$ rpki-client -vvf rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft File: D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft (raw, json) Hash identifier: IrjyyiRwth+UrsjALCOQODcWV/qarWTq2yrcYihlPdo= Subject key identifier: 78:6B:31:D9:D6:C3:F5:88:82:8A:B3:F7:00:F1:F8:B0:1C:F6:84:80 Authority key identifier: 0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34 Certificate issuer: /CN=A9139661/serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft Manifest number: 89 Signing time: Tue 03 Mar 2026 07:19:29 +0000 Manifest this update: Tue 03 Mar 2026 07:19:28 +0000 Manifest next update: Tue 10 Mar 2026 07:19:28 +0000 Files and hashes: 1: D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl (hash: z8reRudNVgyH9B09jZLIWGhQxs+1cZ+k/XHzQXoZBrk=) 2: C4C4028A5B4C11F0807A3A60C4F9AE02.roa (hash: ki7xh64GIKfwbhwFIwfLQ7ubTp/Y8e6eL9BMSGhKC7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 07:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139661, serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334 Validity Not Before: Mar 3 07:19:28 2026 GMT Not After : Mar 10 07:19:28 2026 GMT Subject: CN=69a68b81-c524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:31:92:8a:e8:71:77:41:e2:34:1b:98:4b:74: 45:9a:bc:d4:e0:d7:e2:6a:72:b8:c4:0a:6e:e0:39: 22:e9:3a:67:11:c0:b6:b3:2c:53:b1:fd:fc:9f:88: 9c:6a:d1:f4:44:70:d3:95:ec:b0:04:ed:d5:c4:f9: ab:6e:58:ba:4e:0c:46:c2:70:6e:42:c0:a1:9c:9d: 6b:83:c4:2a:58:31:00:7e:0b:e0:37:2e:91:6a:e7: ef:5f:9a:02:7a:a0:6f:fe:02:05:06:47:e2:1e:01: 6d:da:b3:3d:eb:ad:e9:aa:87:c2:6b:a5:b2:82:42: b1:cd:7d:b4:1b:7e:7b:1b:28:4a:de:07:40:bf:3e: 26:81:8e:2f:5b:cf:41:9f:8f:53:02:84:72:49:4a: 8b:bc:67:b9:ae:4f:e0:a0:e3:8b:fc:d0:fc:ec:e5: 1a:a9:df:1a:ac:c4:96:ae:28:6b:8b:30:2d:ed:6b: 1c:bc:28:8e:f9:d3:2e:0e:bc:d2:69:1b:62:85:eb: c9:1a:01:97:1b:ae:43:c3:be:65:42:43:90:75:bc: a5:2b:8a:92:93:2c:11:f7:0d:f0:3b:e2:7f:b4:70: 78:ae:1a:ab:26:dc:5d:d0:ad:bd:7d:8e:73:e7:5d: 26:fc:0d:b3:a8:0c:4a:cb:15:80:13:2a:df:5d:8e: 64:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6B:31:D9:D6:C3:F5:88:82:8A:B3:F7:00:F1:F8:B0:1C:F6:84:80 X509v3 Authority Key Identifier: keyid:0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:3a:c3:c8:1e:34:69:a6:4a:5b:19:02:cc:04:0b:bd:f3:e1: 0f:dd:5d:c4:6c:ff:c2:6e:d8:9c:c6:17:2c:6a:0e:93:a8:54: d6:4f:39:fa:2b:f4:64:72:6d:a5:cd:14:1c:c6:b6:9d:1a:9c: 5e:c6:af:60:fa:45:b5:c1:11:a4:e9:c9:a1:4c:e5:de:e6:be: 77:43:39:5b:52:6b:ff:4b:66:5f:61:78:fe:65:ca:5c:d1:4c: 43:1e:ad:81:8a:92:33:55:3f:4f:f5:51:ca:5e:97:de:2b:82: 4f:71:17:6d:aa:56:9b:ca:cf:96:e6:3c:38:5f:0c:f1:48:df: 98:9e:a3:b9:85:1e:a2:46:9f:f0:66:72:9b:d6:79:d7:c8:a4: c7:a6:4c:b1:59:13:45:f7:43:66:b6:c3:61:0c:e0:d3:14:f7: d2:1a:78:72:96:a9:b7:9a:cf:5d:bd:0d:36:df:9f:dc:eb:bd: a2:be:7a:22:40:93:e1:59:4f:6d:a3:00:59:82:45:3d:bc:0d: 55:43:c6:60:67:79:d1:ce:61:2a:86:e3:8b:48:3c:8b:f3:e4: 72:a3:d0:4f:26:d8:da:90:fc:76:e0:9f:89:fe:14:d3:bc:bf: f8:8e:32:6e:6b:52:4c:14:87:e0:8e:dd:80:8b:91:36:c3:95: 3f:ad:9f:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk2NjExMTAvBgNVBAUTKDBGOTE0QTFEQzk0RjVCRTQyRTg4M0MyQURENTQzMEJD REY2REYzMzQwHhcNMjYwMzAzMDcxOTI4WhcNMjYwMzEwMDcxOTI4WjAYMRYwFAYD VQQDEw02OWE2OGI4MS1jNTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjGSiuhxd0HiNBuYS3RFmrzU4NfianK4xApu4Dki6TpnEcC2syxTsf38n4ic atH0RHDTleywBO3VxPmrbli6TgxGwnBuQsChnJ1rg8QqWDEAfgvgNy6RaufvX5oC eqBv/gIFBkfiHgFt2rM9663pqofCa6WygkKxzX20G357GyhK3gdAvz4mgY4vW89B n49TAoRySUqLvGe5rk/goOOL/ND87OUaqd8arMSWrihrizAt7WscvCiO+dMuDrzS aRtihevJGgGXG65Dw75lQkOQdbylK4qSkywR9w3wO+J/tHB4rhqrJtxd0K29fY5z 510m/A2zqAxKyxWAEyrfXY5kRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHhrMdnW w/WIgoqz9wDx+LAc9oSAMB8GA1UdIwQYMBaAFA+RSh3JT1vkLog8Kt1UMLzfbfM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTY2MS8wRjQzRUMzQzU4 RTQxMUYwODcyNkE1N0FDNEY5QUUwMi9ENUZLSGNsUFctUXVpRHdxM1ZRd3ZOOXQ4 elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Q1RktIY2xQVy1RdWlEd3EzVlF3dk45dDh6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTY2MS8wRjQzRUMzQzU4RTQxMUYwODcyNkE1N0FDNEY5QUUwMi9ENUZLSGNsUFct UXVpRHdxM1ZRd3ZOOXQ4elEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtDrDyB40aaZKWxkCzAQLvfPhD91dxGz/wm7YnMYXLGoOk6hU1k85+iv0ZHJt pc0UHMa2nRqcXsavYPpFtcERpOnJoUzl3ua+d0M5W1Jr/0tmX2F4/mXKXNFMQx6t gYqSM1U/T/VRyl6X3iuCT3EXbapWm8rPluY8OF8M8UjfmJ6juYUeokaf8GZym9Z5 18ikx6ZMsVkTRfdDZrbDYQzg0xT30hp4cpapt5rPXb0NNt+f3Ou9or56IkCT4VlP baMAWYJFPbwNVUPGYGd50c5hKobji0g8i/PkcqPQTybY2pD8duCfif4U07y/+I4y bmtSTBSH4I7dgIuRNsOVP62fng== -----END CERTIFICATE-----Generated at Wed Mar 4 08:40:57 2026 by rpki-client