$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft File: EcBLr8HLQLBzED91iraOWH9b_gQ.mft (raw, json) Hash identifier: TDn4S9Q4AdO855MLYGk8sF6wTCVzuvnzATEM9HKHOV4= Subject key identifier: A9:3D:30:DC:8F:49:FA:CA:7A:CB:7E:C4:3C:5D:5D:2F:CA:20:81:DA Authority key identifier: 11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 Certificate issuer: /CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Certificate serial: 0419 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft Manifest number: 0417 Signing time: Sun 01 Mar 2026 01:12:05 +0000 Manifest this update: Sun 01 Mar 2026 01:12:05 +0000 Manifest next update: Sun 08 Mar 2026 01:12:05 +0000 Files and hashes: 1: EcBLr8HLQLBzED91iraOWH9b_gQ.crl (hash: AexGn1TGbzwvkglcO+mhbTXI0rV6NRDkX9MGCLTM9hM=) 2: 4153181E1D4211ED99608059C4F9AE02.roa (hash: bo3M0SHEmY6fxlknnF6CrnoZr8k2yntFb0qjHa/esME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1049 (0x419) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE295, serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Validity Not Before: Mar 1 01:12:05 2026 GMT Not After : Mar 8 01:12:05 2026 GMT Subject: CN=69a39265-fcde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7f:35:90:14:56:60:eb:09:a7:e2:fa:fe:9a: db:09:8e:bc:09:fe:5c:30:98:3d:4d:bf:09:cc:f6: 39:b2:5a:7b:7a:d9:d1:6d:8b:e2:d8:da:6d:9f:4e: 0a:a4:9a:0f:40:82:31:71:15:1d:3d:76:2a:37:fe: 95:cd:af:38:91:9b:5a:95:d2:99:87:55:69:6e:f4: 66:13:8f:0d:60:c7:e4:9f:55:ec:dc:5e:c1:e5:80: 51:fc:ef:dc:4b:00:45:d4:63:53:4b:5c:dd:f9:d4: 91:19:15:b4:0d:4b:a7:65:d2:68:cf:e0:d3:a8:6d: a1:de:09:6e:35:c0:a8:4f:6f:aa:0f:8b:c7:c3:c4: 6c:e8:50:bd:c6:e4:8c:b9:27:ca:7d:bb:93:07:43: 15:84:d9:e6:36:ef:35:eb:98:bd:cd:a2:df:22:5f: 93:be:3e:f9:00:8f:c5:26:1a:e8:01:fc:6d:44:bd: 59:04:98:e8:74:79:78:b5:1b:1c:09:3c:d1:df:c4: 0f:8d:49:70:e9:36:d7:25:5e:12:75:f0:a5:f9:76: 7a:e6:be:4b:c1:5a:8a:f4:a4:b8:45:a1:4d:16:71: 55:f6:a6:00:05:8e:cc:5a:25:65:7b:4d:5f:61:02: 88:5a:0c:f9:1e:c1:a5:06:2c:61:db:80:41:f9:ac: eb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3D:30:DC:8F:49:FA:CA:7A:CB:7E:C4:3C:5D:5D:2F:CA:20:81:DA X509v3 Authority Key Identifier: keyid:11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:47:8b:6f:84:00:5b:d0:d6:92:a7:f2:a7:70:1d:fa:87:ad: a1:22:c0:54:9f:9b:c5:ed:82:ca:87:1a:94:09:56:7f:d3:d2: 8f:87:05:62:e3:bf:7d:2b:71:78:b0:71:20:8a:05:1a:a5:59: ae:3b:19:f1:8e:fa:ae:9d:3b:ef:f3:18:fe:8a:b8:59:71:c3: 4b:60:7e:3b:4f:37:3f:5d:03:7d:76:71:65:07:72:b6:4e:9b: 42:71:aa:a2:ae:53:fb:39:23:a2:a0:67:de:3a:9e:97:e2:e5: b6:fa:42:b7:6d:b1:db:6c:f8:46:25:f7:28:6a:32:1b:23:ec: 6c:4d:16:2a:79:b8:47:0a:37:3e:45:40:f8:61:c6:30:1e:52: d9:31:c9:65:9f:28:27:84:df:25:a8:70:97:14:bf:d1:51:1d: 71:b7:64:ff:b0:65:06:52:15:17:c0:f2:01:bf:36:d8:5a:a0: 2f:04:6c:b1:40:d1:8d:eb:56:e1:27:96:3f:4f:9b:9b:9a:8f: d6:c7:9b:94:95:df:57:c3:3f:8e:34:17:0f:2c:8a:d7:db:74: e7:0d:61:5e:9e:ac:60:62:2b:32:32:0e:eb:dc:ca:b2:01:68: 65:29:07:16:be:7f:70:af:cc:ea:e1:84:29:5f:ad:43:11:b5: cc:55:50:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyOTUxMTAvBgNVBAUTKDExQzA0QkFGQzFDQjQwQjA3MzEwM0Y3NThBQjY4RTU4 N0Y1QkZFMDQwHhcNMjYwMzAxMDExMjA1WhcNMjYwMzA4MDExMjA1WjAYMRYwFAYD VQQDDA02OWEzOTI2NS1mY2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwH81kBRWYOsJp+L6/prbCY68Cf5cMJg9Tb8JzPY5slp7etnRbYvi2Nptn04K pJoPQIIxcRUdPXYqN/6Vza84kZtaldKZh1VpbvRmE48NYMfkn1Xs3F7B5YBR/O/c SwBF1GNTS1zd+dSRGRW0DUunZdJoz+DTqG2h3gluNcCoT2+qD4vHw8Rs6FC9xuSM uSfKfbuTB0MVhNnmNu8165i9zaLfIl+Tvj75AI/FJhroAfxtRL1ZBJjodHl4tRsc CTzR38QPjUlw6TbXJV4SdfCl+XZ65r5LwVqK9KS4RaFNFnFV9qYABY7MWiVle01f YQKIWgz5HsGlBixh24BB+azrSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKk9MNyP SfrKest+xDxdXS/KIIHaMB8GA1UdIwQYMBaAFBHAS6/By0CwcxA/dYq2jlh/W/4E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI5NS82Rjk2QzBEQ0Ew MTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFMQnpFRDkxaXJhT1dIOWJf Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VjQkxyOEhMUUxCekVEOTFpcmFPV0g5Yl9nUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI5NS82Rjk2QzBEQ0EwMTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFM QnpFRDkxaXJhT1dIOWJfZ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhkeLb4QAW9DWkqfyp3Ad+oetoSLAVJ+bxe2CyocalAlWf9PSj4cFYuO/fStx eLBxIIoFGqVZrjsZ8Y76rp077/MY/oq4WXHDS2B+O083P10DfXZxZQdytk6bQnGq oq5T+zkjoqBn3jqel+LltvpCt22x22z4RiX3KGoyGyPsbE0WKnm4Rwo3PkVA+GHG MB5S2THJZZ8oJ4TfJahwlxS/0VEdcbdk/7BlBlIVF8DyAb822FqgLwRssUDRjetW 4SeWP0+bm5qP1seblJXfV8M/jjQXDyyK19t05w1hXp6sYGIrMjIO69zKsgFoZSkH Fr5/cK/M6uGEKV+tQxG1zFVQaA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:39:23 2026 by rpki-client