$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft File: cri4zRAwexYyTYeYJ98ypKqNaqE.mft (raw, json) Hash identifier: GhHx6qvKte8V6X2VybpMCcRL0oVD79Gmza/LQ5hLoSY= Subject key identifier: 4D:9D:B0:B4:4A:71:B5:BF:75:B7:37:C7:D3:99:49:36:96:36:41:34 Authority key identifier: 72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 Certificate issuer: /CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Certificate serial: 04C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft Manifest number: 04B9 Signing time: Mon 02 Mar 2026 01:42:37 +0000 Manifest this update: Mon 02 Mar 2026 01:42:36 +0000 Manifest next update: Mon 09 Mar 2026 01:42:36 +0000 Files and hashes: 1: cri4zRAwexYyTYeYJ98ypKqNaqE.crl (hash: olL9VhvrIMsV0m8hFpy1MFvU7lCYw0CLWSd9fDIqWFw=) 2: 0C023160C4C911EE9278E261C4F9AE02.roa (hash: Bqm0LBQ1QxgmzQ67GzN6T9VVJw3twyV0J98hBbifjyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1222 (0x4c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF19B, serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Validity Not Before: Mar 2 01:42:36 2026 GMT Not After : Mar 9 01:42:36 2026 GMT Subject: CN=69a4eb0c-7f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:31:35:95:3b:26:22:01:64:e8:df:82:98:ce: 61:09:b0:70:c2:cd:7b:58:73:35:79:0e:45:a5:66: a5:8d:6b:ba:ed:2f:20:54:fd:34:16:c4:53:74:90: 5a:ea:68:2c:be:df:b7:06:3e:ad:09:2d:44:f5:33: 82:9d:73:7a:c3:0f:65:9e:25:04:42:45:db:5c:9b: bc:06:c8:d4:78:01:f1:e6:09:b8:9b:dc:d1:ff:49: da:95:b5:14:72:93:d7:35:5b:bf:57:a9:7f:b4:56: 87:fa:20:13:78:08:d4:19:61:05:d3:f5:b8:6b:dd: 76:92:bf:26:8b:de:87:09:a0:c5:3e:8d:c8:f3:fe: d7:1f:8f:38:c8:b3:b7:14:82:8a:47:fc:9f:15:c7: a5:f1:81:76:67:27:9b:37:fa:83:3c:10:33:ca:24: a3:d3:25:be:10:80:63:1a:fc:46:8c:e0:ec:d5:2e: 83:96:c7:69:1c:1f:6c:33:62:00:f8:e5:c7:da:7d: af:89:91:f8:a1:3f:85:94:f4:7e:bc:9f:cf:60:89: fc:e6:6c:9f:45:63:3e:11:1d:1c:50:fd:f7:39:26: bc:5b:0f:bf:db:99:9f:9a:ef:02:09:7c:c5:fa:5f: 45:21:01:09:49:22:95:49:84:b0:bd:83:95:f8:af: 87:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9D:B0:B4:4A:71:B5:BF:75:B7:37:C7:D3:99:49:36:96:36:41:34 X509v3 Authority Key Identifier: keyid:72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:30:8e:69:80:ab:7b:76:bd:7d:00:b5:69:ad:d8:91:a3:35: 43:91:f0:c0:a5:18:36:de:90:53:da:d1:60:91:3b:1b:45:01: 48:f8:70:43:85:40:b7:6a:7d:c7:e7:c6:77:49:e6:87:fd:4d: 45:1d:9e:dd:fb:9b:e9:46:3b:3d:9d:4a:70:85:3b:62:ec:e6: 71:59:c6:c0:01:a0:73:f9:4c:34:1d:2f:b6:13:3a:90:c7:ad: 82:f6:e5:61:b4:4c:49:14:3f:9a:27:2b:53:37:24:b7:84:82: 6f:9f:41:87:17:e9:44:5d:46:e9:35:64:f5:0c:21:b5:16:03: a1:0b:82:25:95:03:91:ee:b5:fa:b3:9b:3e:7c:cd:8f:72:38: f2:b4:61:34:f0:42:51:4a:1f:00:16:90:e0:7b:e7:c1:49:46: db:75:e6:03:0a:65:a8:11:d8:41:25:e9:af:f8:f7:c8:d9:14: cb:79:1c:c7:b8:b9:18:10:62:bd:b0:01:88:b8:94:0b:41:4a: f0:77:07:90:e7:6b:7f:39:dd:01:a6:28:eb:7f:a8:f7:e9:fc: 0a:0e:16:bc:fd:da:fc:6b:73:3d:de:7a:8a:7f:22:c2:3c:72: 98:75:5b:8f:47:15:bf:bf:20:3d:66:43:7b:1d:b9:9c:40:f7: 65:1d:69:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxOUIxMTAvBgNVBAUTKDcyQjhCOENEMTAzMDdCMTYzMjREODc5ODI3REYzMkE0 QUE4RDZBQTEwHhcNMjYwMzAyMDE0MjM2WhcNMjYwMzA5MDE0MjM2WjAYMRYwFAYD VQQDEw02OWE0ZWIwYy03Zjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjjE1lTsmIgFk6N+CmM5hCbBwws17WHM1eQ5FpWaljWu67S8gVP00FsRTdJBa 6mgsvt+3Bj6tCS1E9TOCnXN6ww9lniUEQkXbXJu8BsjUeAHx5gm4m9zR/0nalbUU cpPXNVu/V6l/tFaH+iATeAjUGWEF0/W4a912kr8mi96HCaDFPo3I8/7XH484yLO3 FIKKR/yfFcel8YF2ZyebN/qDPBAzyiSj0yW+EIBjGvxGjODs1S6DlsdpHB9sM2IA +OXH2n2viZH4oT+FlPR+vJ/PYIn85myfRWM+ER0cUP33OSa8Ww+/25mfmu8CCXzF +l9FIQEJSSKVSYSwvYOV+K+HxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE2dsLRK cbW/dbc3x9OZSTaWNkE0MB8GA1UdIwQYMBaAFHK4uM0QMHsWMk2HmCffMqSqjWqh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjE5Qi8zNjQ4OEQ4MDY2 NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4WXlUWWVZSjk4eXBLcU5h cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NyaTR6UkF3ZXhZeVRZZVlKOTh5cEtxTmFxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjE5Qi8zNjQ4OEQ4MDY2NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4 WXlUWWVZSjk4eXBLcU5hcUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXDCOaYCre3a9fQC1aa3YkaM1Q5HwwKUYNt6QU9rRYJE7G0UBSPhwQ4VAt2p9 x+fGd0nmh/1NRR2e3fub6UY7PZ1KcIU7YuzmcVnGwAGgc/lMNB0vthM6kMetgvbl YbRMSRQ/micrUzckt4SCb59BhxfpRF1G6TVk9QwhtRYDoQuCJZUDke61+rObPnzN j3I48rRhNPBCUUofABaQ4HvnwUlG23XmAwplqBHYQSXpr/j3yNkUy3kcx7i5GBBi vbABiLiUC0FK8HcHkOdrfzndAaYo63+o9+n8Cg4WvP3a/GtzPd56in8iwjxymHVb j0cVv78gPWZDex25nED3ZR1p0w== -----END CERTIFICATE-----Generated at Mon Mar 2 23:40:54 2026 by rpki-client