU6jowHAYossEZ16bFDYRSeCNnXq2DW93Luq2OdV7I0wbeutJ GtlbjKxT838Nxy3NGtH7kUw3JqwdSNeUndnvwynYWKXo/lcKNHLJE1q1p5TPPuR1 RMopBPgNk2zDXGv5bY9xsoAAxMLePXK022Y30SUaSLXG8vaZ2rnbxyGehGlrIij7 ZquhidKDitrLI+NwrM8ZgDrpm22Qndlt242/AWPHtoUszmcTtvTwrEXVRpKTTFKz +jmmeLXwzIWARPozzeE49IzbwlcLsp5valaAdrWvgj8C5Ci63KZkSUExT+xydSrh Ok7M7pegN7x13crTIJz7XJDnZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFORNIuCW J9jHlcdzlvP+w+C5k/ygMB8GA1UdIwQYMBaAFNbyuq56Ug+qRoLK3DaTZgueH/EE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzhCNi9FQzYyMkIwNkY2 M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2cEdnc3JjTnBObUM1NGY4 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF2SzZybnBTRDZwR2dzcmNOcE5tQzU0ZjhRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzhCNi9FQzYyMkIwNkY2M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2 cEdnc3JjTnBObUM1NGY4UVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnEXTo95806qXEV/73AGJkxIZkxIqnSVtnqaBIxmcjj1eU6mVlsXLLYrNpsol pTwXdrC5foWz4FIAZcWqHarZUp0ODPOhsYYDsCLLxrAFvQY9/zUP3rW6oCJMB3p6 W/LneYFdmbkYz6H4Nu8YI+7yir7XHQfLO8gnK+DKn8buYcqXM6f9dH3ElSye1gI9 usBkiSTwSthP6WUDQ0dmbO8vPwqhAC7PVy2iDa01EWnSawfcIPseD4Iu7TEgwdZt d6a0YtFPYiojYdjqHXaYJd+YROYDRCl/WawOZp6wIKhnwXSDIS+nR4GTwq3uohL+ beh3Vph5m7c4/Fj8MZI6hYA2vA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:16:16 2026 by rpki-client