$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft File: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft (raw, json) Hash identifier: wh4u/8amiCKOLhd0k2C7+TbK8ZAVE4w1XmCORckMy5k= Subject key identifier: 00:73:58:FC:CE:5E:A0:DF:E9:D0:0D:C9:ED:A6:A5:76:BE:56:18:2C Authority key identifier: 94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 Certificate issuer: /CN=A91443440000/serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Certificate serial: 19FBA49EB2F8073EC81357AF1530FD7E605239BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft Manifest number: 0271 Signing time: Sat 28 Feb 2026 22:38:30 +0000 Manifest this update: Sat 28 Feb 2026 22:33:30 +0000 Manifest next update: Mon 02 Mar 2026 00:58:30 +0000 Files and hashes: 1: 323030313a6466343a316463303a3a2f34382d3438203d3e20313533313736.roa (hash: kx3ayya4lPrQllp+nogQF65nwTl1whhZEUlAaHtTvAM=) 2: AS153176.asa (hash: YcrzTg+SBKdEmHSIK1udwefH81IvEnVPIpXsuF8j4aw=) 3: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl (hash: Ehhb6kk7SnVS6NFWjHhPeHA7BzolngzGsH9w+SmagEY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 00:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:fb:a4:9e:b2:f8:07:3e:c8:13:57:af:15:30:fd:7e:60:52:39:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Validity Not Before: Feb 28 22:33:30 2026 GMT Not After : Mar 2 00:58:30 2026 GMT Subject: CN=007358FCCE5EA0DFE9D00DC9EDA6A576BE56182C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e7:8d:ae:5f:91:95:e0:50:da:94:53:54:dc: 03:44:85:3d:c1:34:19:ee:7b:33:cf:f5:aa:84:0a: 55:9c:a1:10:df:b9:96:df:56:d7:98:01:48:fd:7d: c6:08:f2:8f:ef:41:c6:3e:27:50:5f:9b:86:61:99: 3a:c7:74:70:d4:cb:55:fd:cd:73:fe:3e:3c:89:cb: ec:58:17:22:64:cd:3a:ca:91:d6:6e:57:45:48:1b: f0:4b:43:1e:94:a9:92:d1:4e:0f:42:57:dd:bc:27: eb:da:f2:20:61:65:38:7c:19:f5:ca:58:fa:27:8e: 58:bb:73:ee:a3:51:4b:3b:26:7c:39:70:23:7e:2c: 6d:8d:b6:3d:65:aa:aa:86:c6:7a:ec:25:4d:68:93: 0d:4e:1c:9b:a8:f1:30:15:b2:4b:42:06:98:d3:ec: bb:f4:ab:90:71:12:5d:9a:5b:9c:62:de:4b:f6:c9: b9:a6:f3:ce:18:24:03:51:4d:79:0c:8f:e1:cd:4c: a4:fe:15:27:7d:09:76:03:80:0e:2e:d0:7b:b9:22: 58:60:54:d2:51:14:6c:c5:1a:36:95:03:cc:9d:9c: f3:85:09:6b:fb:00:6b:cf:c0:ad:fb:05:d2:bd:7c: 49:20:b1:8e:e6:da:54:67:de:83:ae:07:72:29:77: 5a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:73:58:FC:CE:5E:A0:DF:E9:D0:0D:C9:ED:A6:A5:76:BE:56:18:2C X509v3 Authority Key Identifier: