$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft File: QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft (raw, json) Hash identifier: vFHFtXMbLaNxPM368KCT/QT7VqldzrWZZHb33+TJ3IA= Subject key identifier: 83:3A:66:FC:3C:12:53:EE:9E:3D:51:34:79:56:88:DF:29:C3:B6:52 Authority key identifier: 42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 Certificate issuer: /CN=A91FCEB1/serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Certificate serial: 2119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft Manifest number: 28A9 Signing time: Sat 28 Feb 2026 15:58:10 +0000 Manifest this update: Sat 28 Feb 2026 15:58:09 +0000 Manifest next update: Sat 07 Mar 2026 15:58:09 +0000 Files and hashes: 1: QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl (hash: rZLiRBc6DjXGhfbMWj6YA1ixE3moXEUq8xwk72bTZvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 15:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8473 (0x2119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Validity Not Before: Feb 28 15:58:09 2026 GMT Not After : Mar 7 15:58:09 2026 GMT Subject: CN=69a31092-b4a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c4:3d:92:7d:4b:82:3f:4d:67:72:99:7b:db: a9:81:13:fc:a3:a3:09:57:30:35:a2:9c:36:a2:fb: 8d:f4:fc:bd:14:01:e7:33:fc:d2:cb:b0:c4:f4:e3: 0a:bf:76:17:55:5e:22:2f:a4:ca:09:e4:32:9e:20: 41:de:40:10:f0:aa:3e:61:d7:a1:42:5f:14:19:81: 80:d1:70:fc:27:2e:62:0d:08:06:c1:42:79:84:9a: c3:fc:ea:51:92:db:76:51:a1:fd:db:36:da:95:5d: 24:98:dc:3b:92:27:a4:05:31:4c:4b:6e:b0:47:59: 0c:03:6d:a2:28:61:67:31:f2:1a:32:77:aa:75:59: d0:37:96:a6:1a:03:13:92:62:24:8d:61:fe:a9:0e: 3a:be:f3:b5:fd:15:0d:99:49:73:0a:f1:3c:3e:3e: cb:12:06:ac:d8:58:cc:e1:2f:2a:52:fa:a5:47:84: 25:b3:be:dd:6f:a9:f1:64:d9:1c:28:a5:d3:79:c0: 1f:bb:41:6e:0b:41:89:54:ff:9b:c6:09:4e:0f:59: 2b:22:d5:05:2f:3f:c1:ee:02:3f:a2:6c:e9:96:09: a3:14:65:4e:4f:de:94:d7:d6:6b:97:92:bf:c6:9e: c0:32:87:8f:51:a6:55:b3:c4:38:dc:16:29:bd:1e: ba:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3A:66:FC:3C:12:53:EE:9E:3D:51:34:79:56:88:DF:29:C3:B6:52 X509v3 Authority Key Identifier: keyid:42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:38:d5:6a:ba:c3:3c:ee:be:a9:1b:b8:a2:f4:30:8a:37:df: 0d:a2:51:93:77:ef:fc:84:db:ce:86:e6:8e:c0:a6:e1:bf:78: 48:11:20:19:80:05:25:79:07:a8:7a:d0:f9:91:4e:a7:5e:da: 08:6f:cb:9f:16:04:d8:c5:a8:94:02:bf:51:0e:dc:6f:5e:41: 56:62:9a:d1:e2:6f:0c:14:92:9f:52:52:cf:ba:95:79:0b:c4: a3:df:53:20:32:4e:59:40:fc:09:38:c1:24:dd:25:cb:cc:06: a9:e5:0f:20:af:d7:06:29:62:a7:ee:1d:32:16:62:49:06:70: 30:a4:04:39:47:fc:d6:dc:0a:73:a0:a9:8a:02:98:bb:c2:84: 22:ab:2f:5c:16:40:5e:a3:dd:2f:60:63:0d:00:61:f5:48:b5: a6:3a:9f:7e:45:9b:d5:c2:d1:eb:db:d7:7c:40:85:5c:19:7d: 1e:95:7b:88:d7:cc:ce:13:ce:eb:48:64:03:d1:ca:a4:c1:78: 7a:f9:29:40:3a:e2:6b:0c:e7:8f:3a:40:a8:83:93:01:df:5b: 86:ed:44:2e:2b:ee:62:58:8a:d4:b3:45:b4:1a:20:6f:1b:56: e5:ee:ac:bb:6e:fc:52:03:5c:30:7d:da:88:7d:c5:5c:6f:7c: d5:1b:4f:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKDQyNjdDRjVEMDMwMDRBOEZFRkRGMjEzOTVEMEZFODI0 NTQ4QjEzQzEwHhcNMjYwMjI4MTU1ODA5WhcNMjYwMzA3MTU1ODA5WjAYMRYwFAYD VQQDEw02OWEzMTA5Mi1iNGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8Q9kn1Lgj9NZ3KZe9upgRP8o6MJVzA1opw2ovuN9Py9FAHnM/zSy7DE9OMK v3YXVV4iL6TKCeQyniBB3kAQ8Ko+YdehQl8UGYGA0XD8Jy5iDQgGwUJ5hJrD/OpR ktt2UaH92zbalV0kmNw7kiekBTFMS26wR1kMA22iKGFnMfIaMneqdVnQN5amGgMT kmIkjWH+qQ46vvO1/RUNmUlzCvE8Pj7LEgas2FjM4S8qUvqlR4Qls77db6nxZNkc KKXTecAfu0FuC0GJVP+bxglOD1krItUFLz/B7gI/omzplgmjFGVOT96U19Zrl5K/ xp7AMoePUaZVs8Q43BYpvR66EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIM6Zvw8 ElPunj1RNHlWiN8pw7ZSMB8GA1UdIwQYMBaAFEJnz10DAEqP798hOV0P6CRUixPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4 QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNvX3YzeUU1WFFfb0pGU0xF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtZlBYUU1BU29fdjN5RTVYUV9vSkZTTEU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNv X3YzeUU1WFFfb0pGU0xFOEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmzjVarrDPO6+qRu4ovQwijffDaJRk3fv/ITbzobmjsCm4b94SBEgGYAFJXkH qHrQ+ZFOp17aCG/LnxYE2MWolAK/UQ7cb15BVmKa0eJvDBSSn1JSz7qVeQvEo99T IDJOWUD8CTjBJN0ly8wGqeUPIK/XBilip+4dMhZiSQZwMKQEOUf81twKc6CpigKY u8KEIqsvXBZAXqPdL2BjDQBh9Ui1pjqffkWb1cLR69vXfECFXBl9HpV7iNfMzhPO 60hkA9HKpMF4evkpQDriawznjzpAqIOTAd9bhu1ELivuYliK1LNFtBogbxtW5e6s u278UgNcMH3aiH3FXG981RtP3Q== -----END CERTIFICATE-----Generated at Sun Mar 1 22:27:09 2026 by rpki-client