$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft File: IWrR11qT4DeulPbJGJbS1YLY_1Q.mft (raw, json) Hash identifier: TKf2q2GWR7bIh72SRX29u7fDoT8QihtnMSTuKg7/bqY= Subject key identifier: 0A:FC:57:09:C8:DE:78:51:57:FE:4B:82:54:CB:65:69:AA:9A:6E:4A Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 Certificate issuer: /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft Manifest number: 01E5 Signing time: Sun 01 Mar 2026 23:02:11 +0000 Manifest this update: Sun 01 Mar 2026 23:02:10 +0000 Manifest next update: Sun 08 Mar 2026 23:02:10 +0000 Files and hashes: 1: IWrR11qT4DeulPbJGJbS1YLY_1Q.crl (hash: hWySVz0yc4lvlQgLH9UKoU8YswYVDVy8/eQDl6h6WUw=) 2: 838096CA3BD311EE84056461C4F9AE02.roa (hash: cQLsMYqSdIJcG0uBESraAoEm5/hK8Y0/eizzGvwT5QU=) 3: 82C54A1E3BD311EE84056461C4F9AE02.roa (hash: p66IPaewmPaRtnsQS2xZgpPBnKkLdaVzEfPus9nU9is=) 4: 27DB37683BD211EE8094355FC4F9AE02.roa (hash: jNN3fj+EEW25PsG0U4HYziuBqb6momTUfcic3hWWRvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDDD1, serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Validity Not Before: Mar 1 23:02:10 2026 GMT Not After : Mar 8 23:02:10 2026 GMT Subject: CN=69a4c572-bb05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9c:2a:f9:16:a3:ee:66:b3:c1:67:d2:24:4a: 90:d6:15:f8:36:f5:a9:23:07:e1:af:1a:be:35:9f: 1d:9c:c8:06:58:be:99:2e:c7:b5:66:3b:47:98:03: b7:6c:26:1b:c7:8d:c6:e7:8f:90:d7:26:6f:c1:6c: a4:01:93:2e:a5:59:0a:3e:a7:c6:5f:2a:cd:3d:2d: eb:13:a5:f3:1c:9b:34:e3:9c:12:d4:dc:18:ba:72: af:86:72:c8:de:e6:d1:36:9f:69:67:e9:32:4c:6d: 67:b8:82:4f:1c:74:92:85:7b:b1:b0:3e:56:4e:3d: fb:3c:b5:91:97:9a:00:e3:b5:93:4e:5a:94:d0:a2: b1:c3:1b:5e:28:cf:4f:92:27:56:4b:9a:ed:b8:ce: 4c:50:47:12:31:57:d9:45:30:33:96:38:3c:3e:90: 09:d2:13:fa:05:cf:f7:7e:98:ed:a6:54:8c:5e:95: 26:65:22:ec:9d:ea:cc:92:57:9e:05:ee:fd:4a:34: 57:ee:ab:4f:89:67:f8:74:b0:e7:70:92:83:c6:37: 4d:6f:04:d1:64:db:92:78:2a:78:5f:22:be:1d:e1: e5:2e:0b:63:bf:68:d6:02:1b:1c:82:aa:e8:bf:a1: b4:92:fc:ca:05:81:4d:b6:4b:1f:77:da:8d:31:bb: 1f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FC:57:09:C8:DE:78:51:57:FE:4B:82:54:CB:65:69:AA:9A:6E:4A X509v3 Authority Key Identifier: keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:c5:a9:50:7c:f8:98:e5:64:33:e1:5a:a0:18:b0:7c:46:c2: 0a:c9:ab:8f:7b:6b:3d:6b:0a:50:40:fb:82:60:2a:30:d9:55: