$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft File: l85Wj2RoJWRz-Es4s84D6jVJ64k.mft (raw, json) Hash identifier: 6dcUIfMTViJ/ximuH08YW0DKSgHI3ZT0EfT8WOu2mnI= Subject key identifier: DA:28:A6:60:92:B6:30:5E:03:81:09:73:83:DC:DD:00:2C:42:87:1C Authority key identifier: 97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 Certificate issuer: /CN=A91FCABC/serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft Manifest number: 0200 Signing time: Sun 01 Mar 2026 03:51:06 +0000 Manifest this update: Sun 01 Mar 2026 03:51:05 +0000 Manifest next update: Sun 08 Mar 2026 03:51:05 +0000 Files and hashes: 1: l85Wj2RoJWRz-Es4s84D6jVJ64k.crl (hash: PwpwExbEJcRa8wOMPW4D76aE3+LVjxi46ejqeT1ImvA=) 2: 35BBCFB005C111EEA3A8584CC4F9AE02.roa (hash: r5pIAbK8kOI15XkP+OMpWTYz9FMauuzr/FnyF6gxDgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCABC, serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Validity Not Before: Mar 1 03:51:05 2026 GMT Not After : Mar 8 03:51:05 2026 GMT Subject: CN=69a3b7aa-e91d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c9:29:a2:d4:ae:18:24:ba:a0:45:73:85:8b: 54:5b:19:8f:69:40:6b:a5:71:4d:7d:aa:58:2c:c1: 1d:e1:38:7e:ee:19:eb:0b:4a:2e:3a:ee:4a:98:35: e0:78:21:6b:0d:48:fb:e2:35:04:af:5c:07:d2:78: 37:18:15:e0:76:88:1c:ce:2d:35:5d:61:da:8b:92: c7:56:ef:9e:31:54:4f:38:45:19:2f:fe:ff:7c:62: 31:d3:e3:ec:0a:d9:9e:b6:ba:d2:85:d8:c3:ae:9f: 0b:bb:46:9a:df:a9:3a:ef:b0:cf:11:66:a0:c5:c9: c4:d4:b8:96:d7:a0:60:d8:14:ca:ff:aa:68:51:71: a7:01:7c:d5:ec:f7:9e:71:27:a0:94:82:19:69:6e: 27:14:a3:5b:8e:76:95:fb:40:5f:42:cf:7c:a0:93: a7:28:4a:19:25:ad:d8:a3:cd:18:4b:9e:af:38:ff: 03:b4:bf:13:6d:4e:42:51:1f:69:2d:70:7c:bf:90: 64:ac:21:77:8c:ef:66:98:65:1e:1a:c8:b8:c5:bd: f3:b5:9a:64:9a:00:55:6e:78:ff:5b:87:f2:6c:b7: b6:c5:74:25:77:d6:93:bb:b3:dc:9b:ce:8d:e4:29: 22:38:b0:42:51:28:71:9f:49:0d:35:ad:02:02:7a: 47:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:28:A6:60:92:B6:30:5E:03:81:09:73:83:DC:DD:00:2C:42:87:1C X509v3 Authority Key Identifier: keyid:97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:01:60:86:6a:0f:f7:bd:57:22:b8:6b:83:20:66:cc:c4:78: 1e:52:9a:46:85:34:d7:b9:7c:c2:86:1a:8e:7d:61:e1:6b:14: 8b:ad:cf:e5:b0:9b:52:23:85:16:1e:6a:c2:21:b2:be:e0:42: 32:f5:b7:57:ef:5a:75:cd:14:fa:c1:d0:f8:f4:de:4d:f3:a9: f7:b1:29:bd:40:34:48:83:7f:5d:8d:77:7d:ff:f4:cf:e6:2e: 4d:17:78:6d:67:ac:4e:16:e0:52:14:b0:93:c1:22:13:8c:ae: e3:b9:9c:e0:b7:19:04:cf:24:a6:99:81:20:0a:20:e8:f4:d3: dd:f0:92:21:6e:35:e0:da:c8:39:07:f4:4f:fd:a0:d8:63:02: e8:f7:87:7b:7a:25:af:41:2c:a7:fd:c7:f9:7e:28:a4:a5:ab: 04:42:e3:00:55:7e:76:7c:e7:db:b2:98:a6:2e:24:42:4c:8d: fb:a2:49:ed:c0:ea:18:8e:4c:d6:c1:fd:99:14:5c:f6:29:51: 49:59:c6:01:11:04:d4:02:92:63:f4:54:34:30:50:22:35:8b: 2e:56:79:61:39:15:96:19:3d:d0:81:9f:9c:45:74:0d:db:71: 28:3c:7d:18:66:c2:4f:c4:04:e2:2b:76:b8:4e:0c:95:1c:51: e4:ec:47:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBQkMxMTAvBgNVBAUTKDk3Q0U1NjhGNjQ2ODI1NjQ3M0Y4NEIzOEIzQ0UwM0VB MzU0OUVCODkwHhcNMjYwMzAxMDM1MTA1WhcNMjYwMzA4MDM1MTA1WjAYMRYwFAYD VQQDDA02OWEzYjdhYS1lOTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMkpotSuGCS6oEVzhYtUWxmPaUBrpXFNfapYLMEd4Th+7hnrC0ouOu5KmDXg eCFrDUj74jUEr1wH0ng3GBXgdogczi01XWHai5LHVu+eMVRPOEUZL/7/fGIx0+Ps CtmetrrShdjDrp8Lu0aa36k677DPEWagxcnE1LiW16Bg2BTK/6poUXGnAXzV7Pee cSeglIIZaW4nFKNbjnaV+0BfQs98oJOnKEoZJa3Yo80YS56vOP8DtL8TbU5CUR9p LXB8v5BkrCF3jO9mmGUeGsi4xb3ztZpkmgBVbnj/W4fybLe2xXQld9aTu7Pcm86N 5CkiOLBCUShxn0kNNa0CAnpH2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNoopmCS tjBeA4EJc4Pc3QAsQoccMB8GA1UdIwQYMBaAFJfOVo9kaCVkc/hLOLPOA+o1SeuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0FCQy9DNTUxNjQxMjA1 QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pXUnotRXM0czg0RDZqVko2 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2w4NVdqMlJvSldSei1FczRzODRENmpWSjY0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0FCQy9DNTUxNjQxMjA1QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pX UnotRXM0czg0RDZqVko2NGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoAFghmoP971XIrhrgyBmzMR4HlKaRoU017l8woYajn1h4WsUi63P5bCbUiOF Fh5qwiGyvuBCMvW3V+9adc0U+sHQ+PTeTfOp97EpvUA0SIN/XY13ff/0z+YuTRd4 bWesThbgUhSwk8EiE4yu47mc4LcZBM8kppmBIAog6PTT3fCSIW414NrIOQf0T/2g 2GMC6PeHe3olr0Esp/3H+X4opKWrBELjAFV+dnzn27KYpi4kQkyN+6JJ7cDqGI5M 1sH9mRRc9ilRSVnGAREE1AKSY/RUNDBQIjWLLlZ5YTkVlhk90IGfnEV0DdtxKDx9 GGbCT8QE4it2uE4MlRxR5OxHdw== -----END CERTIFICATE-----Generated at Sun Mar 1 22:49:19 2026 by rpki-client