$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft File: mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft (raw, json) Hash identifier: kylFowyJlzjLIrIU8C3sB9bVCX4tmOXsSnaQNtyKKbU= Subject key identifier: DA:91:9D:E5:E2:FC:DD:59:30:20:27:21:CB:9E:37:CF:62:BB:59:00 Authority key identifier: 99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA Certificate issuer: /CN=A91FD378/serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA Certificate serial: 0B58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft Manifest number: 0B4C Signing time: Sat 28 Feb 2026 19:27:50 +0000 Manifest this update: Sat 28 Feb 2026 19:27:49 +0000 Manifest next update: Sat 07 Mar 2026 19:27:49 +0000 Files and hashes: 1: mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl (hash: fDmrGRgb7a3QGZw+CaIaOkWZe7yd5zIHK6s1nlBjNd4=) 2: EF44A44E51EB11EABC11800DC4F9AE02.roa (hash: ppoejX3uGUvimonjJPPKOd/thialy4STjxbD0m/dKFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 19:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2904 (0xb58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD378, serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA Validity Not Before: Feb 28 19:27:49 2026 GMT Not After : Mar 7 19:27:49 2026 GMT Subject: CN=69a341b6-a8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:10:83:d6:a0:c0:94:f5:00:52:51:48:bc:0f: 62:97:cf:0c:b7:24:55:4a:5d:7f:8c:b6:6a:da:91: 08:3f:d5:cf:ae:ef:3c:55:d9:2e:1a:ba:33:85:f7: c6:e8:43:a6:af:34:e4:5b:d5:4e:3a:a9:e4:40:43: 92:d8:45:ca:a7:48:0c:10:73:96:86:e9:8f:c3:60: 14:65:81:ef:a8:af:f1:2f:b6:8b:52:da:19:22:83: 6c:e7:1e:08:ed:34:82:da:da:45:08:36:8b:e0:4c: d8:fa:f7:b1:d0:4f:12:29:70:dd:5d:02:16:ea:37: b7:c6:d7:78:59:e0:9e:bc:38:b8:6b:55:da:0e:04: a8:b1:7d:51:c4:5b:85:f5:b7:c2:92:5a:8f:ad:20: ee:09:ab:66:e4:ec:e6:86:cd:39:10:83:97:04:7f: ca:87:47:b0:19:00:8e:a8:c3:2c:34:1b:f4:1d:8d: 6e:ec:39:50:f8:c5:48:a9:78:23:9b:ce:9a:29:52: c9:41:c6:8a:4c:ed:ae:21:24:6f:c7:2b:38:b7:05: e8:15:59:10:97:dd:3b:26:99:38:1b:75:b1:d9:e7: 12:03:f9:d4:2d:7c:45:8e:56:f5:d0:8a:d3:79:06: 5a:a5:a3:ee:cb:c9:89:1f:51:05:e1:0e:4e:46:e2: 83:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:91:9D:E5:E2:FC:DD:59:30:20:27:21:CB:9E:37:CF:62:BB:59:00 X509v3 Authority Key Identifier: keyid:99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:57:1e:e7:8d:52:48:81:6a:3d:42:78:9d:55:8b:89:51:96: 11:ac:e6:6e:d1:a2:b1:a7:a7:f3:0e:a6:b3:47:36:7b:fa:43: 46:7e:21:96:18:94:60:6f:6e:28:99:f7:be:15:59:ef:9c:19: 82:06:61:cc:8c:c1:ec:55:c7:ad:c9:67:84:ef:90:8a:ff:70: a7:33:ba:83:53:36:4f:b9:8e:ba:b5:b6:6c:b4:e1:50:16:e2: 12:36:44:12:e0:3c:48:26:35:f2:2d:ef:b4:bd:e3:75:da:e4: 50:79:0a:7c:5f:a2:c7:e2:74:8e:f2:eb:4b:39:f5:f8:3a:02: 5b:73:72:9a:5a:6a:68:d3:23:e3:06:13:27:3b:53:33:8d:9b: ff:a7:4b:53:da:5e:4b:f2:2b:d4:f4:fa:38:0a:b3:8c:8b:d0: 40:f8:f0:d6:df:90:ac:22:66:3e:98:ec:0a:cf:62:63:01:65: 19:09:db:2e:1a:55:fe:d3:ef:e4:10:0f:70:5e:8b:fc:e1:14: 2f:aa:38:92:67:34:97:7b:94:2a:80:89:f2:5b:ea:99:b6:b2: 54:65:61:8c:ad:e5:4e:d0:bf:ec:e4:32:35:c1:a9:04:8f:7d: ff:61:0f:6b:84:02:31:e4:2f:86:1d:ac:40:d8:a6:8b:b8:93: 92:ca:d5:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzNzgxMTAvBgNVBAUTKDk5QkUwODVEMUM2OTZDQkMyMUI2NzhGOTE4OEVDQ0U1 REJDREQ0Q0EwHhcNMjYwMjI4MTkyNzQ5WhcNMjYwMzA3MTkyNzQ5WjAYMRYwFAYD VQQDDA02OWEzNDFiNi1hOGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgxCD1qDAlPUAUlFIvA9il88MtyRVSl1/jLZq2pEIP9XPru88VdkuGrozhffG 6EOmrzTkW9VOOqnkQEOS2EXKp0gMEHOWhumPw2AUZYHvqK/xL7aLUtoZIoNs5x4I 7TSC2tpFCDaL4EzY+vex0E8SKXDdXQIW6je3xtd4WeCevDi4a1XaDgSosX1RxFuF 9bfCklqPrSDuCatm5Ozmhs05EIOXBH/Kh0ewGQCOqMMsNBv0HY1u7DlQ+MVIqXgj m86aKVLJQcaKTO2uISRvxys4twXoFVkQl907Jpk4G3Wx2ecSA/nULXxFjlb10IrT eQZapaPuy8mJH1EF4Q5ORuKDOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNqRneXi /N1ZMCAnIcueN89iu1kAMB8GA1UdIwQYMBaAFJm+CF0caWy8IbZ4+RiOzOXbzdTK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM3OC82MzJGQThDRTUx RUExMUVBQjZBNUNEODZDNEY5QUUwMi9tYjRJWFJ4cGJMd2h0bmo1R0k3TTVkdk4x TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21iNElYUnhwYkx3aHRuajVHSTdNNWR2TjFNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDM3OC82MzJGQThDRTUxRUExMUVBQjZBNUNEODZDNEY5QUUwMi9tYjRJWFJ4cGJM d2h0bmo1R0k3TTVkdk4xTW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQlce541SSIFqPUJ4nVWLiVGWEazmbtGisaen8w6ms0c2e/pDRn4hlhiUYG9u KJn3vhVZ75wZggZhzIzB7FXHrclnhO+Qiv9wpzO6g1M2T7mOurW2bLThUBbiEjZE EuA8SCY18i3vtL3jddrkUHkKfF+ix+J0jvLrSzn1+DoCW3NymlpqaNMj4wYTJztT M42b/6dLU9peS/Ir1PT6OAqzjIvQQPjw1t+QrCJmPpjsCs9iYwFlGQnbLhpV/tPv 5BAPcF6L/OEUL6o4kmc0l3uUKoCJ8lvqmbayVGVhjK3lTtC/7OQyNcGpBI99/2EP a4QCMeQvhh2sQNimi7iTksrVOw== -----END CERTIFICATE-----Generated at Mon Mar 2 00:12:10 2026 by rpki-client