a4:23:1f:6b:fe:66:d6:ee:46:20:10:b3:47:a7:02:f3:a8:0d: d6:52:81:69:9e:f1:6a:5d:12:f1:b5:85:75:82:ef:76:22:49: e7:42:56:ba:7a:e2:c7:17:4b:40:b7:17:9d:7e:28:c6:b8:96: ff:5c:34:d1:b9:4a:fd:b4:11:25:57:9f:3d:c7:5e:16:96:6a: 3e:c0:de:da:c7:f9:cf:bb:ca:e0:4a:f8:3e:84:00:2d:01:e7: ab:01:c1:56:2d:d2:0f:fd:a8:22:e5:6c:41:a2:12:0d:1c:23: 9f:ed:58:e3:75:d1:65:cb:02:8c:f9:4f:39:ad:7c:95:5d:50: 88:69:fd:1b:b0:2a:ed:d0:0e:57:7d:62:66:48:ad:56:e5:dd: e0:d7:69:6e:b8:41:e7:ce:ae:f6:3d:df:ca:0f:ad:55:65:ea: 06:38:35:f3:a1:71:f9:19:87:28:6e:ba:01:8e:df:2d:03:02: 75:00:1c:16:ce:39:a0:cf:c0:a1:37:b5:c6:68:3a:54:06:d6: ae:82:fe:f8:b8:79:95:c2:fc:8e:d2:54:ff:2b:55:96:e4:5c: 36:8c:81:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRERDExMTAvBgNVBAUTKDIxNkFEMUQ3NUE5M0UwMzdBRTk0RjZDOTE4OTZEMkQ1 ODJEOEZGNTQwHhcNMjYwMzAxMjMwMjEwWhcNMjYwMzA4MjMwMjEwWjAYMRYwFAYD VQQDEw02OWE0YzU3Mi1iYjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5wq+Raj7mazwWfSJEqQ1hX4NvWpIwfhrxq+NZ8dnMgGWL6ZLse1ZjtHmAO3 bCYbx43G54+Q1yZvwWykAZMupVkKPqfGXyrNPS3rE6XzHJs045wS1NwYunKvhnLI 3ubRNp9pZ+kyTG1nuIJPHHSShXuxsD5WTj37PLWRl5oA47WTTlqU0KKxwxteKM9P kidWS5rtuM5MUEcSMVfZRTAzljg8PpAJ0hP6Bc/3fpjtplSMXpUmZSLsnerMklee Be79SjRX7qtPiWf4dLDncJKDxjdNbwTRZNuSeCp4XyK+HeHlLgtjv2jWAhscgqro v6G0kvzKBYFNtksfd9qNMbsffwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAr8VwnI 3nhRV/5LglTLZWmqmm5KMB8GA1UdIwQYMBaAFCFq0ddak+A3rpT2yRiW0tWC2P9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREREMS82OEMxRDQ5NjNC RDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDREZXVsUGJKR0piUzFZTFlf MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lXclIxMXFUNERldWxQYkpHSmJTMVlMWV8xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REREMS82OEMxRDQ5NjNCRDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDRE ZXVsUGJKR0piUzFZTFlfMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcsWpUHz4mOVkM+FaoBiwfEbCCsmrj3trPWsKUED7gmAqMNlVpCMfa/5m1u5G IBCzR6cC86gN1lKBaZ7xal0S8bWFdYLvdiJJ50JWunrixxdLQLcXnX4oxriW/1w0 0blK/bQRJVefPcdeFpZqPsDe2sf5z7vK4Er4PoQALQHnqwHBVi3SD/2oIuVsQaIS DRwjn+1Y43XRZcsCjPlPOa18lV1QiGn9G7Aq7dAOV31iZkitVuXd4NdpbrhB586u 9j3fyg+tVWXqBjg186Fx+RmHKG66AY7fLQMCdQAcFs45oM/AoTe1xmg6VAbWroL+ +Lh5lcL8jtJU/ytVluRcNoyBhw== -----END CERTIFICATE-----Generated at Mon Mar 2 07:33:49 2026 by rpki-client