keyid:94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:6d:12:97:94:09:5f:d2:f2:ac:5f:99:ed:f4:e5:87:20:7d: e0:47:58:07:d0:99:2f:c0:49:94:2b:4a:4e:92:29:db:47:c3: b9:66:17:83:32:30:e3:94:d4:48:a0:0f:0c:dc:0b:ae:97:a3: d1:a8:a7:84:62:0d:36:29:e4:a1:38:71:10:31:60:f2:69:75: 62:ee:a2:ea:3c:9b:4f:36:4e:77:59:fe:d4:71:49:05:ad:b4: 9f:81:e2:ba:c2:92:08:07:4d:d5:73:0f:4c:82:95:0b:30:94: 33:c9:c4:bb:75:26:d1:08:99:57:df:71:22:d8:aa:de:16:ef: 89:88:ca:f2:20:67:bb:65:ba:dd:85:13:ad:d4:6c:b0:ea:d4: 68:31:0b:6a:93:f2:6a:d0:7f:d0:93:93:0b:10:46:21:66:0d: e0:ae:08:86:95:a0:a5:5b:35:e5:7c:4e:7c:2b:60:e3:26:dd: b8:44:a2:d3:22:c5:9b:e8:61:dc:8b:fe:70:30:23:f3:7d:d7: 3e:f8:74:96:33:39:9c:e1:d9:77:75:29:bc:e8:b0:45:bc:6c: 44:94:80:f5:bc:10:54:dc:bc:87:13:f7:14:65:05:93:c4:c8: ba:ab:99:6d:76:03:ff:c8:a0:79:1f:52:d2:6d:4a:44:ab:6b: 8e:9b:6e:a2 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUGfuknrL4Bz7IE1evFTD9fmBSOb8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyg5NEEyRjE2REY0 MTdDMzJFMDU3QUEyNjhDMEU1MkM3MEQxQTQwNkM1MB4XDTI2MDIyODIyMzMzMFoX DTI2MDMwMjAwNTgzMFowMzExMC8GA1UEAxMoMDA3MzU4RkNDRTVFQTBERkU5RDAw REM5RURBNkE1NzZCRTU2MTgyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALnnja5fkZXgUNqUU1TcA0SFPcE0Ge57M8/1qoQKVZyhEN+5lt9W15gBSP19 xgjyj+9Bxj4nUF+bhmGZOsd0cNTLVf3Nc/4+PInL7FgXImTNOsqR1m5XRUgb8EtD HpSpktFOD0JX3bwn69ryIGFlOHwZ9cpY+ieOWLtz7qNRSzsmfDlwI34sbY22PWWq qobGeuwlTWiTDU4cm6jxMBWyS0IGmNPsu/SrkHESXZpbnGLeS/bJuabzzhgkA1FN eQyP4c1MpP4VJ30JdgOADi7Qe7kiWGBU0lEUbMUaNpUDzJ2c84UJa/sAa8/ArfsF 0r18SSCxjubaVGfeg64Hcil3Wk0CAwEAAaOCAmEwggJdMB0GA1UdDgQWBBQAc1j8 zl6g3+nQDcntpqV2vlYYLDAfBgNVHSMEGDAWgBSUovFt9BfDLgV6omjA5Sxw0aQG xTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMy85NEEyRjE2REY0MTdDMzJFMDU3 QUEyNjhDMEU1MkM3MEQxQTQwNkM1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sS0x4YmZRWHd5NEZlcUpvd09Vc2NO R2tCc1UuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzMvOTRBMkYxNkRGNDE3QzMyRTA1 N0FBMjY4QzBFNTJDNzBEMUE0MDZDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIdtEpeUCV/S8qxfme30 5YcgfeBHWAfQmS/ASZQrSk6SKdtHw7lmF4MyMOOU1EigDwzcC66Xo9Gop4RiDTYp 5KE4cRAxYPJpdWLuouo8m082TndZ/tRxSQWttJ+B4rrCkggHTdVzD0yClQswlDPJ xLt1JtEImVffcSLYqt4W74mIyvIgZ7tlut2FE63UbLDq1GgxC2qT8mrQf9CTkwsQ RiFmDeCuCIaVoKVbNeV8TnwrYOMm3bhEotMixZvoYdyL/nAwI/N91z74dJYzOZzh 2Xd1KbzosEW8bESUgPW8EFTcvIcT9xRlBZPEyLqrmW12A//IoHkfUtJtSkSra46b bqI= -----END CERTIFICATE-----Generated at Sun Mar 1 18:23:06 2026 by rpki-client